last executing test programs:

34.695742453s ago: executing program 2:
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000180))
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000000", 0x8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000700)={0x3, &(0x7f0000000000)=[{0x50}, {0x20}, {0x6}]}, 0x10)
sendmmsg$unix(r1, &(0x7f0000009780)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e2", 0x1}], 0x1}}], 0x1, 0x0)
unshare(0x4000000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000230000010000000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x21}, 0x90)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8)
close(r3)
r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e00000004000280080004"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0)
r5 = socket(0x10, 0x80002, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000400)=@mangle={'mangle\x00', 0x44, 0x6, 0x390, 0x98, 0x0, 0x98, 0x0, 0x130, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@remote, @multicast2, 0x0, 0x0, 'veth0_to_bridge\x00', 'ipvlan1\x00', {}, {}, 0x6, 0x0, 0x46}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0xf4}}}, {{@ip={@rand_addr, @private, 0x0, 0x0, 'macvtap0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@local, @rand_addr, 0x0, 0x0, 'ip6erspan0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x443)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r5)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000740)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000800)=ANY=[@ANYBLOB="a0100000", @ANYRES16=r7, @ANYBLOB="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"], 0x10a0}, 0x1, 0x0, 0x0, 0x4}, 0x0)
close(r4)
r8 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000280)=0x38)
sendmmsg$alg(r5, &(0x7f00000000c0), 0x492492492492627, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c)

34.556737574s ago: executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x2a, &(0x7f0000000b00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@snprintf, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_fd={0x18, 0xa}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}}, @func={0x85, 0x0, 0x1, 0x0, 0xffdffff9}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r3=>0x0})
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x48)
bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000040)={r4, 0x0}, 0x20)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0)
bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@local, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x32}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0xb7}}, 0xe8)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x6b}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000700000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000107b0af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_subtree(r8, &(0x7f00000003c0)=ANY=[], 0x7)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000f6000000000001ff65b11140859900000105010000000018110000f85ddd46", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r8, 0x8, 0x0, 0x6}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r9}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

31.971456332s ago: executing program 3:
socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000d00)=[{{&(0x7f0000000800)={0xa, 0x4e23, 0x3f, @mcast1, 0x20}, 0x1c, &(0x7f0000000b80)=[{&(0x7f00000002c0)="91cb65729c62134ec90f5cf53ed7557ff7b0a75f6e73d7ef7167676c4fbaa82e9e8b45ac76e547b97d333ee58a7b2c07d88facbbd19e753cdc83f6bbb7c5e309001519b60163e5d4f68bcb10d01c7e219c9fa8af1aba2b8e", 0x58}, {&(0x7f00000008c0)="b769fd8ae6e3475064f4961b1121f2d833f3380dc8ccaa567b289c390742983429284bf4b319f2cec51328cd5862e7b455240a18f1a27b01e8f836aad9f7db0eff1b65c370c63651a3b121ac82b5c3145188189a1d85fbe457fa1117fc781c8ab0d8acbf5377ab2a014a1c85544854e1bc1501042b663827efcb6b1b37606328f4c45c2ea540f1516bdcab07d73b5f5144f7a92ae6776997e3c8dc5e39039d61ad73557651fc4f61790716595cf6e3385ed10c7b", 0xb4}, {&(0x7f0000000980)="c44f26535cd79111183d51e1aa9161e8a994ab76c598b5f296b4604808dd1c98060095683039022c186cb2903b9d66b4614b01b0639d834cbb331cbe2b197e4842c1242f29a0e1017c21911706443cf1639f854777a0b310f35ea35afdffaf9978", 0x61}, {&(0x7f0000000a00)="370ba3656f02cbd04e58f531eae41e3f18a479c64dc4b8ed6d93f2c1d73f483c19ffc753349a7386d1821a8e6c0934648eaff427943e70e7f589f7bc63ee74caa54f4593d14ef1039af5fbf0129b0663daa33b917a304017e1d5206730ac0a05f3ab9e7c102d4eb481d14100dcd235e18084c9bc1ffc6a54c62526ed990b9443c1a25ccd285f59", 0x87}, {&(0x7f0000000d40)="01216bc89ed897de1dbafc0ae6007d1c6b78289e3bc416d4af81ea0c292109f71ac8393d381571c9da65a8da3992d462713e25eab23530e8cda82710bad1694fa873d31d8dfd2c9e9a20ff8555b4c33b04ca18af2d10aafe041c1ace7700000000e46c4f565ff0518a19359ff4daa8d2a9af8ec5b2d31186fda94ecbb32351ada60e08eb05a1f89f720fb52aaafa6eda9ea2a8cf2cd7bd4be35f50c9f1c0c6fc40ad9375b484189df6830bf97d704ae6387896b9022407f67591c954ea3906b47359e87138b2047fe5dc5a1c22cce4eba261f64e6ca8157c12e70b7c911a5602de48e03df76f", 0xe6}], 0x5, &(0x7f0000000c00)=[@tclass={{0x14, 0x29, 0x43, 0x6}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xf786}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x6, 0x2, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}}}], 0x60}}], 0x1, 0x14)

31.914278261s ago: executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x1c8, 0xc8, 0x8, 0x0, 0x5803, 0x328, 0x2e8, 0x2e8, 0x328, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'vlan0\x00', 'geneve1\x00'}, 0x0, 0x198, 0x1c8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1b, 0x2}}, @common=@ah={{0x30}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@ipv6header={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x200}}}]}, 0x38}}, 0x0)
socket$unix(0x1, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newqdisc={0xfffffffffffffd54, 0x24, 0x400, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {}, {0xb, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xffff}}}]}, 0x38}}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x20000009})
writev(r6, &(0x7f0000000580)=[{&(0x7f0000000000)="ef", 0x1}], 0x1)
write$binfmt_script(r7, 0x0, 0xb)
write$cgroup_int(r7, &(0x7f0000000200), 0x43400)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
r9 = socket$packet(0x11, 0x0, 0x300)
getpeername$packet(r9, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14)
sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYRESHEX], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x14, &(0x7f0000000280)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x2e, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff08, 0x0, 0x0, 0x33, 0x0, 0x0, 0x0}, 0x90)
socket$kcm(0x2, 0xa, 0x73)
r10 = socket$inet6_sctp(0xa, 0x5, 0x84)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r11, &(0x7f00000000c0), 0x6db6e559)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r11, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r10, 0x84, 0x1d, 0x0, 0x0)

31.813191042s ago: executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000340)='ext4_remove_blocks\x00', r1}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
setsockopt$inet_buf(r2, 0x0, 0x24, &(0x7f0000000380)="967bcb0e63568d56e96db96ae17fc844cce4c203ba670312d2ca248c87bc50a94637387955c689d15d3b156e67e1314fe7b13361e1ed05bf6d2840cbd8b845cc2f8e37ef2d4f54a432c1bec603aeebd6e9724f79dd56468bf6cfd5d5ba5a610155e2f473351552841666facfc3cfa306a8a3afd43554d13482d330efb879e3ce7e00daaca85044bbaa80847ad4fdcfb9b3d4a20d960e0cd4a1392c6e9898de6bfe1268a1e668caff2f37e6398a4fecd71f6c86ebeb6e8cda058ed1", 0xbb)
sendmmsg(r3, &(0x7f0000000180), 0x400008a, 0x0)
sendmsg$key(r3, &(0x7f0000000140)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0)

31.808377257s ago: executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
connect$tipc(r0, &(0x7f0000001e80)=@id={0x1e, 0x3, 0x0, {0xfffffffe}}, 0x10)

31.762365557s ago: executing program 4:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8}, 0x48)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8)
bind$vsock_stream(r3, &(0x7f0000000440), 0x10)
listen(r3, 0x0)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1)
getpeername(r4, 0x0, &(0x7f00000001c0))
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000040), 0x8)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r2}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
syz_emit_ethernet(0xe26, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd609874230df00000fe8000000000000000000000000000bbfe8000000000000000000000000000aa2c0000000000c9"], 0x0)
pipe(0x0)

31.683341404s ago: executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000b2f8f8000000007f"], 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000180))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1502"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000}, 0x90)
ioctl$TUNSETOFFLOAD(r1, 0x4010744d, 0x20000000)
syz_emit_ethernet(0xfc0, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r2, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000000", 0x8)
sendto$inet6(r2, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

31.637166936s ago: executing program 2:
r0 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
sendto$inet(r0, &(0x7f0000000000)="11a5faf44ce12cd561bb22d63348b8cff23baa2aef18d7a4a3afc42190d4ecee441c1728ff70529e022dffa4fd2e86a76b6f2dffa0ebf7ec96d41ed69c8022e6163f8cfbadbc48dc92499079c4876a3eacdd721cf4c1f7757e9cd31d4014525325427250aa58ef1589d688556e19124087ebe5d9ae343a27f9720170920259ef9525535b1d58ca2244394e49d93e8c7f7a123016204858209d70dc2469901f0350d5d77cec421df5849fb35a97a4b99c740cb58e362f19aacf", 0xb9, 0x4000840, &(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10)
socket(0xf, 0x800, 0x3)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x9, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0xa0}, {0x4}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

31.583916868s ago: executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x3b0, 0xffffffff, 0x0, 0x0, 0x98, 0xffffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00'}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'team_slave_1\x00', 'team_slave_1\x00'}, 0x287, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'dvmrp1\x00', 'dummy0\x00'}, 0x0, 0x1c0, 0x1e8, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'gre0\x00', {0x0, 0xea0, 0x0, 0x0, 0x0, 0x3, 0x1}}}]}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410)
r1 = socket$rxrpc(0x21, 0x2, 0xa)
socket$inet_sctp(0x2, 0x5, 0x84)
r2 = socket(0x23, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x8, 0x1, 0x0, 0xf, 0x0, 0x20008, [{0x1, 0x0, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, &(0x7f0000000040)=""/249, 0x3a, 0xf9, 0x6}, 0x20)
getsockopt$nfc_llcp(r2, 0x113, 0x2, 0x0, 0x20000024)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
sendmsg$inet(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@ip_ttl={{0x0, 0x0, 0x2, 0xff}}, @ip_tos_int={{0x13, 0x110, 0x2}}, @ip_tos_u8={{0xfffffe43}}], 0x48, 0x4c00}, 0x0)

31.480105892s ago: executing program 2:
r0 = socket(0x2, 0x3, 0x9)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, 0x0}, 0x20)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280))
socket$inet_sctp(0x2, 0x1, 0x84)
socketpair$tipc(0x1e, 0x2, 0x0, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES32=0x0, @ANYRES16=r1], 0x20}, 0x1, 0xc00000000000000}, 0x0)
bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="4c00030007"], 0xd)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000100), &(0x7f0000000180)=0x6)
sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6cceddfdd39193a764fbff7a1c9062464c684776803ad5b3e27ffc7b97ae72d76cc2fa0e59f7c3fc14a5e2a4296c0e40313d1e2a2a801f586d7b63e116607dab7b77270f068220ab92aeac", @ANYRES16=r2, @ANYBLOB="3390000000000000000015000000740001800d0001007564703a73797a30000000001400010069623a76657468305f746f5f6873720044000400200001000a000002000000040000000000000000000000000000000101010000200002000a004e220000005ffc010000000000000000000000000001820a00000800030007000000"], 0x88}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000003000000000000000000000d00000000010000000100000f02000000030000003ff00000020000002b00000000000000000f02000000f01500f500"], 0x0, 0x4f}, 0x20)
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r3, &(0x7f0000000140)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x0, [@bcast, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40)

31.452922621s ago: executing program 4:
socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000d00)=[{{&(0x7f0000000800)={0xa, 0x4e23, 0x3f, @mcast1, 0x20}, 0x1c, &(0x7f0000000b80)=[{&(0x7f00000002c0)="91cb65729c62134ec90f5cf53ed7557ff7b0a75f6e73d7ef7167676c4fbaa82e9e8b45ac76e547b97d333ee58a7b2c07d88facbbd19e753cdc83f6bbb7c5e309001519b60163e5d4f68bcb10d01c7e219c9fa8af1aba2b8e", 0x58}, {&(0x7f00000008c0)="b769fd8ae6e3475064f4961b1121f2d833f3380dc8ccaa567b289c390742983429284bf4b319f2cec51328cd5862e7b455240a18f1a27b01e8f836aad9f7db0eff1b65c370c63651a3b121ac82b5c3145188189a1d85fbe457fa1117fc781c8ab0d8acbf5377ab2a014a1c85544854e1bc1501042b663827efcb6b1b37606328f4c45c2ea540f1516bdcab07d73b5f5144f7a92ae6776997e3c8dc5e39039d61ad73557651fc4f61790716595cf6e3385ed10c7b", 0xb4}, {&(0x7f0000000980)="c44f26535cd79111183d51e1aa9161e8a994ab76c598b5f296b4604808dd1c98060095683039022c186cb2903b9d66b4614b01b0639d834cbb331cbe2b197e4842c1242f29a0e1017c21911706443cf1639f854777a0b310f35ea35afdffaf9978", 0x61}, {&(0x7f0000000a00)="370ba3656f02cbd04e58f531eae41e3f18a479c64dc4b8ed6d93f2c1d73f483c19ffc753349a7386d1821a8e6c0934648eaff427943e70e7f589f7bc63ee74caa54f4593d14ef1039af5fbf0129b0663daa33b917a304017e1d5206730ac0a05f3ab9e7c102d4eb481d14100dcd235e18084c9bc1ffc6a54c62526ed990b9443c1a25ccd285f59", 0x87}, {&(0x7f0000000d40)="01216bc89ed897de1dbafc0ae6007d1c6b78289e3bc416d4af81ea0c292109f71ac8393d381571c9da65a8da3992d462713e25eab23530e8cda82710bad1694fa873d31d8dfd2c9e9a20ff8555b4c33b04ca18af2d10aafe041c1ace7700000000e46c4f565ff0518a19359ff4daa8d2a9af8ec5b2d31186fda94ecbb32351ada60e08eb05a1f89f720fb52aaafa6eda9ea2a8cf2cd7bd4be35f50c9f1c0c6fc40ad9375b484189df6830bf97d704ae6387896b9022407f67591c954ea3906b47359e87138b2047fe5dc5a1c22cce4eba261f64e6ca8157c12e70b7c911a5602de48e03df76f", 0xe6}], 0x5, &(0x7f0000000c00)=[@tclass={{0x14, 0x29, 0x43, 0x6}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xf786}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x6, 0x2, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}}}], 0x60}}], 0x1, 0x14)

31.357953351s ago: executing program 4:
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x3e, &(0x7f0000000340)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x8, 0x3a, 0x0, @remote, @local, {[], @echo_request}}}}}, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000002d00)=@bloom_filter={0x21, 0x0, 0x0, 0x0, 0x24, 0x1}, 0x48) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000002d00)=@bloom_filter={0x21, 0x0, 0x0, 0x0, 0x24, 0x1}, 0x48)
socket(0x0, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r5=>0x0})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r7=>0x0})
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0xa000000, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1800000008000001000000000000000007000000", @ANYRES32=r5, @ANYBLOB="20000100", @ANYRES32=r7, @ANYBLOB="01000000ffffffff00"/24], 0x38}}, 0x0)
pipe(0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async)
r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000000500010007000000050005000a0000000c000780080006400000000016000300686173683a6e65742c706f72742c6e6574000000a6e3e35613d6b2e0062916ce6eaa43bbefeae080729f1bb4522e97fd045b57070011be398d25c57b0cb194f804d42d6460296d0dc41b43dab50f2288ab8d7801654ea0dbcc08a934224a5d2b63a65fe08dd90a3e5d20467dfc272c8d4448942ef6c78d01eb7f85315a982a43e74cf66ae29c39bcccb26151db0f0074ece7caf8469d84bffb6b"], 0x5c}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x12, 0x8, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7030000000000008500689000d087000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r8)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000340)={'gre0\x00', &(0x7f0000000540)={'gre0\x00', 0x0, 0x20, 0x1, 0x5, 0x8001, {{0x20, 0x4, 0x1, 0x5, 0x80, 0x64, 0x0, 0x1, 0x29, 0x0, @empty, @loopback, {[@rr={0x7, 0x7, 0x99, [@private=0xa010101]}, @timestamp_addr={0x44, 0x3c, 0xcc, 0x1, 0x8, [{@multicast2, 0x4}, {@local, 0x1}, {@remote}, {@empty, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@loopback, 0xb05b0}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x24, 0x89, 0x0, 0x3, [0x8, 0xfffffffa, 0x100, 0x40, 0x1, 0x101, 0x3, 0x7b]}]}}}}}) (async)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000340)={'gre0\x00', &(0x7f0000000540)={'gre0\x00', 0x0, 0x20, 0x1, 0x5, 0x8001, {{0x20, 0x4, 0x1, 0x5, 0x80, 0x64, 0x0, 0x1, 0x29, 0x0, @empty, @loopback, {[@rr={0x7, 0x7, 0x99, [@private=0xa010101]}, @timestamp_addr={0x44, 0x3c, 0xcc, 0x1, 0x8, [{@multicast2, 0x4}, {@local, 0x1}, {@remote}, {@empty, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@loopback, 0xb05b0}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x24, 0x89, 0x0, 0x3, [0x8, 0xfffffffa, 0x100, 0x40, 0x1, 0x101, 0x3, 0x7b]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000380)) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000380)={'batadv0\x00', <r12=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000003c0)) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000003c0))
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'ip6_vti0\x00', 0x0, 0x2f, 0xe, 0x6, 0xffffffff, 0x71, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, 0x8780, 0x10, 0x7fff, 0x32be}}) (async)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'ip6_vti0\x00', 0x0, 0x2f, 0xe, 0x6, 0xffffffff, 0x71, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, 0x8780, 0x10, 0x7fff, 0x32be}})
sendmsg$ETHTOOL_MSG_DEBUG_SET(r9, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000001a00)=ANY=[@ANYBLOB="980f00002d525fbaa3314a68996a5d3ab78abae625a8c5fc6b474592dbdf6db3711c407984b2d95bdab0dd001174922377d822a7911576c3518cd672090d0c4ba841637cb548b1d08077fa9ec7236eed1809f1df4cf08bf690f8306b378f855af27c76938e443450cd34244a8e96ab29570041e9505a4a9e5862416ee1e582f81517f17fd403d37719422503689cb8c7e1f1a652e256015b", @ANYRES16=r11, @ANYBLOB="020026bd7000ffdbdf2508000000240002801f0004007c83b43374e84c8d4aa4f41d848f1b54746a71d035282a131af757007800028004000400080002000a0000000800020000000000040001005a000400917811d4fd6f98de0c1303b3f3a6214487aa56084413bbca9db14cc24349163b21ee157cbd65f8eceadeddb0f08f7382d607f7e3ad6edb283a9f7eae9b6bd7f8d43d15dc9549e04625c6fac543036436fc0ce72f34dd00002000018008000100", @ANYRES32=r12, @ANYBLOB="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"], 0xf98}, 0x1, 0x0, 0x0, 0x14}, 0x0)
setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000000140)={{&(0x7f0000000000)=""/193, 0xc1}, &(0x7f0000000100), 0x3}, 0x20) (async)
setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000000140)={{&(0x7f0000000000)=""/193, 0xc1}, &(0x7f0000000100), 0x3}, 0x20)

31.338626244s ago: executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x303}, '\x00', "376a31a11ece279cec092f071cc80f218d3600040000000000008c35c47e5804", '\x00', "fffffffffffffffd"}, 0x38)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4)
writev(r0, &(0x7f0000000080), 0x0)

31.231964471s ago: executing program 0:
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000300)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)='k', 0x1}], 0x1}}], 0x1, 0x0)
sendto$inet6(r0, &(0x7f0000000340)='0', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c)
sendmsg$inet(r0, &(0x7f0000001740)={&(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="86", 0x1}], 0x1}, 0x0)

31.187437238s ago: executing program 4:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r0, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x12, 0x13, [{0x18, 0x1}, {0xb, 0x1}, {0x18, 0x1}, {0x9}, {0xb, 0x1}, {0x2, 0x1}, {0xb}, {0xc}, {0x9, 0x1}, {0x7e}, {0x6, 0x1}, {0x48, 0x1}, {0xb}, {0x16, 0x1}]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x80}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x20004805)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r0, 0x10, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008004}, 0x80)
r4 = socket(0x22, 0x5, 0x8001)
sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x32ca6a56}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x246c7b14}]}]}], {0x14}}, 0x50}, 0x1, 0x0, 0x0, 0x4c080}, 0x4008000)
socket$inet(0x2, 0x5, 0x800)
r5 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$BTRFS_IOC_GET_DEV_STATS(r5, 0xc4089434, &(0x7f00000003c0)={0x0, 0x7, 0x0, [0x8e, 0x0, 0x2, 0x8, 0x20], [0x0, 0x100, 0x7, 0x8, 0x9, 0x1f, 0xc14b, 0x8c7, 0xc64, 0x0, 0x7ff, 0x8000000000000001, 0x8, 0x6, 0x5d, 0x6, 0x5, 0x3, 0x100, 0x4, 0x6, 0x9, 0x200, 0x0, 0xffffffff, 0x127, 0x9, 0x67f7, 0x8, 0xffffffffffff0526, 0x4, 0x10001, 0x40, 0x5, 0x57a, 0x3, 0x98, 0x7, 0x2, 0x7, 0x8, 0x1, 0x4, 0x40, 0x0, 0xfffffffffffffffa, 0x6, 0xf3, 0x100000001, 0x101, 0x81, 0xcf3, 0x0, 0x5, 0x8, 0x3, 0x5, 0x6, 0x6, 0x3, 0x5432aed7, 0x10001, 0xab, 0x2, 0x100000000, 0x10001, 0x3f, 0x98, 0x1ff, 0x10001, 0x7fff, 0x5, 0x5, 0x2, 0x400, 0x6, 0x3, 0xfffffffffffffffe, 0x21ef, 0x1c37, 0x2, 0x0, 0x8000000000000000, 0x7, 0xffffffffffffffff, 0x7, 0x501e, 0x800, 0x0, 0x3, 0x0, 0x1, 0x100, 0xfcf, 0x2, 0x5, 0x1, 0x5, 0x8, 0x80000000, 0x5, 0x3, 0x8000000000000000, 0x183a, 0x3, 0xe38, 0x8, 0x43, 0x7, 0x3, 0x9, 0xffffffffffffffff, 0xfffffffffffffffd, 0xfffffffffffff488, 0x5, 0x7fffffff, 0xff, 0x5, 0x1, 0x657]})
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x40, 0x140c, 0x4, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0xdbe0000}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000010}, 0x20044000)
socketpair(0x0, 0x6, 0x7fff, &(0x7f0000000900)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000940)={<r8=>0x0, @initdev, @private}, &(0x7f0000000980)=0xc)
bind$packet(r6, &(0x7f00000009c0)={0x11, 0x6, r8, 0x1, 0x20, 0x6, @broadcast}, 0x14)
sendmsg$TIPC_NL_MON_SET(r7, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x20, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8810}, 0x800)
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000b00)={0x3, [0x3, 0x9, 0x9]}, 0xa)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000b40)={0x0, <r9=>0x0, "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", "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"})
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f0000001b40)={{r9, 0x1, 0x9, 0xff, 0x67, 0x0, 0x100000001, 0x2, 0x1, 0x5, 0x3ff, 0x10001, 0x401, 0x101, 0xfffffffffffffffe}})
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000002bc0)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002b80)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x80}, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000002c00), 0x1, 0x0)
ioctl$SIOCGSKNS(r10, 0x894c, &(0x7f0000002c40)={'veth0_to_hsr\x00', 0x600})
r11 = socket(0x27, 0x6, 0x2)
sendmsg$AUDIT_ADD_RULE(r11, &(0x7f0000003140)={&(0x7f0000002c80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003100)={&(0x7f0000002cc0)={0x428, 0x3f3, 0x10, 0x70bd25, 0x25dfdbfe, {0x3, 0x0, 0x7, [0x2, 0x4, 0x7, 0x8, 0x2, 0x7, 0x9, 0x2, 0x0, 0x9, 0x8001, 0x101, 0xf0b, 0x5, 0x6, 0x0, 0x4, 0x4, 0x7214d459, 0xf3c, 0x24, 0x80, 0x5, 0x7, 0x8000, 0x9, 0x0, 0xc2, 0x6, 0x191e557e, 0x385986f1, 0x1272, 0x6, 0x8, 0x3f, 0x200, 0x2, 0x8, 0x7, 0x2, 0x8000, 0x9, 0xff, 0x7fff, 0x1ff, 0xfff, 0x80, 0xc6b, 0x4, 0xef4f, 0x7f, 0x2, 0x3, 0x6, 0x6, 0xdc89, 0x7ff, 0x5, 0xc1, 0x360, 0x9, 0x6, 0x4, 0x86], [0xb02, 0x9, 0xbb20, 0x1, 0x8, 0x73a, 0x6, 0x3f, 0x4, 0x3, 0xb542, 0x387, 0x8, 0xffff0d68, 0x4, 0x10000, 0x9, 0x1, 0x6, 0x3, 0x80, 0x0, 0x5, 0x4, 0x7ff, 0x40, 0x1, 0xfffffffb, 0x5, 0x9, 0x0, 0x9, 0x6, 0x4, 0xfffffff4, 0x9, 0x7, 0x0, 0x7, 0xfff, 0x8, 0xf3, 0x3, 0x20, 0x100, 0x7fffffff, 0x54f, 0x1000, 0x504, 0x14cc, 0x8000, 0x7, 0x7, 0x3ff, 0x4, 0x7, 0xffff, 0x3a4e, 0x8, 0x2, 0x2, 0x1, 0x5, 0x20], [0x1, 0x7, 0x49, 0x9, 0xffffffff, 0x400, 0x100, 0x1000, 0x3a8, 0x7, 0x9, 0x7, 0x7, 0x1000, 0x9, 0x20, 0x2, 0x2, 0xfffffffc, 0x3, 0x9, 0x1, 0x7f, 0x6ef, 0x400, 0x2, 0x6, 0x8, 0x40, 0x1000, 0x3f, 0xfffff001, 0x9, 0x7ff, 0x40, 0x8, 0x7, 0x7fff, 0x400, 0x1, 0x76, 0x10000, 0x4, 0x1ff, 0x8, 0x3ff00000, 0x44a2, 0x0, 0x0, 0xbf, 0x9, 0x4f5, 0x3, 0x1, 0x8, 0x8, 0x80000000, 0x1, 0xffffffc1, 0x3, 0xc7, 0x8000, 0x1, 0x7], [0x6, 0x0, 0x6, 0x8, 0x1, 0xffff8000, 0x8000, 0x8, 0xa2, 0x6, 0x1, 0x9, 0x80, 0x80000000, 0x6, 0x5, 0x6, 0x9, 0x1, 0x7d9c, 0xff, 0x1, 0xffff0001, 0x7ff, 0x7, 0x7, 0x9c4, 0xd4a8, 0x80000000, 0x5, 0x7a5, 0xffff, 0xffffffcf, 0x0, 0x200, 0x4, 0xfff, 0x7, 0x7, 0x3, 0xfffffffc, 0x10000, 0x5, 0x20, 0xfff, 0x7fff, 0x400, 0x4, 0xaba1, 0x4, 0x6, 0x4, 0x0, 0x20, 0xffffffff, 0x350, 0x8, 0xfffffffa, 0x10000, 0x3, 0x7, 0x5, 0x8000, 0x2], 0x6, ['wlan1\x00']}, ["", ""]}, 0x428}, 0x1, 0x0, 0x0, 0x4}, 0x0)
getsockopt$bt_hci(r5, 0x0, 0x1, &(0x7f0000003180), &(0x7f00000031c0))
r12 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r12, 0xc028660f, &(0x7f0000003340)={0x0, r5, 0x5, 0x5, 0x9, 0x1000})

31.056131969s ago: executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000063019c00000000009500000000dd0000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x300}, 0x48)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f00000000c0)=0x8004, 0x4)
sendmsg$nl_route(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@bridge_getlink={0x20, 0x12, 0x1, 0x0, 0x0, {0x7, 0x2}}, 0x20}}, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000000c0)={0xffff, <r3=>0x0}, 0x8)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@ifindex, 0x6, 0x0, 0x5, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], <r4=>0x0}, 0x40)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@ifindex=r1, r0, 0x32, 0x9, r0, @link_id=r3, r4}, 0x20)

30.439255585s ago: executing program 2:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0)

30.435977726s ago: executing program 4:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$phonet(0x23, 0x2, 0x1)
ioctl$SIOCPNDELRESOURCE(r1, 0x89ee, &(0x7f0000007a00))
ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000300))
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019008111e0020f060d8107040a60000000020000000455a1bc00090008000699e3ffffff14000500fe80817806000567b8b7b94002000009080016060000000000000074d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b6f9ecf32af4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x10000000000000c0}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'dummy0\x00'})
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x15, 0x0, 0x0, 0xfffffffe}, {0x6, 0x0, 0x0, 0x4}]}, 0xfffffffffffffcd2)
socket$inet_smc(0x2b, 0x1, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000a00)={@cgroup=r4, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r6, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_DISCONNECT(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x24, r8, 0xa09, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6}]}, 0x24}}, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, &(0x7f00000005c0)={0x2}, 0x1)
sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x2c, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_TIMEOUT={0x8}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x1000}]}, 0x2c}}, 0x0)
sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x4, 0x6, 0x8dfc99417a5fda2b, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0)

30.353339926s ago: executing program 3:
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e21, 0x0, @dev}}, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x3]}, &(0x7f0000000000)=0x100)
r0 = socket$inet(0x2, 0x3, 0x33)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x6, 0x6, 0x5}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
r4 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600))
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40), 0x90}}, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in=@broadcast, @in=@multicast2}, {@in=@dev, 0x0, 0x32}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x7}}]}, 0x154}}, 0x0)
getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x8)

30.334924602s ago: executing program 0:
socket$netlink(0x10, 0x3, 0x4)
r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x401}, 0x1c)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000c5e687d8b512e71c19e7cc1d000100000000000000000007000000"], 0x14}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10)
r4 = socket(0x1d, 0x2, 0x6)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11}})
getsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYRES64], &(0x7f00000005c0)=""/96, 0x44, 0x60}, 0x20)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r6, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r6, &(0x7f0000000240)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c)
recvmmsg(r6, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f00000027c0), 0x0, &(0x7f0000002800)}}], 0x1, 0x0, 0x0)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r7, @ANYRES8=r6], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x44048080)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, 0x0, 0x0)
listen(r8, 0xfffffffc)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @loopback={0x0, 0xac14140b}}]}, &(0x7f00000002c0)=0x10)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660affffffdf000069107400000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0}}, 0x10)

30.313571756s ago: executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001400)={{0x14}, [@NFT_MSG_DELRULE={0x108, 0x8, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x73}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3c}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x6}, @NFTA_RULE_COMPAT={0x4c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf7}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x29}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x67}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x73}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT={0x4c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2f}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8809}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x29}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2f}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8884}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELRULE={0x40, 0x8, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x29}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x5e}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x73}]}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELSETELEM={0x7b4, 0xe, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x794, 0x3, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_SET_ELEM_KEY={0x30, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}]}, {0x200, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x114, 0xb, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TPROXY_REG_PORT={0x8}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x15}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x30, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0xf, 0x3, "9f89d234f978ef7253a269"}, @NFTA_MATCH_NAME={0xb, 0x1, 'numgen\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x30, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x22}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0x30, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x5}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x1b}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x100}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x16}]}}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0x44, 0x6, 0x1, 0x0, "452906b2ab811a8ba2dfa9c3650cc99ccebe66a5d5c8442b452829aa45131b6e78fe2ee86ae0cc0bfb61882a4f4dce941f173a95bda10f161a74a66164c1b347"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1c6}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_USERDATA={0x76, 0x6, 0x1, 0x0, "bfd53fb078259eb2d25e4bc857efe6aada0968ed1a3dd4b7be8e7d2dc98a6c914abd6fcfbaf1d54ef5936a4c11df10878372bdc35506c81bf9a9cfc10b644af091d309a16d6ef8313e67c7ff6c49b5d9cf02bf3bbd337d8ade76413be3828401423a71146459279da764b6d978d8e5115d0a"}]}, {0x540, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x124, 0xb, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_TYPE={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_CSUM_TYPE={0x8}, @NFTA_PAYLOAD_DREG={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, [""]}}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x90, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x80, 0x2, 0x0, 0x1, [@NFTA_DYNSET_EXPR={0x34, 0x7, 0x0, 0x1, {{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_LOOKUP_DREG={0x8}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0xc}]}}}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0x10}, @NFTA_DYNSET_TIMEOUT={0xc, 0x6, 0x1, 0x0, 0xffff}, @NFTA_DYNSET_SET_ID={0x8}, @NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0x15}, @NFTA_DYNSET_FLAGS={0x8}, @NFTA_DYNSET_OP={0x8, 0x3, 0x1, 0x0, 0x2}]}}}, {0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8}]}}}]}, @NFTA_SET_ELEM_KEY={0x22c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa6, 0x1, "e0c003c39f4d6fe471102842c5241b005654a94ba8ff11b83960ddb0b63562a1dd6f9843b7946c7fa98c5640f5b85c6087c928e516be919f9c3c4f6b7478899e99d8a1b420b016a4bee59b9e657aec96a2569bbfab4bc17f94f895ae9013a7f09c53180a1665932ab40e55cf22161edda0d3001140433376e2601898a1a0d1030856bea7d7cd84951692adbbe813a02287fd4948ba13b1545766492348e55e2ca970"}, @NFTA_DATA_VALUE={0x86, 0x1, "a47072bf37f0983f6526672dd4b8c9d4f0a02f7b6c6236ee766f4c71590f04b2a0a0103d9485ad94a8463487eb842c5c49cf5dc455d2a7c6dfa164cef9526d7c0c4bbeca28b00037a5586ac6274eda0d9de5468bd3849a668219e6554a802eba861f4734cddbf43c81f14887355d10c5ea3a2c22ec94e52665a0453b1eb1a17e2631"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x58, 0x1, "51f4af1a0125661a143725f39318c2c5b8b49bf99ca5a80059b44ee210bae76720a2380df112a00a970407c7f133c3c1f12ba6744ed91d02b733c41ab9590388d7451ffbf9d3b930f0df4e4ddc9402ea9962deb0"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7ffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_USERDATA={0xe8, 0x6, 0x1, 0x0, "5cdae555bf6a09106c68b5def25d752da30ed325473cc8fd63ed9cb19ccf1974c458f722974d8a1efcf754f934a78fd6b02f5539d5e0b97f6c1da1542ea194ee98dcc91f1d1dee38fe4a9ffbcd32c37a42894c2f0921705b42654ec5c07cbb8bb5fac165092d10f8b2db9c7db515948cd7d05631375e274fdd9a605dba3c170bf6d1a6f9c03f755c5c871894369de068a55473d895ea8c10ed3e98ef4ed61ab678054f4a57da1791a863cdd7e07ca265e6ab687ec317ed065ca44498b1114228355e7c7f109a76b8cd20c666fff486db9fc7591db62bcab83730f255d3e3fca51e2eb80b"}, @NFTA_SET_ELEM_USERDATA={0x103, 0x6, 0x1, 0x0, "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"}]}]}]}], {0x14}}, 0x950}, 0x1, 0x0, 0x0, 0xc811}, 0x40)

30.156761095s ago: executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r0, 0x0, 0x0, 0x14)

30.14583052s ago: executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x45cec3, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4)
bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r3 = socket$kcm(0x10, 0x3, 0x10)
readv(r3, &(0x7f0000000640)=[{&(0x7f00000003c0)=""/154, 0x9a}, {0x0, 0x2}], 0x2)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000028000bff7f000000000000000024fc60", 0x14}], 0x1}, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8)
setsockopt$inet6_int(r2, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4)
recvmmsg(r2, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r6=>0x0})
accept(r5, &(0x7f0000000040)=@ieee802154={0x24, @long}, &(0x7f0000000100)=0x80)
sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x1, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000011000500000000000000000007000000", @ANYRES32=r6, @ANYBLOB="00edffffff7efda114001a80500005000c0007800800215438fea3a0d80333016b000000000000005b000000"], 0x34}}, 0x24000010)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000640)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x62, 0x0, @loopback, @private}}}}}}, 0x26)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108)

30.025451534s ago: executing program 3:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0)
r0 = socket(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48)
socket$nl_route(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x20}, 0x1, 0xc00000000000000}, 0x0)
bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="4c00030007"], 0xd)
socket$netlink(0x10, 0x3, 0x4)
getsockname$packet(r0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4045)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
writev(0xffffffffffffffff, 0x0, 0x0)
bind$vsock_stream(r2, &(0x7f0000000000)={0x10}, 0x10)
r3 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000040)=0x8)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, 0x20)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000300)={r4, @in6={{0xa, 0x4e23, 0x400, @local, 0x8}}, [0x6, 0x6, 0x4, 0x6, 0x3, 0x6, 0x4, 0x8001, 0x7, 0x8, 0x8000000000000000, 0x7f78, 0x10001, 0xc3d7, 0x7fff]}, &(0x7f0000000080)=0x100)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0xa, &(0x7f0000000100)=[{&(0x7f0000000200)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a118001500060014000000001208000a0043000040a80016000400014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4260000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd", 0xd8}], 0x1}, 0x0)

400.739471ms ago: executing program 4:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000e45f39bb850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000a80), 0xffffffffffffffff)
ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, 0xfffffffffffffffe)
sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001040)={0x14, r5, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x44001}, 0xc10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], &(0x7f0000000380)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r8=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0)
r9 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20)
r10 = socket$packet(0x11, 0x3, 0x300)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r12=>0x0})
setsockopt$packet_add_memb(r10, 0x107, 0x1, &(0x7f0000000240)={r12, 0x5, 0x6, @multicast}, 0x10)
setsockopt$packet_add_memb(r10, 0x107, 0x2, &(0x7f0000000080)={r12, 0x5, 0x6, @multicast}, 0x10)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000000)={@local, 0x0, 0x0, 0x3, 0x1}, 0x20)
sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)={0x14, 0x1, 0x1, 0x5, 0x0, 0x0, {0x4, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x440c0}, 0x24008000)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000080)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x800, 0x1, 0x3, 0x3}, 0x20)
r13 = socket(0x18, 0x0, 0x0)
getsockname$packet(r13, 0x0, &(0x7f00000001c0))
sendto$packet(r3, &(0x7f0000000140)="a6bea8a120e5f8320c30e45010b2a5e986f34c105337f997deb7f6633d62", 0x1e, 0x844, &(0x7f00000000c0)={0x11, 0x3, r8, 0x1, 0x2, 0x6, @local}, 0x14)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00'})

399.94504ms ago: executing program 2:
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000300)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)='k', 0x1}], 0x1}}], 0x1, 0x0)
sendto$inet6(r0, &(0x7f0000000340)='0', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c)
sendmsg$inet(r0, &(0x7f0000001740)={&(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="86", 0x1}], 0x1}, 0x0)

302.081877ms ago: executing program 0:
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0xaf, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xc, 0x9, 0x0, 0x1, 0xe7030000}, {0x6, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

110.132612ms ago: executing program 1:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r0, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x12, 0x13, [{0x18, 0x1}, {0xb, 0x1}, {0x18, 0x1}, {0x9}, {0xb, 0x1}, {0x2, 0x1}, {0xb}, {0xc}, {0x9, 0x1}, {0x7e}, {0x6, 0x1}, {0x48, 0x1}, {0xb}, {0x16, 0x1}]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x80}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x20004805)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r0, 0x10, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008004}, 0x80)
r4 = socket(0x22, 0x5, 0x8001)
sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x32ca6a56}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x246c7b14}]}]}], {0x14}}, 0x50}, 0x1, 0x0, 0x0, 0x4c080}, 0x4008000)
socket$inet(0x2, 0x5, 0x800)
r5 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$BTRFS_IOC_GET_DEV_STATS(r5, 0xc4089434, &(0x7f00000003c0)={0x0, 0x7, 0x0, [0x8e, 0x0, 0x2, 0x8, 0x20], [0x0, 0x100, 0x7, 0x8, 0x9, 0x1f, 0xc14b, 0x8c7, 0xc64, 0x0, 0x7ff, 0x8000000000000001, 0x8, 0x6, 0x5d, 0x6, 0x5, 0x3, 0x100, 0x4, 0x6, 0x9, 0x200, 0x0, 0xffffffff, 0x127, 0x9, 0x67f7, 0x8, 0xffffffffffff0526, 0x4, 0x10001, 0x40, 0x5, 0x57a, 0x3, 0x98, 0x7, 0x2, 0x7, 0x8, 0x1, 0x4, 0x40, 0x0, 0xfffffffffffffffa, 0x6, 0xf3, 0x100000001, 0x101, 0x81, 0xcf3, 0x0, 0x5, 0x8, 0x3, 0x5, 0x6, 0x6, 0x3, 0x5432aed7, 0x10001, 0xab, 0x2, 0x100000000, 0x10001, 0x3f, 0x98, 0x1ff, 0x10001, 0x7fff, 0x5, 0x5, 0x2, 0x400, 0x6, 0x3, 0xfffffffffffffffe, 0x21ef, 0x1c37, 0x2, 0x0, 0x8000000000000000, 0x7, 0xffffffffffffffff, 0x7, 0x501e, 0x800, 0x0, 0x3, 0x0, 0x1, 0x100, 0xfcf, 0x2, 0x5, 0x1, 0x5, 0x8, 0x80000000, 0x5, 0x3, 0x8000000000000000, 0x183a, 0x3, 0xe38, 0x8, 0x43, 0x7, 0x3, 0x9, 0xffffffffffffffff, 0xfffffffffffffffd, 0xfffffffffffff488, 0x5, 0x7fffffff, 0xff, 0x5, 0x1, 0x657]})
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x40, 0x140c, 0x4, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0xdbe0000}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000010}, 0x20044000)
socketpair(0x0, 0x6, 0x7fff, &(0x7f0000000900)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000940)={<r8=>0x0, @initdev, @private}, &(0x7f0000000980)=0xc)
bind$packet(r6, &(0x7f00000009c0)={0x11, 0x6, r8, 0x1, 0x20, 0x6, @broadcast}, 0x14)
sendmsg$TIPC_NL_MON_SET(r7, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x20, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8810}, 0x800)
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000b00)={0x3, [0x3, 0x9, 0x9]}, 0xa)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000b40)={0x0, <r9=>0x0, "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", "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"})
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f0000001b40)={{r9, 0x1, 0x9, 0xff, 0x67, 0x0, 0x100000001, 0x2, 0x1, 0x5, 0x3ff, 0x10001, 0x401, 0x101, 0xfffffffffffffffe}})
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000002bc0)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002b80)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x80}, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000002c00), 0x1, 0x0)
ioctl$SIOCGSKNS(r10, 0x894c, &(0x7f0000002c40)={'veth0_to_hsr\x00', 0x600})
r11 = socket(0x27, 0x6, 0x2)
sendmsg$AUDIT_ADD_RULE(r11, &(0x7f0000003140)={&(0x7f0000002c80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003100)={&(0x7f0000002cc0)={0x428, 0x3f3, 0x10, 0x70bd25, 0x25dfdbfe, {0x3, 0x0, 0x7, [0x2, 0x4, 0x7, 0x8, 0x2, 0x7, 0x9, 0x2, 0x0, 0x9, 0x8001, 0x101, 0xf0b, 0x5, 0x6, 0x0, 0x4, 0x4, 0x7214d459, 0xf3c, 0x24, 0x80, 0x5, 0x7, 0x8000, 0x9, 0x0, 0xc2, 0x6, 0x191e557e, 0x385986f1, 0x1272, 0x6, 0x8, 0x3f, 0x200, 0x2, 0x8, 0x7, 0x2, 0x8000, 0x9, 0xff, 0x7fff, 0x1ff, 0xfff, 0x80, 0xc6b, 0x4, 0xef4f, 0x7f, 0x2, 0x3, 0x6, 0x6, 0xdc89, 0x7ff, 0x5, 0xc1, 0x360, 0x9, 0x6, 0x4, 0x86], [0xb02, 0x9, 0xbb20, 0x1, 0x8, 0x73a, 0x6, 0x3f, 0x4, 0x3, 0xb542, 0x387, 0x8, 0xffff0d68, 0x4, 0x10000, 0x9, 0x1, 0x6, 0x3, 0x80, 0x0, 0x5, 0x4, 0x7ff, 0x40, 0x1, 0xfffffffb, 0x5, 0x9, 0x0, 0x9, 0x6, 0x4, 0xfffffff4, 0x9, 0x7, 0x0, 0x7, 0xfff, 0x8, 0xf3, 0x3, 0x20, 0x100, 0x7fffffff, 0x54f, 0x1000, 0x504, 0x14cc, 0x8000, 0x7, 0x7, 0x3ff, 0x4, 0x7, 0xffff, 0x3a4e, 0x8, 0x2, 0x2, 0x1, 0x5, 0x20], [0x1, 0x7, 0x49, 0x9, 0xffffffff, 0x400, 0x100, 0x1000, 0x3a8, 0x7, 0x9, 0x7, 0x7, 0x1000, 0x9, 0x20, 0x2, 0x2, 0xfffffffc, 0x3, 0x9, 0x1, 0x7f, 0x6ef, 0x400, 0x2, 0x6, 0x8, 0x40, 0x1000, 0x3f, 0xfffff001, 0x9, 0x7ff, 0x40, 0x8, 0x7, 0x7fff, 0x400, 0x1, 0x76, 0x10000, 0x4, 0x1ff, 0x8, 0x3ff00000, 0x44a2, 0x0, 0x0, 0xbf, 0x9, 0x4f5, 0x3, 0x1, 0x8, 0x8, 0x80000000, 0x1, 0xffffffc1, 0x3, 0xc7, 0x8000, 0x1, 0x7], [0x6, 0x0, 0x6, 0x8, 0x1, 0xffff8000, 0x8000, 0x8, 0xa2, 0x6, 0x1, 0x9, 0x80, 0x80000000, 0x6, 0x5, 0x6, 0x9, 0x1, 0x7d9c, 0xff, 0x1, 0xffff0001, 0x7ff, 0x7, 0x7, 0x9c4, 0xd4a8, 0x80000000, 0x5, 0x7a5, 0xffff, 0xffffffcf, 0x0, 0x200, 0x4, 0xfff, 0x7, 0x7, 0x3, 0xfffffffc, 0x10000, 0x5, 0x20, 0xfff, 0x7fff, 0x400, 0x4, 0xaba1, 0x4, 0x6, 0x4, 0x0, 0x20, 0xffffffff, 0x350, 0x8, 0xfffffffa, 0x10000, 0x3, 0x7, 0x5, 0x8000, 0x2], 0x6, ['wlan1\x00']}, ["", ""]}, 0x428}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r12 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r12, 0xc028660f, &(0x7f0000003340)={0x0, r5, 0x5, 0x5, 0x9, 0x1000})

0s ago: executing program 3:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x11, &(0x7f0000000140)={0xfffffffd, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108)

kernel console output (not intermixed with test programs):

] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  234.569877][ T5128] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  234.605414][ T2788] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  234.672088][T10230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  234.721208][T10230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  234.740664][T10230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  234.752078][T10230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  234.762678][T10230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  234.773705][T10230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  234.787367][T10230] batman_adv: batadv0: Interface activated: batadv_slave_1
[  234.811070][T10199] veth1_vlan: entered promiscuous mode
[  234.864630][T10462] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  234.885382][ T2788] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  234.952653][T10230] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  234.972449][T10230] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  234.984195][T10230] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  234.994214][T10230] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  235.052199][ T2788] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  235.097003][T10467] (unnamed net_device) (uninitialized): option arp_validate: invalid value (7)
[  235.131344][ T2788] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  235.273854][  T949] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  235.285671][T10199] veth0_macvtap: entered promiscuous mode
[  235.297549][  T949] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  235.351425][T10199] veth1_macvtap: entered promiscuous mode
[  235.397957][   T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  235.412454][   T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  235.502798][ T2788] bridge_slave_0: left allmulticast mode
[  235.508569][ T2788] bridge_slave_0: left promiscuous mode
[  235.515167][ T2788] bridge0: port 1(bridge_slave_0) entered disabled state
[  236.085589][ T2788] 
 (unregistering): (slave bond_slave_1): Releasing backup interface
[  236.097703][ T2788] 
 (unregistering): Released all slaves
[  236.112913][ T2788] bond1 (unregistering): Released all slaves
[  236.126623][ T2788] bond2 (unregistering): Released all slaves
[  236.138171][ T2788] bond3 (unregistering): Released all slaves
[  236.151635][ T2788] bond0 (unregistering): Released all slaves
[  236.206877][T10199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  236.225336][T10199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.238042][T10199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  236.289054][T10199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.300222][T10199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  236.312659][T10199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.323316][T10199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  236.333980][T10199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.354039][T10199] batman_adv: batadv0: Interface activated: batadv_slave_0
[  236.417877][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  236.427542][ T2788] : left promiscuous mode
[  236.447060][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  236.497031][T10199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  236.522277][T10199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.544537][T10199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  236.566063][T10199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.576130][T10199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  236.587001][T10199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.597316][T10199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  236.608756][T10199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.631483][T10199] batman_adv: batadv0: Interface activated: batadv_slave_1
[  236.651684][ T2788] tipc: Disabling bearer <udp:syz0>
[  236.659280][ T5128] Bluetooth: hci0: command tx timeout
[  236.669172][ T2788] tipc: Left network mode
[  236.676403][T10457] chnl_net:caif_netlink_parms(): no params data found
[  236.702663][T10199] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  236.713073][T10199] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  236.748547][T10199] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  236.758830][T10199] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  236.867295][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  236.882241][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  236.894984][T10486] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[  237.106186][T10496] netlink: 'syz-executor.0': attribute type 4 has an invalid length.
[  237.143030][T10457] bridge0: port 1(bridge_slave_0) entered blocking state
[  237.175563][T10457] bridge0: port 1(bridge_slave_0) entered disabled state
[  237.183140][T10457] bridge_slave_0: entered allmulticast mode
[  237.192417][T10457] bridge_slave_0: entered promiscuous mode
[  237.207381][T10457] bridge0: port 2(bridge_slave_1) entered blocking state
[  237.215033][T10457] bridge0: port 2(bridge_slave_1) entered disabled state
[  237.230341][T10457] bridge_slave_1: entered allmulticast mode
[  237.238033][T10457] bridge_slave_1: entered promiscuous mode
[  237.332538][   T29] audit: type=1800 audit(1718083670.495:8): pid=10504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1954 res=0 errno=0
[  237.363341][T10500] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  237.375084][T10505] netlink: 4552 bytes leftover after parsing attributes in process `syz-executor.0'.
[  237.386459][   T29] audit: type=1804 audit(1718083670.535:9): pid=10504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir2189984584/syzkaller.SSK6fu/1/memory.events" dev="sda1" ino=1954 res=1 errno=0
[  237.423002][T10505] netlink: 4552 bytes leftover after parsing attributes in process `syz-executor.0'.
[  237.548010][T10457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  237.577658][ T2788] hsr_slave_0: left promiscuous mode
[  237.589408][ T2788] hsr_slave_1: left promiscuous mode
[  237.595810][ T2788] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  237.603862][ T2788] batman_adv: batadv0: Removing interface: batadv_slave_0
[  237.613425][ T2788] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  237.621758][ T2788] batman_adv: batadv0: Removing interface: batadv_slave_1
[  237.645660][ T2788] veth1_macvtap: left promiscuous mode
[  237.652691][ T2788] veth0_macvtap: left promiscuous mode
[  237.658854][ T2788] veth1_vlan: left promiscuous mode
[  237.664296][ T2788] veth0_vlan: left promiscuous mode
[  237.897559][ T2788] team0 (unregistering): Port device macvlan2 removed
[  238.364989][ T2788] team0 (unregistering): Port device team_slave_1 removed
[  238.422292][ T2788] team0 (unregistering): Port device team_slave_0 removed
[  238.739042][ T5128] Bluetooth: hci0: command 0x041b tx timeout
[  238.885967][T10457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  239.137497][T10457] team0: Port device team_slave_0 added
[  239.191857][T10457] team0: Port device team_slave_1 added
[  239.240338][T10524] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[  239.307383][T10533] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  239.322188][ T5274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  239.334505][T10533] bridge_slave_1: left allmulticast mode
[  239.341262][ T5274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  239.350715][T10533] bridge_slave_1: left promiscuous mode
[  239.356635][T10533] bridge0: port 2(bridge_slave_1) entered disabled state
[  239.374336][T10533] bridge_slave_0: left allmulticast mode
[  239.394479][T10533] bridge_slave_0: left promiscuous mode
[  239.407861][T10533] bridge0: port 1(bridge_slave_0) entered disabled state
[  239.656967][T10457] batman_adv: batadv0: Adding interface: batadv_slave_0
[  239.664458][T10457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  239.683712][T10542] Bluetooth: MGMT ver 1.22
[  239.707556][T10457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  239.785520][T10457] batman_adv: batadv0: Adding interface: batadv_slave_1
[  239.793141][T10457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  239.824568][T10457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  239.852451][  T949] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  239.864310][  T949] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  239.918012][   T29] audit: type=1800 audit(1718083673.085:10): pid=10544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1953 res=0 errno=0
[  239.970253][   T29] audit: type=1804 audit(1718083673.095:11): pid=10544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir1631134431/syzkaller.jGykDb/161/memory.events" dev="sda1" ino=1953 res=1 errno=0
[  240.089746][T10548] netlink: 'syz-executor.2': attribute type 11 has an invalid length.
[  240.105324][T10457] hsr_slave_0: entered promiscuous mode
[  240.120494][T10550] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[  240.138272][T10457] hsr_slave_1: entered promiscuous mode
[  240.206718][T10550] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[  240.678119][   T29] audit: type=1800 audit(1718083673.845:12): pid=10570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1955 res=0 errno=0
[  240.737691][   T29] audit: type=1804 audit(1718083673.845:13): pid=10570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir1631134431/syzkaller.jGykDb/164/memory.events" dev="sda1" ino=1955 res=1 errno=0
[  240.809548][T10577] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  240.819647][ T5128] Bluetooth: hci0: command 0x041b tx timeout
[  240.876485][T10577] batman_adv: batadv0: Adding interface: team0
[  240.919153][T10577] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  240.978429][T10577] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  241.085562][T10592] netlink: 'syz-executor.0': attribute type 2 has an invalid length.
[  241.191171][T10594] lo: entered promiscuous mode
[  241.400086][T10603] bond0: option min_links: invalid value (18446744073709551615)
[  241.419569][T10603] bond0: option min_links: allowed values 0 - 2147483647
[  241.488956][T10606] batadv0: entered promiscuous mode
[  241.612567][T10609] netlink: 'syz-executor.2': attribute type 5 has an invalid length.
[  241.662780][T10609] netlink: 'syz-executor.2': attribute type 10 has an invalid length.
[  241.708185][T10610] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'.
[  241.730534][T10609] team0: Device veth1_macvtap failed to register rx_handler
[  241.835023][T10609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  241.854160][T10609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  241.867918][T10609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  241.884560][T10609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  241.894856][T10609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  241.909305][T10609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  241.924928][T10609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  241.935745][T10609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  241.947480][T10586] lo: left promiscuous mode
[  241.972444][T10457] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  242.001176][T10457] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  242.033383][T10457] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  242.047821][T10457] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  242.220545][T10600] batadv0: left promiscuous mode
[  242.246006][T10621] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'.
[  242.280496][T10622] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  242.355108][T10624] netlink: 'syz-executor.0': attribute type 2 has an invalid length.
[  242.508012][T10457] 8021q: adding VLAN 0 to HW filter on device bond0
[  242.583837][T10457] 8021q: adding VLAN 0 to HW filter on device team0
[  242.638483][ T5161] bridge0: port 1(bridge_slave_0) entered blocking state
[  242.645752][ T5161] bridge0: port 1(bridge_slave_0) entered forwarding state
[  242.711928][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[  242.719176][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[  242.807919][T10637] tipc: Started in network mode
[  242.828880][T10637] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711
[  242.842955][T10637] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  242.899045][ T5128] Bluetooth: hci0: command 0x041b tx timeout
[  243.099722][T10649] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  243.349568][T10660] Bluetooth: MGMT ver 1.22
[  243.356365][T10660] Bluetooth: hci3: invalid length 0, exp 2 for type 23
[  243.462061][T10670] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  243.606761][T10457] 8021q: adding VLAN 0 to HW filter on device batadv0
[  243.726941][T10681] net_ratelimit: 19 callbacks suppressed
[  243.726965][T10681] dccp_v6_rcv: dropped packet with invalid checksum
[  243.766243][T10681] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  243.807653][T10684] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[  244.480727][T10457] veth0_vlan: entered promiscuous mode
[  244.553523][T10457] veth1_vlan: entered promiscuous mode
[  244.671527][T10457] veth0_macvtap: entered promiscuous mode
[  244.694754][T10457] veth1_macvtap: entered promiscuous mode
[  244.732843][T10457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  244.769903][T10457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.780569][T10457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  244.803016][T10457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.821717][T10457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  244.848916][T10706] Bluetooth: hci3: invalid length 0, exp 2 for type 23
[  244.862399][T10457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.878764][T10457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  244.902226][T10457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.921301][T10457] batman_adv: batadv0: Interface activated: batadv_slave_0
[  244.937664][T10457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  244.956481][T10457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.967745][T10457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  244.979100][ T5128] Bluetooth: hci0: command 0x041b tx timeout
[  244.989144][T10457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.004538][T10457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  245.045197][T10457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.063785][T10457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  245.084008][T10457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.106144][T10457] batman_adv: batadv0: Interface activated: batadv_slave_1
[  245.144891][T10457] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  245.173350][T10457] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  245.192678][T10457] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  245.216071][T10457] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  245.267692][T10720] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[  245.439253][  T949] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  245.475951][  T949] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  245.595120][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  245.638657][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  245.989847][T10734] xt_CT: No such helper "snmp"
[  246.163409][T10742] Bluetooth: hci3: invalid length 0, exp 2 for type 23
[  246.310740][T10750] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[  246.548010][T10758] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  246.594079][T10758] bridge1: entered promiscuous mode
[  246.606643][T10758] bridge1: entered allmulticast mode
[  246.742805][T10762] veth0_vlan: entered allmulticast mode
[  246.940673][T10767] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  247.055882][T10774] Bluetooth: hci3: invalid length 0, exp 2 for type 23
[  247.320530][ T5122] Bluetooth: hci0: command 0x041b tx timeout
[  247.412929][T10794] Unsupported ieee802154 address type: 0
[  247.544564][T10799] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  247.576466][T10799] bridge1: entered promiscuous mode
[  247.582732][T10799] bridge1: entered allmulticast mode
[  248.029423][T10810] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  248.273757][T10814] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
[  248.288961][T10814] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.4'.
[  248.316278][T10814] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  248.364879][T10818] syz-executor.3 uses old SIOCAX25GETINFO
[  248.394471][T10820] tipc: Failed to remove unknown binding: 66,1,1/0:1888171265/1888171267
[  248.452775][T10820] tipc: Failed to remove unknown binding: 66,1,1/0:1888171265/1888171267
[  248.469163][T10821] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  248.510463][T10820] tipc: Failed to remove unknown binding: 66,1,1/0:1888171265/1888171267
[  248.510765][T10821] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  248.542488][T10821] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  248.692428][   T29] audit: type=1800 audit(1718083681.865:14): pid=10829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1939 res=0 errno=0
[  248.741072][T10831] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  248.748600][   T29] audit: type=1804 audit(1718083681.895:15): pid=10829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir2984712851/syzkaller.LD44LQ/5/memory.events" dev="sda1" ino=1939 res=1 errno=0
[  248.805859][T10831] bridge0: entered promiscuous mode
[  248.816891][T10831] bridge0: entered allmulticast mode
[  248.837661][T10833] EXT4-fs warning (device sda1): ext4_group_extend:1861: can't shrink FS - resize aborted
[  248.905573][T10836] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'.
[  249.507764][T10857] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'.
[  249.709083][T10868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  249.737953][T10864] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.2'.
[  249.764611][T10864] netlink: 'syz-executor.2': attribute type 4 has an invalid length.
[  249.819972][T10868] netlink: 'syz-executor.2': attribute type 4 has an invalid length.
[  250.135019][T10880] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  250.174525][T10880] bridge0: entered promiscuous mode
[  250.181585][T10880] bridge0: entered allmulticast mode
[  250.282637][T10885] erspan0: vlans aren't supported yet for dev_uc|mc_add()
[  250.961735][T10914] xt_policy: output policy not valid in PREROUTING and INPUT
[  251.217588][T10926] syz-executor.2[10926] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  251.217780][T10926] syz-executor.2[10926] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  251.426003][T10938] pim6reg1: entered promiscuous mode
[  251.444583][T10938] pim6reg1: entered allmulticast mode
[  251.694105][T10952] xt_policy: output policy not valid in PREROUTING and INPUT
[  252.319453][T10975] syz-executor.3[10975] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  252.319627][T10975] syz-executor.3[10975] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  252.431884][T10980] pim6reg1: entered promiscuous mode
[  252.451079][T10980] pim6reg1: entered allmulticast mode
[  252.760697][T10990] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 10 (only 8 groups)
[  252.888586][T10998] xt_policy: output policy not valid in PREROUTING and INPUT
[  252.950432][T10999] 8021q: adding VLAN 0 to HW filter on device batadv1
[  252.988534][T10999] batman_adv: batadv1: Adding interface: netdevsim0
[  253.008560][T10999] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  253.059103][T10999] batman_adv: batadv1: Interface activated: netdevsim0
[  253.329795][T11007] __nla_validate_parse: 16 callbacks suppressed
[  253.329822][T11007] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'.
[  253.512364][T11023] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  253.517720][T11024] syz-executor.0[11024] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  253.527166][T11024] syz-executor.0[11024] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  253.575718][T11023] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  253.788767][T11039] dccp_invalid_packet: P.Data Offset(0) too small
[  253.825046][T11038] pim6reg1: entered promiscuous mode
[  253.842533][T11038] pim6reg1: entered allmulticast mode
[  254.169392][T11049] xt_policy: output policy not valid in PREROUTING and INPUT
[  254.201175][T11053] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[  254.226734][T11049] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[  254.440768][T11057] bridge0: port 2(bridge_slave_1) entered disabled state
[  254.448895][T11057] bridge0: port 1(bridge_slave_0) entered disabled state
[  254.603801][T11066] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  254.743090][T11071] Bluetooth: hci3: invalid length 0, exp 2 for type 23
[  254.866719][T11075] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[  255.032669][T11065] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  255.079141][T11069] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  255.117094][T11081] netlink: 'syz-executor.1': attribute type 27 has an invalid length.
[  255.727965][T11081] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  255.779835][T11081] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  255.871573][T11081] veth0_vlan: left allmulticast mode
[  255.969997][T11081] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  255.987072][T11081] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  255.996399][T11081] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  256.006302][T11081] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  256.184731][ T1247] ieee802154 phy1 wpan1: encryption failed: -22
[  256.427619][T11128] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'.
[  256.491717][T11129] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[  256.540719][T11137] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'.
[  256.581414][T11136] Bluetooth: hci3: invalid length 0, exp 2 for type 23
[  256.704624][T11142] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes.
[  256.833617][T11144] netlink: 'syz-executor.3': attribute type 3 has an invalid length.
[  257.127064][T11155] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0
[  257.131726][T11153] IPVS: stopping master sync thread 11155 ...
[  257.474231][T11170] Bluetooth: hci3: invalid length 0, exp 2 for type 23
[  257.736167][T11183] bond0: Unable to set up delay as MII monitoring is disabled
[  257.879432][T11183] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  258.159941][T11206] bridge0: port 2(bridge_slave_1) entered disabled state
[  258.167780][T11206] bridge0: port 1(bridge_slave_0) entered disabled state
[  258.467003][T11215] Bluetooth: hci3: invalid length 0, exp 2 for type 23
[  258.491838][T11221] __nla_validate_parse: 4 callbacks suppressed
[  258.491861][T11221] netlink: 9412 bytes leftover after parsing attributes in process `syz-executor.3'.
[  258.545790][T11222] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'.
[  258.573790][T11222] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[  258.625262][T11228] bond0: Unable to set up delay as MII monitoring is disabled
[  258.775813][T11228] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  258.801266][T11234] syz_tun: entered promiscuous mode
[  258.866143][T11234] bridge2: entered promiscuous mode
[  258.923636][T11233] syz_tun: left promiscuous mode
[  258.952972][T11237] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'.
[  258.974095][T11237] nbd: couldn't find device at index 536871424
[  259.021252][T11244] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[  259.164298][T11252] netlink: 'syz-executor.3': attribute type 3 has an invalid length.
[  259.197301][T11252] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'.
[  259.243123][T11257] Bluetooth: hci3: invalid length 0, exp 2 for type 23
[  259.520620][T11262] Bluetooth: hci3: invalid length 0, exp 2 for type 23
[  259.588263][T11271] bridge0: port 3(geneve1) entered blocking state
[  259.596400][T11271] bridge0: port 3(geneve1) entered disabled state
[  259.607747][T11271] geneve1: entered allmulticast mode
[  259.653450][T11271] geneve1: entered promiscuous mode
[  259.670264][T11271] bridge0: port 3(geneve1) entered blocking state
[  259.677129][T11271] bridge0: port 3(geneve1) entered forwarding state
[  259.830811][T11286] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  259.919399][T11290] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.3'.
[  259.983722][   T29] audit: type=1804 audit(1718083693.145:16): pid=11293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1631134431/syzkaller.jGykDb/215/memory.events" dev="sda1" ino=1934 res=1 errno=0
[  260.063717][   T29] audit: type=1804 audit(1718083693.155:17): pid=11293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir1631134431/syzkaller.jGykDb/215/memory.events" dev="sda1" ino=1934 res=1 errno=0
[  260.096136][   T29] audit: type=1804 audit(1718083693.185:18): pid=11293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir1631134431/syzkaller.jGykDb/215/memory.events" dev="sda1" ino=1934 res=1 errno=0
[  260.193444][T11303] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  260.211178][T11302] Bluetooth: hci3: invalid length 0, exp 2 for type 23
[  260.283599][T11303] tipc: Started in network mode
[  260.312355][T11303] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711
[  260.347638][T11303] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  260.526037][T11318] netlink: 'syz-executor.2': attribute type 3 has an invalid length.
[  260.561998][T11318] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'.
[  260.644616][T11322] bond0: Unable to set up delay as MII monitoring is disabled
[  261.087201][T11322] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  261.287792][T11345] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'.
[  261.297941][T11347] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  261.326882][T11344] Bluetooth: hci3: invalid length 0, exp 2 for type 23
[  261.911395][T11377] bond0: Unable to set up delay as MII monitoring is disabled
[  262.021725][T11377] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  262.414725][T11397] Bluetooth: hci3: invalid length 0, exp 2 for type 23
[  263.190679][T11430] netlink: 'syz-executor.4': attribute type 12 has an invalid length.
[  263.753183][T11432] bridge0: port 1(team0) entered blocking state
[  263.959132][T11432] bridge0: port 1(team0) entered disabled state
[  263.965784][T11432] team0: entered allmulticast mode
[  264.172499][T11432] team_slave_0: entered allmulticast mode
[  264.189264][T11432] team_slave_1: entered allmulticast mode
[  264.206969][T11432] team0: entered promiscuous mode
[  264.221500][T11432] team_slave_0: entered promiscuous mode
[  264.229761][T11432] team_slave_1: entered promiscuous mode
[  264.299481][T11441] Bluetooth: hci3: invalid length 0, exp 2 for type 23
[  264.849340][T11472] __nla_validate_parse: 4 callbacks suppressed
[  264.849363][T11472] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[  264.878251][T11471] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  264.898977][ T5122] Bluetooth: hci0: command 0x041b tx timeout
[  264.905309][ T5128] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  265.770228][T11486] bridge0: port 4(team0) entered blocking state
[  265.776717][T11486] bridge0: port 4(team0) entered disabled state
[  265.796596][T11486] team0: entered allmulticast mode
[  265.804272][T11486] team_slave_0: entered allmulticast mode
[  265.818932][T11486] team_slave_1: entered allmulticast mode
[  265.831193][T11484] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  265.851552][T11486] team0: entered promiscuous mode
[  265.856659][T11486] team_slave_0: entered promiscuous mode
[  265.887507][T11491] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.2'.
[  265.893670][T11486] team_slave_1: entered promiscuous mode
[  265.924188][T11486] bridge0: port 4(team0) entered blocking state
[  265.930774][T11486] bridge0: port 4(team0) entered forwarding state
[  265.958055][T11494] Bluetooth: hci3: invalid length 0, exp 2 for type 23
[  265.984071][T11496] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'.
[  266.402638][T11518] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  266.449922][T11518] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[  266.978992][ T5128] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  266.979034][ T5122] Bluetooth: hci0: command 0x041b tx timeout
[  267.510703][T11531] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  267.661323][T11541] Bluetooth: hci3: invalid length 0, exp 2 for type 23
[  268.036694][T11566] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  268.399734][T11586] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  268.547511][T11591] Bluetooth: hci3: invalid length 0, exp 2 for type 23
[  268.789371][T11601] 
: renamed from veth0_vlan (while UP)
[  268.862720][T11606] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  269.099330][T11615] Bluetooth: hci3: invalid length 0, exp 2 for type 23
[  269.297942][T11630] Bluetooth: hci3: invalid length 0, exp 2 for type 23
[  269.528921][T11642] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1
[  269.599050][T11652] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  269.889616][T11666] Bluetooth: hci3: invalid length 0, exp 2 for type 23
[  269.945825][T11672] Bluetooth: hci3: invalid length 0, exp 2 for type 23
[  270.007810][T11674] lo speed is unknown, defaulting to 1000
[  270.020627][T11674] lo speed is unknown, defaulting to 1000
[  270.027451][T11674] lo speed is unknown, defaulting to 1000
[  270.306433][T11682] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2
[  270.317117][T11681] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  270.347306][T11684] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  270.455331][T11674] infiniband syz0: set active
[  270.461905][ T5194] lo speed is unknown, defaulting to 1000
[  270.471496][T11674] infiniband syz0: added lo
[  270.549172][T11674] RDS/IB: syz0: added
[  270.556111][T11674] smc: adding ib device syz0 with port count 1
[  270.562945][T11674] smc:    ib device syz0 port 1 has pnetid 
[  270.575198][   T57] lo speed is unknown, defaulting to 1000
[  270.595120][T11674] lo speed is unknown, defaulting to 1000
[  270.750943][T11695] Bluetooth: hci3: invalid length 0, exp 2 for type 23
[  270.882474][T11698] Bluetooth: hci3: invalid length 0, exp 2 for type 23
[  270.894975][T11701] 
: renamed from veth0_vlan (while UP)
[  271.016031][T11674] lo speed is unknown, defaulting to 1000
[  271.126389][T11711] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  271.256267][T11714] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  271.419255][T11721] netlink: 'syz-executor.2': attribute type 24 has an invalid length.
[  271.485926][T11724] dummy0: entered promiscuous mode
[  271.514871][T11724] batman_adv: batadv0: Adding interface: macsec1
[  271.528456][T11724] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  271.598191][T11724] batman_adv: batadv0: Interface activated: macsec1
[  271.611336][T11674] lo speed is unknown, defaulting to 1000
[  271.826466][T11735] Bluetooth: hci3: invalid length 0, exp 2 for type 23
[  271.977037][T11740] Bluetooth: hci3: invalid length 0, exp 2 for type 23
[  272.168084][T11674] lo speed is unknown, defaulting to 1000
[  272.188704][T11749] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  272.252571][T11748] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  272.695733][T11674] lo speed is unknown, defaulting to 1000
[  272.923705][T11765] Bluetooth: hci3: invalid length 0, exp 2 for type 23
[  273.027312][T11772] Bluetooth: hci3: invalid length 0, exp 2 for type 23
[  273.071794][T11775] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 2147483648 (only 8 groups)
[  273.141601][T11779] sch_fq: defrate 0 ignored.
[  273.334893][T11785] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  273.409133][T11788] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  273.473852][T11788] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  273.535942][T11788] netlink: 'syz-executor.4': attribute type 10 has an invalid length.
[  273.568614][T11788] bridge0: port 2(bridge_slave_1) entered blocking state
[  273.575919][T11788] bridge0: port 2(bridge_slave_1) entered listening state
[  273.583505][T11788] bridge0: port 1(bridge_slave_0) entered blocking state
[  273.590818][T11788] bridge0: port 1(bridge_slave_0) entered listening state
[  273.630241][T11788] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  273.664872][T11790] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  273.836909][T11814] Bluetooth: hci3: invalid length 0, exp 2 for type 23
[  273.851495][T11815] Bluetooth: hci3: invalid length 0, exp 2 for type 23
[  274.018588][T11824] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
[  274.031072][T11825] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[  274.048041][T11825] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
[  274.381173][T11839] netlink: 'syz-executor.4': attribute type 10 has an invalid length.
[  274.425113][T11839] bridge0: port 2(bridge_slave_1) entered disabled state
[  274.432540][T11839] bridge0: port 1(bridge_slave_0) entered disabled state
[  274.474584][T11846] Bluetooth: hci3: invalid length 0, exp 2 for type 23
[  274.503592][T11845] Bluetooth: hci3: invalid length 0, exp 2 for type 23
[  274.568230][T11850] IPv6: NLM_F_CREATE should be specified when creating new route
[  274.604550][T11850] IPv6: Can't replace route, no match found
[  274.745559][T11857] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  274.879799][T11866] delete_channel: no stack
[  275.080917][T11880] Bluetooth: hci3: invalid length 0, exp 2 for type 23
[  275.131912][T11881] Bluetooth: hci3: invalid length 0, exp 2 for type 23
[  275.181693][T11884] netlink: 'syz-executor.2': attribute type 10 has an invalid length.
[  275.209451][T11884] bridge0: port 2(bridge_slave_1) entered disabled state
[  275.217584][T11884] bridge0: port 1(bridge_slave_0) entered disabled state
[  275.273703][T11884] bridge0: port 2(bridge_slave_1) entered blocking state
[  275.281046][T11884] bridge0: port 2(bridge_slave_1) entered forwarding state
[  275.288705][T11884] bridge0: port 1(bridge_slave_0) entered blocking state
[  275.296015][T11884] bridge0: port 1(bridge_slave_0) entered forwarding state
[  275.350056][T11884] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  275.393103][T11895] __nla_validate_parse: 10 callbacks suppressed
[  275.393130][T11895] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  275.453617][T11892] netlink: 67 bytes leftover after parsing attributes in process `syz-executor.1'.
[  275.510237][T11892] IPv6: NLM_F_CREATE should be specified when creating new route
[  275.518346][T11892] IPv6: Can't replace route, no match found
[  275.645097][T11907] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'.
[  275.648305][T11910] IPVS: set_ctl: invalid protocol: 108 127.0.0.1:20001
[  275.673029][T11912] netlink: 165 bytes leftover after parsing attributes in process `syz-executor.3'.
[  276.181190][T11930] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  279.155358][T11963] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  279.311506][T11972] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  279.900777][T12002] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  280.013886][T12011] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  280.055556][T12010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  280.101128][T12010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  280.139629][T12010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  280.150592][T12010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  280.169154][T12010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  280.184843][T12010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  280.206072][T12010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  280.227131][T12010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  281.089518][T12043] Bluetooth: hci3: invalid length 0, exp 2 for type 23
[  281.157760][T12048] netlink: 'syz-executor.2': attribute type 2 has an invalid length.
[  281.194304][T12051] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  281.226712][T12048] syz_tun: entered promiscuous mode
[  281.243215][T12048] syz_tun: left promiscuous mode
[  281.829667][T12072] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 1 (only 8 groups)
[  282.033047][T12083] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'.
[  282.160673][T12090] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  282.208586][T12094] netlink: 'syz-executor.0': attribute type 21 has an invalid length.
[  282.240014][T12094] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'.
[  282.755876][T12119] Bluetooth: hci3: invalid length 0, exp 2 for type 0
[  282.839296][T12122] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.1'.
[  283.071089][T12130] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'.
[  283.407692][T12144] netlink: 'syz-executor.1': attribute type 22 has an invalid length.
[  283.431395][T12144] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  283.471115][T12150] Bluetooth: hci3: invalid length 0, exp 2 for type 0
[  284.015218][T12174] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'.
[  284.407205][T12187] Bluetooth: hci3: invalid length 0, exp 2 for type 0
[  284.499549][ T5194] ip6_tnl_xmit_ctl: 4 callbacks suppressed
[  284.499572][ T5194] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  284.614834][T12196] lo speed is unknown, defaulting to 1000
[  285.121473][T12214] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'.
[  285.164092][ T5194] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  285.339429][T12220] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'.
[  285.399027][T12220] netlink: 'syz-executor.0': attribute type 8 has an invalid length.
[  285.606745][T12228] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0x1
[  285.990997][T12244] lo speed is unknown, defaulting to 1000
[  286.600714][T12275] __nla_validate_parse: 3 callbacks suppressed
[  286.600738][T12275] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  286.621118][T12278] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  286.637249][T12278] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  287.344450][T12294] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
[  287.743825][   T29] audit: type=1804 audit(1718083720.915:19): pid=12305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1239603368/syzkaller.oZREp8/121/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0
[  288.099920][T12330] Bluetooth: hci3: invalid length 0, exp 2 for type 22
[  288.599242][T12348] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  288.634991][T12350] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.3'.
[  288.843788][T12357] x_tables: duplicate underflow at hook 3
[  288.847403][T12355] Bluetooth: hci3: invalid length 0, exp 2 for type 22
[  288.879622][T12357] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20000
[  288.905955][T12358] Bluetooth: hci3: invalid length 0, exp 2 for type 22
[  289.110946][ T5128] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  289.120737][ T5128] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  289.140675][ T5128] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  289.151174][ T5128] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  289.168441][ T5128] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  289.177568][ T5128] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  289.242804][T12366] lo speed is unknown, defaulting to 1000
[  289.685958][T12385] Bluetooth: hci3: invalid length 0, exp 2 for type 22
[  289.693799][T12384] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'.
[  289.745566][T12381] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  289.966799][T12393] Bluetooth: hci3: invalid length 0, exp 2 for type 22
[  289.993434][T12366] chnl_net:caif_netlink_parms(): no params data found
[  290.257088][T12366] bridge0: port 1(bridge_slave_0) entered blocking state
[  290.268821][T12366] bridge0: port 1(bridge_slave_0) entered disabled state
[  290.276350][T12366] bridge_slave_0: entered allmulticast mode
[  290.285601][T12366] bridge_slave_0: entered promiscuous mode
[  290.318218][T12366] bridge0: port 2(bridge_slave_1) entered blocking state
[  290.336940][T12366] bridge0: port 2(bridge_slave_1) entered disabled state
[  290.344996][T12366] bridge_slave_1: entered allmulticast mode
[  290.363220][T12366] bridge_slave_1: entered promiscuous mode
[  290.461961][T12366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  290.503842][T12366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  290.589253][T12422] Bluetooth: hci3: invalid length 0, exp 2 for type 22
[  290.607878][T12366] team0: Port device team_slave_0 added
[  290.642811][T12366] team0: Port device team_slave_1 added
[  290.796835][T12366] batman_adv: batadv0: Adding interface: batadv_slave_0
[  290.834949][T12366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  290.864792][T12429] Bluetooth: hci3: invalid length 0, exp 2 for type 22
[  290.869706][T12366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  290.948401][T12366] batman_adv: batadv0: Adding interface: batadv_slave_1
[  290.959275][T12431] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'.
[  290.966190][T12366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  291.002983][T12366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  291.009046][T12431] netlink: 43 bytes leftover after parsing attributes in process `syz-executor.2'.
[  291.032534][T12432] geneve1: entered promiscuous mode
[  291.109949][T12431] netlink: 'syz-executor.2': attribute type 5 has an invalid length.
[  291.163111][T12431] netlink: 43 bytes leftover after parsing attributes in process `syz-executor.2'.
[  291.256150][T12366] hsr_slave_0: entered promiscuous mode
[  291.277430][T12366] hsr_slave_1: entered promiscuous mode
[  291.297301][T12366] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  291.318917][T12366] Cannot create hsr debugfs directory
[  291.327850][ T5194] IPVS: starting estimator thread 0...
[  291.340539][T12430] geneve1: left promiscuous mode
[  291.352326][T12449] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  291.429688][T12451] IPVS: using max 17 ests per chain, 40800 per kthread
[  291.607697][T12466] Bluetooth: hci3: invalid length 0, exp 2 for type 22
[  291.642001][T12464] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  291.682683][T12464] bond0: entered promiscuous mode
[  291.781598][T12464] lo: entered promiscuous mode
[  291.862176][T12464] infiniband syz0: set down
[  291.879317][T12483] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  292.006962][T12366] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  292.056787][T11108] lo speed is unknown, defaulting to 1000
[  292.083617][T11108] lo speed is unknown, defaulting to 1000
[  292.192238][T12366] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  292.352395][T12366] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  292.535416][T12366] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  292.555518][ T5194] IPVS: starting estimator thread 0...
[  292.576163][T12498] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  292.677197][T12501] IPVS: using max 16 ests per chain, 38400 per kthread
[  292.779483][T12506] nbd: must specify a size in bytes for the device
[  292.865657][T12366] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  292.879629][T12509] Bluetooth: hci3: invalid length 0, exp 2 for type 22
[  292.899226][T12366] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  292.942597][T12366] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  292.995030][T12366] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  293.380512][T12366] 8021q: adding VLAN 0 to HW filter on device bond0
[  293.443824][T12366] 8021q: adding VLAN 0 to HW filter on device team0
[  293.482951][   T57] bridge0: port 1(bridge_slave_0) entered blocking state
[  293.490405][   T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[  293.551711][ T5161] bridge0: port 2(bridge_slave_1) entered blocking state
[  293.558989][ T5161] bridge0: port 2(bridge_slave_1) entered forwarding state
[  293.801164][T12366] 8021q: adding VLAN 0 to HW filter on device batadv0
[  293.903035][T12553] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'.
[  293.928451][T12553] tc_dump_action: action bad kind
[  294.083452][T12559] Bluetooth: hci3: invalid length 0, exp 2 for type 22
[  294.348301][T12571] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.3'.
[  294.454787][T12366] veth0_vlan: entered promiscuous mode
[  294.481155][T12366] veth1_vlan: entered promiscuous mode
[  294.603569][T12366] veth0_macvtap: entered promiscuous mode
[  294.626150][T12366] veth1_macvtap: entered promiscuous mode
[  294.716929][T12366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  294.737406][T12366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  294.758102][T12366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  294.778296][T12366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  294.798536][T12366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  294.826304][T12366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  294.848569][T12366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  294.879423][T12590] Bluetooth: hci3: invalid length 0, exp 2 for type 22
[  294.886823][T12366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  294.919575][T12366] batman_adv: batadv0: Interface activated: batadv_slave_0
[  294.970436][T12366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  294.995390][T12366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  295.005807][T12366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  295.016487][T12366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  295.058850][T12366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  295.090677][T12366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  295.128407][T12366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  295.154653][T12366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  295.178161][T12366] batman_adv: batadv0: Interface activated: batadv_slave_1
[  295.193661][   T29] audit: type=1804 audit(1718083728.365:20): pid=12601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1631134431/syzkaller.jGykDb/288/cgroup.controllers" dev="sda1" ino=1945 res=1 errno=0
[  295.198618][T12601] x_tables: duplicate underflow at hook 2
[  295.257057][T12607] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'.
[  295.313576][T12603] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  295.327451][T12366] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  295.345772][T12366] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  295.369628][T12366] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  295.388810][T12366] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  295.409616][T12606] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[  295.483204][T12607] team_slave_0: left promiscuous mode
[  295.491009][T12607] team_slave_0: left allmulticast mode
[  295.545084][T12607] team0: Port device team_slave_0 removed
[  295.554709][T12607] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  295.675796][T12620] Bluetooth: hci3: invalid length 0, exp 2 for type 22
[  295.822369][ T2788] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  295.853717][ T2788] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  295.907818][  T949] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  295.926470][  T949] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  296.024105][T12632] sctp: [Deprecated]: syz-executor.2 (pid 12632) Use of int in max_burst socket option.
[  296.024105][T12632] Use struct sctp_assoc_value instead
[  296.335794][T12654] Bluetooth: hci3: invalid length 0, exp 2 for type 21
[  296.388402][   T29] audit: type=1804 audit(1718083729.555:21): pid=12645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2680497858/syzkaller.gmMHRR/1/cgroup.controllers" dev="sda1" ino=1949 res=1 errno=0
[  296.427370][T12645] x_tables: duplicate underflow at hook 2
[  296.462957][T12645] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[  296.709507][T12670] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'.
[  296.793830][T12664] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  296.865577][T12675] sctp: [Deprecated]: syz-executor.0 (pid 12675) Use of int in max_burst socket option.
[  296.865577][T12675] Use struct sctp_assoc_value instead
[  296.976285][   T29] audit: type=1804 audit(1718083730.145:22): pid=12666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1226957657/syzkaller.vPmEab/150/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0
[  297.103172][T12683] sctp: [Deprecated]: syz-executor.0 (pid 12683) Use of int in max_burst socket option.
[  297.103172][T12683] Use struct sctp_assoc_value instead
[  297.135143][T12688] sctp: [Deprecated]: syz-executor.0 (pid 12688) Use of int in max_burst socket option.
[  297.135143][T12688] Use struct sctp_assoc_value instead
[  297.239183][T12695] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'.
[  297.299382][T12697] Bluetooth: hci3: invalid length 0, exp 2 for type 20
[  297.613228][   T29] audit: type=1804 audit(1718083730.785:23): pid=12709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1226957657/syzkaller.vPmEab/153/cgroup.controllers" dev="sda1" ino=1949 res=1 errno=0
[  297.630950][T12709] x_tables: duplicate underflow at hook 2
[  297.707934][T12709] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  297.878096][T12724] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[  297.897499][T12724] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.4'.
[  297.913527][T12724] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  297.935183][T12724] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  297.956131][T12731] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'.
[  297.967153][T12732] Bluetooth: hci3: invalid length 0, exp 2 for type 20
[  298.152416][T12740] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  298.262180][   T29] audit: type=1804 audit(1718083731.435:24): pid=12737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1226957657/syzkaller.vPmEab/155/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0
[  298.281799][T12744] bond1 (unregistering): Released all slaves
[  298.349539][T12741] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'.
[  298.442406][T12743] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  298.649972][T12757] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  298.904560][T12770] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'.
[  298.948559][   T29] audit: type=1804 audit(1718083732.115:25): pid=12767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2680497858/syzkaller.gmMHRR/8/cgroup.controllers" dev="sda1" ino=1938 res=1 errno=0
[  298.999850][T12773] Bluetooth: hci3: invalid length 0, exp 2 for type 20
[  299.006593][T12767] x_tables: duplicate underflow at hook 2
[  299.023687][T12767] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[  299.355776][   T29] audit: type=1804 audit(1718083732.525:26): pid=12776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2189984584/syzkaller.SSK6fu/170/cgroup.controllers" dev="sda1" ino=1969 res=1 errno=0
[  299.747619][T12798] Bluetooth: hci3: invalid length 0, exp 2 for type 20
[  299.829611][T12803] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'.
[  299.846319][T12806] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  299.959930][T12811] netlink: 'syz-executor.3': attribute type 16 has an invalid length.
[  299.960204][T12812] bond1 (unregistering): Released all slaves
[  299.968573][T12811] netlink: 'syz-executor.3': attribute type 3 has an invalid length.
[  299.968598][T12811] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'.
[  300.227787][T12825] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  300.320394][   T29] audit: type=1804 audit(1718083733.495:27): pid=12816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1631134431/syzkaller.jGykDb/302/cgroup.controllers" dev="sda1" ino=1945 res=1 errno=0
[  300.451494][T12831] netlink: zone id is out of range
[  300.464237][T12831] netlink: zone id is out of range
[  300.499607][T12831] netlink: zone id is out of range
[  300.509194][T12831] netlink: zone id is out of range
[  300.533831][T12831] netlink: zone id is out of range
[  300.553196][T12831] netlink: zone id is out of range
[  300.580586][T12831] netlink: zone id is out of range
[  300.598888][T12843] Bluetooth: hci3: invalid length 0, exp 2 for type 20
[  300.606394][T12831] netlink: zone id is out of range
[  300.619188][T12831] netlink: zone id is out of range
[  300.649122][T12831] netlink: zone id is out of range
[  300.683948][T12831] netlink: set zone limit has 4 unknown bytes
[  300.921071][   T29] audit: type=1804 audit(1718083734.085:28): pid=12845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1631134431/syzkaller.jGykDb/304/cgroup.controllers" dev="sda1" ino=1945 res=1 errno=0
[  301.232005][T12873] netlink: 'syz-executor.4': attribute type 12 has an invalid length.
[  301.290697][T12873] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  301.300121][T12873] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  301.309309][T12873] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  301.318140][T12873] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  301.394514][T12873] vxlan0: entered promiscuous mode
[  301.450721][   T29] audit: type=1804 audit(1718083734.625:29): pid=12871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1239603368/syzkaller.oZREp8/165/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0
[  301.519714][T12885] netlink: 'syz-executor.0': attribute type 3 has an invalid length.
[  301.528602][T12885] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  301.541898][T12884] Bluetooth: hci3: invalid length 0, exp 2 for type 20
[  301.554627][T12885] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  301.603359][T12887] netlink: zone id is out of range
[  301.613712][T12887] netlink: zone id is out of range
[  301.628867][T12887] netlink: zone id is out of range
[  301.637803][T12887] netlink: zone id is out of range
[  301.649806][T12887] netlink: zone id is out of range
[  302.010694][   T29] audit: type=1804 audit(1718083735.185:30): pid=12895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1226957657/syzkaller.vPmEab/162/cgroup.controllers" dev="sda1" ino=1963 res=1 errno=0
[  302.436148][T12924] Bluetooth: hci3: invalid length 0, exp 2 for type 19
[  302.969180][T12946] __nla_validate_parse: 5 callbacks suppressed
[  302.969203][T12946] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'.
[  303.056212][T12947] netlink: 'syz-executor.2': attribute type 3 has an invalid length.
[  303.089440][T12947] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.2'.
[  303.114161][   T29] audit: type=1804 audit(1718083736.285:31): pid=12940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1226957657/syzkaller.vPmEab/166/cgroup.controllers" dev="sda1" ino=1962 res=1 errno=0
[  303.167935][T12947] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  303.229591][T12947] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  303.311054][T12956] Bluetooth: hci3: invalid length 0, exp 2 for type 19
[  303.581905][   T29] audit: type=1804 audit(1718083736.755:32): pid=12957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1226957657/syzkaller.vPmEab/167/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0
[  304.186828][T12994] Bluetooth: hci3: invalid length 0, exp 2 for type 19
[  304.606219][T13013] netlink: 'syz-executor.2': attribute type 3 has an invalid length.
[  304.632252][T13013] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.2'.
[  304.657508][T13013] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  304.677285][T13013] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  305.008439][T13032] Bluetooth: hci3: invalid length 0, exp 2 for type 19
[  305.570436][   T29] audit: type=1804 audit(1718083738.745:33): pid=13049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2680497858/syzkaller.gmMHRR/28/cgroup.controllers" dev="sda1" ino=1970 res=1 errno=0
[  305.854628][   T29] audit: type=1804 audit(1718083739.025:34): pid=13045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2189984584/syzkaller.SSK6fu/191/cgroup.controllers" dev="sda1" ino=1966 res=1 errno=0
[  306.097357][T13066] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'.
[  306.269253][T13070] Bluetooth: hci3: invalid length 0, exp 2 for type 19
[  307.037413][T13107] Bluetooth: hci3: invalid length 0, exp 2 for type 19
[  307.190344][T13112] netlink: 'syz-executor.1': attribute type 11 has an invalid length.
[  307.215089][T13112] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  307.909219][T13130] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'.
[  308.169814][   T29] audit: type=1804 audit(1718083741.345:35): pid=13137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1239603368/syzkaller.oZREp8/193/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0
[  308.641110][T13169] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[  308.673744][T13169] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[  309.462111][ T5128] Bluetooth: hci5: command 0x0406 tx timeout
[  309.835282][T13221] xt_TCPMSS: Only works on TCP SYN packets
[  310.176670][T13246] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  310.201264][T13246] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[  310.230318][T13246] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  310.258442][T13249] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'.
[  310.558371][T13261] xt_TCPMSS: Only works on TCP SYN packets
[  311.069539][   T29] audit: type=1804 audit(1718083744.245:36): pid=13275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1239603368/syzkaller.oZREp8/199/cgroup.controllers" dev="sda1" ino=1966 res=1 errno=0
[  311.168590][T13293] xt_TCPMSS: Only works on TCP SYN packets
[  311.568555][T13314] netlink: 'syz-executor.4': attribute type 10 has an invalid length.
[  311.660692][T13314] team0: Port device netdevsim0 added
[  311.958847][   T29] audit: type=1804 audit(1718083745.115:37): pid=13324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1239603368/syzkaller.oZREp8/203/cgroup.controllers" dev="sda1" ino=1969 res=1 errno=0
[  312.210898][T13337] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  312.232150][T13337] batman_adv: batadv0: Removing interface: batadv_slave_1
[  312.258369][T13337] net_ratelimit: 18 callbacks suppressed
[  312.258392][T13337] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check.
[  312.723820][T13356] Bluetooth: hci3: invalid length 0, exp 2 for type 21
[  312.868238][T13359] Bluetooth: hci3: invalid length 0, exp 2 for type 19
[  313.328119][T13388] xt_TCPMSS: Only works on TCP SYN packets
[  314.067615][T13424] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  314.099633][T13425] Bluetooth: hci3: invalid length 0, exp 2 for type 21
[  314.152459][T13427] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  314.163981][T13427] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  314.172925][T13427] batman_adv: batadv0: Removing interface: batadv_slave_0
[  314.181592][T13427] batman_adv: batadv0: Interface deactivated: macsec1
[  314.188498][T13427] batman_adv: batadv0: Removing interface: macsec1
[  314.257061][T13432] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  314.288222][T13432] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[  314.304301][T13432] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'.
[  314.340546][T13432] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.3'.
[  314.394867][   T29] audit: type=1804 audit(1718083747.565:38): pid=13440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1631134431/syzkaller.jGykDb/343/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0
[  314.467916][T13444] netlink: 'syz-executor.2': attribute type 21 has an invalid length.
[  314.832659][T13462] Bluetooth: hci3: invalid length 0, exp 2 for type 21
[  315.172061][T13483] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  315.198432][T13483] batman_adv: batadv0: Removing interface: team0
[  315.220567][T13483] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  315.250189][T13483] batman_adv: batadv0: Removing interface: batadv_slave_0
[  315.289805][T13483] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  315.307779][T13483] batman_adv: batadv0: Removing interface: batadv_slave_1
[  315.459045][T13486] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  315.478838][T13489] netlink: 'syz-executor.0': attribute type 2 has an invalid length.
[  315.518201][T13489] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
[  315.579399][T13494] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.0'.
[  316.219671][T13530] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  316.231387][T13527] Bluetooth: hci3: invalid length 0, exp 2 for type 22
[  316.244962][T13530] batman_adv: batadv0: Removing interface: batadv_slave_0
[  316.271927][T13530] batman_adv: batadv0: Removing interface: batadv_slave_1
[  316.272874][T13533] xt_TCPMSS: Only works on TCP SYN packets
[  316.617673][T13553] Bluetooth: hci3: invalid length 0, exp 2 for type 17
[  316.964576][T11108] bridge0: port 2(bridge_slave_1) entered disabled state
[  317.484492][   T29] audit: type=1804 audit(1718083750.655:39): pid=13602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1239603368/syzkaller.oZREp8/227/cgroup.controllers" dev="sda1" ino=1963 res=1 errno=0
[  317.621898][ T1247] ieee802154 phy1 wpan1: encryption failed: -22
[  317.632553][T13610] Bluetooth: hci3: invalid length 0, exp 2 for type 22
[  317.941104][T13626] lo speed is unknown, defaulting to 1000
[  318.262997][   T29] audit: type=1804 audit(1718083751.435:40): pid=13633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1631134431/syzkaller.jGykDb/362/cgroup.controllers" dev="sda1" ino=1962 res=1 errno=0
[  319.510614][T13683] __nla_validate_parse: 5 callbacks suppressed
[  319.510638][T13683] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.3'.
[  319.655214][   T29] audit: type=1804 audit(1718083752.825:41): pid=13679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2680497858/syzkaller.gmMHRR/73/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0
[  320.391323][T13721] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.3'.
[  320.454606][   T29] audit: type=1804 audit(1718083753.625:42): pid=13717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2680497858/syzkaller.gmMHRR/77/cgroup.controllers" dev="sda1" ino=1962 res=1 errno=0
[  320.748873][T13732] lo speed is unknown, defaulting to 1000
[  320.831018][T13738] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[  320.846074][T13738] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[  321.145728][T13750] netlink: 45 bytes leftover after parsing attributes in process `syz-executor.1'.
[  321.511063][T13759] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.3'.
[  321.901282][   T29] audit: type=1804 audit(1718083755.065:43): pid=13765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1226957657/syzkaller.vPmEab/234/cgroup.controllers" dev="sda1" ino=1953 res=1 errno=0
[  322.006804][T13773] bridge0: entered promiscuous mode
[  322.047207][T13773] bridge0: left promiscuous mode
[  322.135174][T13782] Bluetooth: hci3: invalid length 0, exp 2 for type 22
[  322.153841][T13778] veth0_vlan: entered allmulticast mode
[  322.529032][T13798] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.3'.
[  322.710633][   T29] audit: type=1804 audit(1718083755.885:44): pid=13800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1631134431/syzkaller.jGykDb/376/cgroup.controllers" dev="sda1" ino=1945 res=1 errno=0
[  322.809139][   T29] audit: type=1804 audit(1718083755.955:45): pid=13797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2189984584/syzkaller.SSK6fu/249/cgroup.controllers" dev="sda1" ino=1932 res=1 errno=0
[  323.256933][T13834] Bluetooth: hci3: invalid length 0, exp 2 for type 22
[  323.398851][   T29] audit: type=1804 audit(1718083756.565:46): pid=13839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1239603368/syzkaller.oZREp8/251/cgroup.controllers" dev="sda1" ino=1963 res=1 errno=0
[  323.473660][T13846] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'.
[  323.829947][T13872] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'.
[  323.842695][T13872] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'.
[  324.071819][T13882] Bluetooth: hci3: invalid length 0, exp 2 for type 22
[  324.337018][   T29] audit: type=1800 audit(1718083757.505:47): pid=13894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1961 res=0 errno=0
[  324.685204][T13907] lo speed is unknown, defaulting to 1000
[  324.863658][T13919] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  324.991690][   T29] audit: type=1800 audit(1718083758.165:48): pid=13925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1961 res=0 errno=0
[  325.328255][T13936] __nla_validate_parse: 1 callbacks suppressed
[  325.328286][T13936] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
[  325.376584][T13941] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.0'.
[  325.580841][T13948] netlink: 'syz-executor.0': attribute type 39 has an invalid length.
[  325.838570][T13961] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  325.864899][T13961] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.1'.
[  325.951482][T13967] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'.
[  325.970756][T13966] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.1'.
[  326.060905][T13971] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.3'.
[  326.243891][T13974] lo speed is unknown, defaulting to 1000
[  326.302399][T13977] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'.
[  327.031920][T14005] Bluetooth: hci3: invalid length 0, exp 2 for type 22
[  327.059601][T14002] netlink: 428 bytes leftover after parsing attributes in process `syz-executor.1'.
[  327.094259][T14002] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'.
[  327.127925][T14006] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.0'.
[  328.211532][T14055] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  328.859891][T14091] netlink: zone id is out of range
[  328.914365][   T29] audit: type=1804 audit(1718083762.085:49): pid=14087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1631134431/syzkaller.jGykDb/407/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0
[  329.050736][T14098] Bluetooth: hci3: invalid length 0, exp 2 for type 18
[  329.088710][T14100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  329.520361][   T29] audit: type=1804 audit(1718083762.695:50): pid=14123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1239603368/syzkaller.oZREp8/280/cgroup.controllers" dev="sda1" ino=1962 res=1 errno=0
[  329.573049][   T29] audit: type=1804 audit(1718083762.745:51): pid=14121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1631134431/syzkaller.jGykDb/411/cgroup.controllers" dev="sda1" ino=1953 res=1 errno=0
[  329.809457][T14137] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  329.932645][T14143] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
[  330.099043][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  330.302734][   T29] audit: type=1804 audit(1718083763.455:52): pid=14148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1226957657/syzkaller.vPmEab/268/cgroup.controllers" dev="sda1" ino=1948 res=1 errno=0
[  330.376136][T14163] __nla_validate_parse: 6 callbacks suppressed
[  330.376161][T14163] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[  330.379203][T14161] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[  330.385673][T14163] netlink: set zone limit has 8 unknown bytes
[  330.686188][T14184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  330.787886][T14190] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.0'.
[  330.923790][   T29] audit: type=1804 audit(1718083764.095:53): pid=14192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1226957657/syzkaller.vPmEab/272/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0
[  331.027514][T14195] syzkaller0: entered promiscuous mode
[  331.048914][T14195] syzkaller0: entered allmulticast mode
[  331.139809][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  331.274413][   T29] audit: type=1804 audit(1718083764.445:54): pid=14200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1226957657/syzkaller.vPmEab/274/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0
[  331.698971][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  332.107633][T14223] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.2'.
[  332.738985][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  333.625011][T14218] mac80211_hwsim hwsim32 wlan1: entered promiscuous mode
[  333.632537][T14218] mac80211_hwsim hwsim32 wlan1: entered allmulticast mode
[  334.006515][   T29] audit: type=1804 audit(1718083767.175:55): pid=14240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2189984584/syzkaller.SSK6fu/288/cgroup.controllers" dev="sda1" ino=1934 res=1 errno=0
[  334.307159][T14260] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.3'.
[  334.325439][T14256] syzkaller0: entered promiscuous mode
[  334.331225][T14256] syzkaller0: entered allmulticast mode
[  334.562204][T14271] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.3'.
[  336.549415][   T29] audit: type=1804 audit(1718083769.715:56): pid=14280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2189984584/syzkaller.SSK6fu/291/cgroup.controllers" dev="sda1" ino=1940 res=1 errno=0
[  336.910789][T14304] syzkaller0: entered promiscuous mode
[  336.916458][T14304] syzkaller0: entered allmulticast mode
[  337.059326][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  337.727204][T14315] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  337.751128][T14315] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  337.869422][ T5166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  337.988375][   T29] audit: type=1804 audit(1718083771.155:57): pid=14321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1631134431/syzkaller.jGykDb/431/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0
[  338.308007][T14329] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[  338.330750][T14329] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[  339.108176][T14322] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  339.129117][ T5161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  339.605827][T14353] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  339.677138][   T29] audit: type=1804 audit(1718083772.845:58): pid=14346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1631134431/syzkaller.jGykDb/435/cgroup.controllers" dev="sda1" ino=1949 res=1 errno=0
[  339.860069][ T5161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  339.926503][   T29] audit: type=1804 audit(1718083773.095:59): pid=14360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1239603368/syzkaller.oZREp8/312/cgroup.controllers" dev="sda1" ino=1963 res=1 errno=0
[  339.991070][T14372] Bluetooth: hci3: invalid length 0, exp 2 for type 17
[  340.178867][ T5116] Bluetooth: hci3: command 0x0406 tx timeout
[  340.182258][ T5113] Bluetooth: hci2: command 0x0406 tx timeout
[  340.286294][T14377] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  340.618087][   T29] audit: type=1804 audit(1718083773.785:60): pid=14397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1239603368/syzkaller.oZREp8/316/cgroup.controllers" dev="sda1" ino=1934 res=1 errno=0
[  341.107676][T14438] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  341.268433][   T29] audit: type=1804 audit(1718083774.435:61): pid=14437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1226957657/syzkaller.vPmEab/292/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0
[  341.412321][T14453] netlink: 'syz-executor.2': attribute type 30 has an invalid length.
[  341.500007][T14456] netlink: 'syz-executor.1': attribute type 32 has an invalid length.
[  341.508279][T14456] netlink: 664 bytes leftover after parsing attributes in process `syz-executor.1'.
[  341.522914][T14458] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[  341.823044][T14469] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'.
[  342.136572][   T29] audit: type=1804 audit(1718083775.305:62): pid=14482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1226957657/syzkaller.vPmEab/295/cgroup.controllers" dev="sda1" ino=1942 res=1 errno=0
[  342.217869][T14490] Bluetooth: hci3: invalid length 0, exp 2 for type 17
[  342.264940][   T29] audit: type=1804 audit(1718083775.435:63): pid=14486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1631134431/syzkaller.jGykDb/449/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0
[  342.624142][T14505] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[  342.656406][T14505] veth0_macvtap: left promiscuous mode
[  342.853109][T14524] Bluetooth: hci3: invalid length 0, exp 2 for type 17
[  342.954462][   T29] audit: type=1804 audit(1718083776.125:64): pid=14521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2189984584/syzkaller.SSK6fu/316/cgroup.controllers" dev="sda1" ino=1963 res=1 errno=0
[  343.039816][T14530] __nla_validate_parse: 1 callbacks suppressed
[  343.039839][T14530] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.1'.
[  343.252079][T14543] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'.
[  343.314721][T14547] netlink: 393 bytes leftover after parsing attributes in process `syz-executor.0'.
[  343.543452][T14562] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  343.615943][   T29] audit: type=1804 audit(1718083776.785:65): pid=14560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1631134431/syzkaller.jGykDb/458/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0
[  343.743802][T14570] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.0'.
[  343.927922][T14581] netlink: 393 bytes leftover after parsing attributes in process `syz-executor.2'.
[  344.310837][   T29] audit: type=1804 audit(1718083777.475:66): pid=14594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1631134431/syzkaller.jGykDb/462/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0
[  344.466719][T14616] netlink: 393 bytes leftover after parsing attributes in process `syz-executor.0'.
[  344.503238][T14620] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'.
[  344.537081][T14620] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  344.573501][T14620] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  344.583218][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  344.604784][T14624] tun0: tun_chr_ioctl cmd 2147767511
[  344.620793][T14620] bridge3: port 1(bridge_slave_1) entered blocking state
[  344.628189][T14620] bridge3: port 1(bridge_slave_1) entered disabled state
[  344.644494][T14620] bridge_slave_1: entered allmulticast mode
[  344.653698][T14620] bridge_slave_1: entered promiscuous mode
[  344.667949][T14624] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.0'.
[  344.697415][T14620] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  344.801703][T14633] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  344.811138][T14633] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  344.934970][   T29] audit: type=1804 audit(1718083778.105:67): pid=14635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1239603368/syzkaller.oZREp8/335/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0
[  345.123551][T14648] tipc: Failed to remove unknown binding: 66,1,1/0:2479900249/2479900251
[  345.135304][T14648] tipc: Failed to remove unknown binding: 66,1,1/0:2479900249/2479900251
[  345.145173][T14648] tipc: Failed to remove unknown binding: 66,1,1/0:2479900249/2479900251
[  345.305116][   T53] Bluetooth: hci1: command 0x0406 tx timeout
[  345.523040][T14662] syzkaller0: entered promiscuous mode
[  345.539415][T14662] syzkaller0: entered allmulticast mode
[  345.619161][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  345.824624][   T29] audit: type=1804 audit(1718083778.975:68): pid=14671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1226957657/syzkaller.vPmEab/311/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0
[  346.330979][   T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  346.342607][   T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  346.367647][   T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  346.386462][   T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  346.407991][   T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  346.424846][   T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  348.022069][T14678] lo speed is unknown, defaulting to 1000
[  348.119572][T14686] __nla_validate_parse: 4 callbacks suppressed
[  348.119597][T14686] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'.
[  348.186000][T14686] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
[  348.213256][T14686] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'.
[  348.232249][T14686] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'.
[  348.448149][T14701] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'.
[  348.459690][T14701] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'.
[  348.473636][T14701] netlink: 'syz-executor.2': attribute type 32 has an invalid length.
[  348.490576][T14701] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  348.508979][ T5128] Bluetooth: hci4: command tx timeout
[  348.531231][T14701] (unnamed net_device) (uninitialized): option coupled_control: invalid value (17)
[  348.588802][   T29] audit: type=1804 audit(1718083781.755:69): pid=14703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1226957657/syzkaller.vPmEab/316/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0
[  348.752343][T14717] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  348.771601][T14720] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[  348.902205][T14731] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  348.991476][T14719] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  349.025714][T14730] syzkaller0: entered promiscuous mode
[  349.032038][T14730] syzkaller0: entered allmulticast mode
[  350.580314][ T5128] Bluetooth: hci4: command tx timeout
[  351.148978][T14678] chnl_net:caif_netlink_parms(): no params data found
[  351.302446][T14678] bridge0: port 1(bridge_slave_0) entered blocking state
[  351.310113][T14678] bridge0: port 1(bridge_slave_0) entered disabled state
[  351.317894][T14678] bridge_slave_0: entered allmulticast mode
[  351.326309][T14678] bridge_slave_0: entered promiscuous mode
[  351.335132][T14678] bridge0: port 2(bridge_slave_1) entered blocking state
[  351.342673][T14678] bridge0: port 2(bridge_slave_1) entered disabled state
[  351.354693][T14678] bridge_slave_1: entered allmulticast mode
[  351.362461][T14678] bridge_slave_1: entered promiscuous mode
[  351.415997][   T29] audit: type=1804 audit(1718083784.585:70): pid=14751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1631134431/syzkaller.jGykDb/476/cgroup.controllers" dev="sda1" ino=1948 res=1 errno=0
[  351.459654][T14678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  351.473017][T14678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  351.515335][T14678] team0: Port device team_slave_0 added
[  351.526746][T14678] team0: Port device team_slave_1 added
[  351.557554][T14678] batman_adv: batadv0: Adding interface: batadv_slave_0
[  351.564840][T14678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  351.591203][T14678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  351.605204][T14678] batman_adv: batadv0: Adding interface: batadv_slave_1
[  351.612323][T14678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  351.638927][T14678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  351.687660][T14678] hsr_slave_0: entered promiscuous mode
[  351.695097][T14678] hsr_slave_1: entered promiscuous mode
[  351.702372][T14678] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  351.710279][T14678] Cannot create hsr debugfs directory
[  351.858362][T14678] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  351.869763][T14678] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  351.967246][T14678] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  351.977834][T14678] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  352.056079][T14678] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  352.069411][T14678] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  352.145583][T14678] team0: Port device netdevsim0 removed
[  352.155288][T14678] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  352.168155][T14678] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  352.313887][T14678] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  352.324745][T14678] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  352.336281][T14678] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  352.355313][T14678] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  352.452613][T14678] 8021q: adding VLAN 0 to HW filter on device bond0
[  352.478600][T14678] 8021q: adding VLAN 0 to HW filter on device team0
[  352.501614][ T5166] bridge0: port 1(bridge_slave_0) entered blocking state
[  352.508854][ T5166] bridge0: port 1(bridge_slave_0) entered forwarding state
[  352.520783][ T5166] bridge0: port 2(bridge_slave_1) entered blocking state
[  352.528001][ T5166] bridge0: port 2(bridge_slave_1) entered forwarding state
[  352.584349][T14678] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  352.660801][ T5128] Bluetooth: hci4: command tx timeout
[  352.742494][T14678] 8021q: adding VLAN 0 to HW filter on device batadv0
[  352.958071][T14678] veth0_vlan: entered promiscuous mode
[  352.973156][T14678] veth1_vlan: entered promiscuous mode
[  353.013633][T14678] veth0_macvtap: entered promiscuous mode
[  353.026217][T14678] veth1_macvtap: entered promiscuous mode
[  353.048039][T14678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  353.059372][T14678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  353.069299][T14678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  353.079822][T14678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  353.091273][T14678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  353.102133][T14678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  353.114287][T14678] batman_adv: batadv0: Interface activated: batadv_slave_0
[  353.129575][T14678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  353.141232][T14678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  353.151842][T14678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  353.162838][T14678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  353.172989][T14678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  353.183571][T14678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  353.196084][T14678] batman_adv: batadv0: Interface activated: batadv_slave_1
[  353.215288][T14678] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  353.225060][T14678] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  353.234425][T14678] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  353.243408][T14678] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  353.333905][   T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  353.351387][   T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  353.380008][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  353.390833][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  354.749709][ T5128] Bluetooth: hci4: command tx timeout
[  358.036942][ T2788] bridge_slave_1: left allmulticast mode
[  358.042985][ T2788] bridge_slave_1: left promiscuous mode
[  358.049199][ T2788] bridge0: port 2(bridge_slave_1) entered disabled state
[  358.058411][ T2788] bridge_slave_0: left allmulticast mode
[  358.065687][ T2788] bridge_slave_0: left promiscuous mode
[  358.072529][ T2788] bridge0: port 1(bridge_slave_0) entered disabled state
[  358.492543][ T2788] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  358.510031][ T2788] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  358.522443][ T2788] bond0 (unregistering): Released all slaves
[  358.967816][ T2788] hsr_slave_0: left promiscuous mode
[  359.028978][ T2788] hsr_slave_1: left promiscuous mode
[  359.069680][ T2788] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  359.096199][ T2788] batman_adv: batadv0: Removing interface: batadv_slave_0
[  359.145173][ T2788] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  359.169659][ T2788] batman_adv: batadv0: Removing interface: batadv_slave_1
[  359.262696][ T2788] veth1_macvtap: left promiscuous mode
[  359.273171][ T2788] veth0_macvtap: left promiscuous mode
[  359.281612][ T2788] veth1_vlan: left promiscuous mode
[  359.287036][ T2788] veth0_vlan: left promiscuous mode
[  359.791101][   T29] audit: type=1804 audit(1718083792.965:71): pid=14806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir363300396/syzkaller.IzkMVP/6/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0
[  360.164164][ T2788] team0 (unregistering): Port device team_slave_1 removed
[  360.215174][ T2788] team0 (unregistering): Port device team_slave_0 removed
[  360.754868][T14775] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  360.770431][T14775] __nla_validate_parse: 2 callbacks suppressed
[  360.770454][T14775] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'.
[  360.789849][T14775] bridge0: port 3(syz_tun) entered blocking state
[  360.797147][T14775] bridge0: port 3(syz_tun) entered disabled state
[  360.813135][T14775] syz_tun: entered allmulticast mode
[  360.821093][T14775] syz_tun: entered promiscuous mode
[  360.845310][T14792] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  360.859903][T14797] netlink: 216 bytes leftover after parsing attributes in process `syz-executor.1'.
[  361.012170][T14817] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  361.045229][T14817] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  361.108947][T14812] syzkaller0: entered promiscuous mode
[  361.116959][T14812] syzkaller0: entered allmulticast mode
[  361.429502][T14836] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.0'.
[  364.071225][T14874] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  364.086886][T14874] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  364.112882][T14879] sctp: [Deprecated]: syz-executor.2 (pid 14879) Use of int in max_burst socket option.
[  364.112882][T14879] Use struct sctp_assoc_value instead
[  364.141196][T14877] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  364.681399][T14922] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  364.715458][T14922] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  365.375228][T14962] sctp: [Deprecated]: syz-executor.1 (pid 14962) Use of int in max_burst socket option.
[  365.375228][T14962] Use struct sctp_assoc_value instead
[  365.684410][T14983] xt_NFQUEUE: number of total queues is 0
[  365.696711][T14981] netlink: 'syz-executor.4': attribute type 10 has an invalid length.
[  365.710441][T14981] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.4'.
[  366.920552][T15044] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.0'.
[  367.116104][T15062] netlink: 576 bytes leftover after parsing attributes in process `syz-executor.2'.
[  367.191816][T15062] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  368.259018][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  368.449987][T15134] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[  368.462738][T15138] xt_NFQUEUE: number of total queues is 0
[  368.721827][T15134] bond1: entered promiscuous mode
[  368.727596][T15134] bond1: entered allmulticast mode
[  368.767401][T15134] 8021q: adding VLAN 0 to HW filter on device bond1
[  368.962929][ T5128] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  368.975645][ T5128] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  368.988113][ T5128] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  368.999263][ T5128] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  369.008226][T15161] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'.
[  369.023432][ T5128] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  369.036069][ T5128] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  369.106135][T15157] lo speed is unknown, defaulting to 1000
[  369.299015][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  369.329063][T15170] sctp: [Deprecated]: syz-executor.0 (pid 15170) Use of struct sctp_assoc_value in delayed_ack socket option.
[  369.329063][T15170] Use struct sctp_sack_info instead
[  369.471488][T15173] netlink: 'syz-executor.1': attribute type 21 has an invalid length.
[  369.489608][T15173] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'.
[  369.499588][T15173] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'.
[  369.809067][T15157] chnl_net:caif_netlink_parms(): no params data found
[  370.121121][T15209] sctp: [Deprecated]: syz-executor.2 (pid 15209) Use of struct sctp_assoc_value in delayed_ack socket option.
[  370.121121][T15209] Use struct sctp_sack_info instead
[  370.146764][T15210] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  370.170155][T15157] bridge0: port 1(bridge_slave_0) entered blocking state
[  370.191713][T15157] bridge0: port 1(bridge_slave_0) entered disabled state
[  370.224510][T15207] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  370.224878][T15157] bridge_slave_0: entered allmulticast mode
[  370.259301][T15157] bridge_slave_0: entered promiscuous mode
[  370.289878][T15157] bridge0: port 2(bridge_slave_1) entered blocking state
[  370.310360][T15157] bridge0: port 2(bridge_slave_1) entered disabled state
[  370.317917][T15157] bridge_slave_1: entered allmulticast mode
[  370.353492][T15157] bridge_slave_1: entered promiscuous mode
[  370.507847][T15157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  370.607251][T15207] bond1: entered promiscuous mode
[  370.613711][T15207] bond1: entered allmulticast mode
[  370.621235][T15207] 8021q: adding VLAN 0 to HW filter on device bond1
[  370.634451][T15157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  370.744173][T15238] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'.
[  370.756505][T15157] team0: Port device team_slave_0 added
[  370.801813][T15157] team0: Port device team_slave_1 added
[  370.945132][T15157] batman_adv: batadv0: Adding interface: batadv_slave_0
[  370.976234][T15157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  371.032489][T15248] sctp: [Deprecated]: syz-executor.0 (pid 15248) Use of struct sctp_assoc_value in delayed_ack socket option.
[  371.032489][T15248] Use struct sctp_sack_info instead
[  371.043566][T15157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  371.091985][T15157] batman_adv: batadv0: Adding interface: batadv_slave_1
[  371.114946][T15157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  371.142358][ T5122] Bluetooth: hci0: command tx timeout
[  371.157592][T15157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  371.325380][T15265] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'.
[  371.385336][T15157] hsr_slave_0: entered promiscuous mode
[  371.396052][T15157] hsr_slave_1: entered promiscuous mode
[  371.403662][T15157] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  371.413608][T15157] Cannot create hsr debugfs directory
[  372.048328][T15157] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  372.049966][ T5162] IPv4: Oversized IP packet from 127.0.0.1
[  372.067852][    C1] IPv4: Oversized IP packet from 127.0.0.1
[  372.074744][    C1] IPv4: Oversized IP packet from 127.0.0.1
[  372.092880][T15295] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
[  372.222452][T15305] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.1'.
[  372.243111][T15305] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'.
[  372.269042][T15305] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  372.301755][T15157] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  372.347582][T15300] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
[  372.457980][T15157] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  372.673311][T15157] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  372.766276][T15321] netlink: 'syz-executor.1': attribute type 3 has an invalid length.
[  372.783520][T15321] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.1'.
[  373.011739][T15157] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  373.052001][T15157] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  373.096691][T15157] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  373.123411][T15157] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  373.133377][T15338] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'.
[  373.168106][T15338] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  373.187425][T15340] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.0'.
[  373.197346][T15338] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.2'.
[  373.208445][T15340] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
[  373.219644][ T5122] Bluetooth: hci0: command tx timeout
[  373.228920][T15340] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[  373.344671][T15338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  373.597477][T15157] 8021q: adding VLAN 0 to HW filter on device bond0
[  373.633453][T15157] 8021q: adding VLAN 0 to HW filter on device team0
[  373.700385][ T5162] bridge0: port 1(bridge_slave_0) entered blocking state
[  373.707589][ T5162] bridge0: port 1(bridge_slave_0) entered forwarding state
[  373.735887][ T5162] bridge0: port 2(bridge_slave_1) entered blocking state
[  373.743170][ T5162] bridge0: port 2(bridge_slave_1) entered forwarding state
[  374.021343][T15372] netlink: 'syz-executor.1': attribute type 4 has an invalid length.
[  374.105191][T15376] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  374.119206][T15382] netlink: 'syz-executor.1': attribute type 4 has an invalid length.
[  374.158369][T15376] netlink: 'syz-executor.2': attribute type 34 has an invalid length.
[  374.221844][T15386] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  374.325420][T15157] 8021q: adding VLAN 0 to HW filter on device batadv0
[  374.418993][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  374.465547][T15393] delete_channel: no stack
[  374.510995][T15157] veth0_vlan: entered promiscuous mode
[  374.542027][T15157] veth1_vlan: entered promiscuous mode
[  374.664053][T15157] veth0_macvtap: entered promiscuous mode
[  374.687309][T15157] veth1_macvtap: entered promiscuous mode
[  374.728299][T15157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  374.743933][T15157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  374.760490][T15157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  374.777148][T15157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  374.794481][T15157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  374.805885][T15157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  374.818564][T15157] batman_adv: batadv0: Interface activated: batadv_slave_0
[  374.866088][T15157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  374.903389][T15157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  374.925108][T15157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  374.945246][T15157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  374.973068][T15157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  374.992310][T15157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  375.008069][T15157] batman_adv: batadv0: Interface activated: batadv_slave_1
[  375.077532][T15157] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  375.095074][T15157] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  375.104553][T15157] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  375.121137][T15157] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  375.299069][ T5122] Bluetooth: hci0: command tx timeout
[  375.397355][T15419] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  375.434708][T15419] netlink: 'syz-executor.1': attribute type 34 has an invalid length.
[  375.458982][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  375.474445][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  375.512828][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  375.565074][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  375.599670][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  375.818258][T15437] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups)
[  375.891372][T15444] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow
[  376.862605][T15492] ipt_ECN: cannot use operation on non-tcp rule
[  377.382812][ T5122] Bluetooth: hci0: command tx timeout
[  379.074339][ T1247] ieee802154 phy1 wpan1: encryption failed: -22
[  379.497877][T15499] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  379.507067][T15499] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  379.516126][T15499] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  379.525186][T15499] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  379.536159][T15499] vxlan0: entered promiscuous mode
[  379.562092][T15499] vxlan0: entered allmulticast mode
[  379.619775][T15535] xt_CT: You must specify a L4 protocol and not use inversions on it
[  379.673053][   T12] team0: left allmulticast mode
[  379.678070][   T12] team_slave_1: left allmulticast mode
[  379.717772][   T12] team0: left promiscuous mode
[  379.737156][   T12] team_slave_1: left promiscuous mode
[  379.759703][   T12] bridge0: port 4(team0) entered disabled state
[  379.820309][   T12] geneve1: left allmulticast mode
[  379.844304][   T12] geneve1: left promiscuous mode
[  379.860346][   T12] bridge0: port 3(geneve1) entered disabled state
[  379.929720][   T12] bridge_slave_1: left allmulticast mode
[  379.946500][   T12] bridge_slave_1: left promiscuous mode
[  379.966263][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  379.977960][T15558] xt_NFQUEUE: number of total queues is 0
[  379.986406][   T12] bridge_slave_0: left allmulticast mode
[  380.003131][   T12] bridge_slave_0: left promiscuous mode
[  380.022825][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  380.913886][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  380.926604][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  380.938294][   T12] bond0 (unregistering): Released all slaves
[  381.153820][   T12] tipc: Left network mode
[  384.186341][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  385.218957][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  386.258935][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  411.972920][ T5128] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  411.984261][ T5128] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  411.997771][ T5128] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  412.021440][   T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  412.036451][   T53] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  412.046429][ T5113] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  412.058802][   T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  412.065947][ T5113] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  412.078929][   T53] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  412.089343][ T5113] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  412.097581][ T5113] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  412.114239][ T5113] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  412.229650][ T5113] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  412.239987][ T5113] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  412.265279][ T5113] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  412.297167][ T5113] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  412.312765][ T5113] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  412.324765][ T5113] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  412.399827][ T5122] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  412.417375][ T5122] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  412.426939][ T5122] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  412.443979][ T5122] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  412.454924][ T5122] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  412.456566][   T53] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  412.472075][   T53] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  412.473936][ T5122] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[  412.482799][   T53] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  412.494131][   T53] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  412.504832][   T53] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[  412.512935][   T53] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  414.188956][   T53] Bluetooth: hci6: command tx timeout
[  414.188996][ T5113] Bluetooth: hci3: command tx timeout
[  414.419057][ T5113] Bluetooth: hci7: command tx timeout
[  414.579104][ T5113] Bluetooth: hci8: command tx timeout
[  414.585441][ T5113] Bluetooth: hci9: command tx timeout
[  416.258820][   T53] Bluetooth: hci3: command tx timeout
[  416.267002][ T5113] Bluetooth: hci6: command tx timeout
[  416.499049][ T5113] Bluetooth: hci7: command tx timeout
[  416.668711][ T5113] Bluetooth: hci9: command tx timeout
[  416.674211][ T5113] Bluetooth: hci8: command tx timeout
[  418.339128][ T5113] Bluetooth: hci6: command tx timeout
[  418.344605][ T5113] Bluetooth: hci3: command tx timeout
[  418.579230][ T5113] Bluetooth: hci7: command tx timeout
[  418.739220][ T5113] Bluetooth: hci9: command tx timeout
[  418.739243][   T53] Bluetooth: hci8: command tx timeout
[  420.418917][   T53] Bluetooth: hci3: command tx timeout
[  420.424492][   T53] Bluetooth: hci6: command tx timeout
[  420.659194][   T53] Bluetooth: hci7: command tx timeout
[  420.825874][   T53] Bluetooth: hci9: command tx timeout
[  420.825895][ T5113] Bluetooth: hci8: command tx timeout
[  440.505211][ T1247] ieee802154 phy1 wpan1: encryption failed: -22
[  473.298831][ T5113] Bluetooth: hci4: command 0x0406 tx timeout
[  476.899606][ T5113] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  476.910164][ T5113] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  476.920933][ T5113] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  476.929579][ T5113] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  476.939145][ T5113] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3
[  476.946691][ T5113] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  477.000181][   T53] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  477.010846][   T53] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  477.030814][   T53] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  477.065089][   T53] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  477.078756][   T53] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3
[  477.094662][   T53] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  477.225911][   T53] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  477.239077][   T53] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  477.248859][   T53] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  477.270264][   T53] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  477.278462][   T53] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3
[  477.287743][   T53] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  477.411619][   T53] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  477.429056][   T53] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  477.438941][   T53] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  477.447194][   T53] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  477.456661][   T53] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3
[  477.465346][   T53] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  477.489973][ T5128] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  477.502517][ T5128] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  477.510959][ T5128] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  477.520830][ T5128] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  477.538807][ T5128] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3
[  477.546484][ T5128] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  479.059046][ T5113] Bluetooth: hci10: command tx timeout
[  479.148932][ T5113] Bluetooth: hci11: command tx timeout
[  479.388963][ T5113] Bluetooth: hci12: command tx timeout
[  479.539286][ T5113] Bluetooth: hci13: command tx timeout
[  479.618909][ T5113] Bluetooth: hci14: command tx timeout
[  481.139149][ T5113] Bluetooth: hci10: command tx timeout
[  481.218973][ T5113] Bluetooth: hci11: command tx timeout
[  481.465318][ T5113] Bluetooth: hci12: command tx timeout
[  481.618979][ T5113] Bluetooth: hci13: command tx timeout
[  481.708687][ T5113] Bluetooth: hci14: command tx timeout
[  483.218870][ T5113] Bluetooth: hci10: command tx timeout
[  483.300098][ T5113] Bluetooth: hci11: command tx timeout
[  483.538816][ T5113] Bluetooth: hci12: command tx timeout
[  483.707451][ T5113] Bluetooth: hci13: command tx timeout
[  483.778922][ T5113] Bluetooth: hci14: command tx timeout
[  485.299137][ T5113] Bluetooth: hci10: command tx timeout
[  485.379100][ T5113] Bluetooth: hci11: command tx timeout
[  485.618910][ T5113] Bluetooth: hci12: command tx timeout
[  485.779022][ T5113] Bluetooth: hci13: command tx timeout
[  485.858902][ T5113] Bluetooth: hci14: command tx timeout
[  493.778891][ T5128] Bluetooth: hci0: command 0x0406 tx timeout
[  501.948380][ T1247] ieee802154 phy1 wpan1: encryption failed: -22
[  525.621267][   T30] INFO: task kworker/u8:1:12 blocked for more than 143 seconds.
[  525.635948][   T30]       Not tainted 6.10.0-rc2-syzkaller-00242-g36534d3c5453 #0
[  525.644011][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
2024/06/11 05:32:38 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF
[  525.661759][   T30] task:kworker/u8:1    state:D stack:20824 pid:12    tgid:12    ppid:2      flags:0x00004000
[  525.672276][   T30] Workqueue: netns cleanup_net
[  525.677130][   T30] Call Trace:
[  525.709104][   T30]  <TASK>
[  525.712378][   T30]  __schedule+0x17e8/0x4a20
[  525.716957][   T30]  ? __pfx___schedule+0x10/0x10
[  525.741482][   T30]  ? __pfx_lock_release+0x10/0x10
[  525.746591][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  525.756879][   T30]  ? kthread_data+0x52/0xd0
[  525.764758][   T30]  ? schedule+0x90/0x320
[  525.775164][   T30]  ? wq_worker_sleeping+0x66/0x240
[  525.780577][   T30]  ? schedule+0x90/0x320
[  525.785143][   T30]  schedule+0x14b/0x320
[  525.795283][   T30]  schedule_preempt_disabled+0x13/0x30
[  525.800908][   T30]  __mutex_lock+0x6a4/0xd70
[  525.807344][   T30]  ? __mutex_lock+0x527/0xd70
[  525.818087][   T30]  ? ieee80211_unregister_hw+0x55/0x2c0
[  525.823862][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  525.829172][   T30]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  525.835122][   T30]  ? rcu_is_watching+0x15/0xb0
[  525.845999][   T30]  ieee80211_unregister_hw+0x55/0x2c0
[  525.853137][   T30]  mac80211_hwsim_del_radio+0x2c2/0x4c0
[  525.864760][   T30]  ? __pfx_mac80211_hwsim_del_radio+0x10/0x10
[  525.874595][   T30]  hwsim_exit_net+0x5c1/0x670
[  525.879592][   T30]  ? __pfx_hwsim_exit_net+0x10/0x10
[  525.884846][   T30]  ? __ip_vs_dev_cleanup_batch+0x239/0x260
[  525.897294][   T30]  cleanup_net+0x802/0xcc0
[  525.902205][   T30]  ? __pfx_cleanup_net+0x10/0x10
[  525.907231][   T30]  ? process_scheduled_works+0x945/0x1830
[  525.921080][   T30]  process_scheduled_works+0xa2c/0x1830
[  525.926846][   T30]  ? __pfx_process_scheduled_works+0x10/0x10
[  525.935398][   T30]  ? assign_work+0x364/0x3d0
[  525.944955][   T30]  worker_thread+0x86d/0xd70
[  525.949828][   T30]  ? __kthread_parkme+0x169/0x1d0
[  525.954912][   T30]  ? __pfx_worker_thread+0x10/0x10
[  525.967639][   T30]  kthread+0x2f0/0x390
[  525.971992][   T30]  ? __pfx_worker_thread+0x10/0x10
[  525.977212][   T30]  ? __pfx_kthread+0x10/0x10
[  525.991448][   T30]  ret_from_fork+0x4b/0x80
[  525.996111][   T30]  ? __pfx_kthread+0x10/0x10
[  526.003412][   T30]  ret_from_fork_asm+0x1a/0x30
[  526.008334][   T30]  </TASK>
[  526.016863][   T30] INFO: task kworker/0:2:57 blocked for more than 143 seconds.
[  526.029067][   T30]       Not tainted 6.10.0-rc2-syzkaller-00242-g36534d3c5453 #0
[  526.036746][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  526.051419][   T30] task:kworker/0:2     state:D stack:20848 pid:57    tgid:57    ppid:2      flags:0x00004000
[  526.062066][   T30] Workqueue: events linkwatch_event
[  526.067319][   T30] Call Trace:
[  526.088599][   T30]  <TASK>
[  526.091682][   T30]  __schedule+0x17e8/0x4a20
[  526.096259][   T30]  ? __pfx___schedule+0x10/0x10
[  526.128839][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  526.135109][   T30]  ? __pfx_lock_release+0x10/0x10
[  526.158628][   T30]  ? kick_pool+0x45c/0x620
[  526.163131][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[  526.188222][   T30]  ? schedule+0x90/0x320
[  526.192666][   T30]  schedule+0x14b/0x320
[  526.196968][   T30]  schedule_preempt_disabled+0x13/0x30
[  526.220084][   T30]  __mutex_lock+0x6a4/0xd70
[  526.224663][   T30]  ? __mutex_lock+0x527/0xd70
[  526.238701][   T30]  ? linkwatch_event+0xe/0x60
[  526.243547][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  526.259002][   T30]  ? process_scheduled_works+0x945/0x1830
[  526.264802][   T30]  linkwatch_event+0xe/0x60
[