last executing test programs:

1m28.784117879s ago: executing program 2:
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610408000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
socketpair(0x0, 0x0, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x6, 0x101, 0x82}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x6, 0x4, 0x4001}, 0x48)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1206"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000}, 0x90)
ioctl$TUNSETOFFLOAD(r1, 0x4010744d, 0x20000000)

1m12.456451743s ago: executing program 2:
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610408000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
socketpair(0x0, 0x0, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x6, 0x101, 0x82}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x6, 0x4, 0x4001}, 0x48)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1206"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000}, 0x90)
ioctl$TUNSETOFFLOAD(r1, 0x4010744d, 0x20000000)

59.3001254s ago: executing program 2:
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610408000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
socketpair(0x0, 0x0, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x6, 0x101, 0x82}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x6, 0x4, 0x4001}, 0x48)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1206"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000}, 0x90)
ioctl$TUNSETOFFLOAD(r1, 0x4010744d, 0x20000000)

46.276365768s ago: executing program 2:
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610408000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
socketpair(0x0, 0x0, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x6, 0x101, 0x82}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x6, 0x4, 0x4001}, 0x48)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1206"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000}, 0x90)
ioctl$TUNSETOFFLOAD(r1, 0x4010744d, 0x20000000)

28.239682456s ago: executing program 2:
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610408000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
socketpair(0x0, 0x0, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x6, 0x101, 0x82}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x6, 0x4, 0x4001}, 0x48)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1206"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000}, 0x90)
ioctl$TUNSETOFFLOAD(r1, 0x4010744d, 0x20000000)

9.937882302s ago: executing program 2:
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610408000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
socketpair(0x0, 0x0, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x6, 0x101, 0x82}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x6, 0x4, 0x4001}, 0x48)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1206"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000}, 0x90)
ioctl$TUNSETOFFLOAD(r1, 0x4010744d, 0x20000000)

2.494201253s ago: executing program 1:
bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58)
r0 = socket$inet6(0xa, 0x3, 0x7)
r1 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x1)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x0, 0x0, 0x2000000000903, 0x1}, 0x20)
sendmmsg$alg(r0, &(0x7f00000000c0)=[{0x20000000, 0xff00, 0x0, 0x0, &(0x7f0000000140)=[@assoc={0x18, 0x29, 0xb, 0xfffffffe}], 0x18}], 0x1, 0x0)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x74)
getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f00000001c0))
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x17, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x1c, 0x2, [@TCA_CODEL_LIMIT={0x8}, @TCA_CODEL_INTERVAL={0x8}, @TCA_CODEL_ECN={0x8}]}}]}, 0x4c}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=@gettfilter={0x6c, 0x2e, 0x10, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xa, 0x7}, {0xffff, 0x7}, {0x1, 0x1}}, [{0x8, 0xb, 0x60000000}, {0x8, 0xb, 0x6}, {0x8}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x20}, {0x8}, {0x8, 0xb, 0x100}, {0x8, 0xb, 0xf}, {0x8, 0xb, 0x10001}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000000)
r8 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.210316896s ago: executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0xff}, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000024006000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0)

2.043677666s ago: executing program 1:
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000"], 0x7c}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213)
r3 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r3, &(0x7f0000000200)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
r4 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r4, &(0x7f0000000180)={0xa, 0x4e20, 0xcbd9, @empty, 0xfffffffe}, 0x1c)
r5 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r4, 0x5)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmmsg(r5, &(0x7f0000002980), 0x400000000000239, 0x0)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r7, &(0x7f0000001640), 0x300, 0x2, 0x0)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="a78700000000000000a221000000"], 0x14}}, 0x0)
listen(r3, 0x0)
r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x78)
unshare(0x22020400)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r8, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r9=>0x0, 0x0, 0x0, 0x0, 0x2, 0x8, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x8, 0x0, 0x0}}, 0x10)
recvfrom(r3, 0x0, 0x0, 0x42, 0x0, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@delneigh={0x3c, 0x1d, 0x20, 0x70bd25, 0x25dfdbfd, {0x1d, 0x0, 0x0, r9, 0x40, 0x22, 0x4}, [@NDA_IFINDEX={0x8, 0x8, r9}, @NDA_NH_ID={0x8, 0xd, 0x7}, @NDA_PROTOCOL={0x5, 0xc, 0x3}, @NDA_MASTER={0x8, 0x9, 0x10008000}]}, 0x3c}}, 0x4085)
sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x120}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x9c}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

1.515516807s ago: executing program 4:
pipe(&(0x7f0000000080))
r0 = socket(0x10, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x1}})
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0)
recvfrom$inet6(r1, &(0x7f0000000000)=""/45, 0x44, 0x0, 0x0, 0xffffffffffffffc3)
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)

1.316465086s ago: executing program 4:
r0 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'ip6tnl0\x00', 0x400})
ioctl$TUNSETTXFILTER(r0, 0x401054d5, &(0x7f0000000000)=ANY=[@ANYBLOB="4504c92148cf1501000000d2"])
r1 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"/585], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a}, 0x15)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xfffff000, 0xe, 0xfffffffe, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0xfff, 0x0, &(0x7f0000000980)="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", 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, &(0x7f00000002c0)="80e8fc052798e00756c45fa94e48da81791961d4caaa738f596231317452d417f27f2f63a081cff19d21ce4c0a556c21153d8a6a6fd10555ba3355078672b5cbac7d5a371eb863908ef4bf2f52c30bd72e2dce53ef31f11ef1c9b43f3d958a24", 0x2}, 0x50)

1.276670677s ago: executing program 3:
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000010400000600"/32], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0xfffffffffffffe06, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='ext4_ext_remove_space_done\x00', r2}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00'}, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x21, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f00800fee0ffff00124000632177fbac1414ac14141644", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

1.217560289s ago: executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c0002800800040000000000080015"], 0x4c}}, 0x0)

1.116716536s ago: executing program 3:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@union={0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x2e, 0x7f]}}, 0x0, 0x2b}, 0x20)

1.076109584s ago: executing program 1:
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0)
syz_emit_ethernet(0xa9, &(0x7f0000000180)={@random="757e938fd660", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x73, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b"}, {0x0, 0x1, "00e9ff0600000000000000a2"}, {0x0, 0x1, "fe906d26efe3"}]}}}}}}, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x20})
write$cgroup_int(r0, &(0x7f0000000040), 0xfea0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@x}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
writev(r0, &(0x7f0000000100)=[{&(0x7f00000002c0)="84a416d61213086e0c1ff62f96bf3cb53cc5f4009654f450afbd3fd14a9092beb202e850daae23872377b1ce8b6129da3df526cca68703b0292d3c5bf45377d68b2aa85e49dbc4836a3269508e8c5bab40ea36a78ba0c697f2d0574932bb4702bfabd6afb10cfce96f0ef4503396465cff9df57b283dc32f84dd69269c0c9c31dc", 0x81}, {&(0x7f00000003c0)="8079ab2a81c38fab9d85112551ea96cbc0c5c8d0f2435857cc38a8643277d3f3b474c95698d870917824d5167aa45d6e83b7de579b421ceb10796becab9565d079a45d901feabf398c8155f590462ebad4eb9b969a4d0f1dd888ce4c6aff50de3df4b988146304ff0b683cfce3a666e389937d8a72f7255cca7bcd5838e242f19e2860865368f2325d9c764c89853807261479e317aee8f74c2ce6309fa800857a4406cce2ca665a23984c8e60eb002e7aa00959305b8b68a298e4e085447acde9cc14a54c10aba1f6148685818ea0d148a1989f3402e1ffd97e199f564f3928", 0xe0}], 0x2)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000080)={0x0, r1, 0x2, 0x4, 0xa3f7})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001cc0)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000140), 0xfecc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r3, 0x800448d3, &(0x7f00000000c0))
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000200)={0x0, 0x1, 0x252f, 0x9})
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r4, 0xffffffffffffffff, 0x24}, 0xc)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000009d40)={0x0, 0x4, 0x4})
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'xfrm0\x00', <r7=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x18000}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x1ff}}]}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x6c}}, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000))

1.048780455s ago: executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="110c0000000000000000160000000500020001000000050004003a30515818000180140002006e657464657673696d30"], 0x3c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000040)=@ccm_128={{0x303}, "cf34ffffffff7f00", "a2b80469f6236686495a71e500", "2da5b03a", "849ae0e50ae8d9f2"}, 0x28)
r3 = socket$inet6(0x10, 0x80002, 0x4)
sendto$inet6(r3, &(0x7f0000000140)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323456536005ad94a461cdbfee9bdb9423523598451d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaa01a0c20008008100000086dd607a9d0700102100fc000000000000000000000000000000fe800000000000"], 0x0)

1.033334393s ago: executing program 3:
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
recvmmsg$unix(r0, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000008140)=[{{0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000000200)=""/2, 0x2}], 0x1}}], 0x1, 0x7fb10727dda9, 0x0)
close(r1)

939.790525ms ago: executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x1ac, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x198, 0x1, [@m_skbmod={0x194, 0x15, 0x0, 0x0, {{0xb}, {0x70, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0xb9, 0x3, 0xffff, 0x8}, 0x4}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="5ba326abdf2c"}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x4}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4ca, 0x2, 0x6, 0x80000000, 0x445}, 0x8}}, @TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x101}]}, {0xfa, 0x6, "a132767a913ec0bfd19f5243c1af6c449281ddded2e2d8628f69d4aabd6a08c243d4cbd7ada944fa2dcddcee1f2083dd28d438abed1c7146d4587b03c1f23858cd96ea995e8fbe3434d87731f17373d221b42df8cca2186f6e9dfda2c186674eb481b4123fd57d21e9a3bbdbb4e033d8e4cc0eb5b80282928aa5a878832d3e77a61ffe77ce594d086487ded9d89f11f1f2a21b3d44e9275f411bd99f020243cd0c2a7e294709ba6c3d212212edae3e4fe9dce9d861ce21fc61a29bebb9bb890ea48f2f52949ed8e3829e9e5c8249f2bc4834472ea71fdaa9a0544c1acce3118ad8d0dbab1627b5451f6bdf1f7fb72a85e6415cbbfaa9"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x4a, &(0x7f0000001140)={@local, @random="c4bc9cac9686", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x2b, 0x0, @remote, @local, {[], {{0x2, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000d"], 0x0, 0x26}, 0x20)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001a40), 0xffffffffffffffff)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r4, &(0x7f0000000200)={0x1d, 0x0, 0x2}, 0x18)
sendmsg$can_j1939(r4, &(0x7f0000000680)={&(0x7f0000000540), 0x18, &(0x7f0000000640)={0x0}}, 0x0)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x28}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000280)=@ringbuf={{}, {{0x6}}}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x4, &(0x7f0000000480), 0x10}, 0x90)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48)
sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000880)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r3, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0xd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040040}, 0x4811)
r6 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000800)={'bridge0\x00', <r8=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x7, &(0x7f00000000c0)={&(0x7f00000004c0)=@bridge_newvlan={0x24, 0x71, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r8}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x1}}}]}, 0x24}}, 0x0)
syz_emit_ethernet(0x16, &(0x7f0000000000)={@local, @broadcast, @void, {@llc={0x4, {@snap={0x0, 0x0, "af", "bd3e7b"}}}}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="1808000000ed0000000000006100b296851000000600000018100000", @ANYRES32=r5, @ANYBLOB="00000000000000002408000000b0000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000600)={&(0x7f0000000300)="852c8446145a0983d1b252466e4377a1228e20a4a2891a89a1182768ee7717c2c43164ddc0b555ec107be339479c6343b9263aae232c540bda59bab0035492847c3812e2aec9a69c62e72fea8390bcee329650ed3c9645c0c93b63ba7b088ef68f1a21bf0759f760a0fb9e10f8baab17309c9f9ceebf9b50fa865e", &(0x7f0000000380)=""/60, &(0x7f00000004c0)="553746bf308799a90f70c95898faa905032ce2379bff38ce7e3c613cf98eca3ca4c47694c9e5d45b7a7cb37afc44debbfa5242bf43a824982dc9fbd7666c2a55cbdfa19519", &(0x7f0000000540)="bf5264e820ac9603d98e5d9b6b0ff2c432e4f1842b426d20a3d8718380d4991593afc43759d84abeef394735ea492e478af89dccd8480d4dd2fd9327dbff4a730769a1ba6a3c3790859c8dd4a27d5a7feaf65c93f9d52c085a10ae8bf2f021da3e4727d4882931260830f43c21662324f6eb42794aea735e5bfa6578963e739d42336b36c73161c20f8599590bb0b32ddc6f992197d6df6d7ead524dc8244fc456abfd3bf3d5b19a0ed65da5", 0x20, r5}, 0x38)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xea3, '\x00', 0x0, r1}, 0x48)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r9, 0x0)

911.642836ms ago: executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x11, 0x80a, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x6}]}}}]}, 0x44}}, 0x0)

895.853507ms ago: executing program 3:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffff7f850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
close(r0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0xb0}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='mm_page_free_batched\x00', r0}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000100), 0x1001)
ioctl$SIOCSIFHWADDR(r1, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}})

756.231926ms ago: executing program 3:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000001f00000095"], &(0x7f0000000540)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000100), 0xfecc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0)
bpf$MAP_UPDATE_BATCH(0x9, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}, 0x6b)

737.052988ms ago: executing program 4:
pipe(&(0x7f0000000080))
r0 = socket(0x10, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x1}})
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0)
recvfrom$inet6(r1, &(0x7f0000000000)=""/45, 0x44, 0x0, 0x0, 0xffffffffffffffc3)
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)

637.168387ms ago: executing program 0:
mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$sock_timeval(r0, 0x1, 0x2f, &(0x7f0000abaff9)={0x0, 0xea60}, 0x8)

584.843118ms ago: executing program 1:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000200)="cd", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0)
r1 = socket$inet(0x2, 0x3, 0x2)
sendto$inet(r1, &(0x7f0000000480)="90", 0x1, 0x8810, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10)

488.022881ms ago: executing program 3:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ff00ff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendfile(r3, r1, 0x0, 0x1001)

476.700907ms ago: executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x14}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010024bd7000fbdbdf2520fffffa08000300", @ANYRES32, @ANYBLOB="0c000600010000000100000044002d8005000400000000000500010081000000080002"], 0x74}}, 0x0)

452.776447ms ago: executing program 0:
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000"], 0x7c}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213)
r3 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r3, &(0x7f0000000200)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
r4 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r4, &(0x7f0000000180)={0xa, 0x4e20, 0xcbd9, @empty, 0xfffffffe}, 0x1c)
r5 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r4, 0x5)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmmsg(r5, &(0x7f0000002980), 0x400000000000239, 0x0)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r7, &(0x7f0000001640), 0x300, 0x2, 0x0)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="a78700000000000000a221000000"], 0x14}}, 0x0)
listen(r3, 0x0)
r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x78)
unshare(0x22020400)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r8, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r9=>0x0, 0x0, 0x0, 0x0, 0x2, 0x8, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x8, 0x0, 0x0}}, 0x10)
recvfrom(r3, 0x0, 0x0, 0x42, 0x0, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@delneigh={0x3c, 0x1d, 0x20, 0x70bd25, 0x25dfdbfd, {0x1d, 0x0, 0x0, r9, 0x40, 0x22, 0x4}, [@NDA_IFINDEX={0x8, 0x8, r9}, @NDA_NH_ID={0x8, 0xd, 0x7}, @NDA_PROTOCOL={0x5, 0xc, 0x3}, @NDA_MASTER={0x8, 0x9, 0x10008000}]}, 0x3c}}, 0x4085)
sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x120}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x9c}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

438.764569ms ago: executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
write$binfmt_misc(r0, &(0x7f0000001b40)=ANY=[], 0x3a7)
socket(0x10, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$inet6(0xa, 0x2, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080), 0x4)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', <r3=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4)
bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10)
socket$qrtr(0x2a, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendmmsg$inet(r0, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000002c40)="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", 0x1d0}], 0x1}}, {{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000300)="bbd6bb6566ca29d951d62c6405f4be50684ccbca15a245c087c6c4c8b7af5360efa41d82212dac0fa12bc11b8594bdacf68e42a8455ecd77a305480c374296de14", 0x41}, {&(0x7f0000000380)="41b39d1b73b797643bfe3ed9890a7f1b4b39c53917d157fa38e2686a060e4bf3ad5a3cdd1637430c6f5e35cd6d95c649daf95bb42bc7", 0x36}, {0x0}, {&(0x7f0000000840)="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", 0x22b}], 0x4}}], 0x2, 0x0)

221.247065ms ago: executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x2, 0x4}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x48)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='blkio.bfq.io_service_time\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0))
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10)
connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e22, @empty}, 0x10)
socket$alg(0x26, 0x5, 0x0)
pipe(&(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000240)='illinois\x00', 0x9)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000200)={r1, r3})
r5 = socket$nl_sock_diag(0x10, 0x3, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6)
sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x4c, 0x12, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, 0x6}}, 0x4c}}, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0xc020660b, &(0x7f0000000000))
setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000300)={0xff80000, {{0x2, 0x4e21, @multicast1}}, 0x1, 0x8, [{{0x2, 0x4e22, @empty}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x17}}}, {{0x2, 0x4e23}}, {{0x2, 0x4e22, @rand_addr=0x64010102}}, {{0x2, 0x4e23, @empty}}, {{0x2, 0x4e22, @loopback}}, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x490)
mmap(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x2172, 0xffffffffffffffff, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000980)=ANY=[@ANYRESOCT=r4, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYBLOB="eb0323673488124d33d958417240d8a27a38b6e5d7cc73333bf9aee487a0466bca1b55ad540332de5138a35fba708f35261e555fc0a8b29192867c8f3ad3b0", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007500000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0x23, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r8 = socket$kcm(0x2, 0xa, 0x2)
r9 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x42000, 0x0)
ioctl$PPPIOCSACTIVE(r9, 0x40107446, &(0x7f00000003c0)={0xa, &(0x7f0000000340)=[{0xff, 0xff, 0x4, 0x200}, {0x1, 0x0, 0xde, 0x8001}, {0x9, 0x1, 0xb1, 0x7}, {0x6, 0x7, 0x85}, {0x0, 0x1f, 0xfc, 0x80}, {0xfffd, 0x3, 0x4, 0xffff}, {0x1, 0x3, 0x1, 0x9}, {0xe1, 0x9, 0x1, 0xf314}, {0x8000, 0x6b, 0x1, 0xf9}, {0xc7, 0x1f, 0x2, 0x2}]})
r10 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r10, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'})
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r7, &(0x7f0000000680)={@val, @void, @eth={@multicast, @local, @val={@void}, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @remote}, {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0xee4, 0x3]}, {}, {0x8, 0x22eb, 0x20000000}, {0x8, 0x6558, 0x0, "b0d5ff410e677bbd3f953b6a616d5818e5ae5c9b33e385c109b7c781df7748607170b7e1295bd1482d33d1cf9885eb6b1878c5aec61fe7e300994a59dbb3bbc1be4ee75cc16c7b6d7a7e621be22700f21af9a0eacfdeb0fbb9ec8ad9300fdcac40157e10fd968bbab2d63f88e89733321ad1e922d9df"}}}}}}}, 0xe8)

0s ago: executing program 0:
r0 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'ip6tnl0\x00', 0x400})
ioctl$TUNSETTXFILTER(r0, 0x401054d5, &(0x7f0000000000)=ANY=[@ANYBLOB="4504c92148cf1501000000d2"])
r1 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"/585], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a}, 0x15)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xfffff000, 0xe, 0xfffffffe, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0xfff, 0x0, &(0x7f0000000980)="09e86b26845bb4be75477c05d9395161b5cf2c52c76b900d0aad0d80abf3abcd31ebb11088b5d9f386326c64f1a33c74056e16514c6bd90130ee35e31fa7e72a5caf5bb6fad783baae592d201f102a14b0c601fb729c106c3160b5e31276cd2f8ea4ff1a371ab712bdf5c30f7d4016dad7ac8f028bf2d815c9fb5576775b33e622121ba59f721a7726d64281479538d46a0285872f23c9fa5c41eb5c149a5a1692648ed3f947510a881e07028da76108caef6215e3a886d98b6bc1f89926c90f3922d125368abe799003ea9cc23e997f33cd2b2d9aff2eef487e1ee5aace7f44a83aad5f5a12c0e34bf19c072027537f07820874fd640f54e596c179d150342e0b15af08564f45312b43a6076a717e33f60d4e0371b8c5e36cd066c26f6db60797be881733f4af86f5aa39094cd9109f7a5043f6a64400da857d0cac44b1f49076220ed0d89159715fb9df48a917132e3b4538ebb32a10f903f6450997c4042c628836769fa7b793b4c89ea9867adb672db71cf7421eff41c2883d544033ec50aa94259c567196e3639c68c823186332ac4ded5e3b7a90838a7f92c525d301b50d200367216660d0e7c89fcf37a0bdc97f857f6f95edf36514dde5ca1efb173f028e230fec340660998522a6b6ed0a2bce892fb42dca423179cacd883c49d24a9ff9a467a4de20140d98aa6c27e39ee47a14da1a4ac032fc9a4469408434fedbce92eb42f41a93d8face7cca675456d733e0f5cfa4f5aa4844307060e1b62367b607e5340f32c2b5e108779f7401296acf7953f9e0cca19d7ea67c8e51c33a4e6c805b2f199b1fcab32543969ee52ffc091016e099cc97e0122bebc5dae5151c17a66cbd4767e9864080fc1f42e826bafc8fdafde230b4c140c248499c32470d53dec8a5ac1b1186742fed2ff87ca8f1bfc0e672083072c6d2997f87700a43c0e20804e835bf353edcb89fb1d64fe7b17c0f1c750431d391319dacb24604d04b6d7e9fb68a4cffb05bd8ec620b35d6eeec9190af01c449d05ceefb9901e9d42c3eea2ece2647426908bc4c141d751e3d4d2580d48a6dd87d55f9f5be0681f9304909e7d3619bcbba1aa146f6e8e53dc9cb30a7ceeb7bf41e43bcc715f0316490fa05062b5a626f3b4c2ecc339f7a365635e23480333e210b3400ee226df446d1a57cd8ad0ca1afed8f1aae9cb5a54241d074f4589428f00561759e15e7d2133a11b8186c30defdc324b833563759190c2965aadd750c4a5556a7426b8cf8f0bd7984a60df191b6aa6b79cb9522acd1c25d96d46ee9adf5970380db31e0ed0d1e14ce91be0361a1d280b1e1299f83397e051bf3b71345b9393522c13776db7c4a3ab285bc1dbbc58759cf46332c226cfd038a76e2d48a8ec239982d2d96f7858083122ee72198a7ad6cc4b71fb2651c807a2c486a49b7cacce89a8171e71e2b2b5d508da13beb3ec046f5c82c5fc44a79b6c8797dc05501df98006b64f2ff253f57ee409402f1dc8da366637d03fb5d321929b933f69c94e90619b7087c71c5d64fda49d95f54522fa4de6c15050cd8c0e58096226e3e9e4931f85a32d1b48110d3bcb7e9732701ebd3dd3f06693daa461b0688bd62da2742f39418150d5ac0d0130f9ab91038c12c5ece46b76db563bf36cd7e87da932f3450e7081d585cfb3e42b9c5ee0a0877a9bc461779160fe9162f2aaf2a8a9b42b3fe6b76bc0eb5a0502572d83b1efccbfab93241031f9c9578da14af67ecd17c054aa218e265742fbfdbcb2f22fde51002f126c725a93ee9444169843617945f7a47eb4c272af525fe897e147e2a7ef6a785884c57c1cfd0a73b7ac691d30e7c705df2a70e30300fb8f8567e04cac0065cb884627699c8ee11d1e89d41584cc1387c9f006567d7289b1c48f7e07a39069ca5522ed57e9aaf12fbcfafd44637d2a828999d7396ff3c22cacd54f8be39f8b9ea77ef42170f7d4c417b8aa265674645a89af33038cdcea44b2132e21fd1167371bfc7b79043b1f6b2488fcef83243f52c4cf1b3abb386083c0f7a8a298981be4ffe84bec29b9dccb337115a17fa0dd91e5b5bfe4b294afbcf4897df08875f666c31c2ae1527c1cab6cf504e47695222a1fc9dcdfb105a0ffd8022a1f9a37be87f15383b8f37368d55b03919d0f37d1383cd58a813b65dfd12d2288898b966df2b2914ecab63742b1a7d3527c4e3b82cc946bfc2323d190b59c136e44c9896d63fa326d4319c2d12436e38538e58833ff5e5b2f86e1f49712300cfbfda00fa2dfd33bfb2ca8358a2c765b341974505ee3626c415f3aac60c638871eabf85f8189ef1c5fd37e179f3ea434a144ebf1890b956dce1423c4fd53b810f8d9441f5eaab0b18f62c95ffe7ce0555297fb3bb1c8c28c84329551901d1fb21ef234a61e7d49961f6bf84736b89d332e9c9c7d3b2b6a930567244ac71886a20848118e6e1b65e62c53cf67065025705f9b92fca52fa8446cf08d6f7d5d9508960860995b0f1e7b30a835ed091dc7c08fc3528d8cbd0873390988a7578461b9e4422489c395a9b466fb7fccd8c28c1fcb223da6d644aa2e523a14bb49a9df2b8542390dd725e0a4adf5fc8b6f31f092822b5c99de07958868b48605b09dd729136389e5b7466bd0b5b3758648adba736e753397a41194a5be9a8ef82e121dce4ddbf8eec8a77827d85e5c45101872a1944f83cf5550b4600f52d4799714a694715d5541cd1151ccd76aa304e20bdd9c368da557a718aac707fce54311c30c5e5cf628550606fbbfd47ded86714d180cf6826f5f38a81720cf8f6fca63d39ddcbf122c180bd2aa6ec4765f091eded130d85ecc75e8e7caa8f9a920a9abc87343925cbd0a33b12c23bd612bacda91e691f8193c9ffc2fce29a5fbd09670ca157073185b6e727ca5445f62b365728af5875b63f3021ba95b69a929902f89cd4bfa1053a8340d9960d50fb4a63156a69ee4000bd75b37e6efcd745f0bad7b37441ab22c631b21cf5b19315c37feeb1ba178c6129b6b1df42bf651e129456775d0330cfa0b918a66a2d36064d1d1b9c5e5603a8c078bab5d13745b0c3fecfabc2bd0e66dc8f1335f8311a31925b5adddf82bcd56e599411b7c7143c96f3a271218d989d69d48377a5495f3b0327f7f982e3067d146874868634d0f1f1a5e5cb9d426a8eee1e0d917c466f44da6fef918184f219b13b513a1407872f84b4c5cc6efca0a1c7e1b20a9994a1bb3092f268c2dc5eb8d987ec3063db06642c2cbb9ea53f5842ccf5b1d35b5ed95ae33175f0dfd440d0f959699ed1faaab83ad8a7df93d0dcf6ce2511d819f77bd6890a68faf3dab95b3504d53b5ddddc59d14238efbbf24ec7095326a46522065ba4c04cb32f7d3de04b9efd82a429422ba038f735cc595caeaac5f00b7b892e1d1be0207e395ab654a90d1e63484f50d85101b7b88f17ab26389eea18bf1b17a57879f2efb4ebe0c42f7a6f8c8d7fbd6392ee64384f71b9f573cacefacec2234c94fa7e7d195874ebd6e4159cc20032072a850918d566c0c60c00f3eb0904b9b5b642a76cf5b68663cbe47418d77c3c9d8b74e13afbc899c86ecd0c6656e17e325fd2d583a532657bf741523cb60a13700f62ae222ea7acc03d29e75ceb6122e43c94418c1e74a87f37bf7f32456757d0568a6faeceabc562917a179444bd420fa8cbc594f2a056c9be2cb38d82a8920de023c6ef2f2dff852bd840e8fd99b4ef139eeb5658da74e191091523870082c4640ccded0a36aec39632c5c7d6ea1f6e61f861a78d410f9bdecb8085c1151bc81f137cf53eda5ff0d7eae7b470984a9b3b676b21a7d017689ceb1d58149761085f4f2c6730600ea6f5e196653e219580e280a01e50dcd3e2ab25a910ba33e136e0eb71db80492715a5ee8a80caf9077f254622686fd90e813fc6b6c4234fb47db486ee6a29031d63f2de196d49f2adcff8e551c1bcb79e082102dec32e6b1d14250244f6103ecfce4f7ab9f88515451697075c30063525c128b1b06e90bc52148a215fdece8803979e4451fb79b5ac3140461cf033c0c5769de3b42b9bccedc6c36e98349193411daa70364d222363c29fd28c88cc8de6d80c1708a3c303fde01bcf3c9196b11d40d642dc7081615b66f6dafcadc14a06a71c00d096c281a2594609d7f5776a38ddc1f0a39a7c3deba4d2870d70cff73594f5ac2545914df21cdd74562714f59721bbc390837b1bf205c9ab035ce46e405945f2633b8e814d35b8dab56c77ac8a7da89b312599e950fc160169aa35369dd023c351d2d01bd15881dcffb2801a00472029df75e03af42df7a675a35509c74cdd616ba7ec06553fbd5d1da13275ad12d2effdac8651b7b20ea37f5d4e8529a5b265177bf9b71d709ca11f3197c6fc31c21b9dba734a720857318d549555ecce7b125d2978b55337a5218017b9cc883343a9490b0c1afe4d9998f23e66f60f385efdaced57359473254ef5bb30784d2402f374f404e6e83a745c5b5a053f305400567522d8d831b2f06589ca5987ad98213394145404914b250c9eca95ce33f70a757e26420f4accc899773c9dcf7c606d369522de453c05bac9caaf0188d7282ad1e61783fde0571196990d939232d78b0aba3a25adefaf2e1a8243ae864869482921f23ab5b1701092f7a785942774ba0a77c26b1bb60dc0ecfda68297839c333d82f40d4142547c230ea60364b0bd2e74c7a9c8818738c05d7b6e7d055859377cffb7df6787989d807fffa7759ace943ce5e174003742b6bf0a8f0ba6483bf878e0c10928c7268e459bb758b2b9dfac947fa71c25844c1df6e23dcf57d5a935226d78762a2e244fdd8f037c35c55eb317f531029c4c2b7a817ffbf0563975d5b26204b057fa725cd33b2ae309d6cf995152eed8840a71f80d56bc8b1efe4a7bd65f30e041cb55b9bd402f5ed7ebdd6741c2a04aa5d2ea9f552143c983a7887876d95826dc2657d4f75a61601ec8ae6b07416778df63d6310e445b589a3a4fd85ba17cbcc70736b8060ff9aee6640a5aecc39e30265983f81d02c69fba291d21e04f090f5d3794811614119b1ab93f60c3c0fe10ff470bff7f80f21444bdf5b092af552a16b73f1376caf31a088201f468a198a030649d99072bb4364545bd92e60fb5fc4659b81eb5718aaa0bed6865d8eec0fcfe55becd03e8f1c11fff9641183b6cae726542a93b9715b37c6aa79832cef3c92edc3cc8ce3add88a6db77c4ca93eee9200de9cd9ab316c2ed88fb91736dd54e225f51a3ea28d080d0d851e2f67bcaa42cbcaf9279240f89135242f4c5e16b4adf8e64edabfba7266d1049db142e19d6de19f738951052bb17a7a97cec6ade3e0e169ab4305260a19173c805e12a1a40a991543cbad99de305325c836c70f6814d132d4257d0a5c7e1dd6f7fd81205ad7af2221d6f5aa0961c1b9753b6032d4f4b63f25e4cc516997343e41046db43fbf15759a2998d1385471b49006acdd4031ac5e55a95b9787a6371cb2a165bdb4d52a1743091afb0495eb900c809a87ad1b35319a51c5bf3212da820a5e7ccfb013f52d1e2dbaaec5571dd2d0a08c104ed35aa25a025a9141a0bd5a12398eaae5b51c679bc47cee252237570b4a9ac08ef2162c3a8d72abebd0b298174713476fd1649ee963ea2808239af85e5629e98f02978d9a675b7f3675ebd8864613d57957803dd427dae78ddebccc461d04631b6220a9479b79001a9f58d7d5cdff01a353881736eef5a366a77610c1a57d0039e4a1b8961937665bbe150ae32e29d51374da2cceb8386", 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, &(0x7f00000002c0)="80e8fc052798e00756c45fa94e48da81791961d4caaa738f596231317452d417f27f2f63a081cff19d21ce4c0a556c21153d8a6a6fd10555ba3355078672b5cbac7d5a371eb863908ef4bf2f52c30bd72e2dce53ef31f11ef1c9b43f3d958a24", 0x2}, 0x50)

kernel console output (not intermixed with test programs):

e type 37 has an invalid length.
[  190.768070][ T6396] nbd: must specify a device to reconfigure
[  190.854596][ T6405] netlink: 'syz-executor.4': attribute type 12 has an invalid length.
[  190.882350][ T6405] netlink: 'syz-executor.4': attribute type 14 has an invalid length.
[  190.939410][ T6405] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  190.948774][ T6405] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  190.957649][ T6405] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  190.966443][ T6405] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  190.983757][ T6405] vxlan0: entered promiscuous mode
[  191.659628][ T6430] gretap0: entered promiscuous mode
[  191.722552][ T6434] __nla_validate_parse: 2 callbacks suppressed
[  191.722577][ T6434] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.4'.
[  191.805733][ T6433] macsec1: entered promiscuous mode
[  191.811189][ T6433] macsec1: entered allmulticast mode
[  191.853847][ T6433] batadv0: entered allmulticast mode
[  191.909728][ T6433] batadv0: left allmulticast mode
[  192.120792][ T6443] netlink: 'syz-executor.0': attribute type 37 has an invalid length.
[  192.165552][ T6443] nbd: must specify a device to reconfigure
[  192.493991][ T6457] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  192.530351][ T6455] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  192.566911][ T6455] netlink: 'syz-executor.1': attribute type 12 has an invalid length.
[  192.592530][ T6455] netlink: 'syz-executor.1': attribute type 14 has an invalid length.
[  192.644940][ T6455] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  192.654050][ T6455] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  192.663604][ T6455] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  192.672994][ T6455] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  192.728511][ T6455] vxlan0: entered promiscuous mode
[  192.994773][ T6471] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'.
[  193.184268][ T6476] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  193.508998][ T6478] batadv0: entered promiscuous mode
[  193.516270][ T6481] Bluetooth: MGMT ver 1.22
[  193.520798][ T6481] Bluetooth: hci3: invalid length 0, exp 2 for type 19
[  193.533032][ T6478] macsec1: entered promiscuous mode
[  193.538490][ T6478] macsec1: entered allmulticast mode
[  193.573587][ T6478] batadv0: entered allmulticast mode
[  193.653881][ T6478] batadv0: left allmulticast mode
[  193.684306][ T6478] batadv0: left promiscuous mode
[  193.785537][ T6490] syz_tun: entered promiscuous mode
[  193.807729][ T6489] syz_tun: left promiscuous mode
[  194.319340][ T6511] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  194.634446][ T1250] ieee802154 phy0 wpan0: encryption failed: -22
[  194.641397][ T1250] ieee802154 phy1 wpan1: encryption failed: -22
[  194.718987][ T6520] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[  194.748687][ T6520] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[  194.790674][ T6520] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[  194.823552][ T6526] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'.
[  194.848122][ T6526] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  194.870040][ T6520] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[  195.046878][ T6532] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  195.245830][   T29] audit: type=1800 audit(1718733113.470:2): pid=6543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1956 res=0 errno=0
[  195.296593][   T29] audit: type=1804 audit(1718733113.490:3): pid=6543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2226042676/syzkaller.CgSPg8/119/memory.events" dev="sda1" ino=1956 res=1 errno=0
[  195.342848][   T29] audit: type=1804 audit(1718733113.490:4): pid=6543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2226042676/syzkaller.CgSPg8/119/memory.events" dev="sda1" ino=1956 res=1 errno=0
[  195.413759][ T6553] netlink: 'syz-executor.4': attribute type 12 has an invalid length.
[  195.453877][ T6553] netlink: 'syz-executor.4': attribute type 14 has an invalid length.
[  196.175437][ T6577] Bluetooth: hci3: invalid length 0, exp 2 for type 19
[  197.173587][ T6620] netlink: 'syz-executor.3': attribute type 12 has an invalid length.
[  197.575248][ T6634] __nla_validate_parse: 1 callbacks suppressed
[  197.575271][ T6634] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[  197.631226][ T6636] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[  197.651535][ T6643] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  197.665863][ T6643] netlink: 'syz-executor.0': attribute type 3 has an invalid length.
[  198.473618][ T6669] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[  198.530650][ T6676] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
[  198.553729][ T6676] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[  198.654140][ T6678] netlink: 'syz-executor.3': attribute type 12 has an invalid length.
[  199.002411][   T29] audit: type=1800 audit(1718733117.220:5): pid=6698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1939 res=0 errno=0
[  199.100227][   T29] audit: type=1804 audit(1718733117.270:6): pid=6698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2226042676/syzkaller.CgSPg8/128/memory.events" dev="sda1" ino=1939 res=1 errno=0
[  199.143076][   T29] audit: type=1804 audit(1718733117.270:7): pid=6698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2226042676/syzkaller.CgSPg8/128/memory.events" dev="sda1" ino=1939 res=1 errno=0
[  199.951607][ T6736] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[  200.745301][ T5126] syz-executor.0 (5126) used greatest stack depth: 18128 bytes left
[  200.861759][ T5140] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  200.879459][ T5140] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  200.888523][ T5140] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  200.923366][ T5140] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  200.931508][ T5140] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  200.941984][ T5140] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  201.063068][ T6767] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  201.248976][ T6731] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[  202.154627][ T6761] chnl_net:caif_netlink_parms(): no params data found
[  202.731157][ T6761] bridge0: port 1(bridge_slave_0) entered blocking state
[  202.738990][ T6761] bridge0: port 1(bridge_slave_0) entered disabled state
[  202.762476][ T6761] bridge_slave_0: entered allmulticast mode
[  202.771139][ T6761] bridge_slave_0: entered promiscuous mode
[  202.804828][ T6761] bridge0: port 2(bridge_slave_1) entered blocking state
[  202.827330][ T6761] bridge0: port 2(bridge_slave_1) entered disabled state
[  202.849248][ T6761] bridge_slave_1: entered allmulticast mode
[  202.880789][ T6761] bridge_slave_1: entered promiscuous mode
[  203.022938][   T53] Bluetooth: hci1: command tx timeout
[  203.099574][   T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.180040][ T5140] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  203.190263][ T5140] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  203.199009][ T5140] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  203.209388][ T5140] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  203.221730][ T5140] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  203.233768][ T5140] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  203.384337][ T6824] veth0_macvtap: left promiscuous mode
[  203.554381][ T6834] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'.
[  203.555650][   T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.655367][ T6761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  203.707636][ T6761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  203.781043][   T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.012988][   T11] bond0: (slave netdevsim0): Releasing backup interface
[  204.061678][   T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.111140][ T6761] team0: Port device team_slave_0 added
[  204.141227][ T6761] team0: Port device team_slave_1 added
[  204.367533][ T6761] batman_adv: batadv0: Adding interface: batadv_slave_0
[  204.384682][ T6761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  204.418250][ T6761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  204.497633][ T6761] batman_adv: batadv0: Adding interface: batadv_slave_1
[  204.533709][ T6761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  204.565479][ T6761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  204.760038][ T6761] hsr_slave_0: entered promiscuous mode
[  204.795579][ T6761] hsr_slave_1: entered promiscuous mode
[  204.806471][ T6761] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  204.815801][ T6761] Cannot create hsr debugfs directory
[  204.832552][ T6865] netlink: 'syz-executor.1': attribute type 7 has an invalid length.
[  205.102631][   T53] Bluetooth: hci1: command tx timeout
[  205.199069][   T11] bridge_slave_1: left allmulticast mode
[  205.219400][   T11] bridge_slave_1: left promiscuous mode
[  205.250074][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  205.320357][   T11] bridge_slave_0: left allmulticast mode
[  205.336415][   T11] bridge_slave_0: left promiscuous mode
[  205.342299][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  205.350362][   T53] Bluetooth: hci4: command tx timeout
[  205.980154][ T6881] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.3'.
[  206.010270][ T6881] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'.
[  206.374842][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  206.390305][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  206.403681][   T11] bond0 (unregistering): Released all slaves
[  206.421901][ T6871] netlink: 'syz-executor.4': attribute type 7 has an invalid length.
[  206.432463][ T6871] netlink: 'syz-executor.4': attribute type 39 has an invalid length.
[  206.450286][ T6873] netlink: 'syz-executor.4': attribute type 7 has an invalid length.
[  206.467829][ T6873] netlink: 'syz-executor.4': attribute type 39 has an invalid length.
[  206.495749][ T6889] netlink: 'syz-executor.1': attribute type 4 has an invalid length.
[  206.507561][ T6889] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.1'.
[  206.556803][ T6890] Êü: entered promiscuous mode
[  206.585972][   T11] Êü: left promiscuous mode
[  206.758537][ T6896] veth0_macvtap: left promiscuous mode
[  207.116263][ T6906] netlink: 'syz-executor.3': attribute type 4 has an invalid length.
[  207.184131][   T53] Bluetooth: hci1: command tx timeout
[  207.423010][   T53] Bluetooth: hci4: command tx timeout
[  207.756093][ T6761] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.977267][   T11] hsr_slave_0: left promiscuous mode
[  208.014945][   T11] hsr_slave_1: left promiscuous mode
[  208.027226][ T6932] Bluetooth: MGMT ver 1.22
[  208.033375][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  208.054108][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  208.094229][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  208.106266][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  208.189887][   T11] veth1_macvtap: left promiscuous mode
[  208.206630][   T11] veth0_macvtap: left promiscuous mode
[  208.223199][   T11] veth1_vlan: left promiscuous mode
[  208.235644][   T11] veth0_vlan: left promiscuous mode
[  208.563065][ T6944] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  209.019916][   T11] team0 (unregistering): Port device team_slave_1 removed
[  209.061746][   T11] team0 (unregistering): Port device team_slave_0 removed
[  209.246817][   T59] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  209.262504][ T5140] Bluetooth: hci1: command tx timeout
[  209.505072][ T5140] Bluetooth: hci4: command tx timeout
[  209.516572][ T6761] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.553021][ T6823] chnl_net:caif_netlink_parms(): no params data found
[  209.761170][ T6761] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.954308][   T29] audit: type=1800 audit(1718733128.180:8): pid=6964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1954 res=0 errno=0
[  210.029858][ T6761] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.062593][   T53] Bluetooth: hci2: Opcode 0x0c1a failed: -110
[  210.070559][   T53] Bluetooth: hci2: command 0x0c1a tx timeout
[  210.072550][ T6957] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[  210.116333][   T29] audit: type=1800 audit(1718733128.340:9): pid=6966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1954 res=0 errno=0
[  210.163907][   T29] audit: type=1804 audit(1718733128.340:10): pid=6966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2226042676/syzkaller.CgSPg8/152/memory.events" dev="sda1" ino=1954 res=1 errno=0
[  210.235291][   T29] audit: type=1804 audit(1718733128.340:11): pid=6966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2226042676/syzkaller.CgSPg8/152/memory.events" dev="sda1" ino=1954 res=1 errno=0
[  210.305285][ T6971] netlink: 200 bytes leftover after parsing attributes in process `syz-executor.1'.
[  210.351516][ T6823] bridge0: port 1(bridge_slave_0) entered blocking state
[  210.370837][ T6823] bridge0: port 1(bridge_slave_0) entered disabled state
[  210.384026][ T6823] bridge_slave_0: entered allmulticast mode
[  210.410002][ T6823] bridge_slave_0: entered promiscuous mode
[  210.439787][ T6823] bridge0: port 2(bridge_slave_1) entered blocking state
[  210.477453][ T6823] bridge0: port 2(bridge_slave_1) entered disabled state
[  210.485098][ T6823] bridge_slave_1: entered allmulticast mode
[  210.503350][ T6823] bridge_slave_1: entered promiscuous mode
[  210.619229][ T6823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  210.713859][ T6823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  210.779047][ T6983] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'.
[  210.822408][ T6983] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  210.851970][ T6983] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
[  210.879838][ T6983] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'.
[  210.976649][ T6823] team0: Port device team_slave_0 added
[  211.020363][ T6823] team0: Port device team_slave_1 added
[  211.066434][ T6761] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  211.219027][ T6761] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  211.303613][ T6823] batman_adv: batadv0: Adding interface: batadv_slave_0
[  211.310719][ T6823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  211.405910][ T6823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  211.421741][ T6761] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  211.523364][ T6823] batman_adv: batadv0: Adding interface: batadv_slave_1
[  211.550800][ T6823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  211.579513][ T6823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  211.592651][   T53] Bluetooth: hci4: command tx timeout
[  211.610666][ T6761] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  211.642026][ T7007] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[  211.716980][ T7013] netlink: 200 bytes leftover after parsing attributes in process `syz-executor.3'.
[  211.927921][ T7021] netlink: 'syz-executor.3': attribute type 12 has an invalid length.
[  211.941056][ T7021] netlink: 197276 bytes leftover after parsing attributes in process `syz-executor.3'.
[  212.128616][ T6823] hsr_slave_0: entered promiscuous mode
[  212.142369][ T6823] hsr_slave_1: entered promiscuous mode
[  212.161082][ T6823] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  212.170348][ T6823] Cannot create hsr debugfs directory
[  212.311476][ T7028] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4095 (only 8 groups)
[  212.548347][ T6761] 8021q: adding VLAN 0 to HW filter on device bond0
[  212.611607][ T7033] netlink: 'syz-executor.3': attribute type 21 has an invalid length.
[  212.634773][ T7033] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.3'.
[  212.634849][ T7035] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  212.650699][ T7033] netlink: 'syz-executor.3': attribute type 5 has an invalid length.
[  212.687978][ T6761] 8021q: adding VLAN 0 to HW filter on device team0
[  212.845324][ T7045] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
[  212.857416][ T7045] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
[  212.877723][ T5175] bridge0: port 1(bridge_slave_0) entered blocking state
[  212.884998][ T5175] bridge0: port 1(bridge_slave_0) entered forwarding state
[  212.909382][ T5175] bridge0: port 2(bridge_slave_1) entered blocking state
[  212.916646][ T5175] bridge0: port 2(bridge_slave_1) entered forwarding state
[  212.970389][   T29] audit: type=1800 audit(1718733131.190:12): pid=7049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1949 res=0 errno=0
[  213.009338][   T29] audit: type=1804 audit(1718733131.190:13): pid=7049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir3919173301/syzkaller.57qhza/147/memory.events" dev="sda1" ino=1949 res=1 errno=0
[  213.045098][   T29] audit: type=1804 audit(1718733131.220:14): pid=7049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir3919173301/syzkaller.57qhza/147/memory.events" dev="sda1" ino=1949 res=1 errno=0
[  213.467576][ T6823] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  213.504477][ T6823] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  213.718060][ T7069] syz_tun: Device is already in use.
[  213.726577][ T7066] __nla_validate_parse: 3 callbacks suppressed
[  213.726600][ T7066] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.1'.
[  213.762550][ T6823] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  213.802845][ T6823] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  213.827410][ T7062] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.1'.
[  213.928084][ T6761] 8021q: adding VLAN 0 to HW filter on device batadv0
[  214.125781][ T6761] veth0_vlan: entered promiscuous mode
[  214.240615][ T6761] veth1_vlan: entered promiscuous mode
[  214.284636][ T7082] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'.
[  214.347894][ T6823] 8021q: adding VLAN 0 to HW filter on device bond0
[  214.608940][ T6823] 8021q: adding VLAN 0 to HW filter on device team0
[  214.630370][ T6761] veth0_macvtap: entered promiscuous mode
[  214.667537][ T6761] veth1_macvtap: entered promiscuous mode
[  214.706277][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[  214.713594][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[  214.814011][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[  214.821318][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[  215.034699][ T6761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  215.077524][ T6761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.101822][ T6761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  215.141424][ T6761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.171755][ T6761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  215.190597][ T6761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.205623][ T6761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  215.230650][ T6761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.259082][ T6761] batman_adv: batadv0: Interface activated: batadv_slave_0
[  215.310784][ T6761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  215.332733][ T6761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.362342][ T6761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  215.385286][ T6761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.413389][ T6761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  215.434343][ T6761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.455962][ T6761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  215.477016][ T6761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.509955][ T6761] batman_adv: batadv0: Interface activated: batadv_slave_1
[  215.546370][ T6761] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  215.567958][ T6761] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  215.576905][ T6761] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  215.585919][ T6761] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  215.721882][ T7114] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  215.848927][ T7114] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  216.045291][ T7120] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'.
[  216.138004][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  216.165331][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  216.267007][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  216.290368][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  216.476248][ T6823] 8021q: adding VLAN 0 to HW filter on device batadv0
[  216.541369][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  216.708582][ T6823] veth0_vlan: entered promiscuous mode
[  216.749232][ T6823] veth1_vlan: entered promiscuous mode
[  216.840899][ T7145] IPVS: set_ctl: invalid protocol: 0 172.20.20.0:0
[  216.876378][ T6823] veth0_macvtap: entered promiscuous mode
[  216.899887][ T6823] veth1_macvtap: entered promiscuous mode
[  216.986412][ T6823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  217.012549][ T6823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.031274][ T6823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  217.057607][ T6823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.068007][ T6823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  217.085261][ T6823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.100875][ T6823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  217.113683][ T6823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.128862][ T6823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  217.142759][ T6823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.156702][ T6823] batman_adv: batadv0: Interface activated: batadv_slave_0
[  217.199274][ T6823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  217.242244][ T6823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.269294][ T6823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  217.290196][ T6823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.309255][ T6823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  217.324200][ T6823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.347694][ T6823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  217.370211][ T6823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.380289][ T6823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  217.391243][ T6823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.405339][ T6823] batman_adv: batadv0: Interface activated: batadv_slave_1
[  217.416448][ T7164] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[  217.453159][ T7163] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  217.478224][   T29] audit: type=1800 audit(1718733135.700:15): pid=7169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1956 res=0 errno=0
[  217.510539][   T29] audit: type=1804 audit(1718733135.720:16): pid=7169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir576720269/syzkaller.1vCZZV/176/memory.events" dev="sda1" ino=1956 res=1 errno=0
[  217.553483][ T7163] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  217.579132][   T29] audit: type=1804 audit(1718733135.730:17): pid=7169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir576720269/syzkaller.1vCZZV/176/memory.events" dev="sda1" ino=1956 res=1 errno=0
[  217.699764][ T6823] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  217.710314][ T6823] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  217.724976][ T6823] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  217.734016][ T6823] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  218.004262][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  218.029524][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  218.207716][ T3928] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  218.231969][ T3928] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  218.342014][ T7196] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4095 (only 8 groups)
[  218.607860][ T7205] netlink: 'syz-executor.0': attribute type 2 has an invalid length.
[  218.710682][   T29] audit: type=1800 audit(1718733136.930:18): pid=7210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1956 res=0 errno=0
[  218.734023][ T7209] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  218.788064][   T29] audit: type=1804 audit(1718733136.960:19): pid=7210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir576720269/syzkaller.1vCZZV/180/memory.events" dev="sda1" ino=1956 res=1 errno=0
[  218.869476][   T29] audit: type=1804 audit(1718733136.970:20): pid=7210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir576720269/syzkaller.1vCZZV/180/memory.events" dev="sda1" ino=1956 res=1 errno=0
[  219.488379][ T7229] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'.
[  219.529810][   T29] audit: type=1804 audit(1718733137.750:21): pid=7219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3415707493/syzkaller.CpzoiJ/6/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0
[  219.530684][ T7229] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  219.759470][   T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.030669][   T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.159016][   T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.208102][ T7254] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[  220.241844][ T7254] netlink: 55 bytes leftover after parsing attributes in process `syz-executor.3'.
[  220.273749][ T7254] team0: Port device virt_wifi0 added
[  220.345315][ T5140] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  220.355623][ T5140] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  220.367951][ T5140] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  220.377022][   T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.415808][ T5140] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  220.431599][ T5140] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  220.441040][ T5140] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  220.756637][ T7264] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  220.770913][ T7264] netlink: 'syz-executor.1': attribute type 2 has an invalid length.
[  220.781699][ T7246] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  220.788565][ T7264] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  220.829441][   T11] bridge_slave_1: left allmulticast mode
[  220.855796][   T11] bridge_slave_1: left promiscuous mode
[  220.861664][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  220.913196][   T11] bridge_slave_0: left allmulticast mode
[  220.932326][   T11] bridge_slave_0: left promiscuous mode
[  220.952837][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  221.001959][ T7281] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  221.368962][   T29] audit: type=1804 audit(1718733139.590:22): pid=7277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3415707493/syzkaller.CpzoiJ/12/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0
[  221.701409][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  221.723699][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  221.755247][   T11] bond0 (unregistering): Released all slaves
[  221.848775][ T7290] netlink: 'syz-executor.4': attribute type 10 has an invalid length.
[  221.877612][ T7290] netlink: 55 bytes leftover after parsing attributes in process `syz-executor.4'.
[  221.921158][ T7290] team0: Port device virt_wifi0 added
[  221.934933][ T7288] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[  221.985485][ T7302] xt_ecn: cannot match TCP bits for non-tcp packets
[  222.261907][ T7305] debugfs: Directory 'netdev:nicvf0' with parent 'phy9' already present!
[  222.497808][ T7316] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  222.543165][   T53] Bluetooth: hci4: command tx timeout
[  222.755988][   T11] hsr_slave_0: left promiscuous mode
[  222.767752][ T7320] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  222.797428][   T11] hsr_slave_1: left promiscuous mode
[  222.807196][ T7320] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  222.831337][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  222.859801][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  222.887074][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  222.910412][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  223.011501][   T11] veth1_macvtap: left promiscuous mode
[  223.021482][   T11] veth0_macvtap: left promiscuous mode
[  223.032579][   T11] veth1_vlan: left promiscuous mode
[  223.037992][   T11] veth0_vlan: left promiscuous mode
[  223.710157][   T11] team0 (unregistering): Port device team_slave_1 removed
[  223.772021][   T11] team0 (unregistering): Port device team_slave_0 removed
[  224.220027][ T7329] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[  224.235980][ T7329] netlink: 55 bytes leftover after parsing attributes in process `syz-executor.3'.
[  224.312262][ T7343] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  224.601827][ T7343] hsr_slave_1 (unregistering): left promiscuous mode
[  224.611775][ T7357] netlink: 312 bytes leftover after parsing attributes in process `syz-executor.4'.
[  224.635663][ T5140] Bluetooth: hci4: command tx timeout
[  224.809239][ T7256] chnl_net:caif_netlink_parms(): no params data found
[  225.167803][ T5125] bond0: (slave syz_tun): Releasing backup interface
[  225.253419][ T7256] bridge0: port 1(bridge_slave_0) entered blocking state
[  225.270925][ T7256] bridge0: port 1(bridge_slave_0) entered disabled state
[  225.290323][ T7256] bridge_slave_0: entered allmulticast mode
[  225.302053][ T7256] bridge_slave_0: entered promiscuous mode
[  225.329293][ T7256] bridge0: port 2(bridge_slave_1) entered blocking state
[  225.350529][ T7256] bridge0: port 2(bridge_slave_1) entered disabled state
[  225.412593][ T7256] bridge_slave_1: entered allmulticast mode
[  225.420176][ T7256] bridge_slave_1: entered promiscuous mode
[  225.551775][ T7256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  225.588049][ T7256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  225.726178][ T7256] team0: Port device team_slave_0 added
[  225.747541][ T7256] team0: Port device team_slave_1 added
[  225.831068][ T7256] batman_adv: batadv0: Adding interface: batadv_slave_0
[  225.852809][ T7256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  225.912277][ T7256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  225.942269][ T7256] batman_adv: batadv0: Adding interface: batadv_slave_1
[  225.949324][ T7256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  225.979939][ T7256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  226.193501][ T7256] hsr_slave_0: entered promiscuous mode
[  226.216659][ T7256] hsr_slave_1: entered promiscuous mode
[  226.241585][ T7256] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  226.259472][ T7256] Cannot create hsr debugfs directory
[  226.287299][ T5132] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  226.299096][ T5132] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  226.308556][ T5132] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  226.329067][ T5132] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  226.340841][ T5132] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  226.349786][ T5132] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  226.523515][ T7426] netlink: 'syz-executor.0': attribute type 24 has an invalid length.
[  226.569248][ T7430] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  226.582611][ T7430] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  226.598365][ T7433] bridge0: entered promiscuous mode
[  226.604581][ T7433] macsec1: entered promiscuous mode
[  226.610488][ T7433] macsec1: entered allmulticast mode
[  226.616088][ T7433] bridge0: entered allmulticast mode
[  226.633732][ T7433] bridge0: left allmulticast mode
[  226.639285][ T7433] bridge0: left promiscuous mode
[  226.702635][ T5132] Bluetooth: hci4: command tx timeout
[  226.787011][ T7437] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
[  226.796819][ T7430] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  227.588943][ T7418] chnl_net:caif_netlink_parms(): no params data found
[  227.636420][ T7472] xt_ecn: cannot match TCP bits for non-tcp packets
[  227.728851][ T7476] netlink: 312 bytes leftover after parsing attributes in process `syz-executor.0'.
[  228.020180][ T7418] bridge0: port 1(bridge_slave_0) entered blocking state
[  228.043019][ T7418] bridge0: port 1(bridge_slave_0) entered disabled state
[  228.060760][ T7418] bridge_slave_0: entered allmulticast mode
[  228.080730][ T7418] bridge_slave_0: entered promiscuous mode
[  228.132147][ T7418] bridge0: port 2(bridge_slave_1) entered blocking state
[  228.148538][ T7418] bridge0: port 2(bridge_slave_1) entered disabled state
[  228.160729][ T7418] bridge_slave_1: entered allmulticast mode
[  228.179913][ T7418] bridge_slave_1: entered promiscuous mode
[  228.288300][ T7256] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  228.334301][ T7256] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  228.365336][ T7418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  228.386396][ T5132] Bluetooth: hci0: command tx timeout
[  228.431917][ T7418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  228.506302][ T7256] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  228.534097][ T7495] netlink: 'syz-executor.0': attribute type 2 has an invalid length.
[  228.591195][ T7418] team0: Port device team_slave_0 added
[  228.665598][ T7256] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  228.691499][ T7418] team0: Port device team_slave_1 added
[  228.788426][ T5132] Bluetooth: hci4: command tx timeout
[  228.798209][ T7418] batman_adv: batadv0: Adding interface: batadv_slave_0
[  228.811550][ T7418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  228.858572][ T7418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  228.881507][ T7418] batman_adv: batadv0: Adding interface: batadv_slave_1
[  228.890597][ T7418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  228.920027][ T7418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  229.078963][ T7418] hsr_slave_0: entered promiscuous mode
[  229.105765][ T7418] hsr_slave_1: entered promiscuous mode
[  229.128767][ T7418] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  229.152838][ T7418] Cannot create hsr debugfs directory
[  229.191312][ T7511] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
[  229.208831][ T7517] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[  229.219022][ T7511] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[  229.219152][ T7511] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  229.545257][ T7256] 8021q: adding VLAN 0 to HW filter on device bond0
[  229.748615][ T7418] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  229.776777][ T7418] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.880237][ T7256] 8021q: adding VLAN 0 to HW filter on device team0
[  229.986590][ T7418] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  229.997306][ T7545] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[  230.002442][ T7418] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.041894][ T5206] bridge0: port 1(bridge_slave_0) entered blocking state
[  230.049167][ T5206] bridge0: port 1(bridge_slave_0) entered forwarding state
[  230.066222][ T5206] bridge0: port 2(bridge_slave_1) entered blocking state
[  230.073458][ T5206] bridge0: port 2(bridge_slave_1) entered forwarding state
[  230.182128][ T7418] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  230.206617][ T7553] syz-executor.1[7553] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  230.206883][ T7553] syz-executor.1[7553] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  230.211192][ T7418] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.473339][ T5132] Bluetooth: hci0: command tx timeout
[  230.495546][ T7418] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  230.529774][ T7418] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.610145][   T35] bridge_slave_1: left allmulticast mode
[  230.616319][   T35] bridge_slave_1: left promiscuous mode
[  230.622090][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  230.631906][   T35] bridge_slave_0: left allmulticast mode
[  230.639130][   T35] bridge_slave_0: left promiscuous mode
[  230.648568][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  231.067880][   T35] bond0 (unregistering): Released all slaves
[  231.311932][ T7580] netlink: 'syz-executor.1': attribute type 2 has an invalid length.
[  231.519589][ T7418] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  231.530478][ T7590] netlink: 108 bytes leftover after parsing attributes in process `syz-executor.0'.
[  231.554987][ T7418] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  231.587081][ T7418] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  231.629800][ T7418] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  231.839013][   T35] hsr_slave_0: left promiscuous mode
[  231.854295][   T35] hsr_slave_1: left promiscuous mode
[  231.868966][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  231.879235][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[  231.887721][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  231.895330][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[  231.937514][   T35] veth1_macvtap: left promiscuous mode
[  231.946493][   T35] veth0_macvtap: left promiscuous mode
[  231.958142][   T35] veth1_vlan: left promiscuous mode
[  231.963855][   T35] veth0_vlan: left promiscuous mode
[  232.299947][ T7615] sctp: [Deprecated]: syz-executor.0 (pid 7615) Use of int in max_burst socket option.
[  232.299947][ T7615] Use struct sctp_assoc_value instead
[  232.553319][ T5132] Bluetooth: hci0: command tx timeout
[  232.571002][ T7619] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  232.709440][   T35] team0 (unregistering): Port device team_slave_1 removed
[  232.757932][   T35] team0 (unregistering): Port device team_slave_0 removed
[  233.198585][ T7618] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  233.261255][ T7256] 8021q: adding VLAN 0 to HW filter on device batadv0
[  233.509572][ T7631] netlink: 108 bytes leftover after parsing attributes in process `syz-executor.3'.
[  233.548972][ T7256] veth0_vlan: entered promiscuous mode
[  233.619702][ T7256] veth1_vlan: entered promiscuous mode
[  233.659424][ T7418] 8021q: adding VLAN 0 to HW filter on device bond0
[  233.706992][ T7256] veth0_macvtap: entered promiscuous mode
[  233.824784][ T7418] 8021q: adding VLAN 0 to HW filter on device team0
[  233.835302][ T7256] veth1_macvtap: entered promiscuous mode
[  233.894547][ T5177] bridge0: port 1(bridge_slave_0) entered blocking state
[  233.901838][ T5177] bridge0: port 1(bridge_slave_0) entered forwarding state
[  233.947354][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  233.954637][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  233.974455][ T7256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  234.006653][ T7256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  234.016986][ T7256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  234.030428][ T7256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  234.050903][ T7256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  234.063288][ T7256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  234.078787][ T7256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  234.090258][ T7256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  234.105396][ T7256] batman_adv: batadv0: Interface activated: batadv_slave_0
[  234.137215][ T7256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  234.159541][ T7256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  234.170989][ T7256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  234.181874][ T7256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  234.192090][ T7256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  234.202800][ T7256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  234.224407][ T7256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  234.244723][ T7256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  234.277822][ T7256] batman_adv: batadv0: Interface activated: batadv_slave_1
[  234.332073][ T7653] bridge0: entered promiscuous mode
[  234.372535][ T7653] macsec1: entered promiscuous mode
[  234.389500][ T7653] macsec1: entered allmulticast mode
[  234.399313][ T7653] bridge0: entered allmulticast mode
[  234.411474][ T7653] bridge0: left allmulticast mode
[  234.418519][ T7653] bridge0: left promiscuous mode
[  234.455917][ T7659] delete_channel: no stack
[  234.506031][ T7256] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  234.532296][ T7256] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  234.549751][ T7256] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  234.558756][ T7256] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  234.633125][ T5132] Bluetooth: hci0: command tx timeout
[  234.825895][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  234.875546][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  234.975950][ T3928] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  235.004424][ T3928] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  235.072645][ T7682] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  235.113965][ T7682] netlink: 'syz-executor.0': attribute type 9 has an invalid length.
[  235.276705][ T7418] 8021q: adding VLAN 0 to HW filter on device batadv0
[  235.559699][ T2484] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  235.610545][ T7703] RDS: rds_bind could not find a transport for ::ffff:172.20.20.0, load rds_tcp or rds_rdma?
[  235.757725][ T2484] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  235.791575][ T7701] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  235.865167][ T7701] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  235.937456][ T7711] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.0'.
[  235.986638][ T7711] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes.
[  236.034145][ T7418] veth0_vlan: entered promiscuous mode
[  236.097873][ T7418] veth1_vlan: entered promiscuous mode
[  236.216576][ T7418] veth0_macvtap: entered promiscuous mode
[  236.317952][ T2484] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  236.374671][ T7418] veth1_macvtap: entered promiscuous mode
[  236.401749][ T7723] netlink: 'syz-executor.1': attribute type 24 has an invalid length.
[  236.503710][ T5140] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  236.514393][ T5140] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  236.526730][ T5140] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  236.537616][ T5140] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  236.563190][ T5140] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  236.574703][ T5140] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  236.598307][ T2484] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  236.705285][ T7418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  236.726243][ T7418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.744524][ T7418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  236.755367][ T7418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.772819][ T7418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  236.801893][ T7418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.819160][ T7418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  236.832067][ T7418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.842353][ T7418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  236.859351][ T7418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.871580][ T7418] batman_adv: batadv0: Interface activated: batadv_slave_0
[  236.880503][ T7743] sctp: [Deprecated]: syz-executor.1 (pid 7743) Use of int in max_burst socket option.
[  236.880503][ T7743] Use struct sctp_assoc_value instead
[  236.931793][ T7418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  236.952128][ T7418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.970052][ T7418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  236.981900][ T7418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.002828][ T7418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  237.020729][ T7418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.038540][ T7418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  237.049299][ T7418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.059567][ T7418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  237.070280][ T7418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.093990][ T7418] batman_adv: batadv0: Interface activated: batadv_slave_1
[  237.220671][ T7418] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  237.230762][ T7418] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  237.245510][ T7418] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  237.255917][ T7418] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  237.389270][ T2484] bridge_slave_1: left allmulticast mode
[  237.403219][ T2484] bridge_slave_1: left promiscuous mode
[  237.422889][ T2484] bridge0: port 2(bridge_slave_1) entered disabled state
[  237.440562][ T2484] bridge_slave_0: left allmulticast mode
[  237.453935][ T2484] bridge_slave_0: left promiscuous mode
[  237.459831][ T2484] bridge0: port 1(bridge_slave_0) entered disabled state
[  237.949084][ T2484] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  237.961336][ T2484] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  237.973053][ T2484] bond0 (unregistering): Released all slaves
[  238.010712][ T7763] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  238.229506][ T7778] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[  238.345246][ T7783] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.3'.
[  238.374933][ T3928] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  238.387797][ T3928] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  238.620596][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  238.633360][ T5132] Bluetooth: hci4: command tx timeout
[  238.636157][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  238.725470][ T2484] hsr_slave_0: left promiscuous mode
[  238.731877][ T2484] hsr_slave_1: left promiscuous mode
[  238.749949][ T2484] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  238.759953][ T2484] batman_adv: batadv0: Removing interface: batadv_slave_0
[  238.795873][ T2484] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  238.812635][ T2484] batman_adv: batadv0: Removing interface: batadv_slave_1
[  238.857506][ T7796] netlink: 'syz-executor.0': attribute type 3 has an invalid length.
[  238.877944][ T2484] veth1_macvtap: left promiscuous mode
[  238.887666][ T2484] veth0_macvtap: left promiscuous mode
[  238.893694][ T2484] veth1_vlan: left promiscuous mode
[  238.899129][ T2484] veth0_vlan: left promiscuous mode
[  238.964646][ T7802] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[  239.050317][ T7804] sctp: [Deprecated]: syz-executor.1 (pid 7804) Use of int in max_burst socket option.
[  239.050317][ T7804] Use struct sctp_assoc_value instead
[  239.175176][ T7807] delete_channel: no stack
[  239.663893][ T2484] team0 (unregistering): Port device team_slave_1 removed
[  239.714509][ T2484] team0 (unregistering): Port device team_slave_0 removed
[  240.280383][   T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  240.349634][ T7725] chnl_net:caif_netlink_parms(): no params data found
[  240.455514][ T7829] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  240.483766][ T7829] nbd: nbd0 already in use
[  240.547479][ T7833] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  240.703142][ T5132] Bluetooth: hci4: command tx timeout
[  240.786634][ T7725] bridge0: port 1(bridge_slave_0) entered blocking state
[  240.818176][ T7725] bridge0: port 1(bridge_slave_0) entered disabled state
[  240.852995][ T7725] bridge_slave_0: entered allmulticast mode
[  240.872456][ T7725] bridge_slave_0: entered promiscuous mode
[  240.913670][ T7725] bridge0: port 2(bridge_slave_1) entered blocking state
[  240.921297][ T7725] bridge0: port 2(bridge_slave_1) entered disabled state
[  240.952987][ T7725] bridge_slave_1: entered allmulticast mode
[  240.974041][ T7725] bridge_slave_1: entered promiscuous mode
[  241.255215][ T7862] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  241.882451][ T7725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  241.940338][ T7725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  242.054097][ T7725] team0: Port device team_slave_0 added
[  242.070416][ T7864] netlink: 'syz-executor.0': attribute type 5 has an invalid length.
[  242.087535][ T7864] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  242.100854][ T7869] tc_dump_action: action bad kind
[  242.123647][ T7725] team0: Port device team_slave_1 added
[  242.179466][ T7873] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  242.225745][ T7876] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  242.237184][ T7877] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[  242.264272][ T7725] batman_adv: batadv0: Adding interface: batadv_slave_0
[  242.280431][ T7725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  242.302757][ T7879] ebt_limit: overflow, try lower: 0/0
[  242.315616][ T7725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  242.393452][ T7725] batman_adv: batadv0: Adding interface: batadv_slave_1
[  242.400578][ T7725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  242.472361][ T7725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  242.648946][ T7725] hsr_slave_0: entered promiscuous mode
[  242.672941][ T7725] hsr_slave_1: entered promiscuous mode
[  242.680423][ T7889] ebtables: ebtables: counters copy to user failed while replacing table
[  242.783173][ T5132] Bluetooth: hci4: command tx timeout
[  243.173065][ T7915] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  243.498599][ T7725] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  243.527359][ T7725] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  243.535163][ T7931] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.3'.
[  243.555288][ T7725] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  243.583338][ T7725] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  243.843815][ T7935] tun0: tun_chr_ioctl cmd 1074025677
[  243.849428][ T7935] tun0: linktype set to 823
[  244.030805][ T7725] 8021q: adding VLAN 0 to HW filter on device bond0
[  244.110448][ T7725] 8021q: adding VLAN 0 to HW filter on device team0
[  244.159763][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state
[  244.167059][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state
[  244.211630][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state
[  244.218918][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state
[  244.327564][ T7725] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  244.862575][ T5132] Bluetooth: hci4: command tx timeout
[  244.899311][ T7725] 8021q: adding VLAN 0 to HW filter on device batadv0
[  245.010147][ T7974] dummy0: entered promiscuous mode
[  245.027876][ T7974] batadv0: entered promiscuous mode
[  245.180785][ T7725] veth0_vlan: entered promiscuous mode
[  245.228905][ T7725] veth1_vlan: entered promiscuous mode
[  245.436788][ T7725] veth0_macvtap: entered promiscuous mode
[  245.470340][ T7725] veth1_macvtap: entered promiscuous mode
[  245.522779][ T7990] netlink: 'syz-executor.4': attribute type 49 has an invalid length.
[  245.573039][ T7725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  245.586271][ T7725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.599683][ T7725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  245.627961][ T7725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.651641][ T7725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  245.672738][ T7725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.683358][ T7725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  245.694396][ T7725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.727906][ T7725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  245.763155][ T7725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.807897][ T7725] batman_adv: batadv0: Interface activated: batadv_slave_0
[  245.879904][ T7725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  245.895881][ T7725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.908279][ T7725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  245.929878][ T7725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.941542][ T7725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  245.959733][ T7725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.970961][ T7725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  245.991409][ T7725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  246.002946][ T7725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  246.024935][ T7725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  246.046462][ T7725] batman_adv: batadv0: Interface activated: batadv_slave_1
[  246.071232][ T7725] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  246.087207][ T7725] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  246.101516][ T7725] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  246.122321][ T7725] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  246.354837][ T2484] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  246.380252][ T2484] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  246.461924][ T2484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  246.502451][ T2484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  247.025941][ T8024] openvswitch: netlink: IP tunnel attribute has 2 unknown bytes.
[  248.493397][ T8067] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  248.767135][   T51] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.844854][ T8080] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check.
[  249.142714][ T8097] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  249.183097][ T5132] Bluetooth: hci0: command tx timeout
[  249.435487][ T8106] openvswitch: netlink: Message has 4 unknown bytes.
[  249.476932][   T51] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  249.571624][ T5140] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  249.582965][ T5140] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  249.597298][ T5140] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  249.609129][ T5140] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  249.620446][ T5140] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  249.634434][ T5140] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  249.746155][   T51] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  249.788898][ T8112] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  249.921900][   T51] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  250.076738][ T8112] team1: Mode "" not found
[  250.393228][   T51] bridge_slave_1: left allmulticast mode
[  250.425024][   T51] bridge_slave_1: left promiscuous mode
[  250.445307][   T51] bridge0: port 2(bridge_slave_1) entered disabled state
[  250.497891][   T51] bridge_slave_0: left allmulticast mode
[  250.508551][   T51] bridge_slave_0: left promiscuous mode
[  250.522025][   T51] bridge0: port 1(bridge_slave_0) entered disabled state
[  251.272729][ T5132] Bluetooth: hci0: command 0x0c1a tx timeout
[  251.579368][   T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  251.612054][   T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  251.649393][   T51] bond0 (unregistering): Released all slaves
[  251.743529][ T5132] Bluetooth: hci4: command tx timeout
[  252.041122][ T8146] dummy0: entered promiscuous mode
[  252.052976][ T8146] batadv0: entered promiscuous mode
[  252.067282][ T8146] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  252.078435][ T8146] Cannot create hsr debugfs directory
[  252.118475][ T8108] chnl_net:caif_netlink_parms(): no params data found
[  252.211374][   T51] hsr_slave_0: left promiscuous mode
[  252.226458][   T51] hsr_slave_1: left promiscuous mode
[  252.237176][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  252.246980][   T51] batman_adv: batadv0: Removing interface: batadv_slave_0
[  252.268174][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  252.279304][   T51] batman_adv: batadv0: Removing interface: batadv_slave_1
[  252.336620][   T51] veth1_macvtap: left promiscuous mode
[  252.343346][   T51] veth0_macvtap: left promiscuous mode
[  252.349700][   T51] veth1_vlan: left promiscuous mode
[  252.362422][   T51] veth0_vlan: left promiscuous mode
[  252.824585][ T8169] openvswitch: netlink: Message has 4 unknown bytes.
[  253.215529][   T51] team0 (unregistering): Port device team_slave_1 removed
[  253.293264][   T51] team0 (unregistering): Port device team_slave_0 removed
[  253.838765][ T5132] Bluetooth: hci4: command tx timeout
[  254.101916][ T8154] bridge1: the hash_elasticity option has been deprecated and is always 16
[  254.121416][ T8174] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  254.493704][ T8108] bridge0: port 1(bridge_slave_0) entered blocking state
[  254.521090][ T8108] bridge0: port 1(bridge_slave_0) entered disabled state
[  254.536193][ T8108] bridge_slave_0: entered allmulticast mode
[  254.567557][ T8108] bridge_slave_0: entered promiscuous mode
[  254.596102][ T8108] bridge0: port 2(bridge_slave_1) entered blocking state
[  254.612386][ T8108] bridge0: port 2(bridge_slave_1) entered disabled state
[  254.630093][ T8108] bridge_slave_1: entered allmulticast mode
[  254.649427][ T8108] bridge_slave_1: entered promiscuous mode
[  254.757783][ T8108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  254.794274][ T8108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  254.894042][ T8210] bridge1: the hash_elasticity option has been deprecated and is always 16
[  254.958222][ T8108] team0: Port device team_slave_0 added
[  254.975008][ T8108] team0: Port device team_slave_1 added
[  255.077539][ T8108] batman_adv: batadv0: Adding interface: batadv_slave_0
[  255.085819][ T8108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  255.118739][ T8108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  255.133304][ T8108] batman_adv: batadv0: Adding interface: batadv_slave_1
[  255.140316][ T8108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  255.182489][ T8108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  255.475722][ T8108] hsr_slave_0: entered promiscuous mode
[  255.501305][ T8108] hsr_slave_1: entered promiscuous mode
[  255.835386][ T8250] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.1'.
[  255.876449][ T8250] ip6gretap0: entered promiscuous mode
[  255.902476][ T5132] Bluetooth: hci4: command tx timeout
[  255.948412][ T8250] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.1'.
[  256.070965][ T1250] ieee802154 phy0 wpan0: encryption failed: -22
[  256.078058][ T1250] ieee802154 phy1 wpan1: encryption failed: -22
[  256.233406][ T1108] wlan1: Trigger new scan to find an IBSS to join
[  256.284029][ T8264] xt_ecn: cannot match TCP bits for non-tcp packets
[  256.840202][ T8108] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  256.884111][ T8108] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  256.923085][ T8108] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  256.958237][ T8108] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  257.178341][ T8288] xt_policy: output policy not valid in PREROUTING and INPUT
[  257.269306][ T8108] 8021q: adding VLAN 0 to HW filter on device bond0
[  257.372146][ T8108] 8021q: adding VLAN 0 to HW filter on device team0
[  257.414632][   T57] bridge0: port 1(bridge_slave_0) entered blocking state
[  257.421837][   T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[  257.494781][   T57] bridge0: port 2(bridge_slave_1) entered blocking state
[  257.502125][   T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[  257.980478][ T8108] 8021q: adding VLAN 0 to HW filter on device batadv0
[  257.990253][ T5132] Bluetooth: hci4: command tx timeout
[  258.157520][ T8108] veth0_vlan: entered promiscuous mode
[  258.204778][ T8108] veth1_vlan: entered promiscuous mode
[  258.309153][ T8108] veth0_macvtap: entered promiscuous mode
[  258.335585][ T8108] veth1_macvtap: entered promiscuous mode
[  258.392137][ T8108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  258.407844][   T29] audit: type=1804 audit(1718733176.630:23): pid=8326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir576720269/syzkaller.1vCZZV/291/memory.events" dev="sda1" ino=1959 res=1 errno=0
[  258.461576][   T29] audit: type=1804 audit(1718733176.670:24): pid=8326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir576720269/syzkaller.1vCZZV/291/memory.events" dev="sda1" ino=1959 res=1 errno=0
[  258.462301][ T8108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  258.501720][   T29] audit: type=1804 audit(1718733176.670:25): pid=8322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir576720269/syzkaller.1vCZZV/291/memory.events" dev="sda1" ino=1959 res=1 errno=0
[  258.535103][ T8108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  258.556669][ T8108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  258.569240][ T8108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  258.582394][ T8108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  258.593489][ T8108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  258.611083][ T8108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  258.621014][ T8108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  258.632647][ T8108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  258.649194][ T8108] batman_adv: batadv0: Interface activated: batadv_slave_0
[  258.698017][ T8108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  258.720326][ T8108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  258.731034][ T8108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  258.742023][ T8108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  258.767161][ T8108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  258.792634][ T8108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  258.814170][ T8108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  258.831621][ T8108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  258.852468][ T8108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  258.866143][ T8108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  258.880646][ T8108] batman_adv: batadv0: Interface activated: batadv_slave_1
[  258.913927][ T8108] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  258.923729][ T8108] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  258.940169][ T8108] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  258.949570][ T8108] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  259.130588][   T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  259.151845][   T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  259.193031][   T11] wlan1: Trigger new scan to find an IBSS to join
[  259.233106][ T2484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  259.240989][ T2484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  259.342091][ T8346] xt_policy: output policy not valid in PREROUTING and INPUT
[  259.449425][ T8347] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  259.469514][ T8347] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  259.482464][ T8347] batman_adv: batadv0: Removing interface: batadv_slave_0
[  259.511715][ T8347] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  259.541377][ T8347] batman_adv: batadv0: Removing interface: batadv_slave_1
[  259.678365][ T8347] batadv0 (unregistering): left promiscuous mode
[  259.842539][ T8359] tipc: Started in network mode
[  259.847495][ T8359] tipc: Node identity ac1414aa, cluster identity 4711
[  259.874366][ T8359] tipc: Enabled bearer <udp:syz2>, priority 10
[  259.883023][ T8360] tipc: Disabling bearer <udp:syz2>
[  260.083976][ T8366] raw_sendmsg: syz-executor.1 forgot to set AF_INET. Fix it!
[  260.479362][ T8384] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  260.734596][ T8390] team1: Mode "" not found
[  261.707008][ T8422] netlink: 'syz-executor.3': attribute type 27 has an invalid length.
[  261.718492][ T1143] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  262.171173][ T5140] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  262.191461][ T5140] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  262.201364][ T5140] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  262.228254][ T2484] wlan1: Trigger new scan to find an IBSS to join
[  262.238565][ T5140] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  262.252791][ T5140] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  262.262540][ T5140] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  262.724274][ T5132] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  262.734698][ T5132] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  262.748753][ T5132] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  262.758755][ T5132] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  262.768162][ T5132] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  262.775871][ T5132] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  262.918791][ T8439] chnl_net:caif_netlink_parms(): no params data found
[  262.984252][ T8472] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744071562067969)
[  262.995702][ T8472] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647
[  263.180394][ T8439] bridge0: port 1(bridge_slave_0) entered blocking state
[  263.189873][   T51] wlan1: Creating new IBSS network, BSSID 66:ec:04:5c:ab:da
[  263.202499][ T8439] bridge0: port 1(bridge_slave_0) entered disabled state
[  263.211077][ T8439] bridge_slave_0: entered allmulticast mode
[  263.230459][ T8439] bridge_slave_0: entered promiscuous mode
[  263.241126][ T8439] bridge0: port 2(bridge_slave_1) entered blocking state
[  263.248649][ T8439] bridge0: port 2(bridge_slave_1) entered disabled state
[  263.256566][ T8439] bridge_slave_1: entered allmulticast mode
[  263.264913][ T8439] bridge_slave_1: entered promiscuous mode
[  263.356342][ T8485] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'.
[  263.390178][ T8485] unsupported nla_type 8192
[  263.446377][ T1143] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  263.496203][ T8439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  263.631472][ T1143] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  263.664365][ T8439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  263.712637][ T8503] netlink: 'syz-executor.4': attribute type 27 has an invalid length.
[  263.750325][ T8498] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  263.866054][ T8439] team0: Port device team_slave_0 added
[  263.894985][ T1143] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  263.918514][ T8439] team0: Port device team_slave_1 added
[  264.085866][ T8439] batman_adv: batadv0: Adding interface: batadv_slave_0
[  264.106017][ T8439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  264.146304][ T8518] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'.
[  264.158803][ T8439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  264.179897][ T8439] batman_adv: batadv0: Adding interface: batadv_slave_1
[  264.188477][ T8439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  264.230271][ T8439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  264.245713][ T8464] chnl_net:caif_netlink_parms(): no params data found
[  264.258890][ T8522] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  264.385495][ T5140] Bluetooth: hci2: command tx timeout
[  264.509563][ T8439] hsr_slave_0: entered promiscuous mode
[  264.517306][ T8439] hsr_slave_1: entered promiscuous mode
[  264.524075][ T8439] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  264.531777][ T8439] Cannot create hsr debugfs directory
[  264.537716][ T1143] bridge_slave_1: left allmulticast mode
[  264.548554][ T1143] bridge_slave_1: left promiscuous mode
[  264.557608][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state
[  264.567804][ T1143] bridge_slave_0: left allmulticast mode
[  264.579332][ T1143] bridge_slave_0: left promiscuous mode
[  264.585221][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state
[  264.871663][ T5140] Bluetooth: hci4: command tx timeout
[  265.401129][ T1143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  265.416625][ T1143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  265.435910][ T1143] bond0 (unregistering): Released all slaves
[  265.636068][ T8464] bridge0: port 1(bridge_slave_0) entered blocking state
[  265.645907][ T8464] bridge0: port 1(bridge_slave_0) entered disabled state
[  265.663302][ T8464] bridge_slave_0: entered allmulticast mode
[  265.684077][ T8464] bridge_slave_0: entered promiscuous mode
[  265.812592][ T8464] bridge0: port 2(bridge_slave_1) entered blocking state
[  265.832519][ T8464] bridge0: port 2(bridge_slave_1) entered disabled state
[  265.839840][ T8464] bridge_slave_1: entered allmulticast mode
[  265.864230][ T8464] bridge_slave_1: entered promiscuous mode
[  266.057435][ T8464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  266.230633][ T8464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  266.462111][ T8571] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  266.473564][ T5140] Bluetooth: hci2: command tx timeout
[  266.944244][ T5140] Bluetooth: hci4: command tx timeout
[  268.543153][ T5140] Bluetooth: hci2: command tx timeout
[  269.006198][ T1143] hsr_slave_0: left promiscuous mode
[  269.022726][ T5140] Bluetooth: hci4: command tx timeout
[  269.036005][ T1143] hsr_slave_1: left promiscuous mode
[  269.051067][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  269.082709][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_0
[  269.110740][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  269.120073][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_1
[  269.188832][ T1143] veth1_macvtap: left promiscuous mode
[  269.202405][ T1143] veth0_macvtap: left promiscuous mode
[  269.208216][ T1143] veth1_vlan: left promiscuous mode
[  269.232617][ T1143] veth0_vlan: left promiscuous mode
[  270.310571][ T1143] team0 (unregistering): Port device team_slave_1 removed
[  270.356878][ T1143] team0 (unregistering): Port device team_slave_0 removed
[  270.629972][ T5140] Bluetooth: hci2: command tx timeout
[  270.864493][ T8464] team0: Port device team_slave_0 added
[  270.929474][ T8619] hsr0: entered promiscuous mode
[  270.946140][ T8622] hsr_slave_0: left promiscuous mode
[  270.972266][ T8622] hsr_slave_1: left promiscuous mode
[  271.062591][ T8464] team0: Port device team_slave_1 added
[  271.103539][ T5140] Bluetooth: hci4: command tx timeout
[  271.238843][ T8439] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  271.258196][ T8439] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  271.280980][ T8464] batman_adv: batadv0: Adding interface: batadv_slave_0
[  271.302388][ T8464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  271.372779][ T8464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  271.414878][ T8464] batman_adv: batadv0: Adding interface: batadv_slave_1
[  271.421891][ T8464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  271.500324][ T8464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  271.590768][ T8439] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  271.613945][ T8439] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  271.791582][ T8439] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  271.819762][ T8439] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  271.857195][ T8464] hsr_slave_0: entered promiscuous mode
[  271.866667][ T8464] hsr_slave_1: entered promiscuous mode
[  271.946715][ T8439] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  271.962812][ T8439] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  272.128160][ T8673] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  272.336269][ T8681] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  272.408779][ T8684] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'.
[  272.459590][ T8439] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  272.472073][ T8684] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[  272.540429][ T8439] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  272.585651][ T8439] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  272.651919][ T8439] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  273.366339][ T8706] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
[  273.512958][ T5140] Bluetooth: hci3: command 0x0406 tx timeout
[  273.688347][ T8715] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
[  274.623744][ T5140] Bluetooth: hci4: command tx timeout
[  274.694190][ T8726] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  274.721007][ T8439] 8021q: adding VLAN 0 to HW filter on device bond0
[  274.759914][ T8464] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  274.778701][ T8464] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  274.796744][ T8464] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  274.832485][ T8464] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  274.891392][ T8439] 8021q: adding VLAN 0 to HW filter on device team0
[  274.977367][ T5176] bridge0: port 1(bridge_slave_0) entered blocking state
[  274.984667][ T5176] bridge0: port 1(bridge_slave_0) entered forwarding state
[  275.000887][ T8739] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  275.059058][ T8742] Bluetooth: MGMT ver 1.22
[  275.070210][ T5176] bridge0: port 2(bridge_slave_1) entered blocking state
[  275.077664][ T5176] bridge0: port 2(bridge_slave_1) entered forwarding state
[  275.470802][ T8464] 8021q: adding VLAN 0 to HW filter on device bond0
[  275.555897][ T8464] 8021q: adding VLAN 0 to HW filter on device team0
[  275.587377][ T5088] bridge0: port 1(bridge_slave_0) entered blocking state
[  275.594675][ T5088] bridge0: port 1(bridge_slave_0) entered forwarding state
[  275.685337][ T5088] bridge0: port 2(bridge_slave_1) entered blocking state
[  275.692695][ T5088] bridge0: port 2(bridge_slave_1) entered forwarding state
[  275.886180][ T8439] 8021q: adding VLAN 0 to HW filter on device batadv0
[  276.048978][ T8439] veth0_vlan: entered promiscuous mode
[  276.106426][ T8439] veth1_vlan: entered promiscuous mode
[  276.210529][ T8439] veth0_macvtap: entered promiscuous mode
[  276.270686][ T8439] veth1_macvtap: entered promiscuous mode
[  276.357297][ T8439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  276.368287][ T8439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  276.378981][ T8439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  276.402283][ T8439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  276.418733][ T8439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  276.441531][ T8439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  276.463901][ T8439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  276.483063][ T8439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  276.502070][ T8439] batman_adv: batadv0: Interface activated: batadv_slave_0
[  276.519131][ T8800] netlink: 11562 bytes leftover after parsing attributes in process `syz-executor.0'.
[  276.603961][ T8439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  276.644647][ T8802] sctp: [Deprecated]: syz-executor.4 (pid 8802) Use of struct sctp_assoc_value in delayed_ack socket option.
[  276.644647][ T8802] Use struct sctp_sack_info instead
[  276.661591][ T8439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  276.687852][ T8439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  276.702767][ T5140] Bluetooth: hci4: command 0x0405 tx timeout
[  276.716031][ T8439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  276.728634][ T8439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  276.740288][ T8439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  276.751064][ T8439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  276.762499][ T8439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  276.779819][ T8439] batman_adv: batadv0: Interface activated: batadv_slave_1
[  276.809327][ T8464] 8021q: adding VLAN 0 to HW filter on device batadv0
[  276.866774][ T8439] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  276.890709][ T8439] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  276.913993][ T8439] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  276.923101][ T8439] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  277.165635][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  277.186126][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  277.201476][ T8464] veth0_vlan: entered promiscuous mode
[  277.278758][ T8464] veth1_vlan: entered promiscuous mode
[  277.354208][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  277.363394][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  277.455975][ T8464] veth0_macvtap: entered promiscuous mode
[  277.497499][ T8464] veth1_macvtap: entered promiscuous mode
[  277.580955][ T8464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  277.610623][ T8464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  277.630932][ T8464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  277.667397][ T8464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  277.698599][ T8464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  277.739140][ T8464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  277.762229][ T8464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  277.782252][ T8464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  277.806283][ T8464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  277.847737][ T8464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  277.857763][ T8849] xt_cgroup: path and classid specified
[  277.886738][ T8464] batman_adv: batadv0: Interface activated: batadv_slave_0
[  277.891012][ T8839] Bluetooth: hci3: invalid length 0, exp 2 for type 29
[  277.920002][ T8853] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.1'.
[  277.931952][ T8857] netlink: zone id is out of range
[  277.952015][ T8857] netlink: zone id is out of range
[  277.993067][ T8853] ip6gretap0: entered promiscuous mode
[  277.999225][ T8857] netlink: zone id is out of range
[  278.009700][ T8853] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'.
[  278.012807][ T8857] netlink: zone id is out of range
[  278.036132][ T8464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  278.073114][ T8464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  278.083857][ T8857] netlink: zone id is out of range
[  278.089068][ T8857] netlink: zone id is out of range
[  278.098035][ T8464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  278.109334][ T8857] netlink: zone id is out of range
[  278.114653][ T8464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  278.125166][ T8857] netlink: zone id is out of range
[  278.130882][ T8857] netlink: zone id is out of range
[  278.136716][ T8464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  278.152435][ T8857] netlink: zone id is out of range
[  278.157725][ T8464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  278.185320][ T8464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  278.212582][ T8464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  278.239765][ T8464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  278.250583][ T8464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  278.291892][ T8464] batman_adv: batadv0: Interface activated: batadv_slave_1
[  278.353719][ T8464] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  278.371887][ T8464] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  278.380941][ T8464] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  278.390904][ T8464] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  278.660249][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  278.688178][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  278.750002][   T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  278.762912][   T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  278.845560][ T8889] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.3'.
[  278.880588][ T8889] ip6gretap0: entered promiscuous mode
[  279.043058][ T8889] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.3'.
[  279.250833][ T8909] netlink: 11562 bytes leftover after parsing attributes in process `syz-executor.3'.
[  279.294467][ T8915] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'.
[  279.818383][ T8938] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'.
[  279.826902][ T1143] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  279.945628][ T8942] netlink: 11562 bytes leftover after parsing attributes in process `syz-executor.3'.
[  279.983686][   T29] audit: type=1804 audit(1718733198.210:26): pid=8943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3415707493/syzkaller.CpzoiJ/222/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0
[  280.064970][ T8948] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  280.082974][   T29] audit: type=1804 audit(1718733198.230:27): pid=8943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3415707493/syzkaller.CpzoiJ/222/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0
[  280.119449][ T8950] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'.
[  280.172365][   T29] audit: type=1804 audit(1718733198.230:28): pid=8943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3415707493/syzkaller.CpzoiJ/222/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0
[  280.242917][ T8953] netlink: 'syz-executor.1': attribute type 11 has an invalid length.
[  280.390228][ T1143] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  280.615377][ T1143] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  280.822007][ T5137] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  280.830534][ T1143] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  280.860134][ T5137] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  280.870244][ T5137] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  280.881066][ T5137] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  280.894525][ T5137] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  280.902227][ T5137] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  281.362626][ T1143] bridge_slave_1: left allmulticast mode
[  281.372334][ T1143] bridge_slave_1: left promiscuous mode
[  281.378285][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state
[  281.450750][ T1143] bridge_slave_0: left allmulticast mode
[  281.467448][ T1143] bridge_slave_0: left promiscuous mode
[  281.484199][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state
[  282.195982][ T1143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  282.208297][ T1143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  282.219966][ T1143] bond0 (unregistering): Released all slaves
[  282.386138][ T5137] Bluetooth: hci2: command tx timeout
[  282.942867][ T5137] Bluetooth: hci4: command tx timeout
[  283.084664][ T9029] net_ratelimit: 10 callbacks suppressed
[  283.084688][ T9029] openvswitch: netlink: Message has 4 unknown bytes.
[  284.468256][ T5137] Bluetooth: hci2: command 0x0405 tx timeout
[  285.023498][ T5132] Bluetooth: hci4: command tx timeout
[  285.828156][ T8963] chnl_net:caif_netlink_parms(): no params data found
[  285.894411][ T1143] hsr_slave_0: left promiscuous mode
[  285.920609][ T1143] hsr_slave_1: left promiscuous mode
[  285.945644][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  285.954174][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_0
[  285.965171][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  285.978150][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_1
[  286.015467][ T1143] veth1_macvtap: left promiscuous mode
[  286.021339][ T1143] veth0_macvtap: left promiscuous mode
[  286.027373][ T1143] veth1_vlan: left promiscuous mode
[  286.037497][ T1143] veth0_vlan: left promiscuous mode
[  286.060391][ T9063] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[  286.070989][ T9063] block nbd0: NBD_DISCONNECT
[  286.076668][ T9063] block nbd0: Send disconnect failed -89
[  286.084278][ T9063] block nbd0: Disconnected due to user request.
[  286.091530][ T9063] block nbd0: shutting down sockets
[  286.774015][ T1143] team0 (unregistering): Port device team_slave_1 removed
[  286.841076][ T1143] team0 (unregistering): Port device team_slave_0 removed
[  287.104414][   T53] Bluetooth: hci4: command tx timeout
[  287.767248][ T8963] bridge0: port 1(bridge_slave_0) entered blocking state
[  287.796243][ T8963] bridge0: port 1(bridge_slave_0) entered disabled state
[  287.815935][ T8963] bridge_slave_0: entered allmulticast mode
[  287.844130][ T8963] bridge_slave_0: entered promiscuous mode
[  287.872486][ T9092] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  287.935151][ T8963] bridge0: port 2(bridge_slave_1) entered blocking state
[  287.952895][ T8963] bridge0: port 2(bridge_slave_1) entered disabled state
[  287.970425][ T8963] bridge_slave_1: entered allmulticast mode
[  287.978785][ T8963] bridge_slave_1: entered promiscuous mode
[  287.995766][ T9099] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'.
[  288.106455][ T8963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  288.165606][ T8963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  288.387633][ T8963] team0: Port device team_slave_0 added
[  288.430072][ T8963] team0: Port device team_slave_1 added
[  288.498223][ T9116] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[  288.610767][ T8963] batman_adv: batadv0: Adding interface: batadv_slave_0
[  288.643004][ T8963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  288.734482][ T8963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  288.761033][ T8963] batman_adv: batadv0: Adding interface: batadv_slave_1
[  288.772382][ T8963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  288.799937][ T8963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  288.831458][ T9116] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'.
[  288.838891][ T9129] xt_cgroup: path and classid specified
[  288.910521][ T9129] netlink: zone id is out of range
[  288.918486][ T9129] netlink: zone id is out of range
[  288.921063][ T8963] hsr_slave_0: entered promiscuous mode
[  288.925653][ T9129] netlink: zone id is out of range
[  288.938983][ T9129] netlink: zone id is out of range
[  288.946140][ T9129] netlink: zone id is out of range
[  288.953552][ T8963] hsr_slave_1: entered promiscuous mode
[  288.960997][ T9129] netlink: zone id is out of range
[  288.976293][ T9129] netlink: zone id is out of range
[  288.978240][ T1143] bridge_slave_1: left allmulticast mode
[  288.981769][ T9129] netlink: zone id is out of range
[  288.993334][ T9129] netlink: zone id is out of range
[  288.998579][ T9129] netlink: zone id is out of range
[  289.025228][ T1143] bridge_slave_1: left promiscuous mode
[  289.057609][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state
[  289.078485][ T1143] bridge_slave_0: left allmulticast mode
[  289.084403][ T1143] bridge_slave_0: left promiscuous mode
[  289.090220][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state
[  289.184795][   T53] Bluetooth: hci4: command tx timeout
[  289.770407][ T1143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  289.783035][ T1143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  289.796303][ T1143] bond0 (unregistering): Released all slaves
[  290.173432][ T9160] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  290.344493][ T9164] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  290.500852][ T1143] hsr_slave_0: left promiscuous mode
[  290.521819][ T1143] hsr_slave_1: left promiscuous mode
[  290.560134][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  290.573571][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_0
[  290.587587][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  290.595237][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_1
[  290.634102][ T1143] veth1_macvtap: left promiscuous mode
[  290.644794][ T1143] veth1_vlan: left promiscuous mode
[  290.660043][ T1143] veth0_vlan: left promiscuous mode
[  290.841383][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880238f8400: rx timeout, send abort
[  290.852990][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880238f8400: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session.
[  291.061439][ T1143] team0 (unregistering): Port device virt_wifi0 removed
[  291.325894][ T1143] team0 (unregistering): Port device team_slave_1 removed
[  291.376939][ T1143] team0 (unregistering): Port device team_slave_0 removed
[  291.431849][   T53] Bluetooth: hci0: command tx timeout
[  291.893577][ T9164] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[  292.136899][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880238f8c00: rx timeout, send abort
[  292.145796][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880238f8c00: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session.
[  292.168561][ T9189] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  292.326338][ T8963] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  292.374214][ T8963] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  292.465249][ T8963] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  292.499074][ T9198] netlink: 'syz-executor.4': attribute type 30 has an invalid length.
[  292.518861][ T8963] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  292.751606][ T9209] ¡: renamed from team0 (while UP)
[  292.953832][ T8963] 8021q: adding VLAN 0 to HW filter on device bond0
[  293.025044][ T8963] 8021q: adding VLAN 0 to HW filter on device team0
[  293.052867][ T5174] bridge0: port 1(bridge_slave_0) entered blocking state
[  293.060120][ T5174] bridge0: port 1(bridge_slave_0) entered forwarding state
[  293.088581][ T5174] bridge0: port 2(bridge_slave_1) entered blocking state
[  293.095871][ T5174] bridge0: port 2(bridge_slave_1) entered forwarding state
[  293.215360][   T59] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  293.502449][   T53] Bluetooth: hci0: command tx timeout
[  293.821441][ T8963] 8021q: adding VLAN 0 to HW filter on device batadv0
[  293.970353][ T8963] veth0_vlan: entered promiscuous mode
[  294.021468][ T8963] veth1_vlan: entered promiscuous mode
[  294.139759][ T8963] veth0_macvtap: entered promiscuous mode
[  294.188272][ T8963] veth1_macvtap: entered promiscuous mode
[  294.257693][ T8963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  294.271166][ T8963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  294.291174][ T8963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  294.309004][ T8963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  294.321594][ T8963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  294.343085][ T8963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  294.353456][ T8963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  294.368277][ T8963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  294.389669][ T8963] batman_adv: batadv0: Interface activated: batadv_slave_0
[  294.401733][ T9266] netlink: 'syz-executor.4': attribute type 30 has an invalid length.
[  294.658300][ T8963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  294.679104][ T8963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  294.723231][ T9286] fscrypt (sda1, inode 1961): Unsupported encryption modes (contents 0, filenames 0)
[  294.733558][ T8963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  294.752541][ T8963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  294.764792][ T8963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  294.779056][ T8963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  294.808293][ T8963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  294.836351][ T8963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  294.863903][ T8963] batman_adv: batadv0: Interface activated: batadv_slave_1
[  294.880301][ T9283] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[  294.903454][ T8963] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  294.931535][ T8963] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  294.960273][ T8963] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  294.970170][ T8963] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  295.539784][ T9272] infiniband syz2: set active
[  295.582367][ T9272] infiniband syz2: added veth1_to_bridge
[  295.601063][ T9272] syz2: rxe_create_cq: returned err = -12
[  295.625619][ T9272] infiniband syz2: Couldn't create ib_mad CQ
[  295.632112][ T9272] infiniband syz2: Couldn't open port 1
[  295.738659][ T9310] netlink: 'syz-executor.4': attribute type 30 has an invalid length.
[  295.756712][ T9272] RDS/IB: syz2: added
[  295.767219][ T9272] smc: adding ib device syz2 with port count 1
[  295.781482][ T9272] smc:    ib device syz2 port 1 has pnetid 
[  295.892902][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  295.900795][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  296.032044][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  296.057101][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  296.101907][ T9319] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[  296.266568][ T9325] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'.
[  296.493691][ T9328] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'.
[  296.551356][ T9330] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.4'.
[  296.562009][ T9330] bridge_slave_1: left allmulticast mode
[  296.569145][ T9330] bridge_slave_1: left promiscuous mode
[  296.576792][ T9330] bridge0: port 2(bridge_slave_1) entered disabled state
[  296.593595][ T9330] bridge_slave_0: left allmulticast mode
[  296.599434][ T9330] bridge_slave_0: left promiscuous mode
[  296.636723][ T9330] bridge0: port 1(bridge_slave_0) entered disabled state
[  297.370171][ T9359] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  297.487894][ T9360] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  299.010512][ T9396] pim6reg: entered allmulticast mode
[  299.301637][ T5132] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  299.312855][ T5132] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  299.321509][ T5132] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  299.335760][ T5132] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  299.344810][ T5132] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  299.354752][ T5132] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  299.813585][   T59] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  299.930310][ T9424] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[  299.979725][ T9424] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  300.019442][ T9431] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[  300.052223][ T9431] netlink: 203156 bytes leftover after parsing attributes in process `syz-executor.0'.
[  300.117574][   T59] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.184465][ T9437] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  300.244154][   T59] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.293276][ T9437] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[  300.426618][   T59] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.668293][   T59] bridge_slave_1: left allmulticast mode
[  300.699164][   T59] bridge_slave_1: left promiscuous mode
[  300.706383][   T59] bridge0: port 2(bridge_slave_1) entered disabled state
[  300.730663][   T59] bridge_slave_0: left allmulticast mode
[  300.742375][   T59] bridge_slave_0: left promiscuous mode
[  300.748536][   T59] bridge0: port 1(bridge_slave_0) entered disabled state
[  300.813874][ T9463] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  300.965722][ T9470] net_ratelimit: 10 callbacks suppressed
[  300.965746][ T9470] openvswitch: netlink: EtherType 0 is less than min 600
[  301.359905][   T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  301.372784][   T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  301.385800][   T59] bond0 (unregistering): Released all slaves
[  301.403405][ T9463] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'.
[  301.415022][ T9467] netlink: 'syz-executor.1': attribute type 10 has an invalid length.
[  301.432366][   T53] Bluetooth: hci4: command tx timeout
[  301.487093][ T9467] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  301.740622][ T9481] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'.
[  302.054473][ T9490] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'.
[  302.074803][ T9407] chnl_net:caif_netlink_parms(): no params data found
[  302.330175][ T9500] ieee802154 phy0 wpan0: encryption failed: -22
[  302.492428][ T9496] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  302.576626][ T9503] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[  302.610902][   T59] hsr_slave_0: left promiscuous mode
[  302.624457][   T59] hsr_slave_1: left promiscuous mode
[  302.667616][   T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  302.682468][   T59] batman_adv: batadv0: Removing interface: batadv_slave_0
[  302.711696][   T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  302.729721][   T59] batman_adv: batadv0: Removing interface: batadv_slave_1
[  302.811732][   T59] veth1_macvtap: left promiscuous mode
[  302.828005][   T59] veth0_macvtap: left promiscuous mode
[  302.839281][   T59] veth1_vlan: left promiscuous mode
[  302.852141][   T59] veth0_vlan: left promiscuous mode
[  303.503475][   T53] Bluetooth: hci4: command tx timeout
[  303.649871][   T59] team0 (unregistering): Port device team_slave_1 removed
[  303.711216][   T59] team0 (unregistering): Port device team_slave_0 removed
[  304.462967][ T9530] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  304.672971][ T9550] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[  304.681245][ T9550] netlink: 203156 bytes leftover after parsing attributes in process `syz-executor.0'.
[  304.720979][ T9407] bridge0: port 1(bridge_slave_0) entered blocking state
[  304.748184][ T9407] bridge0: port 1(bridge_slave_0) entered disabled state
[  304.759396][ T9407] bridge_slave_0: entered allmulticast mode
[  304.770691][ T9407] bridge_slave_0: entered promiscuous mode
[  304.791870][ T9550] sysfs: cannot create duplicate filename '/class/ieee80211/ü!'
[  304.813555][ T9550] CPU: 0 PID: 9550 Comm: syz-executor.0 Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0
[  304.824058][ T9550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  304.834162][ T9550] Call Trace:
[  304.837460][ T9550]  <TASK>
[  304.840410][ T9550]  dump_stack_lvl+0x241/0x360
[  304.845144][ T9550]  ? __pfx_dump_stack_lvl+0x10/0x10
[  304.850357][ T9550]  ? __pfx__printk+0x10/0x10
[  304.854968][ T9550]  ? sysfs_warn_dup+0x51/0xa0
[  304.859670][ T9550]  ? kmalloc_trace_noprof+0x19c/0x2c0
[  304.865073][ T9550]  sysfs_warn_dup+0x8e/0xa0
[  304.869622][ T9550]  sysfs_do_create_link_sd+0xbe/0x110
[  304.875027][ T9550]  device_add_class_symlinks+0x1c5/0x250
[  304.880695][ T9550]  device_add+0x553/0xbf0
[  304.885066][ T9550]  wiphy_register+0x1d3f/0x2b30
[  304.889970][ T9550]  ? __pfx_wiphy_register+0x10/0x10
[  304.895202][ T9550]  ? minstrel_ht_alloc+0x72b/0x860
[  304.900351][ T9550]  ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620
[  304.906530][ T9550]  ieee80211_register_hw+0x3098/0x3d80
[  304.912032][ T9550]  ? ieee80211_register_hw+0x1161/0x3d80
[  304.917707][ T9550]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  304.923548][ T9550]  ? __asan_memset+0x23/0x50
[  304.928181][ T9550]  ? __hrtimer_init+0x170/0x250
[  304.933073][ T9550]  mac80211_hwsim_new_radio+0x2597/0x44c0
[  304.938843][ T9550]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  304.944945][ T9550]  ? kmalloc_node_track_caller_noprof+0x242/0x440
[  304.951372][ T9550]  ? kstrndup+0x5c/0xb0
[  304.955545][ T9550]  ? __asan_memcpy+0x40/0x70
[  304.960153][ T9550]  hwsim_new_radio_nl+0xe4c/0x21d0
[  304.965314][ T9550]  ? __pfx___nla_validate_parse+0x10/0x10
[  304.971056][ T9550]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  304.976660][ T9550]  ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290
[  304.983014][ T9550]  genl_rcv_msg+0xb14/0xec0
[  304.987529][ T9550]  ? mark_lock+0x9a/0x350
[  304.991883][ T9550]  ? __pfx_genl_rcv_msg+0x10/0x10
[  304.996968][ T9550]  ? __pfx_lock_acquire+0x10/0x10
[  305.002016][ T9550]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  305.007583][ T9550]  ? __pfx___might_resched+0x10/0x10
[  305.012899][ T9550]  netlink_rcv_skb+0x1e3/0x430
[  305.017686][ T9550]  ? __pfx_genl_rcv_msg+0x10/0x10
[  305.022726][ T9550]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  305.028056][ T9550]  ? __netlink_deliver_tap+0x77e/0x7c0
[  305.033549][ T9550]  genl_rcv+0x28/0x40
[  305.037542][ T9550]  netlink_unicast+0x7ea/0x980
[  305.042333][ T9550]  ? __pfx_netlink_unicast+0x10/0x10
[  305.047631][ T9550]  ? __virt_addr_valid+0x183/0x520
[  305.052770][ T9550]  ? __check_object_size+0x49c/0x900
[  305.058067][ T9550]  ? bpf_lsm_netlink_send+0x9/0x10
[  305.063209][ T9550]  netlink_sendmsg+0x8db/0xcb0
[  305.068006][ T9550]  ? __pfx_netlink_sendmsg+0x10/0x10
[  305.073314][ T9550]  ? __import_iovec+0x536/0x820
[  305.078182][ T9550]  ? aa_sock_msg_perm+0x91/0x160
[  305.083135][ T9550]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  305.088425][ T9550]  ? security_socket_sendmsg+0x87/0xb0
[  305.093923][ T9550]  ? __pfx_netlink_sendmsg+0x10/0x10
[  305.099229][ T9550]  __sock_sendmsg+0x221/0x270
[  305.103934][ T9550]  ____sys_sendmsg+0x525/0x7d0
[  305.108720][ T9550]  ? __pfx_____sys_sendmsg+0x10/0x10
[  305.114038][ T9550]  __sys_sendmsg+0x2b0/0x3a0
[  305.118666][ T9550]  ? __pfx___sys_sendmsg+0x10/0x10
[  305.123838][ T9550]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  305.130182][ T9550]  ? do_syscall_64+0x100/0x230
[  305.134962][ T9550]  ? do_syscall_64+0xb6/0x230
[  305.139654][ T9550]  do_syscall_64+0xf3/0x230
[  305.144172][ T9550]  ? clear_bhb_loop+0x35/0x90
[  305.148867][ T9550]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  305.154790][ T9550] RIP: 0033:0x7f3ca0a7cf29
[  305.159226][ T9550] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  305.178849][ T9550] RSP: 002b:00007f3ca17e20c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  305.187289][ T9550] RAX: ffffffffffffffda RBX: 00007f3ca0bb3f80 RCX: 00007f3ca0a7cf29
[  305.195291][ T9550] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003
[  305.203286][ T9550] RBP: 00007f3ca0aec074 R08: 0000000000000000 R09: 0000000000000000
[  305.211282][ T9550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  305.219389][ T9550] R13: 000000000000000b R14: 00007f3ca0bb3f80 R15: 00007ffc507e7848
[  305.227394][ T9550]  </TASK>
[  305.280291][ T9407] bridge0: port 2(bridge_slave_1) entered blocking state
[  305.291494][ T9407] bridge0: port 2(bridge_slave_1) entered disabled state
[  305.308849][ T9407] bridge_slave_1: entered allmulticast mode
[  305.316797][ T9407] bridge_slave_1: entered promiscuous mode
[  305.474819][ T9407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  305.518553][ T9407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  305.582533][   T53] Bluetooth: hci4: command tx timeout
[  305.695213][ T9576] netlink: 'syz-executor.1': attribute type 21 has an invalid length.
[  305.722489][ T9576] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'.
[  305.765595][ T9407] team0: Port device team_slave_0 added
[  305.775938][ T9407] team0: Port device team_slave_1 added
[  305.960951][ T9589] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  306.003232][ T9407] batman_adv: batadv0: Adding interface: batadv_slave_0
[  306.015338][ T9407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  306.054497][ T9407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  306.068155][ T9407] batman_adv: batadv0: Adding interface: batadv_slave_1
[  306.076253][ T9407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  306.108189][ T9407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  306.211331][ T9595] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  306.228708][ T9407] hsr_slave_0: entered promiscuous mode
[  306.250072][ T9407] hsr_slave_1: entered promiscuous mode
[  306.496642][ T9612] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'.
[  306.714103][ T9623] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  307.031759][ T9639] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  307.042843][ T1143] bond0: (slave bond_slave_0): interface is now down
[  307.050133][ T1143] bond0: (slave bond_slave_1): interface is now down
[  307.094772][ T1143] bond0: now running without any active interface!
[  307.307009][ T9646] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'.
[  307.397402][ T9407] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  307.449491][ T9407] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  307.480595][ T9407] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  307.498466][ T9655] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  307.517124][ T9407] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  307.529290][ T9655] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
[  307.662389][   T53] Bluetooth: hci4: command tx timeout
[  307.723602][ T9654] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[  307.913071][ T9407] 8021q: adding VLAN 0 to HW filter on device bond0
[  307.987054][   T11] ------------[ cut here ]------------
[  307.993131][   T11] WARNING: CPU: 0 PID: 11 at net/wireless/sme.c:846 __cfg80211_connect_result+0x19ea/0x21d0
[  308.003463][   T11] Modules linked in:
[  308.007411][   T11] CPU: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0
[  308.016335][ T9407] 8021q: adding VLAN 0 to HW filter on device team0
[  308.017650][   T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  308.034367][   T11] Workqueue: cfg80211 cfg80211_event_work
[  308.040384][   T11] RIP: 0010:__cfg80211_connect_result+0x19ea/0x21d0
[  308.047123][   T11] Code: a4 00 89 c3 31 ff 89 c6 e8 e3 87 b2 f6 85 db 74 29 e8 aa b3 98 f6 84 c0 74 27 e8 91 83 b2 f6 e9 84 00 00 00 e8 87 83 b2 f6 90 <0f> 0b 90 4c 89 ff 4c 89 f6 e8 68 23 00 00 eb 91 e8 71 83 b2 f6 eb
[  308.067516][   T11] RSP: 0018:ffffc900001079e0 EFLAGS: 00010293
[  308.074247][   T11] RAX: ffffffff8ae3a309 RBX: 0000000000000000 RCX: ffff888017283c00
2024/06/18 17:53:46 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF
[  308.082639][   T11] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  308.090670][   T11] RBP: ffffc90000107b00 R08: ffffffff8ae39ed9 R09: 1ffffffff25f6abd
[  308.098784][   T11] R10: dffffc0000000000 R11: fffffbfff25f6abe R12: ffff888063cf3898
[  308.106976][   T11] R13: dffffc0000000000 R14: ffff888063cf3818 R15: ffff8880622c4000
[  308.115060][   T11] FS:  0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000
[  308.124123][   T11] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  308.130762][   T11] CR2: 0000000020002280 CR3: 0000000064394000 CR4: 00000000003506f0
[  308.138873][   T11] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  308.147162][   T11] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  308.155242][   T11] Call Trace:
[  308.158566][   T11]  <TASK>
[  308.161532][   T11]  ? __warn+0x163/0x4e0
[  308.166405][   T11]  ? __cfg80211_connect_result+0x19ea/0x21d0
[  308.172993][   T11]  ? report_bug+0x2b3/0x500
[  308.177560][   T11]  ? __cfg80211_connect_result+0x19ea/0x21d0
[  308.183717][   T11]  ? handle_bug+0x3e/0x70
[  308.188104][   T11]  ? exc_invalid_op+0x1a/0x50
[  308.193009][   T11]  ? asm_exc_invalid_op+0x1a/0x20
[  308.198098][   T11]  ? __cfg80211_connect_result+0x15b9/0x21d0
[  308.204220][   T11]  ? __cfg80211_connect_result+0x19e9/0x21d0
[  308.210260][   T11]  ? __cfg80211_connect_result+0x19ea/0x21d0
[  308.216375][   T11]  ? __pfx___cfg80211_connect_result+0x10/0x10
[  308.222751][   T11]  ? lockdep_hardirqs_on+0x99/0x150
[  308.228013][   T11]  cfg80211_process_wdev_events+0x356/0x510
[  308.234026][   T11]  cfg80211_process_rdev_events+0xac/0x110
[  308.239984][   T11]  ? process_scheduled_works+0x945/0x1830
[  308.245964][   T11]  cfg80211_event_work+0x2f/0x40
[  308.250968][   T11]  process_scheduled_works+0xa2c/0x1830
[  308.256674][   T11]  ? __pfx_process_scheduled_works+0x10/0x10
[  308.262791][   T11]  ? assign_work+0x364/0x3d0
[  308.268022][   T11]  worker_thread+0x86d/0xd70
[  308.273283][   T11]  ? __kthread_parkme+0x169/0x1d0
[  308.278383][   T11]  ? __pfx_worker_thread+0x10/0x10
[  308.283643][   T11]  kthread+0x2f0/0x390
[  308.287777][   T11]  ? __pfx_worker_thread+0x10/0x10
[  308.293024][   T11]  ? __pfx_kthread+0x10/0x10
[  308.297662][   T11]  ret_from_fork+0x4b/0x80
[  308.302355][   T11]  ? __pfx_kthread+0x10/0x10
[  308.307004][   T11]  ret_from_fork_asm+0x1a/0x30
[  308.311855][   T11]  </TASK>
[  308.315031][   T11] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  308.322430][   T11] CPU: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0
[  308.332555][   T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  308.342645][   T11] Workqueue: cfg80211 cfg80211_event_work
[  308.348418][   T11] Call Trace:
[  308.351724][   T11]  <TASK>
[  308.354685][   T11]  dump_stack_lvl+0x241/0x360
[  308.359402][   T11]  ? __pfx_dump_stack_lvl+0x10/0x10
[  308.364648][   T11]  ? __pfx__printk+0x10/0x10
[  308.369305][   T11]  ? vscnprintf+0x5d/0x90
[  308.373704][   T11]  panic+0x349/0x860
[  308.377656][   T11]  ? __warn+0x172/0x4e0
[  308.381868][   T11]  ? __pfx_panic+0x10/0x10
[  308.386440][   T11]  ? ret_from_fork_asm+0x1a/0x30
[  308.391448][   T11]  __warn+0x346/0x4e0
[  308.395505][   T11]  ? __cfg80211_connect_result+0x19ea/0x21d0
[  308.401537][   T11]  report_bug+0x2b3/0x500
[  308.405913][   T11]  ? __cfg80211_connect_result+0x19ea/0x21d0
[  308.411950][   T11]  handle_bug+0x3e/0x70
[  308.416182][   T11]  exc_invalid_op+0x1a/0x50
[  308.420722][   T11]  asm_exc_invalid_op+0x1a/0x20
[  308.425607][   T11] RIP: 0010:__cfg80211_connect_result+0x19ea/0x21d0
[  308.432325][   T11] Code: a4 00 89 c3 31 ff 89 c6 e8 e3 87 b2 f6 85 db 74 29 e8 aa b3 98 f6 84 c0 74 27 e8 91 83 b2 f6 e9 84 00 00 00 e8 87 83 b2 f6 90 <0f> 0b 90 4c 89 ff 4c 89 f6 e8 68 23 00 00 eb 91 e8 71 83 b2 f6 eb
[  308.451977][   T11] RSP: 0018:ffffc900001079e0 EFLAGS: 00010293
[  308.458092][   T11] RAX: ffffffff8ae3a309 RBX: 0000000000000000 RCX: ffff888017283c00
[  308.466116][   T11] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  308.474132][   T11] RBP: ffffc90000107b00 R08: ffffffff8ae39ed9 R09: 1ffffffff25f6abd
[  308.482147][   T11] R10: dffffc0000000000 R11: fffffbfff25f6abe R12: ffff888063cf3898
[  308.490151][   T11] R13: dffffc0000000000 R14: ffff888063cf3818 R15: ffff8880622c4000
[  308.498234][   T11]  ? __cfg80211_connect_result+0x15b9/0x21d0
[  308.504236][   T11]  ? __cfg80211_connect_result+0x19e9/0x21d0
[  308.510254][   T11]  ? __pfx___cfg80211_connect_result+0x10/0x10
[  308.516429][   T11]  ? lockdep_hardirqs_on+0x99/0x150
[  308.521673][   T11]  cfg80211_process_wdev_events+0x356/0x510
[  308.527591][   T11]  cfg80211_process_rdev_events+0xac/0x110
[  308.533410][   T11]  ? process_scheduled_works+0x945/0x1830
[  308.539144][   T11]  cfg80211_event_work+0x2f/0x40
[  308.544101][   T11]  process_scheduled_works+0xa2c/0x1830
[  308.549681][   T11]  ? __pfx_process_scheduled_works+0x10/0x10
[  308.555682][   T11]  ? assign_work+0x364/0x3d0
[  308.560284][   T11]  worker_thread+0x86d/0xd70
[  308.564897][   T11]  ? __kthread_parkme+0x169/0x1d0
[  308.569935][   T11]  ? __pfx_worker_thread+0x10/0x10
[  308.575064][   T11]  kthread+0x2f0/0x390
[  308.579152][   T11]  ? __pfx_worker_thread+0x10/0x10
[  308.584273][   T11]  ? __pfx_kthread+0x10/0x10
[  308.588876][   T11]  ret_from_fork+0x4b/0x80
[  308.593309][   T11]  ? __pfx_kthread+0x10/0x10
[  308.597912][   T11]  ret_from_fork_asm+0x1a/0x30
[  308.602725][   T11]  </TASK>
[  308.606087][   T11] Kernel Offset: disabled
[  308.610512][   T11] Rebooting in 86400 seconds..