last executing test programs:

2.09539175s ago: executing program 4:
epoll_create(0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x34, r0, 0x401, 0xf0, 0x0, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x34}}, 0x0)

1.987687928s ago: executing program 1:
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000640)={0x0, 0x8, &(0x7f0000000600)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0)

1.926464937s ago: executing program 4:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc80529a}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x148}, 0x1, 0x0, 0x0, 0x8844}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0xfffffffffffffd5e)
r3 = epoll_create1(0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @fixed, 0x80}, 0x51)
shutdown(r4, 0x0)
recvmmsg(r4, &(0x7f0000000080), 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000780))
epoll_pwait(r3, &(0x7f0000000180)=[{}], 0x1, 0x0, 0x0, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000300000000000000000000000000000000000000b66b6e000000000000000000"], 0xb8}}, 0x0)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$net_dm(&(0x7f0000000280), r5)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x2000000000000003, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000006860c736f4b9502cbf08654b5f9fdfd53ad1c236bcb0b23de28467039863959190b726a1792efd3ce7aa987173698bc6fde389f73de72f66ddcb1b9bc2225437119e320b0a6adb6fab1d6ff5cd4dd051054541cb31089d3249278e311a79fc9f628ce1f9e35d4097a4bf95dcd509a2044f0051a5736e3aaf2fdd2bb5a3ba22fe27afe45a8d8447af576b0859f559bcf331325622cc766a2d5b1a738465fb4bb2bcf7bd7e74631301fb4de68c4eaa4e39b528694c41"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90)
r6 = socket$inet6(0xa, 0x1, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000140)=ANY=[@ANYBLOB="66696c74657200810000000000000000000000000000000000000000000000001000000a69bbfa853b"], 0x0)
bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
pipe(&(0x7f00000005c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendfile(r7, r8, 0x0, 0x900000001)

1.691102247s ago: executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x19}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}], 0x1c)
r2 = socket$inet6(0xa, 0xa, 0x1fe)
setsockopt$sock_int(r2, 0x1, 0x5, &(0x7f0000000000)=0x3f8, 0x4)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f0000000240)=0x90)
bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
r4 = socket$inet6(0xa, 0x5, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', <r6=>0x0, 0x1, 0x8000, 0x1, 0x5, {{0x27, 0x4, 0x0, 0x3c, 0x9c, 0x68, 0x0, 0x1f, 0x29, 0x0, @broadcast, @local, {[@generic={0x89, 0x2}, @cipso={0x86, 0x5f, 0x2, [{0x2, 0xe, "b3a4b7a8f6463c04b04fc777"}, {0x7, 0x11, "0f435a805a0be048ec385883aa6386"}, {0x7, 0x11, "17b9811d14e86fcb0e8f48646b7330"}, {0x1, 0x7, "2846f55904"}, {0x0, 0x6, "e50a275d"}, {0x0, 0x4, "18fe"}, {0x2, 0x8, "f821763f8011"}, {0x7, 0x10, "a0445919f56cac0eeed756c5ef6b"}]}, @lsrr={0x83, 0x27, 0xe1, [@loopback, @broadcast, @empty, @local, @rand_addr=0x64010102, @remote, @remote, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}})
pipe(&(0x7f0000000300)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x18, 0x3c, &(0x7f0000000980)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x39c, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @generic={0x1, 0x8, 0x0, 0x7, 0x1ff}, @generic={0x6, 0xc, 0x5, 0x8}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x81}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @func={0x85, 0x0, 0x1, 0x0, 0x2}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000004c0)='GPL\x00', 0x0, 0xcc, &(0x7f0000000640)=""/204, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000005c0)={0x0, 0x5, 0xecb9}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f00000007c0)=[{0x0, 0x3, 0x7, 0x8}, {0x0, 0x5, 0xc, 0x7}, {0x1, 0x1, 0x10, 0x6}, {0x1, 0x4, 0x0, 0xb}, {0x4, 0x2, 0xb, 0xb}], 0x10, 0x2}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x18, 0x4, &(0x7f0000000100)=@raw=[@map_idx_val={0x18, 0x7, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x5}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xd}], &(0x7f0000000280)='GPL\x00', 0xfff, 0x0, 0x0, 0x40f00, 0x6c, '\x00', r6, 0xa, r8, 0x8, &(0x7f0000000440)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x3, 0xd, 0x3, 0xa514}, 0x10, 0xffffffffffffffff, r9, 0x3, &(0x7f0000000d40)=[r1, r1, r1, r1, r1, r1, r1, r1, r1, r1, r7], &(0x7f0000000c40)=[{0x2, 0x4, 0x4, 0x4}, {0x4, 0x2, 0x9, 0x2}, {0x4, 0x4, 0xd, 0x6}], 0x10, 0x6}, 0x90)
getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r10=>0x0})
bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r10, 0x3, {0x0, 0x1}, 0xfd}, 0x18)
r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r11, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xfffffffc}, 0x1c)
syz_emit_ethernet(0x6e, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x3a, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}, [], "0a520b4c951ee12e"}}}}}}}, 0x0)
setsockopt$sock_int(r4, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4)
bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)

1.408155603s ago: executing program 2:
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x5452, &(0x7f00000006c0))
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async)
r2 = socket$inet(0x2, 0x80000, 0xebe0a35)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-384-generic\x00'}, 0x58) (async)
r5 = accept4(r4, 0x0, 0x0, 0x0)
sendmmsg$alg(r5, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0)
socketpair(0x28, 0x6, 0x5, &(0x7f0000000000))
syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r5) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) (async)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) (async)
r7 = accept4(r6, 0x0, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)="03", 0x1}, {&(0x7f0000000300)="f0d3", 0x7fffefff}, {&(0x7f0000000380)="abc1ef25d20a7e57ff2ba8ed91", 0xd}], 0x3}, 0x0) (async)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) (async)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async)
sendto$inet(r2, &(0x7f0000000180)='{', 0x1, 0x0, 0x0, 0x0)
sendmmsg$inet(r2, &(0x7f00000021c0)=[{{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000002240)="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", 0x44d}], 0x1}}], 0x1, 0x0) (async)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000004400000010000300", @ANYRES32=r10, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) (async)
sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x200, r8, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x2}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x4}, @NL80211_ATTR_IE={0x1b4, 0x2a, [@prep={0x83, 0x1f, {{}, 0xf8, 0x4, @broadcast, 0xa0, @void, 0x8, 0x5, @device_b, 0x1000}}, @ibss={0x6, 0x2, 0xb5}, @dsss={0x3, 0x1, 0xaf}, @random={0x40, 0x93, "9ef28b8a35e27fd824baf7b0a132355f143cfebf3f4196fbe1ce827f52deaab89b2f667117c796cc148c772cb31d0787014e10c6185c36b9693682905a05eb76ea5fc23f7abcb0b8dbe235d97f50232e9b5bd23f555cc82c9f350233ec2997afd8047c91d28a0bf9d2ddfc4cb3beb92e128947515657a292716e68857389d783dc51f8675165fbe46c63e4c616b0358450317d"}, @mesh_id={0x72, 0x6}, @supported_rates={0x1, 0x8, [{0x12, 0x1}, {0x16, 0x1}, {0x5}, {0x66, 0x1}, {0x24}, {0xc}, {0x6c, 0x1}, {0x18}]}, @tim={0x5, 0x4f, {0x40, 0xc1, 0x7, "e00e315ec53c4303ca51d4acc5d0934fd0dc228c4dab1bb649e3876d72602bc0d7e326af0518ba28e725e5f4eb7d9d7c68c966bd6c4bca2e5ba3fc27150bc1f3ff0841ae2142396093350b46"}}, @fast_bss_trans={0x37, 0x8b, {0x7f, 0x3, "fe282bdb7d4a2918d18a1fc4048a9217", "10f12f8d45043aad0410936dc7a08253b97d771bbf09393471b96a33df86889f", "190792ee363b7807bf1d9401a51461ff5eddd687343f75449f9917c0c50dfbf2", [{0x2, 0x13, "7d630ea2e1d551ca2d4cfeed113fa8a2f6dba4"}, {0x3, 0x13, "d5d29797b8ac8c2b760661a69746f83054fc79"}, {0x1, 0xd, "3083f643b2b2cbd0b455cfaf9d"}]}}, @sec_chan_ofs={0x3e, 0x1, 0x2}]}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x400}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x9}]}, 0x200}, 0x1, 0x0, 0x0, 0x4}, 0x80c0)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x30004081)

1.196893948s ago: executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x15, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x158, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}, @TCA_STAB={0x10c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {0xfeff, 0x2, [0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x16, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}}, {0x18, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}]}, 0x158}}, 0x0)

1.071792532s ago: executing program 2:
r0 = accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000500), 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000240))
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x2400, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local, {[@generic={0x7, 0x7, "0447030e62"}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)

970.031293ms ago: executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)={@cgroup, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, @link_id=0xffffffffffffffff}, 0x20)
write$binfmt_script(r0, &(0x7f0000000100), 0xfecc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, 0x0, &(0x7f0000000100)=0x10000000)

960.464851ms ago: executing program 3:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000feffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x40305839, &(0x7f0000000540)={'\x00', @link_local={0x1, 0x80, 0xc2, 0x5}}) (async)
ioctl$SIOCSIFHWADDR(r2, 0x40305839, &(0x7f0000000540)={'\x00', @link_local={0x1, 0x80, 0xc2, 0x5}})
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000400)={&(0x7f0000000380)="311763ddaf58f86c5a2fe32d5af916a0e880cf828d44c11b826985f205f58971a7974e3ec7baac3b04d8a6d894a0b3c8c55bae36f43f6f3b601c5515df1483c1b20bbe294dcf759885f9e574d28bba8a67d883e0583356d065dbcf539c1f7363c137f83dd328e97f044f7d600e401ac55a0a1c1d9eb09642", &(0x7f0000000600)=""/73, &(0x7f0000000680)="5599e4f379e10ea07dc02f2e5672cd5f64c7041bec4c1133499801ab64b9ddd11faabdced9c9382eaa8f4cc6fc137b1fef7a435b1a3a1f620a59ace0c51cf19874f19240e6ff8568c76e4ab2a766b5607e10e10002576ad2deadfe4ed2059584fb3b094efb18819a19f7f6bc9ea4adcffcb6257e28230477ed66101d117dfa614c4db8538910d5f2f63f7d5420bf45f7bb197e5b3ad6dc5e03eebb5106708eb01571c315d3123dec45599b23e11fcc8f9a65cc5219b541a73443645a93ead42cd8ababa89d1d", &(0x7f0000000780)="adbe0dcedd4142858aaeb27ff6fa727e0d30c80fd77a19b359540f0587097fc0d221b6392a622362d08f43553dcc2648293c3163bd029b9ba2263fd73b1a15dcc4c9d001a6f446d7c60bfd6dc015da7e99b1e44834315f5ed05077315d87ce609823249bf5653db712c3aadffce964ca28315ee8c766bc29c3321bea3cf7c1f5a5cad33235454d61c223d81d401fcf915664a59dc56e1a5fba16d6207d7f003ea2585bc16391b884998e6e", 0xc98, r2}, 0x38)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x2, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) (async)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0)
getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_ADDRESS={0x14, 0x1, @loopback={0xfec0ffff00000000}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x9}}]}, 0x40}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0xa, 0x2, 0x73) (async)
r8 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$kcm(r8, &(0x7f0000000300)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @loopback, 0x4}, 0x80, 0x0}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) (async)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000280)={'veth0_to_team\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000280)={'veth0_to_team\x00', <r12=>0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b40)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000500000008000900030000000c00018008000100", @ANYRES32=r12, @ANYBLOB="0500070002999e0073950d187415462820a303538a474ab1354b1d55bdd7edcc77ed3a1a3783eabb33863ad6a1a9fa197c62436971c26905ae2b8cde06df029b8dcb60682a5dd644e540c1bdb593a39b730dabe972fdea1cafe7a64fed3661010a74eece7deb1479158b52164452560bcb5307473fe1113614c4e8fede1cb788a861f249dcc741cc66d0c42f6fc9c8f95044320023e0aea48862a70ffe565fcd76ef0f193047f333c3ad3a44e1c96e68823bb21a"], 0x30}}, 0x0)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r9)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r14=>0x0})
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)={0x30, 0x0, 0x5, 0x0, 0x0, {{0x9}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6}]}, 0x30}}, 0x0) (async)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)={0x30, 0x0, 0x5, 0x0, 0x0, {{0x9}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6}]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000a00)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000940)={&(0x7f0000000a80)={0xa0, r13, 0x300, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x400, 0x1f}}}}, [@NL80211_ATTR_DURATION={0x8}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xa9ed}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xdf}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ1={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x267}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x334}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x14}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15f4}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x40}]}, 0xa0}, 0x1, 0x0, 0x0, 0x1}, 0x4004044)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r9) (async)
r15 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r9)
sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="301ebec4d35abc96b70000000000000400000000", @ANYRES16=r15, @ANYBLOB="010000000000000000000700000014000800000000000000000000000000000000000500120000000000"], 0x30}}, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="301ebec4d35abc96b70000000000000400000000", @ANYRES16=r15, @ANYBLOB="010000000000000000000700000014000800000000000000000000000000000000000500120000000000"], 0x30}}, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x34, r15, 0x400, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x8}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xd6}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20048000)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="f75c0000", @ANYRES16=r15, @ANYBLOB="00042abd7000fedbdf25020000000c001600000800000000000006000300b9860000050012003f000000050005000100000006001b004e2300001400080064766d727030000000000000000000000500220001000000"], 0x5c}, 0x1, 0x0, 0x0, 0x40040}, 0x4001)

940.782487ms ago: executing program 2:
r0 = socket$rxrpc(0x21, 0x2, 0xa) (async)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) (async)
setsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f0000000100)=0xc6, 0x4) (async)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) (async)
syz_emit_ethernet(0xd2, &(0x7f0000000900)=ANY=[@ANYBLOB="ffffffffbfff00000000000086dd600489f1009c1100fc010000000000000025030000000000ff02000000000000000000000000000100000e22"], 0x0) (async, rerun: 64)
poll(&(0x7f00000002c0)=[{r0}, {r0}], 0x2, 0x20f49) (rerun: 64)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) (async)
r4 = accept4(r3, 0x0, 0x0, 0x0) (async)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) (async)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), r4)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="2400000001040102000000c9fd000005000100010000000000000000000000000095d536995da36dddb7f0052502759e124861dea2502adaa830630ba1317ff10c8f440bcfd1caa4542443f5cd0755c303c35745b6b8d7bd588f7bd51eee2e1922af85cb47605882287ab15baab33e2245b3ce87835044b6be93284b47e9838c1ef44ea814ef53e89f2858236591d8cee90b187b82adbe8bdf0992c263ee51f3b6bfc744065edef30c216a360d52038e636a24d7bbb9905e0beb33aa22ec6faa9571a4e62f388abce9a8a9ba58c53e230519bbf78f680dd2ed32ff5e3674061bba75f38e5111475f38618a6fd798000000000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x0, 0x0, 0x400}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8000}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) (async)
r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IKEY={0x8}]}}}]}, 0x4c}}, 0x0)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_MPATH(r7, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r5, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x8}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x40}}, 0x40004) (async)
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000240), 0x4)

911.836367ms ago: executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280))
socket(0x1d, 0x2, 0x6)
socket$inet_sctp(0x2, 0x1, 0x84)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000740))
socket$pppoe(0x18, 0x1, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x18}}, 0x0)
socket(0x2b, 0x1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000020000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0xd, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0)

815.123488ms ago: executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000cd00000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000950000000000"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000700000009000b0073797a30000000003c000000090a010400000000e10000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c0000001e0a05010000000000000000070000000900020073797a31000000000900010073797a3000000000140000001000010000000000000000000084000a"], 0xb0}}, 0x84c4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000a80)='ext4_writepages\x00', r1}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
socket$kcm(0x29, 0x7, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x10001, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000004480)=ANY=[@ANYRES32=r3, @ANYRES32=r6, @ANYBLOB="adffa888d2260000050021003400000008000500", @ANYRES32, @ANYBLOB='\b\x00\n'], 0x4c}}, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000cdb64de5ccff0f592615d3bc83000101010100000000000000000a000000040001"], 0x24}}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r7 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private1, @in6=@private2, 0x0, 0x0, 0x4e21, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x4, 0x0, 0x0, 0x4, 0x5, 0x40, 0x1000}, {0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x2b}, 0x0, @in=@broadcast, 0x3502, 0x0, 0x0, 0x0, 0x820}}, 0xe8)
r8 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r8, 0x1, 0x2f, &(0x7f00000001c0), 0x4)
sendmsg$key(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000080))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r9=>0xffffffffffffffff})
getsockopt$inet_pktinfo(r9, 0x0, 0x8, &(0x7f0000000100)={<r10=>0x0, @loopback, @private}, &(0x7f0000000280)=0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="000000005600000126bd7000fbdbdf2507000000c1f17d169cddd542fdede811ade061a097a97fe9a845fe3b", @ANYRES32=r10, @ANYBLOB], 0x3c}}, 0x0)

771.035396ms ago: executing program 1:
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="c43c4721cfa5d2b869368a8fcb74f9710b87db3d6917fb39b0fcd99a648cb4d29ca83d4e3ab4b048ba160d094356c04b7c68c2339949845975bd620247e55f1783485b337cc0388735d811286a0f6ab1e11eb0a91f1440ac311476d15fef7261f0276be905b231e94cc1fe437515229ebf6781921bf6957d42d8e6339eb09d881007fdbb4e5fc847", 0x88}], 0x1}, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005d80)=[{{0x0, 0x0, &(0x7f0000002d40)=[{&(0x7f0000000140)='.', 0x1}], 0x1}}], 0x1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000100), 0xfecc)
recvfrom$rxrpc(r0, &(0x7f0000000200)=""/21, 0x15, 0x12102, &(0x7f0000000280)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0x69, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x35}}, 0x24)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x275a, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0x2c}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="190000000000000000000000000000006119a400000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x9d, &(0x7f0000000280)=""/157}, 0x80)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_MAX={0x8}, @IFLA_BR_VLAN_STATS_PER_PORT={0x5, 0x2d, 0x1}]}}}]}, 0xa6}}, 0x0)
sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="2d546cd5ac8ce35bc9a84910b24652e4abf4710a9938d5e884181284ae77d80ab4062232b0780cbccb4e71ce80efde564c1373a0a7e66f1f8610484e06efc8468067d8598cb54f79c16a36866450b1c329d2a1355d3505ebcd2c", 0x5a, 0x404088c, &(0x7f0000000040)={0x11, 0x16, r3, 0x1, 0x6, 0x6, @broadcast}, 0x14)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r5=>0x0})
r6 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="070000000000000114001a80100004800c00098008000180"], 0x34}}, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000640)={0x1, 0x58, &(0x7f00000006c0)}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x1f, 0x9, 0x43, @empty, @remote, 0x10, 0x7800, 0xd17, 0xfdc3}})
r7 = socket(0x21, 0x803, 0x7f)
write(r7, &(0x7f0000000240)="aefc00001a0025f00385bc04fef7681d0a0b49ff708800008002280008020200ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000680)={'veth0_to_batadv\x00', 0x1210})
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="30000000180025990000000000140005000000000000003b3033583e855800000000ffffac1414bb000000000000000000000000000000b3213a7a701b69712268dcf512f25f8125e31d0a4f7e1dab0f34d8adeaf75b37ee0eef4aac0375e7ceb91f089684c4fda8f38d2c9b122c76ca53631299e492f95e9e5aacdfdce4a20da2e8b294e0b38a12035c838ef81747d3634e37059076c9f6524aa98155b10361c7eb3b298e3e9e2172d982d8988259ba05ed1e797170d67866f8cde61a95f91575e068b181061f2108eb32e95af8ac6e05182fdb16dad76b98f2e738ac1280a36713699482fe830aab9b3ac78b64"], 0x30}, 0x1, 0x4788}, 0x0)

762.638419ms ago: executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
write$binfmt_script(r5, &(0x7f0000000240)={'#! ', './file0'}, 0xb)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES64=r4, @ANYRES16=r4, @ANYRESHEX=r5, @ANYRESDEC=r5], 0x1c}}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x26e1, 0x0)
close(r6)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f088a8657986dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00170000000000100020f1850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r9 = syz_open_procfs$namespace(0x0, &(0x7f0000000000))
preadv(r9, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x45}], 0x2, 0x12, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000380)={'team0\x00', <r10=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000100000008000100", @ANYRES32=r10, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f636f756e74190000000000000000000000000005000300030000000800e7ff00000000"], 0x58}}, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0)
connect$rxrpc(0xffffffffffffffff, &(0x7f0000000440)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @rand_addr=0x64010101}}, 0x24)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x150}}, 0x5)
close(r0)

743.239595ms ago: executing program 3:
r0 = socket$inet6(0xa, 0x802, 0x0)
bind$inet6(r0, &(0x7f0000000640)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c)
setsockopt$inet6_buf(r0, 0x29, 0x32, &(0x7f0000000040)="ff02040000ffffffffffffff93931c8223ff1f2b", 0x14)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x48)
r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280), 0x4)
bpf$PROG_BIND_MAP(0x23, &(0x7f00000002c0)={r2, r1}, 0xffffffffffffff97)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r5, 0x80111500, 0x9950a339d65a28f8)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@gettfilter={0x24, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x3}, {0x0, 0xffe0}}}, 0x24}}, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r8 = socket$packet(0x11, 0x2, 0x300)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYRESHEX=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f0000000300)=<r10=>0x0)
r11 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r11, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000140)="2c385aa3", 0x4)
r12 = accept4(r11, 0x0, 0x0, 0x0)
sendmsg$alg(r12, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000740)="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", 0xfc}, {&(0x7f0000000840)="71b1abb2fa3823e08fd15e5ca4a5b1dc1f3aa6f9463ebb5e7f03052d67526b05b18a4f0ad4aa1c708fe5c970e892d33e9d53bd4e89dadcf1bb93df08a0b489f2f3ce721b5a04a191c5bd134ebed1e345b978c97ecfb70005ad877258", 0x5c}, {&(0x7f00000008c0)="2888ed983d251049613cb1bdd99300cc8577859537b456e4f64ff552391390f15eaaae5802ab27617e1ae7a7981b0b1120e36c38e61307661863ec9dd33f5c8e31249b5f590bd429735207a9f880d2df7fc480d786e995e816f1b5d8aea53a76cd1d3ff1464298e0caeb9c26e0e4772ac6ff72dc08b9a1fc0e186bf6ab34508d6c45e2b601edb56089c65dfe91d36cb47167a6010df2e4409e6c3f578a78a3cf081319fdb523d87da910d71c500315cb1883cdb36d27b62a88685795a78569d2d868ee343755304f8bfef1dde5a2ada0b92eeadee2b2", 0xd6}, {&(0x7f00000009c0)="c9a1447683f8578622468aa24e76fd190fa18ecfe83b7c0b2d76b3ffea1394814bb5cba0603695e072c9ad1250b26d9b5fba6ec3562238b394f7bb8d0261dd9c78a4415a0b577c1bc2207dbd435b6731ecf4dd866dbf223be56fe1f3ecacfb46cea45577965d69668a3d3bdac5f5c9a5d4e6239dfd7980db4e08a57ef663", 0x7e}, {&(0x7f0000000a40)="c5d1ba6944a283e0e2bec01799cc8c3c63ff8399716054c7b6795f75", 0x1c}], 0x5, &(0x7f0000000c80)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmsg(r12, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/38, 0x26}, {&(0x7f0000000040)=""/193, 0xc1}, {&(0x7f0000000380)=""/41, 0x29}], 0x3}, 0x0)
ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000a40)={0x1a, 0x5, {0x9, @usage=0x9, <r13=>0x0, 0x4, 0xa3, 0x7, 0x2, 0x0, 0xc4, @usage=0x8, 0x6, 0xffff, [0x40, 0x3, 0x7, 0x8000, 0x5, 0x9]}, {0xff, @usage=0x7, 0x0, 0x8, 0x5, 0x1, 0x60a, 0x4, 0x405, @usage=0x73, 0x8, 0x10001, [0xffffffffffffffff, 0xce0, 0x18, 0x6, 0x10001, 0xffff]}, {0x3, @usage, 0x0, 0x5, 0x43, 0xffffffffffff8000, 0x7, 0x3ff, 0x60, @struct={0x6, 0x9}, 0xa, 0x11a9, [0x4, 0x5, 0x1, 0x4, 0xb99]}, {0x6, 0xa462, 0x7}})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r5, 0x50009418, &(0x7f0000001800)={{r4}, r10, 0x12, @inherit={0x88, &(0x7f0000000580)={0x1, 0x8, 0x7, 0x2, {0x2, 0xdf, 0x7, 0x6, 0x9}, [0x5, 0x7, 0xfffffffffffffffa, 0xffffffffffffffff, 0x8, 0x1, 0x5, 0x20]}}, @devid=r13})
setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000040), 0x4)
setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f00000016c0)={0x0, 0x6}, 0x4)
r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001780)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r14}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="008541cf6c75d3742e5f3d3475b0cc8e3600000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x2000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

721.986567ms ago: executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, r1)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32=r3, @ANYBLOB=')\x00\x00\x00'], 0x1c}}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_ro(r6, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0)
write$cgroup_subtree(r7, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
unshare(0x20000400)
syz_emit_ethernet(0x56, &(0x7f00000002c0)=ANY=[@ANYBLOB="0180c200000382cba7f8f96a000d010000e022030000254fbfd1b734f74563a95d36192a46efd094370ee1a256666579a6783c5b8e1b510ef95b9f71c654c3e7c371c7419f4de1ddd7312449da0abda34fe8f421f98f"], &(0x7f00000000c0)={0x0, 0x2, [0xe1f, 0xc6a, 0xb80, 0x619]})
write$binfmt_script(r8, &(0x7f0000000340)={'#! ', './file0'}, 0xb)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r8, 0x0)
r9 = socket$inet6(0xa, 0x2, 0x3a)
bind$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c)
r10 = socket$kcm(0x2, 0xa, 0x2)
accept$packet(r7, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'wg2\x00', @broadcast})
write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="016f08000100000000003d0000ffac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba00000090780018090300050200000000000000000002d58838068b91000000"], 0x4e)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in=@loopback, @in6=@empty, 0x4e22, 0x80, 0x0, 0x0, 0x2, 0x80, 0x80, 0x21}, {0x7fffffffffffffff, 0x51c3, 0x200, 0x5, 0x4, 0x0, 0x2, 0x8000000000000000}, {0x1ff, 0x4, 0xac2}, 0x6, 0x6e6bbb, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d6, 0x3c}, 0x2, @in6=@loopback, 0x0, 0x0, 0x2, 0x11, 0x40000000, 0x6, 0x7}}, 0xe8)
ioctl$SIOCAX25DELUID(r7, 0x89e2, &(0x7f0000000240)={0x3, @bcast})
write$binfmt_script(r10, &(0x7f0000000040)={'#! ', './file0', [{0x20, ',d::'}], 0xa, "ffe96d254b17d9"}, 0x17)

630.569078ms ago: executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local={0x5}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "93a2f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080))
unshare(0x8040480)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

565.965042ms ago: executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040))
ioctl$PPPIOCSACTIVE(r1, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000002007910480000000000710433000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x14)
r2 = epoll_create1(0x0)
sendmmsg(r0, &(0x7f0000001680)=[{{&(0x7f0000000480)=@ax25={{0x3, @null, 0x3}, [@null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80, &(0x7f0000001640)=[{&(0x7f0000001d40)="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", 0x1000}, {&(0x7f0000000400)="196a0f3bc4fbf5f938af76e41c73cb74f3e5da9c", 0x14}, {&(0x7f0000001500)="cfc10d6824df7fbf9466d4b43339c05920799179d177c498cf5f5d44142ed4b20ef893183654ab6d55baef19a05b2ab39bba5635dbd7ce6f4ae325868918d8a4e80fc5807582910b7e3b001b4921a4c15ee10048b2c36df2a14c9a21fb86728a3ab782b915cd238b7551ee44806caee7ca462864a099cc1febf33820e12f81c0b71803b07b309f34c94bd482132fc948cc357d3e056ffa897634fefc6b00552355bb4f2c5a70303896ea7acddf2a51df79425578104b7822a78c7eb9f040c1264319a343649afa9dbcbaf4dbf76cfd2eb1c927294e499cf6018c017108f0b52991982fdefd243d8c03ca2da6a88d9a", 0xef}, {&(0x7f0000001600)="80355fdfa3abaf43f380d5e9e8d1b98b871e04", 0x13}], 0x4, &(0x7f0000001780)=[{0x70, 0x119, 0xcc10d1a, "74787b0112fe575cd12b268bacf156ca948825c025e0cdaf4e36241eae54d5173d25501470d0509ea7a542ddf49e072df6070ca52cc9896b47f3f39e07370bd2f0f644d1f75bab1a0a502cb77fa84fe72e30dd566acfdb8858a6e9e04d7604"}, {0xf0, 0x0, 0x7, "43195a63baf1aefacc40f3e19b2d0dfab9ae751595e60911f40ba5d34248579b32109f91fa71dee345a94c3c02884d0812f1ed6f78747227edfe537dc950aedc4ba216f05b1e42d476295f4da72b97f759c4dbb3dc3b089e4c45a56e95896e838037ac3dc557a8a78e1d7a9f63f74dda375c9fd6d783b0c4e14ff50491671eb06bf7b7fa1c2990b0b2eb3ac64e9001943a2dfcd18325269a85690fdf3ed1a11226fa54905991cb06e732a7ef65f1911770d93ecd47addeef3124c492ef2c233b52eb5067252dc36d402779ea4c0a6a08ff158cc1b5a96891ed0793e00794fc8b"}, {0xa8, 0x185, 0x0, "dcc7f04f4f08ac2b435fb20978c86ea18efa954da331f4709c33eee193913779f53232293c922052ca0cba40161dc03924f8a6a16544110f55c67703a7399c7bc363ffed132a7d67a5d3ae8cc2048bcb07bb9303e9c416327ec02bb11af504b042b0bc7a0a360c960b8fcf68e3affa093f0c5310055473cf59d538dd55a301bf3c1b384ecedda58a887af5864d082963b60f06"}], 0x208}}], 0x1, 0x11)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180))
write$ppp(r1, &(0x7f0000000440)=')z', 0x2)
ppoll(&(0x7f0000000140)=[{r2}], 0x1, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000180)='illinois\x00', 0x9)
unshare(0xc040400)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev, @multicast1}}}], 0x20}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000340)}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x6, 0x0, 0x0, {0xa, 0x0, 0x9}}], {0x14}}, 0x88}}, 0x0)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
r4 = socket$inet6(0x10, 0x2, 0x4)
sendto$inet6(r4, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784004000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
unshare(0x6020400)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x28, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params]}, 0x28}}, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="40000000100001040000000000000000cfcd0000", @ANYRES32=0x0, @ANYBLOB="d3a8040000000000180012800e000100776972656775617264000000040002800800040000000000"], 0x40}}, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@ipv4={""/10, ""/2, @broadcast}}, &(0x7f0000000300)=0x14)

511.584301ms ago: executing program 3:
syz_emit_ethernet(0x7a, &(0x7f00000004c0)={@random="f59bce543854", @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "2a80c9", 0x44, 0x3c, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}}}, 0x0)

444.69927ms ago: executing program 0:
syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000000000000000000000000000007fffffff0001000000000071273fa79d93014b8e3381b6"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYRES16], 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x29, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48)

398.048918ms ago: executing program 1:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x28000600)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0)
readv(r0, 0x0, 0x0)
pipe(&(0x7f0000000080))
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x10002})
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES32=r3, @ANYRES16=r2], 0x20}, 0x1, 0xc00000000000000}, 0x0)
bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="4c00030007"], 0xd)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000043c0)={&(0x7f00000042c0)={0x20, 0x2a, 0x1, 0x0, 0x0, {0x5}, [@nested={0xc, 0xa, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}]}]}, 0x20}}, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f00000002c0)="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"}, 0x38)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
close(r5)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r5, 0x8b34, &(0x7f0000000000)={'wlan1\x00'})

364.366313ms ago: executing program 3:
pselect6(0x40, &(0x7f0000000080)={0x80000000, 0x7c, 0x6, 0x80, 0x3, 0x91, 0xfffffffffffffffd, 0x7fff}, &(0x7f00000000c0)={0x8001, 0x5, 0x5, 0x7f, 0x81, 0x80, 0x9c7, 0x9}, &(0x7f0000000100)={0x0, 0x5, 0x2, 0x4, 0xfffffffffffeffff, 0x7fffffff, 0x3, 0x86aa}, &(0x7f0000000140)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x8]}, 0x8})
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'dvmrp0\x00', &(0x7f0000000200)=@ethtool_coalesce={0xe, 0x1, 0x0, 0xff, 0x1, 0x200, 0x9, 0x20, 0x1800, 0x2, 0x0, 0x101, 0x401, 0xb6, 0x5f9e, 0x6, 0xb2d1, 0x8, 0x5, 0x1000, 0xa46f, 0x5, 0x7f}})
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x3c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_LOCAL_NH6={0x14, 0x5, @loopback}}]}, 0x3c}}, 0x0)

297.070315ms ago: executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x0, 0x0, 0x13ff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, 0x48)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = socket(0x28, 0x800, 0x7fffd)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000002c0)={0x0, &(0x7f0000000280)}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000001000500050007000000000008000900000000001400200020000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000800)={'batadv_slave_1\x00'})
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f00000009c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000480)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="02002cbd7000fcdbdf25310000000c00990000000000540000000800db00", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32=0x0, @ANYBLOB="0800d404000186b6"], 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xca)
setsockopt$ax25_SO_BINDTODEVICE(r4, 0x101, 0x19, &(0x7f0000000080)=@bpq0, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
r5 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x80000006, 0x0, 0x0, 0x9}]}, 0x10)
r6 = socket$alg(0x26, 0x5, 0x0)
r7 = accept4(r6, 0x0, 0x0, 0x0)
sendmmsg$unix(r7, &(0x7f0000000680), 0x4924924924925c6, 0x0)
getsockopt$nfc_llcp(r7, 0x118, 0x3, &(0x7f00000001c0)=""/248, 0xf8)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x0, 0x268, 0x33a, 0x0, 0x268, 0x390, 0x460, 0x460, 0x390, 0x460, 0xc, 0x0, {[{{@uncond, 0x0, 0x230, 0x2a0, 0xd8000000, {0x9402}, [@common=@inet=@hashlimit2={{0x150}, {'pimreg\x00', {0x0, 0x9, 0x0, 0x0, 0x0, 0x6, 0x9}}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "53b4abfe97c146d15a62655763d2f12b34b49c688cbdc9ac8c02309e2c87694035993dde58442f5e2c37edd9e650ef981a883ff8dcc9e08ab46564f4e89adcd3"}}}, {{@ipv6={@private2, @loopback, [], [], 'vlan0\x00', 'macvtap0\x00'}, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c0)
sendmsg$IEEE802154_LIST_PHY(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002700)={&(0x7f00000026c0)={0x14, 0x0, 0x325, 0x70bd2d}, 0xfffffffffffffff7}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r8)
r11 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000640), r9)
sendmsg$NET_DM_CMD_START(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, r11, 0x100}, 0x33}}, 0x20000004)

294.293711ms ago: executing program 0:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280))
socket(0x1d, 0x2, 0x6)
socket$inet_sctp(0x2, 0x1, 0x84)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000740))
socket$pppoe(0x18, 0x1, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x18}}, 0x0)
socket(0x2b, 0x1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000020000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0xd, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0)

231.552141ms ago: executing program 3:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280))
socket(0x1d, 0x2, 0x6)
socket$inet_sctp(0x2, 0x1, 0x84)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000740))
socket$pppoe(0x18, 0x1, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x18}}, 0x0)
socket(0x2b, 0x1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000020000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0xd, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0)

175.561739ms ago: executing program 0:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552da15f6", @ANYRES32=0x0, @ANYBLOB="000000293c000000280012800a00010076786c616e00000018000280140013"], 0x48}}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0)

154.775552ms ago: executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000200), 0xf000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0)
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
getsockopt$rose(r2, 0x104, 0x0, 0x0, &(0x7f0000000540))

76.125565ms ago: executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x68, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x400}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @gre={{0x8}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @private=0xa010102}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x5d5b1}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_TTL={0x5, 0x8, 0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x2b2ba}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}]}}}]}, 0x68}}, 0x0)

52.127611ms ago: executing program 3:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10)
r1 = socket(0x1a, 0x6, 0x3)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000080605eb0000000006000000000000000500010007000000"], 0x1c}}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x26e1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000"], 0x0}, 0x90)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001e00)={'syzkaller0\x00', <r4=>0x0})
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000001e40)={r4, 0x3, 0x6, @multicast}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xffff9bc5, '\x00', r4, 0xffffffffffffffff, 0x5, 0x400}, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1, 0xa7, 0x5, 0x0, 0x850, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x4}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0}, 0xfffffffffffffece)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x20000300, 0x0, 0x0, 0x20000330, 0x20000360], 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000990000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000008000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffff3d)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r7, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x1d)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r8 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32, 0x7fffffff}, 0x9c)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a94000000060a0b0400000000000000000200000068000480640001800b00010072656a656374000054000280080001400000000105000200010000000500020002000000050002004000000005002100ff000000050002000800000005000200180000000500021907000000050002008500000008000140000000020900010073797a30000000000900020073797a32"], 0xbc}}, 0x0)
bind$inet6(r9, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

0s ago: executing program 1:
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f00000008c0)=ANY=[@ANYBLOB="c8060000090b010328bd7000fddbdf25010000010c000a8008002f00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0000001bdc6f6f4e1e7c7b9be7b70759cbf3de1b023c3b34a0cd091328101839b4230106264fe460dc4931a0a189f7c3bebb81631031359942a83e04f5803bc4ed2953bddc579fca71c0fc0a63bad4d0fad209b5b0076e45ded51c9e171f65d21b7e972d18eb714dca32a0a1050b7233d1593a65fce40dca7453c719f746cebb28f42d239dfec13e2ffa49a7726aeaf46fff3118ebbae3f2de57039506daf05256d4ba0e9d46a76df22400b4058ef8dfdddacea47742a849fa5e35fb19fdf9dff22b6eeea79052d3f299c8bf4f8976ee8592db40104b80a2a568d2e7edf2c7aafc0c1e09882380ca701489cd08003b00", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="6eda4d12c6b63f14fb3629d5e9d75a4aeba3b61c9285517f4552101e78316d80f56b4f2f00"], 0x6c8}, 0x1, 0x0, 0x0, 0x404c014}, 0x400)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x90)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
r2 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r2, 0x0, 0x0, 0x0)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
socket$inet(0x2, 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000001c0), 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=""/144, 0x0, 0x90}, 0x20)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0xa, 0xe4, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580), 0x0}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r3, 0x0, 0x0, 0x2}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x336)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket$kcm(0x2, 0x0, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000580)={'batadv0\x00', <r5=>0x0})
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000005c0)={@dev={0xac, 0x14, 0x14, 0x33}, @initdev={0xac, 0x1e, 0x1, 0x0}, r5}, 0xc)
close(r0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'})

kernel console output (not intermixed with test programs):

ess (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  260.304387][T11363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  260.316530][T11363] batman_adv: batadv0: Interface activated: batadv_slave_1
[  260.338214][T11363] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  260.350821][T11363] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  260.362224][T11363] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  260.372459][T11363] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  260.527563][T11482] veth0_vlan: entered promiscuous mode
[  260.576054][T11482] veth1_vlan: entered promiscuous mode
[  260.608008][T10173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  260.645572][T10173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  260.777167][T10171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  260.791199][T11482] veth0_macvtap: entered promiscuous mode
[  260.799311][T10171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  260.846186][T11482] veth1_macvtap: entered promiscuous mode
[  260.918637][T11482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  260.957436][T11482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  260.988089][T11482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  261.019236][T11482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  261.054293][T11482] batman_adv: batadv0: Interface activated: batadv_slave_0
[  261.118528][T11482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  261.157746][T11482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  261.200276][T11482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  261.219448][T11482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  261.232671][T11482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  261.250043][T11482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  261.272240][T11482] batman_adv: batadv0: Interface activated: batadv_slave_1
[  261.391788][T11482] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  261.416549][T11482] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  261.453294][T11482] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  261.481640][T11482] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  261.556716][T11794] xt_bpf: check failed: parse error
[  261.601743][T11779] lo speed is unknown, defaulting to 1000
[  261.894306][T11782] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[  261.923616][T10177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  261.946396][T10177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  262.056979][T10172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  262.069411][T10172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  262.525509][T11829] netlink: 'syz-executor.4': attribute type 5 has an invalid length.
[  263.017829][T11836] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
[  263.144138][T11843] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[  263.187907][T11843] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  263.221009][T11836] 8021q: adding VLAN 0 to HW filter on device bond1
[  263.265878][T11836] bond0: (slave bond1): Enslaving as an active interface with an up link
[  263.319796][T11842] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  263.441391][T11843] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[  263.630509][T11842] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  263.651308][T11842] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  263.714806][T11842] bond0 (unregistering): (slave bond1): Releasing backup interface
[  263.765706][T11842] bond0 (unregistering): Released all slaves
[  264.125098][   T29] audit: type=1804 audit(1718853745.399:62): pid=11868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3938626826/syzkaller.LVlj5r/5/cgroup.controllers" dev="sda1" ino=1963 res=1 errno=0
[  264.548575][T11888] netlink: 'syz-executor.1': attribute type 4 has an invalid length.
[  266.389720][T11871] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[  266.603654][T11900] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'.
[  266.638921][T11905] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.4'.
[  266.902701][T11923] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  266.917445][T11924] netlink: 'syz-executor.3': attribute type 27 has an invalid length.
[  267.007061][T11926] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  267.238884][T11924] batadv0: left promiscuous mode
[  267.698143][T11933] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.1'.
[  267.713456][T11933] netlink: 'syz-executor.1': attribute type 2 has an invalid length.
[  267.735158][T11933] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'.
[  267.769598][T11933] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  267.875056][T11924] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  267.916907][T11924] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  267.938016][T11924] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  267.990155][T11924] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  268.195883][T11931] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[  268.217226][T11936] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[  268.304659][T11948] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  268.339544][T11948] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  268.463735][T11960] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.3'.
[  268.527413][T11960] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
[  269.233816][T12000] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'.
[  269.242331][T12003] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'.
[  269.247852][T12002] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'.
[  269.337289][T12000] vlan2: entered allmulticast mode
[  269.376232][T12007] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[  269.720666][T12030] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  271.790585][T12089] infiniband syz0: set down
[  271.821928][T12089] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  271.876461][ T5166] lo speed is unknown, defaulting to 1000
[  271.902244][ T5166] lo speed is unknown, defaulting to 1000
[  272.563790][T12143] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  272.692091][T12151] netlink: 'syz-executor.3': attribute type 3 has an invalid length.
[  272.713899][T12151] __nla_validate_parse: 10 callbacks suppressed
[  272.713920][T12151] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'.
[  272.977265][T12169] netlink: 'syz-executor.3': attribute type 29 has an invalid length.
[  272.997949][T12169] netlink: 'syz-executor.3': attribute type 29 has an invalid length.
[  273.033414][T12169] netlink: 'syz-executor.3': attribute type 29 has an invalid length.
[  273.052678][T12169] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[  273.600031][T12194] netlink: 'syz-executor.0': attribute type 33 has an invalid length.
[  274.312564][T12235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  274.328460][T12240] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  274.548162][T10171] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  274.578405][T12247] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  274.640760][T12249] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  274.739167][T10171] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  274.940154][T10171] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  275.132831][T10171] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  275.343033][ T5129] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  275.360220][ T5129] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  275.369268][ T5129] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  275.383522][ T5129] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  275.394450][T12279] netlink: 'syz-executor.3': attribute type 21 has an invalid length.
[  275.408736][ T5129] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  275.416913][T12279] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[  275.432269][ T5129] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  275.460433][T12279] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'.
[  275.521321][T10171] bridge_slave_1: left allmulticast mode
[  275.542518][T10171] bridge_slave_1: left promiscuous mode
[  275.553514][T10171] bridge0: port 2(bridge_slave_1) entered disabled state
[  275.574117][T10171] bridge_slave_0: left allmulticast mode
[  275.579818][T10171] bridge_slave_0: left promiscuous mode
[  275.586824][T10171] bridge0: port 1(bridge_slave_0) entered disabled state
[  275.645725][T12290] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[  275.871729][T12296] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 1 (only 8 groups)
[  276.182687][T10171] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  276.210277][T10171] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  276.232137][T10171] bond0 (unregistering): Released all slaves
[  276.530462][T12278] lo speed is unknown, defaulting to 1000
[  276.736799][T12315] syzkaller0: entered allmulticast mode
[  277.492234][ T5129] Bluetooth: hci2: command tx timeout
[  279.567706][ T5129] Bluetooth: hci2: command tx timeout
[  280.586466][T12339] netlink: 'syz-executor.1': attribute type 4 has an invalid length.
[  280.651225][T12341] netlink: 'syz-executor.1': attribute type 4 has an invalid length.
[  280.878084][T10171] hsr_slave_0: left promiscuous mode
[  280.890340][T10171] hsr_slave_1: left promiscuous mode
[  280.902796][T10171] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  280.948305][T10171] batman_adv: batadv0: Removing interface: batadv_slave_0
[  280.963517][T10171] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  280.972097][T10171] batman_adv: batadv0: Removing interface: batadv_slave_1
[  280.978953][T12362] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  281.037349][T10171] veth1_macvtap: left promiscuous mode
[  281.043147][T10171] veth0_macvtap: left promiscuous mode
[  281.049949][T10171] veth1_vlan: left promiscuous mode
[  281.061506][T10171] veth0_vlan: left promiscuous mode
[  281.645895][ T5129] Bluetooth: hci2: command tx timeout
[  281.735454][T10171] team0 (unregistering): Port device team_slave_1 removed
[  281.794943][T10171] team0 (unregistering): Port device team_slave_0 removed
[  281.968891][T12368] delete_channel: no stack
[  282.470531][T12381] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  282.528818][T12379] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  282.615038][T12386] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[  282.635347][T12386] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[  282.653491][T12386] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'.
[  282.678903][T12395] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups)
[  282.739999][T12389] team0: Mode changed to "loadbalance"
[  282.783058][T12278] chnl_net:caif_netlink_parms(): no params data found
[  282.802074][T12396] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow
[  282.982092][T12402] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  283.018365][T12278] bridge0: port 1(bridge_slave_0) entered blocking state
[  283.052206][T12278] bridge0: port 1(bridge_slave_0) entered disabled state
[  283.080318][T12410] xt_CT: You must specify a L4 protocol and not use inversions on it
[  283.083715][T12278] bridge_slave_0: entered allmulticast mode
[  283.108505][T12278] bridge_slave_0: entered promiscuous mode
[  283.120570][T12278] bridge0: port 2(bridge_slave_1) entered blocking state
[  283.128387][T12278] bridge0: port 2(bridge_slave_1) entered disabled state
[  283.136248][T12278] bridge_slave_1: entered allmulticast mode
[  283.150442][T12278] bridge_slave_1: entered promiscuous mode
[  283.201320][T12405] lo speed is unknown, defaulting to 1000
[  283.272788][T12278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  283.311982][T12278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  283.331184][T12416] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 2231 (only 8 groups)
[  283.332739][   T29] audit: type=1804 audit(1718853764.599:63): pid=12416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3938626826/syzkaller.LVlj5r/49/cgroup.controllers" dev="sda1" ino=1962 res=1 errno=0
[  283.459093][T12278] team0: Port device team_slave_0 added
[  283.536299][T12278] team0: Port device team_slave_1 added
[  283.600963][T12278] batman_adv: batadv0: Adding interface: batadv_slave_0
[  283.621058][T12278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  283.659780][T12278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  283.698947][T12422] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[  283.723887][ T5129] Bluetooth: hci2: command tx timeout
[  283.754108][T12278] batman_adv: batadv0: Adding interface: batadv_slave_1
[  283.766299][T12278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  283.801431][T12278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  284.058827][T12278] hsr_slave_0: entered promiscuous mode
[  284.078487][T12278] hsr_slave_1: entered promiscuous mode
[  284.091594][T12278] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  284.116684][T12278] Cannot create hsr debugfs directory
[  284.663971][T12447] syzkaller0: entered promiscuous mode
[  284.670640][T12447] syzkaller0: entered allmulticast mode
[  287.016484][T12472] netlink: 'syz-executor.4': attribute type 16 has an invalid length.
[  287.050094][T12472] netlink: 'syz-executor.4': attribute type 17 has an invalid length.
[  287.072990][T12475] xt_CT: You must specify a L4 protocol and not use inversions on it
[  287.353851][T12490] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'.
[  287.378368][T12278] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  287.476206][T12490] Êü: entered promiscuous mode
[  287.498006][T12278] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  287.547313][T12278] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  287.606895][T12278] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  287.911793][T12278] 8021q: adding VLAN 0 to HW filter on device bond0
[  287.940429][T12278] 8021q: adding VLAN 0 to HW filter on device team0
[  287.975256][  T785] bridge0: port 1(bridge_slave_0) entered blocking state
[  287.982906][  T785] bridge0: port 1(bridge_slave_0) entered forwarding state
[  288.065602][  T785] bridge0: port 2(bridge_slave_1) entered blocking state
[  288.074769][  T785] bridge0: port 2(bridge_slave_1) entered forwarding state
[  288.540596][T12557] netlink: 'syz-executor.1': attribute type 29 has an invalid length.
[  288.566834][T12557] netlink: 'syz-executor.1': attribute type 29 has an invalid length.
[  288.599287][T12562] netlink: 'syz-executor.1': attribute type 29 has an invalid length.
[  288.650454][T12557] netlink: 'syz-executor.1': attribute type 29 has an invalid length.
[  288.675716][T12557] netlink: 'syz-executor.1': attribute type 29 has an invalid length.
[  288.735166][T12557] netlink: 'syz-executor.1': attribute type 29 has an invalid length.
[  288.799141][T12278] 8021q: adding VLAN 0 to HW filter on device batadv0
[  288.894257][T12572] netlink: 191416 bytes leftover after parsing attributes in process `syz-executor.3'.
[  288.956552][   T29] audit: type=1800 audit(1718853770.219:64): pid=12573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1959 res=0 errno=0
[  289.017342][T12278] veth0_vlan: entered promiscuous mode
[  289.023969][   T29] audit: type=1804 audit(1718853770.219:65): pid=12573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir3887621332/syzkaller.Wwfodq/375/memory.events" dev="sda1" ino=1959 res=1 errno=0
[  289.062009][   T29] audit: type=1804 audit(1718853770.219:66): pid=12573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir3887621332/syzkaller.Wwfodq/375/memory.events" dev="sda1" ino=1959 res=1 errno=0
[  289.103844][T12278] veth1_vlan: entered promiscuous mode
[  289.186624][   T29] audit: type=1804 audit(1718853770.379:67): pid=12573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir3887621332/syzkaller.Wwfodq/375/memory.events" dev="sda1" ino=1959 res=1 errno=0
[  289.276967][T12278] veth0_macvtap: entered promiscuous mode
[  289.306807][   T29] audit: type=1804 audit(1718853770.499:68): pid=12581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1819281620/syzkaller.EKcTex/184/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0
[  289.339013][T12278] veth1_macvtap: entered promiscuous mode
[  289.425274][T12278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  289.443086][T12278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  289.455111][T12278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  289.478989][T12278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  289.497862][T12278] batman_adv: batadv0: Interface activated: batadv_slave_0
[  289.528575][T12278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  289.562772][T12278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  289.585263][T12278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  289.626632][T12278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  289.647999][T12278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  289.672554][T12278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  289.702131][T12278] batman_adv: batadv0: Interface activated: batadv_slave_1
[  289.729331][T12278] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  289.750547][T12278] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  289.775052][T12278] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  289.791260][T12278] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  289.914177][T12610] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[  290.122662][T10173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  290.158210][T10173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  290.271658][T10177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  290.282906][T12630] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.1'.
[  290.290424][T10177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  290.336325][T12631] netlink: 260 bytes leftover after parsing attributes in process `syz-executor.4'.
[  290.337883][T12630] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'.
[  290.359579][T12631] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups)
[  290.374451][   T29] audit: type=1804 audit(1718853771.639:69): pid=12631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3938626826/syzkaller.LVlj5r/65/cgroup.controllers" dev="sda1" ino=1934 res=1 errno=0
[  290.451648][T12630] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[  290.489425][T12640] netlink: 'syz-executor.0': attribute type 21 has an invalid length.
[  290.529222][T12640] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  290.611551][T12641] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[  290.725219][T12652] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  290.811736][T12656] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.4'.
[  291.514144][T12704] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  291.529173][T12704] batman_adv: batadv0: Removing interface: batadv_slave_0
[  291.540374][T12704] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  291.553919][T12704] batman_adv: batadv0: Removing interface: batadv_slave_1
[  291.959476][T12733] dummy0: entered promiscuous mode
[  291.967823][T12733] dummy0: left promiscuous mode
[  292.031643][T12738] validate_nla: 2 callbacks suppressed
[  292.031664][T12738] netlink: 'syz-executor.0': attribute type 5 has an invalid length.
[  292.628256][T12767] __nla_validate_parse: 5 callbacks suppressed
[  292.628276][T12767] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  292.927691][T12789] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[  293.057892][T12805] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.2'.
[  293.097505][T12796] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.2'.
[  293.175677][T12796] netlink: 'syz-executor.2': attribute type 309 has an invalid length.
[  293.722447][T12845] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  293.773382][T12844] netlink: 'syz-executor.2': attribute type 5 has an invalid length.
[  293.860407][T12849] ieee802154 phy1 wpan1: encryption failed: -90
[  294.002839][T12857] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.3'.
[  294.035843][T12853] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.3'.
[  294.112109][T12860] vlan2: entered promiscuous mode
[  294.144530][T12857] netlink: 'syz-executor.3': attribute type 309 has an invalid length.
[  294.299562][T12867] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  294.460547][T12867] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  294.484266][T12881] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'.
[  294.580308][T12867] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  294.688877][T12867] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  294.709901][T12891] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[  294.850952][T12867] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  294.892132][T12867] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  294.948140][T12867] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  294.990531][T12867] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  295.042239][T12902] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'.
[  295.419476][   T29] audit: type=1804 audit(1718853776.669:70): pid=12920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2148269813/syzkaller.Rwwyii/453/cgroup.controllers" dev="sda1" ino=1944 res=1 errno=0
[  295.557717][T12925] x_tables: duplicate underflow at hook 1
[  295.795276][T12936] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check.
[  295.989710][T12945] erspan0: left allmulticast mode
[  296.003872][T12945] erspan0: left promiscuous mode
[  296.022535][T12945] bridge0: port 3(erspan0) entered disabled state
[  296.062654][T12945] bond0: (slave syz_tun): Releasing backup interface
[  296.192512][T12945] bond0: (slave bridge0): Releasing backup interface
[  296.317376][T12945] bridge0: port 2(bridge_slave_1) entered disabled state
[  296.325191][T12945] bridge0: port 1(bridge_slave_0) entered disabled state
[  296.424907][T12956] xt_hashlimit: size too large, truncated to 1048576
[  296.467772][T12945] bridge_slave_0: left allmulticast mode
[  296.475806][T12956] xt_hashlimit: overflow, try lower: 0/0
[  296.504799][T12945] bridge_slave_0: left promiscuous mode
[  296.530816][T12945] bridge0: port 1(bridge_slave_0) entered disabled state
[  296.693949][T12945] bridge_slave_1: left allmulticast mode
[  296.715621][T12945] bridge_slave_1: left promiscuous mode
[  296.824416][T12945] bridge0: port 2(bridge_slave_1) entered disabled state
[  296.934829][T12945] bond0: (slave bond_slave_1): Releasing backup interface
[  297.079570][T12945] team0: Port device team_slave_0 removed
[  297.223869][T12945] team0: Port device team_slave_1 removed
[  297.230887][T12945] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  297.262201][T12945] batman_adv: batadv0: Removing interface: batadv_slave_0
[  297.290360][T12945] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  297.307943][T12945] batman_adv: batadv0: Removing interface: batadv_slave_1
[  297.407727][T12945] bond2: (slave vcan1): Releasing backup interface
[  297.555950][T12964] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  297.633437][T12964] __nla_validate_parse: 2 callbacks suppressed
[  297.633459][T12964] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  297.669777][T12949] 8021q: adding VLAN 0 to HW filter on device bond0
[  297.688245][T12949] team0: Port device bond0 added
[  297.763896][T12956] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'.
[  297.792778][T12971] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[  298.076487][T12971] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  298.519188][T12990] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'.
[  299.429702][T13006] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.4'.
[  299.481138][T13003] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.4'.
[  299.577543][T13009] Bluetooth: MGMT ver 1.22
[  299.590389][T13009] Bluetooth: hci3: unsupported parameter 64512
[  299.600062][T13009] Bluetooth: hci3: invalid length 0, exp 2 for type 16
[  299.657344][T13015] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'.
[  300.171472][    C0] vcan0: j1939_tp_rxtimer: 0xffff888057c47400: rx timeout, send abort
[  300.180569][    C0] vcan0: j1939_tp_rxtimer: 0xffff888057c44400: rx timeout, send abort
[  300.190691][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888057c47400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  300.209319][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888057c44400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  300.320080][T13051] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  300.448719][T13057] netlink: 'syz-executor.0': attribute type 4 has an invalid length.
[  300.861259][T13085] netlink: 'syz-executor.0': attribute type 2 has an invalid length.
[  300.878385][T13085] netlink: 38 bytes leftover after parsing attributes in process `syz-executor.0'.
[  301.051602][T13090] lo speed is unknown, defaulting to 1000
[  301.260465][T13108] netlink: 'syz-executor.2': attribute type 16 has an invalid length.
[  301.296466][T13108] netlink: 'syz-executor.2': attribute type 17 has an invalid length.
[  302.267835][T13140] bridge_slave_0: left allmulticast mode
[  302.291476][T13140] bridge_slave_0: left promiscuous mode
[  302.301114][T13140] bridge0: port 1(bridge_slave_0) entered disabled state
[  302.392560][T13140] bridge_slave_1: left allmulticast mode
[  302.430360][T13140] bridge_slave_1: left promiscuous mode
[  302.455869][T13140] bridge0: port 2(bridge_slave_1) entered disabled state
[  302.528975][T13140] team0: Port device team_slave_0 removed
[  302.555815][T13140] team0: Port device team_slave_1 removed
[  303.017333][T13163] netlink: 'syz-executor.2': attribute type 16 has an invalid length.
[  303.036666][T13163] netlink: 'syz-executor.2': attribute type 17 has an invalid length.
[  304.254382][T13199] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[  304.313604][T13199] __nla_validate_parse: 2 callbacks suppressed
[  304.313627][T13199] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  304.353853][T13199] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[  304.402911][T13199] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  304.785568][T13228] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'.
[  304.841808][T13228] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  304.858345][T13234] xt_CT: You must specify a L4 protocol and not use inversions on it
[  304.890260][T13238] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  304.993818][T13228] IPVS: Unknown mcast interface: pim6reg
[  305.172574][T13250] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.0'.
[  306.170669][T13271] netlink: 'syz-executor.4': attribute type 16 has an invalid length.
[  306.193715][T13271] netlink: 'syz-executor.4': attribute type 17 has an invalid length.
[  306.238880][T13276] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'.
[  306.673005][T13302] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'.
[  306.963888][T13315] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  307.245292][T13327] pim6reg: entered allmulticast mode
[  307.272233][T13327] pim6reg: left allmulticast mode
[  307.753909][ T5133] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  307.765854][ T5133] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  307.777711][ T5133] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  307.789687][ T5133] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  307.800793][ T5133] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  307.806971][T13353] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'.
[  307.819178][T13344] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  307.831529][ T5133] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  307.866724][T13344] pim6reg1: entered promiscuous mode
[  307.872650][T13344] pim6reg1: entered allmulticast mode
[  307.973493][T13345] lo speed is unknown, defaulting to 1000
[  308.390854][T13376] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'.
[  308.421706][T13376] Êü: entered promiscuous mode
[  308.539513][T13345] chnl_net:caif_netlink_parms(): no params data found
[  308.767364][T13393] sch_tbf: burst 0 is lower than device ipvlan0 mtu (1514) !
[  308.825684][T13345] bridge0: port 1(bridge_slave_0) entered blocking state
[  308.851487][T13345] bridge0: port 1(bridge_slave_0) entered disabled state
[  308.880171][T13345] bridge_slave_0: entered allmulticast mode
[  308.899948][T13345] bridge_slave_0: entered promiscuous mode
[  308.933322][T13345] bridge0: port 2(bridge_slave_1) entered blocking state
[  308.955327][T13345] bridge0: port 2(bridge_slave_1) entered disabled state
[  308.995787][T13345] bridge_slave_1: entered allmulticast mode
[  309.035332][T13345] bridge_slave_1: entered promiscuous mode
[  309.485072][T13345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  309.514800][T13433] __nla_validate_parse: 1 callbacks suppressed
[  309.514820][T13433] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[  309.539430][T13345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  309.551554][T13424] syzkaller1: entered promiscuous mode
[  309.561121][T13440] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'.
[  309.570998][T13424] syzkaller1: entered allmulticast mode
[  309.592172][T13440] netlink: 43 bytes leftover after parsing attributes in process `syz-executor.2'.
[  309.610892][T13440] netlink: 'syz-executor.2': attribute type 5 has an invalid length.
[  309.622350][T13440] netlink: 43 bytes leftover after parsing attributes in process `syz-executor.2'.
[  309.682626][T13443] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'.
[  309.883906][ T5133] Bluetooth: hci3: command tx timeout
[  309.917183][T13345] team0: Port device team_slave_0 added
[  309.928433][T13345] team0: Port device team_slave_1 added
[  309.963909][ T5133] Bluetooth: hci0: command 0x0405 tx timeout
[  309.984251][T13458] netlink: 596 bytes leftover after parsing attributes in process `syz-executor.2'.
[  310.017948][T13451] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  310.026426][T13451] IPv6: NLM_F_CREATE should be set when creating new route
[  310.039756][T13458] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'.
[  310.133128][T13458] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  310.193708][T13345] batman_adv: batadv0: Adding interface: batadv_slave_0
[  310.206615][T13345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  310.291165][T13345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  310.316324][T13345] batman_adv: batadv0: Adding interface: batadv_slave_1
[  310.333305][T13345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  310.374996][T13345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  310.483949][T13345] hsr_slave_0: entered promiscuous mode
[  310.513414][T13345] hsr_slave_1: entered promiscuous mode
[  310.522532][T13345] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  310.533651][T13345] Cannot create hsr debugfs directory
[  310.661551][T13480] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  310.892688][   T29] audit: type=1804 audit(1718853792.159:71): pid=13486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3766265230/syzkaller.dCArhd/46/cgroup.controllers" dev="sda1" ino=1943 res=1 errno=0
[  311.342602][T13502] netlink: 'syz-executor.0': attribute type 12 has an invalid length.
[  311.385504][T13502] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[  311.416095][T13502] netlink: 'syz-executor.0': attribute type 2 has an invalid length.
[  311.435575][T13502] netlink: 'syz-executor.0': attribute type 2 has an invalid length.
[  311.464379][T13502] netlink: 'syz-executor.0': attribute type 4 has an invalid length.
[  311.495114][T13502] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'.
[  311.708651][T13345] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  311.737587][T13345] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  311.762034][T13345] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  311.797104][T13513] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  311.806969][T13345] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  311.963687][ T5129] Bluetooth: hci3: command tx timeout
[  312.042966][T13515] syzkaller0: entered promiscuous mode
[  312.083369][T13515] syzkaller0: entered allmulticast mode
[  312.129707][   T29] audit: type=1804 audit(1718853793.399:72): pid=13533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2148269813/syzkaller.Rwwyii/503/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0
[  312.170703][T13519] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups)
[  312.372244][T13533] smc: net device wg0 applied user defined pnetid SYZ0
[  312.432399][T13525] infiniband syz2: set active
[  312.438728][T13525] infiniband syz2: added veth1_to_bridge
[  312.491871][T13525] RDS/IB: syz2: added
[  312.499737][T13525] smc: adding ib device syz2 with port count 1
[  312.506893][T13525] smc:    ib device syz2 port 1 has pnetid SYZ0 (user defined)
[  314.053404][ T5129] Bluetooth: hci3: command tx timeout
[  314.758572][T13547] __nla_validate_parse: 3 callbacks suppressed
[  314.758595][T13547] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'.
[  314.919307][T13345] 8021q: adding VLAN 0 to HW filter on device bond0
[  314.991799][T13345] 8021q: adding VLAN 0 to HW filter on device team0
[  315.008098][T13553] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  315.039126][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  315.051844][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  315.125453][ T5170] bridge0: port 2(bridge_slave_1) entered blocking state
[  315.139394][ T5170] bridge0: port 2(bridge_slave_1) entered forwarding state
[  315.148096][T13555] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  315.195227][T13555] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
[  315.288140][T13555] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  315.349964][T13345] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  315.879015][T13345] 8021q: adding VLAN 0 to HW filter on device batadv0
[  316.076600][T13345] veth0_vlan: entered promiscuous mode
[  316.124233][T13345] veth1_vlan: entered promiscuous mode
[  316.131357][ T5129] Bluetooth: hci3: command tx timeout
[  316.228434][T13345] veth0_macvtap: entered promiscuous mode
[  316.275602][T13345] veth1_macvtap: entered promiscuous mode
[  316.341755][T13345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  316.383304][T13345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  316.413864][T13345] batman_adv: batadv0: Interface activated: batadv_slave_0
[  316.431124][T13345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  316.445905][T13345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  316.473293][T13345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  316.503727][T13345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  316.525036][T13345] batman_adv: batadv0: Interface activated: batadv_slave_1
[  316.583884][T13345] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  316.613277][T13345] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  316.637880][T13345] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  316.672267][T13345] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  316.962452][T13616] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[  317.050795][T10173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  317.076143][T10173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  317.149944][T10175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  317.184272][T10175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  317.662532][T13635] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[  318.144419][ T1247] ieee802154 phy1 wpan1: encryption failed: -22
[  319.251533][T13709] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  320.073819][T13735] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  320.818145][T13766] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  321.062070][T13771] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  321.442106][   T29] audit: type=1804 audit(1718853802.709:73): pid=13803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2148269813/syzkaller.Rwwyii/519/cgroup.controllers" dev="sda1" ino=1944 res=1 errno=0
[  321.496137][T13811] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  322.183936][T13828] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  322.224838][T13836] bridge0: entered allmulticast mode
[  322.372254][T13846] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  322.912781][T13875] vxcan0: tx drop: invalid da for name 0x0000000000000002
[  322.980018][T13879] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  323.047284][T13873] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  323.718188][T13911] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  324.155676][T13928] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  324.168339][T13933] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  324.394264][T13947] dvmrp0: entered allmulticast mode
[  325.207968][T13997] __nla_validate_parse: 3 callbacks suppressed
[  325.207989][T13997] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'.
[  325.252896][T14000] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'.
[  325.450531][T14013] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  325.489181][T14015] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'.
[  325.748505][T14026] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
[  325.788879][T14030] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.4'.
[  325.830644][T14030] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  325.840780][T14030] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  325.850183][T14030] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  325.858747][T14030] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  325.901840][T14030] vxlan0: entered promiscuous mode
[  325.908497][T14030] vxlan0: entered allmulticast mode
[  325.923718][T14030] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  325.932313][T14030] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  325.941852][T14030] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  325.951132][T14030] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  326.013484][T14035] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[  326.166445][T14047] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  326.190202][T14041] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  326.431093][T14072] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'.
[  326.474530][T14072] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[  327.094468][T14106] siw: device registration error -23
[  327.311509][T14119] sctp: [Deprecated]: syz-executor.1 (pid 14119) Use of struct sctp_assoc_value in delayed_ack socket option.
[  327.311509][T14119] Use struct sctp_sack_info instead
[  328.284097][ T5129] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  328.292898][ T5129] Bluetooth: hci0: command 0x0405 tx timeout
[  328.332552][T14190] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  328.443483][T14190] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  328.672598][T14202] netlink: 'syz-executor.0': attribute type 14 has an invalid length.
[  329.177659][T14219] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  330.502085][T14300] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  330.765122][T14311] lo speed is unknown, defaulting to 1000
[  330.875841][T14319] __nla_validate_parse: 16 callbacks suppressed
[  330.875866][T14319] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  331.017693][T14324] netlink: 'syz-executor.4': attribute type 10 has an invalid length.
[  331.034864][T14324] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
[  331.346669][T14336] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  331.373426][T14336] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
[  331.625424][T14353] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  331.827536][T14364] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  331.842769][T14362] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'.
[  332.399124][T14384] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'.
[  332.410106][T14384] openvswitch: netlink: Tunnel attr 6 has unexpected len 1 expected 0
[  332.561478][T14388] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  332.650066][T14394] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[  332.876891][T14403] netlink: 'syz-executor.2': attribute type 6 has an invalid length.
[  332.975736][T14408] veth0_to_hsr: entered promiscuous mode
[  333.012236][T14407] veth0_to_hsr: left promiscuous mode
[  333.157700][T14414] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'.
[  333.387444][T14433] tap0: tun_chr_ioctl cmd 1074025680
[  333.408480][T14433] tap0: tun_chr_ioctl cmd 2147767520
[  333.732160][T14447] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  333.777600][T14457] --map-set only usable from mangle table
[  333.967626][   T29] audit: type=1804 audit(1718853815.239:74): pid=14462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1572362910/syzkaller.bHai71/62/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0
[  334.196340][T14476] lo speed is unknown, defaulting to 1000
[  334.763497][ T5133] Bluetooth: hci0: command 0x0405 tx timeout
[  334.770841][ T5129] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  334.855731][T14503] sctp: [Deprecated]: syz-executor.3 (pid 14503) Use of int in max_burst socket option.
[  334.855731][T14503] Use struct sctp_assoc_value instead
[  339.201805][T14558] __nla_validate_parse: 6 callbacks suppressed
[  339.201827][T14558] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  339.485639][T14573] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[  339.720009][T14582] xt_policy: output policy not valid in PREROUTING and INPUT
[  339.820953][T14585] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
[  339.878646][T14582] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  339.928275][T14594] Cannot find add_set index 0 as target
[  340.028386][T14585] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
[  340.100263][T14582] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'.
[  340.264184][T14606] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  340.506999][T14617] ieee802154 phy1 wpan1: encryption failed: -90
[  340.774990][T14627] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  341.009523][T14639] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'.
[  341.136136][T14643] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.1'.
[  341.290354][T14653] xt_policy: output policy not valid in PREROUTING and INPUT
[  341.450494][T14650] lo speed is unknown, defaulting to 1000
[  342.423843][T14696] syzkaller0: entered promiscuous mode
[  342.431124][T14696] syzkaller0: entered allmulticast mode
[  342.622024][   T29] audit: type=1804 audit(1718853823.889:75): pid=14709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3766265230/syzkaller.dCArhd/130/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0
[  345.067383][T14724] xt_policy: output policy not valid in PREROUTING and INPUT
[  345.090625][T14724] __nla_validate_parse: 8 callbacks suppressed
[  345.090646][T14724] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[  345.111307][T14726] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  345.214162][T14729] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'.
[  345.225929][T14731] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[  345.280852][T14731] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[  345.297315][T14736] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[  345.344605][T14724] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'.
[  345.690848][   T29] audit: type=1804 audit(1718853826.959:76): pid=14750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3766265230/syzkaller.dCArhd/135/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0
[  345.776424][T14751] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  346.025719][T14758] syzkaller1: entered promiscuous mode
[  346.042107][T14762] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  346.052566][T14758] syzkaller1: entered allmulticast mode
[  346.198820][T14773] xt_policy: output policy not valid in PREROUTING and INPUT
[  346.234977][T14773] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[  346.578468][T14784] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  346.606001][T14793] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'.
[  346.644505][T14773] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'.
[  346.783588][T14784] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  346.837547][T14802] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  346.985992][T14784] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  347.022387][T14811] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'.
[  347.229117][T14784] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  347.340043][T14828] xt_policy: output policy not valid in PREROUTING and INPUT
[  347.457503][T14833] siw: device registration error -23
[  347.499065][T14784] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  347.556150][T14784] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  347.591219][T14784] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  347.634667][T14784] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  347.887324][T14852] tipc: Started in network mode
[  347.896825][T14852] tipc: Node identity ac1414aa, cluster identity 4711
[  347.921056][T14852] tipc: Enabled bearer <udp:s>, priority 0
[  348.477738][T14884] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  348.546734][T14884] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  348.588887][T14893] IPVS: Error joining to the multicast group
[  348.622257][T14884] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  348.706157][T14884] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  348.823132][T14901] (unnamed net_device) (uninitialized): down delay (6) is not a multiple of miimon (7), value rounded to 0 ms
[  348.985033][   T29] audit: type=1804 audit(1718853830.259:77): pid=14910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3938626826/syzkaller.LVlj5r/208/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0
[  349.033803][ T5170] tipc: Node number set to 2886997162
[  349.044217][T14910] IPVS: persistence engine module ip_vs_pe_ not found
[  349.252207][T14920] IPVS: Error joining to the multicast group
[  349.267612][T14922] veth0_vlan: entered allmulticast mode
[  349.383683][T14925] veth0_vlan: left promiscuous mode
[  349.406446][T14925] veth0_vlan: entered promiscuous mode
[  349.430023][T14926] tipc: Started in network mode
[  349.443469][T14926] tipc: Node identity ac1414aa, cluster identity 4711
[  349.451899][T14926] tipc: Enabled bearer <udp:s>, priority 0
[  349.896848][   T29] audit: type=1804 audit(1718853831.169:78): pid=14945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3766265230/syzkaller.dCArhd/156/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0
[  349.954290][T14947] xt_CT: You must specify a L4 protocol and not use inversions on it
[  349.967553][T14945] IPVS: persistence engine module ip_vs_pe_ not found
[  350.570641][    T9] tipc: Node number set to 2886997162
[  352.144670][T14958] IPVS: Error joining to the multicast group
[  352.151011][T14955] __nla_validate_parse: 12 callbacks suppressed
[  352.151029][T14955] netlink: 542 bytes leftover after parsing attributes in process `syz-executor.0'.
[  352.407447][T14975] netlink: 576 bytes leftover after parsing attributes in process `syz-executor.0'.
[  352.455335][T14972] veth0_vlan: entered allmulticast mode
[  352.560947][   T29] audit: type=1804 audit(1718853833.829:79): pid=14979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2148269813/syzkaller.Rwwyii/597/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0
[  352.630889][T14980] veth0_vlan: left promiscuous mode
[  352.651308][T14980] veth0_vlan: entered promiscuous mode
[  352.671295][T14979] IPVS: persistence engine module ip_vs_pe_ not found
[  352.721735][T14988] tipc: Started in network mode
[  352.732303][T14988] tipc: Node identity ac1414aa, cluster identity 4711
[  352.741733][T14988] tipc: Enabled bearer <udp:s>, priority 0
[  352.801767][T14988] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'.
[  353.017443][T15002] IPVS: Error joining to the multicast group
[  353.258582][T14884] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  353.307130][T14884] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  353.325693][T15023] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'.
[  353.360528][T14884] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  353.402623][T14884] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  353.697390][T15052] netlink: 'syz-executor.1': attribute type 21 has an invalid length.
[  353.724455][T15052] netlink: 164 bytes leftover after parsing attributes in process `syz-executor.1'.
[  353.752517][T15052] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'.
[  353.779889][T15052] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'.
[  353.825490][T15063] netlink: 428 bytes leftover after parsing attributes in process `syz-executor.1'.
[  353.853378][    T9] tipc: Node number set to 2886997162
[  353.862573][T15042] can: request_module (can-proto-5) failed.
[  353.877246][T15063] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'.
[  353.905995][T15052] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  353.945426][T15052] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  353.989542][T15052] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'.
[  354.644734][T15099] netlink: 'syz-executor.1': attribute type 21 has an invalid length.
[  354.775840][T15103] dummy0: entered promiscuous mode
[  354.781754][T15103] macsec1: entered promiscuous mode
[  354.834362][T15103] macsec1: entered allmulticast mode
[  354.852201][T15103] dummy0: entered allmulticast mode
[  354.869487][T15103] dummy0: left allmulticast mode
[  354.895834][T15103] dummy0: left promiscuous mode
[  354.982162][T15113] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  354.993806][T15113] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  355.033146][T15113] netlink: 'syz-executor.2': attribute type 2 has an invalid length.
[  355.062956][T15113] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  355.073142][T15113] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  355.115343][T15115] rdma_rxe: rxe_newlink: failed to add veth1_to_bridge
[  355.349237][ T5120] cgroup: fork rejected by pids controller in /syz2
[  355.636512][T15135] veth0_vlan: entered allmulticast mode
[  355.864071][T15142] veth0_vlan: left promiscuous mode
[  355.881637][T15142] veth0_vlan: entered promiscuous mode
[  356.894321][ T5133] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  356.913505][ T5133] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  356.966185][ T5133] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  356.975107][ T5133] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  356.986202][ T5133] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  357.000229][ T5133] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  357.112624][T15180] lo speed is unknown, defaulting to 1000
[  357.353583][T15190] __nla_validate_parse: 8 callbacks suppressed
[  357.353606][T15190] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  357.719997][T15203] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[  357.867807][T15203] 8021q: adding VLAN 0 to HW filter on device bond1
[  357.984527][T15206] 8021q: adding VLAN 0 to HW filter on device bond1
[  358.013859][T15206] bond1: (slave ip6tnl1): The slave device specified does not support setting the MAC address
[  358.042308][T15206] bond1: (slave ip6tnl1): Error -95 calling set_mac_address
[  359.095710][ T5129] Bluetooth: hci4: command tx timeout
[  361.174001][ T5129] Bluetooth: hci4: command tx timeout
[  362.239497][T15180] chnl_net:caif_netlink_parms(): no params data found
[  362.568611][T15180] bridge0: port 1(bridge_slave_0) entered blocking state
[  362.583132][T15180] bridge0: port 1(bridge_slave_0) entered disabled state
[  362.596624][T15180] bridge_slave_0: entered allmulticast mode
[  362.615667][T15180] bridge_slave_0: entered promiscuous mode
[  362.647345][T15180] bridge0: port 2(bridge_slave_1) entered blocking state
[  362.667866][T15180] bridge0: port 2(bridge_slave_1) entered disabled state
[  362.692862][T15180] bridge_slave_1: entered allmulticast mode
[  362.711987][T15180] bridge_slave_1: entered promiscuous mode
[  362.838846][T15180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  362.871010][T15180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  362.956908][T15180] team0: Port device team_slave_0 added
[  362.967335][T15289] sctp: [Deprecated]: syz-executor.3 (pid 15289) Use of struct sctp_assoc_value in delayed_ack socket option.
[  362.967335][T15289] Use struct sctp_sack_info instead
[  362.977489][T15281] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[  362.989091][T15180] team0: Port device team_slave_1 added
[  363.016000][T15292] sctp: [Deprecated]: syz-executor.3 (pid 15292) Use of struct sctp_assoc_value in delayed_ack socket option.
[  363.016000][T15292] Use struct sctp_sack_info instead
[  363.085707][T15180] batman_adv: batadv0: Adding interface: batadv_slave_0
[  363.095429][T15180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  363.135111][T15180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  363.161445][T15180] batman_adv: batadv0: Adding interface: batadv_slave_1
[  363.170596][T15180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  363.216817][T15180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  363.243340][ T5129] Bluetooth: hci4: command tx timeout
[  363.324005][T15180] hsr_slave_0: entered promiscuous mode
[  363.338918][T15180] hsr_slave_1: entered promiscuous mode
[  363.363440][T15180] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  363.386692][T15180] Cannot create hsr debugfs directory
[  363.609526][T15315] x_tables: duplicate underflow at hook 3
[  363.767384][T15180] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  364.008229][T15180] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  364.033497][T15336] ieee802154 phy1 wpan1: encryption failed: -22
[  364.050030][T15335] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  364.078981][T15339] netlink: 'syz-executor.4': attribute type 10 has an invalid length.
[  364.098924][T15332] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'.
[  364.142359][T15339] team0: Port device wlan1 added
[  364.273641][T15180] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  364.300118][T15346] dccp_v6_rcv: dropped packet with invalid checksum
[  364.609015][T10173] dvmrp1 (unregistering): left allmulticast mode
[  364.899583][T10173] bond0 (unregistering): Released all slaves
[  364.930453][T15180] bond0: (slave netdevsim0): Releasing backup interface
[  364.950533][T15180] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  364.999180][T10173] tipc: Disabling bearer <udp:syz0>
[  365.018069][T10173] tipc: Left network mode
[  365.323434][   T53] Bluetooth: hci4: command tx timeout
[  365.417020][T15180] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  365.464585][T15180] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  365.490371][T15382] netlink: 'syz-executor.4': attribute type 10 has an invalid length.
[  365.694748][T15398] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.3'.
[  365.830151][T15180] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  365.848214][T15406] bridge0: port 3(team0) entered blocking state
[  365.858176][T15406] bridge0: port 3(team0) entered disabled state
[  365.865250][T15406] team0: entered allmulticast mode
[  365.870590][T15406] team_slave_0: entered allmulticast mode
[  365.879954][T15406] team_slave_1: entered allmulticast mode
[  365.891184][T15406] team0: entered promiscuous mode
[  365.896744][T15406] team_slave_0: entered promiscuous mode
[  365.903045][T15406] team_slave_1: entered promiscuous mode
[  365.911280][T15406] bridge0: port 3(team0) entered blocking state
[  365.917826][T15406] bridge0: port 3(team0) entered forwarding state
[  365.944617][T15402] vlan3: entered allmulticast mode
[  365.950317][T15402] bridge_slave_0: entered allmulticast mode
[  365.965726][T15402] bridge_slave_0: left allmulticast mode
[  366.071382][T15180] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  366.315605][   T53] Bluetooth: hci1: command 0x0406 tx timeout
[  366.492373][T15180] 8021q: adding VLAN 0 to HW filter on device bond0
[  366.520996][T15180] 8021q: adding VLAN 0 to HW filter on device team0
[  366.529383][T15426] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'.
[  366.570611][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  366.578195][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  366.632045][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  366.640240][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  366.780388][T15180] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  366.916927][T15439] netlink: 'syz-executor.4': attribute type 150 has an invalid length.
[  366.974222][T10173] hsr_slave_0: left promiscuous mode
[  367.035670][T10173] hsr_slave_1: left promiscuous mode
[  368.249191][T15476] sctp: [Deprecated]: syz-executor.1 (pid 15476) Use of struct sctp_assoc_value in delayed_ack socket option.
[  368.249191][T15476] Use struct sctp_sack_info instead
[  368.384504][T15466] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[  368.797423][T15180] 8021q: adding VLAN 0 to HW filter on device batadv0
[  369.082272][T15504] veth5: entered allmulticast mode
[  369.128744][T15498] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  369.211698][T15180] veth0_vlan: entered promiscuous mode
[  369.278753][T15180] veth1_vlan: entered promiscuous mode
[  369.375093][T15519] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[  369.392442][T15180] veth0_macvtap: entered promiscuous mode
[  369.399701][T15519] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[  369.445551][T15180] veth1_macvtap: entered promiscuous mode
[  369.525074][T15180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  369.570216][T15180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  369.592459][T15180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  369.603764][T15180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  369.634784][T15180] batman_adv: batadv0: Interface activated: batadv_slave_0
[  369.661524][T15180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  369.674343][T15180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  369.687359][T15180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  369.702171][T15180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  369.714769][T15180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  369.726001][T15180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  369.745660][T15180] batman_adv: batadv0: Interface activated: batadv_slave_1
[  369.779586][T15180] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  369.795281][T15180] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  369.824383][T15180] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  369.841486][T15180] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  369.862423][T15545] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  369.901628][T15545] netlink: 'syz-executor.0': attribute type 9 has an invalid length.
[  369.906824][T15546] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  369.910028][T15545] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.0'.
[  369.959213][T15548] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  370.030275][T10172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  370.054475][T10172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  370.110457][T10175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  370.135249][T10175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  370.677495][T15598] netlink: 204 bytes leftover after parsing attributes in process `syz-executor.0'.
[  370.733294][   T29] audit: type=1804 audit(1718853851.979:80): pid=15598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3766265230/syzkaller.dCArhd/209/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0
[  370.802111][T15605] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[  370.821166][   T29] audit: type=1804 audit(1718853851.979:81): pid=15598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3766265230/syzkaller.dCArhd/209/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0
[  370.953657][T15614] netlink: 284 bytes leftover after parsing attributes in process `syz-executor.0'.
[  370.970153][T15613] netlink: 284 bytes leftover after parsing attributes in process `syz-executor.0'.
[  371.066822][T15596] netlink: 191416 bytes leftover after parsing attributes in process `syz-executor.2'.
[  371.139299][T15626] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'.
[  371.314245][T15645] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'.
[  371.487584][T15650] lo speed is unknown, defaulting to 1000
[  371.982551][T15676] bond0: option arp_all_targets: invalid value (18446744073709551615)
[  372.006092][T15675] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[  372.034284][T15675] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[  372.055377][T15675] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[  372.076099][T15675] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[  372.103286][T15675] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[  372.540497][T15688] No such timeout policy "syz0"
[  372.720672][T15701] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  373.821866][T15724] veth0_vlan: entered allmulticast mode
[  374.252371][T15755] netlink: 'syz-executor.4': attribute type 16 has an invalid length.
[  374.276503][T15763] syz-executor.2[15763] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  374.276653][T15763] syz-executor.2[15763] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  374.277456][T15755] netlink: 'syz-executor.4': attribute type 17 has an invalid length.
[  374.550298][T15777] bridge0: entered promiscuous mode
[  374.564666][T15777] macsec0: entered promiscuous mode
[  374.572458][T15777] bridge0: left promiscuous mode
[  374.703260][T15779] lo speed is unknown, defaulting to 1000
[  374.817694][T15791] __nla_validate_parse: 5 callbacks suppressed
[  374.817743][T15791] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'.
[  374.849203][T15791] geneve0: entered promiscuous mode
[  374.865434][T15791] geneve0: entered allmulticast mode
[  376.191095][T15853] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0
[  376.262847][T15858] ieee802154 phy1 wpan1: encryption failed: -90
[  376.761628][T15872] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'.
[  377.110323][T15880] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  377.292065][T15880] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  377.316996][T15895] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  377.350896][T15895] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  377.418578][T15880] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  377.442873][T15895] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  377.568102][T15880] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  377.788118][T15880] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  377.839032][T15880] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  377.902740][T15880] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  377.942677][T15880] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  377.973919][T15926] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  378.091412][T15930] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  378.143797][T15930] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  378.366365][T15948] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
[  378.725197][T15978] EXT4-fs warning (device sda1): ext4_group_extend:1861: can't shrink FS - resize aborted
[  378.811294][T15963] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  379.077608][T15997] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'.
[  379.104999][T15989] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  379.188542][T16004] netlink: 'syz-executor.0': attribute type 3 has an invalid length.
[  379.574499][ T1247] ieee802154 phy1 wpan1: encryption failed: -22
[  380.019266][T16033] __nla_validate_parse: 4 callbacks suppressed
[  380.019286][T16033] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  380.417889][T16064] team0: Port device wlan1 removed
[  380.437564][T16066] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'.
[  380.602288][T16076] netlink: 596 bytes leftover after parsing attributes in process `syz-executor.1'.
[  380.637105][T16082] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  380.783120][T16091] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'.
[  381.061575][T16105] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  381.094212][T16105] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  381.367529][T16127] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.0'.
[  381.375084][T16126] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'.
[  381.465827][T16134] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  381.641848][T16141] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'.
[  382.095652][   T29] audit: type=1800 audit(1718853863.369:82): pid=16172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1964 res=0 errno=0
[  382.157927][   T29] audit: type=1804 audit(1718853863.399:83): pid=16172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3039956188/syzkaller.4aB1cP/39/memory.events" dev="sda1" ino=1964 res=1 errno=0
[  382.705043][T16207] bridge0: port 4(vlan2) entered blocking state
[  382.729070][T16207] bridge0: port 4(vlan2) entered disabled state
[  382.761461][T16207] vlan2: entered allmulticast mode
[  382.781011][T16213] x_tables: duplicate underflow at hook 4
[  382.798779][T16207] vlan2: left allmulticast mode
[  382.842022][T16202] netlink: 'syz-executor.0': attribute type 6 has an invalid length.
[  382.867194][   T53] Bluetooth: hci0: command 0x0405 tx timeout
[  382.881184][ T5129] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  383.089283][   T29] audit: type=1800 audit(1718853864.359:84): pid=16230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1957 res=0 errno=0
[  383.170221][   T29] audit: type=1804 audit(1718853864.389:85): pid=16230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir1572362910/syzkaller.bHai71/188/memory.events" dev="sda1" ino=1957 res=1 errno=0
[  383.250522][   T29] audit: type=1804 audit(1718853864.419:86): pid=16232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3766265230/syzkaller.dCArhd/253/memory.events" dev="sda1" ino=1943 res=1 errno=0
[  383.328967][   T29] audit: type=1800 audit(1718853864.419:87): pid=16232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1943 res=0 errno=0
[  383.339466][T16238] lo speed is unknown, defaulting to 1000
[  383.493032][T16250] netlink: 'syz-executor.4': attribute type 9 has an invalid length.
[  383.689049][T16250] netlink: 'syz-executor.4': attribute type 9 has an invalid length.
[  384.026275][T16267] bridge0: port 4(vlan2) entered blocking state
[  384.071931][T16267] bridge0: port 4(vlan2) entered disabled state
[  384.101966][T16267] vlan2: entered allmulticast mode
[  384.125254][T16267] vlan2: left allmulticast mode
[  384.191503][T16269] netlink: 'syz-executor.0': attribute type 6 has an invalid length.
[  384.436042][T16275] netlink: 'syz-executor.4': attribute type 10 has an invalid length.
[  384.898614][T16300] netlink: 'syz-executor.0': attribute type 9 has an invalid length.
[  385.026868][T16305] netlink: 'syz-executor.0': attribute type 9 has an invalid length.
[  385.080051][T16305] __nla_validate_parse: 5 callbacks suppressed
[  385.080070][T16305] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.0'.
[  385.148620][T16312] netlink: 'syz-executor.2': attribute type 9 has an invalid length.
[  385.166869][T16312] netlink: 'syz-executor.2': attribute type 7 has an invalid length.
[  385.185570][T16312] netlink: 'syz-executor.2': attribute type 8 has an invalid length.
[  386.947963][T16378] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  387.393862][T16405] dummy0: entered promiscuous mode
[  387.405195][T16405] macsec0: entered promiscuous mode
[  387.421370][T16405] dummy0: left promiscuous mode
[  387.615644][T16422] netlink: 'syz-executor.2': attribute type 3 has an invalid length.
[  387.636709][T16422] netlink: 'syz-executor.2': attribute type 4 has an invalid length.
[  387.653710][T16422] netlink: 'syz-executor.2': attribute type 7 has an invalid length.
[  387.662234][T16422] netlink: 'syz-executor.2': attribute type 8 has an invalid length.
[  387.683614][T16422] netlink: 198200 bytes leftover after parsing attributes in process `syz-executor.2'.
[  388.256974][T16435] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
[  388.298275][T16435] team0: entered promiscuous mode
[  388.319241][T16435] 8021q: adding VLAN 0 to HW filter on device team0
[  388.349332][T16435] bridge0: port 1(team0) entered blocking state
[  388.388208][T16435] bridge0: port 1(team0) entered disabled state
[  388.416146][T16435] team0: entered allmulticast mode
[  388.502976][   T29] audit: type=1800 audit(1718853869.769:88): pid=16444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.2" name="memory.events" dev="sda1" ino=1964 res=0 errno=0
[  388.655043][T16457] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[  388.752898][T16463] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  388.952335][T16472] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  389.149215][T16476] netlink: 9284 bytes leftover after parsing attributes in process `syz-executor.2'.
[  389.328437][T16492] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'.
[  389.354688][   T29] audit: type=1804 audit(1718853870.619:89): pid=16494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3887621332/syzkaller.Wwfodq/628/memory.events" dev="sda1" ino=1953 res=1 errno=0
[  389.421935][T16500] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  389.443460][   T29] audit: type=1804 audit(1718853870.619:90): pid=16494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir3887621332/syzkaller.Wwfodq/628/memory.events" dev="sda1" ino=1953 res=1 errno=0
[  389.542698][   T29] audit: type=1804 audit(1718853870.619:91): pid=16494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir3887621332/syzkaller.Wwfodq/628/memory.events" dev="sda1" ino=1953 res=1 errno=0
[  389.917455][T10177] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  390.049231][   T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  390.088152][   T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  390.100635][   T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  390.116632][   T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  390.128718][T10177] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  390.140178][   T53] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  390.151287][   T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  390.223727][T16518] hsr0: entered promiscuous mode
[  390.355547][T10177] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  390.523049][T10177] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  390.621382][T16515] lo speed is unknown, defaulting to 1000
[  390.891862][T10177] team0: left allmulticast mode
[  390.910143][T10177] bridge0: port 1(team0) entered disabled state
[  391.400638][T10177] dvmrp0 (unregistering): left allmulticast mode
[  391.484129][ T5129] Bluetooth: hci0: command 0x0405 tx timeout
[  391.803057][T10177] bond1 (unregistering): Released all slaves
[  391.831428][T16575] validate_nla: 8 callbacks suppressed
[  391.831450][T16575] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  391.960749][T16575] bond4: entered promiscuous mode
[  392.000127][T16578] lo: entered promiscuous mode
[  392.018401][T16578] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  392.061482][T16578] bond4: (slave lo): making interface the new active one
[  392.091978][T16578] bond4: (slave lo): Enslaving as an active interface with an up link
[  392.110185][T10177] Êü: left promiscuous mode
[  392.204216][ T5129] Bluetooth: hci1: command tx timeout
[  392.216924][T10177] tipc: Disabling bearer <udp:s>
[  392.223740][T10177] tipc: Left network mode
[  392.490363][T16600] __nla_validate_parse: 2 callbacks suppressed
[  392.490385][T16600] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  392.508991][T16598] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  392.545039][T16515] chnl_net:caif_netlink_parms(): no params data found
[  392.600078][T16605] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[  392.665489][T16608] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'.
[  392.710725][T16608] netlink: 'syz-executor.3': attribute type 4 has an invalid length.
[  392.859879][T16515] bridge0: port 1(bridge_slave_0) entered blocking state
[  392.868746][T16515] bridge0: port 1(bridge_slave_0) entered disabled state
[  392.879349][T16515] bridge_slave_0: entered allmulticast mode
[  392.884077][T16608] syz-executor.3 (16608) used greatest stack depth: 17336 bytes left
[  392.934656][T16515] bridge_slave_0: entered promiscuous mode
[  393.020838][T16617] pim6reg: entered allmulticast mode
[  393.037852][T16515] bridge0: port 2(bridge_slave_1) entered blocking state
[  393.071492][T16515] bridge0: port 2(bridge_slave_1) entered disabled state
[  393.092581][T16515] bridge_slave_1: entered allmulticast mode
[  393.122951][T16515] bridge_slave_1: entered promiscuous mode
[  393.138835][T16617] pim6reg: left allmulticast mode
[  393.273394][T10177] hsr_slave_0: left promiscuous mode
[  393.295488][T10177] hsr_slave_1: left promiscuous mode
[  393.344575][T10177] veth1_vlan: left promiscuous mode
[  394.291383][ T5129] Bluetooth: hci1: command tx timeout
[  394.815123][T16651] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  394.962536][T16515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  394.978619][T16515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  394.990787][T16634] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'.
[  395.201706][T16669] netlink: 'syz-executor.1': attribute type 4 has an invalid length.
[  395.302512][T16515] team0: Port device team_slave_0 added
[  395.327480][T16515] team0: Port device team_slave_1 added
[  395.498625][T16515] batman_adv: batadv0: Adding interface: batadv_slave_0
[  395.530719][T16515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  395.536368][T16682] TCP: MD5 Hash mismatch for [fe80::bb].0->[ff02::1].20002 [F]L3 index 0
[  395.568663][T16515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  395.594187][T16683] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'.
[  395.663075][T16515] batman_adv: batadv0: Adding interface: batadv_slave_1
[  395.681664][T16515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  395.718229][T16515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  395.744959][T16683] netlink: 'syz-executor.0': attribute type 3 has an invalid length.
[  395.768820][T16683] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.0'.
[  395.789461][T16672] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'.
[  395.804434][T16690] IPVS: Error joining to the multicast group
[  395.877225][T16672] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'.
[  395.918944][T16515] hsr_slave_0: entered promiscuous mode
[  395.954278][T16515] hsr_slave_1: entered promiscuous mode
[  395.969037][T16515] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  395.995570][T16515] Cannot create hsr debugfs directory
[  396.364932][ T5129] Bluetooth: hci1: command tx timeout
[  396.440455][T16723] ieee802154 phy1 wpan1: encryption failed: -22
[  396.658300][T16733] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  397.066037][T16515] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  397.098396][T16515] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  397.120515][T16515] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  397.167010][T16515] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  397.277405][T16760] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  397.423816][T16515] 8021q: adding VLAN 0 to HW filter on device bond0
[  397.477018][T16515] 8021q: adding VLAN 0 to HW filter on device team0
[  397.517861][ T5233] bridge0: port 1(bridge_slave_0) entered blocking state
[  397.526031][ T5233] bridge0: port 1(bridge_slave_0) entered forwarding state
[  397.607847][ T5233] bridge0: port 2(bridge_slave_1) entered blocking state
[  397.616876][ T5233] bridge0: port 2(bridge_slave_1) entered forwarding state
[  398.357986][T16798] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[  398.443609][ T5129] Bluetooth: hci1: command tx timeout
[  398.466972][T16515] 8021q: adding VLAN 0 to HW filter on device batadv0
[  398.877039][T16515] veth0_vlan: entered promiscuous mode
[  398.908161][T16515] veth1_vlan: entered promiscuous mode
[  398.935965][T16832] __nla_validate_parse: 3 callbacks suppressed
[  398.935985][T16832] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.2'.
[  398.976757][T16836] netlink: 'syz-executor.1': attribute type 3 has an invalid length.
[  398.985136][T16832] 0ªX¹¦D: renamed from gretap0 (while UP)
[  399.015124][T16832] 0ªX¹¦D: entered allmulticast mode
[  399.021101][T16832] A link change request failed with some changes committed already. Interface 
60ªX¹¦D may have been left with an inconsistent configuration, please check.
[  399.103411][T16515] veth0_macvtap: entered promiscuous mode
[  399.131033][T16515] veth1_macvtap: entered promiscuous mode
[  399.184389][T16843] netlink: 'syz-executor.2': attribute type 17 has an invalid length.
[  399.193728][T16843] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'.
[  399.245438][T16515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  399.271405][T16515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  399.297023][T16515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  399.309042][T16515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  399.319315][T16515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  399.331890][T16515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  399.346625][T16515] batman_adv: batadv0: Interface activated: batadv_slave_0
[  399.371757][T16515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  399.385231][T16515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  399.397873][T16515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  399.420875][T16515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  399.431953][T16515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  399.444288][T16515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  399.455909][T16515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  399.466997][T16515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  399.479348][T16515] batman_adv: batadv0: Interface activated: batadv_slave_1
[  399.504417][T16515] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  399.515178][T16515] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  399.525727][T16515] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  399.535127][T16515] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  399.726388][T10175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  399.753950][T10175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  399.866205][T10173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  399.885568][T10173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  399.899238][T16854] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[  400.364165][T16880] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.2'.
[  400.633038][T16900] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  400.646303][T16904] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xf
[  401.001078][T16914] veth0_vlan: left promiscuous mode
[  401.112883][T16933] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  401.198843][T16937] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[  401.235070][T16941] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'.
[  401.335295][T16947] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'.
[  401.460723][   T29] audit: type=1800 audit(1718853882.729:92): pid=16957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1961 res=0 errno=0
[  401.579284][   T29] audit: type=1804 audit(1718853882.779:93): pid=16957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir1572362910/syzkaller.bHai71/237/memory.events" dev="sda1" ino=1961 res=1 errno=0
[  401.677009][   T29] audit: type=1804 audit(1718853882.789:94): pid=16957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir1572362910/syzkaller.bHai71/237/memory.events" dev="sda1" ino=1961 res=1 errno=0
[  402.313929][T17006] veth0_vlan: left promiscuous mode
[  402.606921][T17029] xt_TPROXY: Can be used only with -p tcp or -p udp
[  403.260090][T17058] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  403.286780][   T29] audit: type=1804 audit(1718853884.559:95): pid=17057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3766265230/syzkaller.dCArhd/306/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0
[  403.331744][T17058] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  403.539160][T17066] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'.
[  403.801196][   T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  403.815679][   T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  403.825435][   T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  403.835562][T17080] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'.
[  403.850836][   T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  403.867366][   T53] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  403.876123][   T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  404.122143][T10172] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  404.198896][T17098] veth0_macvtap: left promiscuous mode
[  404.252609][T17081] lo speed is unknown, defaulting to 1000
[  404.287188][T17105] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
[  404.326467][T10172] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  404.458453][T17110] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  404.485607][T17107] vlan0: entered promiscuous mode
[  404.508142][T17107] bond0: entered promiscuous mode
[  404.525001][T17107] bond_slave_0: entered promiscuous mode
[  404.533581][T17107] bond_slave_1: entered promiscuous mode
[  404.567393][T17107] bond0: left promiscuous mode
[  404.572482][T17107] bond_slave_0: left promiscuous mode
[  404.593743][T17107] bond_slave_1: left promiscuous mode
[  404.677976][T10172] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  404.697819][T17103] lo speed is unknown, defaulting to 1000
[  404.798852][T10172] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  405.265225][T10172] bridge_slave_1: left allmulticast mode
[  405.271219][T10172] bridge_slave_1: left promiscuous mode
[  405.297017][T10172] bridge0: port 2(bridge_slave_1) entered disabled state
[  405.322723][T10172] bridge_slave_0: left allmulticast mode
[  405.339854][T10172] bridge_slave_0: left promiscuous mode
[  405.347217][T10172] bridge0: port 1(bridge_slave_0) entered disabled state
[  405.963800][   T53] Bluetooth: hci1: command tx timeout
[  406.291623][T10172] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  406.311500][T10172] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  406.338009][T10172] bond0 (unregistering): Released all slaves
[  406.615617][T17177] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.2'.
[  406.619621][T17081] chnl_net:caif_netlink_parms(): no params data found
[  406.825020][T17188] netlink: 763 bytes leftover after parsing attributes in process `syz-executor.3'.
[  406.871482][T17192] netlink: 208 bytes leftover after parsing attributes in process `syz-executor.2'.
[  407.100742][T17081] bridge0: port 1(bridge_slave_0) entered blocking state
[  407.133938][T17081] bridge0: port 1(bridge_slave_0) entered disabled state
[  407.142743][T17081] bridge_slave_0: entered allmulticast mode
[  407.174695][T17081] bridge_slave_0: entered promiscuous mode
[  407.197147][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  407.232890][T17081] bridge0: port 2(bridge_slave_1) entered blocking state
[  407.244094][T17081] bridge0: port 2(bridge_slave_1) entered disabled state
[  407.252724][T17081] bridge_slave_1: entered allmulticast mode
[  407.284252][T17081] bridge_slave_1: entered promiscuous mode
[  407.437244][T17208] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[  407.597030][T17081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  407.659041][T17081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  407.745628][T10172] hsr_slave_0: left promiscuous mode
[  407.769593][T10172] hsr_slave_1: left promiscuous mode
[  407.786347][T10172] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  407.816364][T10172] batman_adv: batadv0: Removing interface: batadv_slave_0
[  407.852069][T10172] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  407.863078][T10172] batman_adv: batadv0: Removing interface: batadv_slave_1
[  407.898721][T10172] veth1_macvtap: left promiscuous mode
[  407.905404][T10172] veth0_macvtap: left promiscuous mode
[  407.911527][T10172] veth1_vlan: left promiscuous mode
[  407.917379][T10172] veth0_vlan: left promiscuous mode
[  408.054159][   T53] Bluetooth: hci1: command tx timeout
[  408.664337][T10172] team0 (unregistering): Port device team_slave_1 removed
[  408.712354][T10172] team0 (unregistering): Port device team_slave_0 removed
[  409.230790][T17213] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'.
[  409.273041][T17214] bond0: option ad_select: unable to set because the bond device is up
[  409.317059][T17220] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[  409.348327][T17220] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  409.368840][T17220] bridge1: entered promiscuous mode
[  409.410656][T17081] team0: Port device team_slave_0 added
[  409.478170][T17081] team0: Port device team_slave_1 added
[  409.621708][T17081] batman_adv: batadv0: Adding interface: batadv_slave_0
[  409.637313][T17081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  409.733644][T17081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  409.829121][T17081] batman_adv: batadv0: Adding interface: batadv_slave_1
[  409.855467][T17081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  409.935525][T17081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  409.976985][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  410.125869][   T53] Bluetooth: hci1: command tx timeout
[  410.215023][T17081] hsr_slave_0: entered promiscuous mode
[  410.225242][T17258] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[  410.252226][T17081] hsr_slave_1: entered promiscuous mode
[  410.281303][T17081] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  410.306799][T17081] Cannot create hsr debugfs directory
[  410.407457][T17269] tipc: Failed to remove unknown binding: 66,1,1/0:548101396/548101398
[  410.417104][T17269] tipc: Failed to remove unknown binding: 66,1,1/0:548101396/548101398
[  410.501690][T17273] team0: left allmulticast mode
[  410.518614][T17273] team_slave_0: left allmulticast mode
[  410.535656][T17273] team_slave_1: left allmulticast mode
[  410.557872][T17273] team0: left promiscuous mode
[  410.573410][T17273] team_slave_0: left promiscuous mode
[  410.580408][T17273] team_slave_1: left promiscuous mode
[  410.587621][T17273] bridge0: port 3(team0) entered disabled state
[  410.612718][T17273] bridge_slave_0: left allmulticast mode
[  410.629012][T17273] bridge_slave_0: left promiscuous mode
[  410.664362][T17273] bridge0: port 1(bridge_slave_0) entered disabled state
[  410.695921][T17273] bridge_slave_1: left allmulticast mode
[  410.702035][T17273] bridge_slave_1: left promiscuous mode
[  410.710039][T17273] bridge0: port 2(bridge_slave_1) entered disabled state
[  410.753947][T17273] bond0: (slave bond_slave_0): Releasing backup interface
[  410.831760][T17273] bond0: (slave bond_slave_1): Releasing backup interface
[  410.964006][T17273] team0: Port device team_slave_0 removed
[  411.022973][T17273] team0: Port device team_slave_1 removed
[  411.044504][T17273] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  411.063452][T17273] batman_adv: batadv0: Removing interface: batadv_slave_0
[  411.073923][ T5166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  411.089702][T17273] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  411.100344][T17273] batman_adv: batadv0: Removing interface: batadv_slave_1
[  411.304908][T17288] lo speed is unknown, defaulting to 1000
[  411.311808][T17304] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  411.343283][T17304] netlink: 168864 bytes leftover after parsing attributes in process `syz-executor.0'.
[  411.610379][T17317] ip6tnl0: entered promiscuous mode
[  411.623951][ T5172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  411.646260][T17311] ip6tnl0: left promiscuous mode
[  411.914665][T17330] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[  412.027576][T17333] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  412.041804][T17333] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[  412.214643][   T53] Bluetooth: hci1: command tx timeout
[  412.564065][T17081] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  412.610950][T17081] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  412.667703][T17081] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  412.716252][T17081] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  412.843694][T17353] netlink: 'syz-executor.2': attribute type 10 has an invalid length.
[  412.852530][T17353] hsr0: left promiscuous mode
[  412.876667][T17353] hsr0: entered promiscuous mode
[  412.897246][T17353] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  413.050103][T17352] lo speed is unknown, defaulting to 1000
[  413.094663][T17364] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4294967167 (only 8 groups)
[  413.208271][T17081] 8021q: adding VLAN 0 to HW filter on device bond0
[  413.252059][T17081] 8021q: adding VLAN 0 to HW filter on device team0
[  413.265100][T17364] xt_CT: You must specify a L4 protocol and not use inversions on it
[  413.286751][ T5233] bridge0: port 1(bridge_slave_0) entered blocking state
[  413.294395][ T5233] bridge0: port 1(bridge_slave_0) entered forwarding state
[  413.345814][ T5233] bridge0: port 2(bridge_slave_1) entered blocking state
[  413.353252][ T5233] bridge0: port 2(bridge_slave_1) entered forwarding state
[  413.386011][T17371] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  413.491036][T17081] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  413.568985][T17375] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  413.768202][T17388] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'.
[  413.819640][T17386] ebt_among: dst integrity fail: 300
[  413.990199][T17385] netlink: 364 bytes leftover after parsing attributes in process `syz-executor.1'.
[  414.126649][T17081] 8021q: adding VLAN 0 to HW filter on device batadv0
[  414.402175][T17410] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[  414.446081][T17411] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  414.465025][T17410] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  414.811948][T17081] veth0_vlan: entered promiscuous mode
[  414.831814][T17423] xt_NFQUEUE: number of total queues is 0
[  414.906297][T17081] veth1_vlan: entered promiscuous mode
[  415.041807][T17434] bridge0: port 1(hsr_slave_1) entered blocking state
[  415.063512][T17434] bridge0: port 1(hsr_slave_1) entered disabled state
[  415.072206][T17434] hsr_slave_1: entered allmulticast mode
[  415.080576][T17434] hsr_slave_1: left allmulticast mode
[  415.109794][T17434] netlink: 'syz-executor.0': attribute type 5 has an invalid length.
[  415.135243][T17081] veth0_macvtap: entered promiscuous mode
[  415.167908][T17081] veth1_macvtap: entered promiscuous mode
[  415.233689][T17081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  415.258103][T17081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  415.283349][T17081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  415.331945][T17081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  415.357843][T17081] batman_adv: batadv0: Interface activated: batadv_slave_0
[  415.482044][T17081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  415.499300][T17081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  415.509907][T17081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  415.523033][T17081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  415.534014][T17081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  415.552114][T17081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  415.584155][T17081] batman_adv: batadv0: Interface activated: batadv_slave_1
[  415.598243][T17081] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  415.619931][T17081] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  415.682430][T17081] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  415.698906][T17081] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  415.902908][ T2455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  415.934255][T10175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  415.940012][ T2455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  415.942176][T10175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  416.256171][T17480] lo speed is unknown, defaulting to 1000
[  416.772370][T17511] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'.
[  416.784046][T17511] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'.
[  416.803411][T17511] bridge0: port 2(bridge_slave_1) entered listening state
[  416.812974][T17499] ieee802154 phy1 wpan1: encryption failed: -22
[  417.098834][T17523] smc: net device ip6_vti0 erased user defined pnetid SYZ0
[  417.108947][T17523] smc: ib device syz2 ibport 1 erased user defined pnetid SYZ0
[  417.379966][T17532] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'.
[  417.640040][T17539] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'.
[  418.169727][T17558] syzkaller0: entered promiscuous mode
[  418.217687][T17558] syzkaller0: entered allmulticast mode
[  421.114105][T17563] lo speed is unknown, defaulting to 1000
[  421.750451][T17621] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'.
[  421.913787][T17629] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  421.987261][T17629] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de
[  422.613670][ T5129] Bluetooth: hci2: command 0x0405 tx timeout
[  423.705135][T17674] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xf
[  425.600969][T17679] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  425.758753][T17683] lo speed is unknown, defaulting to 1000
[  426.300079][T17698] macsec1: entered promiscuous mode
[  426.319434][T17698] bond0: entered promiscuous mode
[  426.333898][T17698] macsec1: entered allmulticast mode
[  426.345089][T17698] bond0: entered allmulticast mode
[  426.361432][T17698] bond0: left allmulticast mode
[  426.379694][T17698] bond0: left promiscuous mode
[  426.642701][T17684] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'.
[  426.686353][   T29] audit: type=1804 audit(1718853907.959:96): pid=17714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1572362910/syzkaller.bHai71/287/cgroup.controllers" dev="sda1" ino=1940 res=1 errno=0
[  426.715099][T17718] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'.
[  426.911707][T17730] IPv6: Can't replace route, no match found
[  427.565229][T17763] x_tables: duplicate underflow at hook 1
[  428.654970][T17816] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.2'.
[  428.723111][T17821] pim6reg: entered allmulticast mode
[  428.787772][T17814] vxcan1: entered allmulticast mode
[  428.804562][T17814] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  428.866928][T17836] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.1'.
[  428.911821][   T29] audit: type=1804 audit(1718853910.179:97): pid=17836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3887621332/syzkaller.Wwfodq/736/cgroup.controllers" dev="sda1" ino=1966 res=1 errno=0
[  428.944725][T17836] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups)
[  429.064077][T17846] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[  429.079821][T17846] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.0'.
[  429.295540][T17854] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  429.317466][T17854] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  429.345354][T17854] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  429.363570][T17854] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  429.384369][T17854] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  429.401367][T17854] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  429.416133][T17854] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  429.426410][T17854] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  429.437025][T17854] geneve2: entered promiscuous mode
[  429.442393][T17854] geneve2: entered allmulticast mode
[  429.614976][T17868] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
[  430.157392][T17890] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  430.192231][T17890] batiС_slave_': renamed from lo
[  430.504831][T17904] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  430.567719][T17906] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  430.635067][T17906] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0
[  430.643672][T17908] can: request_module (can-proto-0) failed.
[  430.655685][T17906] ip6gretap0: entered promiscuous mode
[  430.680011][T17906] macvtap0: entered promiscuous mode
[  430.701104][T17906] macvtap0: entered allmulticast mode
[  430.717688][T17906] ip6gretap0: entered allmulticast mode
[  430.729633][T17910] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  430.780278][T17910] ip6gretap0: left allmulticast mode
[  430.788046][T17910] ip6gretap0: left promiscuous mode
[  430.805388][T17910] macvtap0: left promiscuous mode
[  430.810806][T17910] macvtap0: left allmulticast mode
[  431.600809][T10177] bridge0 (unregistering): left promiscuous mode
[  431.992649][T10177] bond0 (unregistering): Released all slaves
[  432.010991][T10177] bond1 (unregistering): Released all slaves
[  432.025486][T17922] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'.
[  432.076036][T17931] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  432.137282][T17949] xt_limit: Overflow, try lower: 16384/524288
[  432.265868][T10177] Êüä^q: left promiscuous mode
[  432.426606][   T29] audit: type=1804 audit(1718853913.699:98): pid=17959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1572362910/syzkaller.bHai71/308/cgroup.controllers" dev="sda1" ino=1962 res=1 errno=0
[  432.464530][T17959] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups)
[  432.495753][T10177] Êü: left promiscuous mode
[  433.022793][T17988] netlink: 'syz-executor.4': attribute type 10 has an invalid length.
[  433.064234][T10170] tipc: Subscription rejected, illegal request
[  433.081729][T17996] xt_limit: Overflow, try lower: 16384/524288
[  433.115535][T17988] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  433.140347][T17992] macvlan0: entered promiscuous mode
[  433.161974][T17992] ipvlan0: entered promiscuous mode
[  433.185381][T17992] ipvlan0: left promiscuous mode
[  433.191703][T17992] macvlan0: left promiscuous mode
[  433.221760][T18000] netlink: 'syz-executor.3': attribute type 29 has an invalid length.
[  433.235275][T18000] netlink: 'syz-executor.3': attribute type 29 has an invalid length.
[  433.516935][T18018] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  433.869009][T18035] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
[  434.520841][T18062] __nla_validate_parse: 4 callbacks suppressed
[  434.520864][T18062] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  434.567109][T18062] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  434.667231][T10177] dummy0: left promiscuous mode
[  434.692379][T10177] hsr_slave_0: left promiscuous mode
[  434.704218][T10177] hsr_slave_1: left promiscuous mode
[  434.729385][T10177] veth1_vlan: left promiscuous mode
[  434.736222][T10177] veth0_vlan: left promiscuous mode
[  434.842654][T10177] infiniband syz2: set down
[  435.884067][ T2455] smc: removing ib device syz2
[  435.991055][T10177] smc: removing net device wg0 with user defined pnetid SYZ0
[  436.175805][T10172] smc: removing ib device syz0
[  436.251055][ T5233] infiniband syz2: ib_query_port failed (-19)
[  436.443864][T18089] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'.
[  436.478193][T18093] dccp_invalid_packet: P.Data Offset(0) too small
[  436.495271][T18089] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'.
[  436.555512][T18089] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'.
[  436.603701][T18089] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'.
[  436.652680][T18089] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'.
[  436.704032][T18089] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'.
[  436.753138][T18089] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'.
[  436.844708][T18089] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'.
[  437.247191][T18114] netlink: 'syz-executor.3': attribute type 26 has an invalid length.
[  437.913438][T18130] Dead loop on virtual device ip6_vti0, fix it urgently!
[  438.470324][T18149] xt_recent: Unsupported userspace flags (00000042)
[  439.247713][T18180] Bluetooth: MGMT ver 1.22
[  439.461173][T18185] dccp_invalid_packet: P.Data Offset(0) too small
[  439.563405][   T45] page_pool_release_retry() stalled pool shutdown: id 97, 1 inflight 60 sec
[  440.013045][T18208] Page cache invalidation failure on direct I/O.  Possible data corruption due to collision with buffered I/O!
[  440.041377][T18208] File: /root/syzkaller-testdir1572362910/syzkaller.bHai71/324/memory.events PID: 18208 Comm: syz-executor.3
[  440.404019][T18218] netlink: 'syz-executor.3': attribute type 9 has an invalid length.
[  440.437995][T18218] netlink: 'syz-executor.3': attribute type 6 has an invalid length.
[  440.666050][   T29] audit: type=1804 audit(1718853921.929:99): pid=18225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir990941857/syzkaller.XEA4PF/40/cgroup.controllers" dev="sda1" ino=1944 res=1 errno=0
[  440.875787][   T29] audit: type=1804 audit(1718853922.149:100): pid=18232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir990941857/syzkaller.XEA4PF/40/cgroup.controllers" dev="sda1" ino=1944 res=1 errno=0
[  440.960990][T18238] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 8
[  441.011975][ T1247] ieee802154 phy1 wpan1: encryption failed: -22
[  441.259644][T18250] vlan2: entered promiscuous mode
[  441.279288][T18250] veth0_to_batadv: entered promiscuous mode
[  441.292937][T18250] vlan2: entered allmulticast mode
[  441.317477][T18250] veth0_to_batadv: entered allmulticast mode
[  441.422803][T18259] IPVS: length: 103 != 8
[  441.482258][T18262] __nla_validate_parse: 60 callbacks suppressed
[  441.482283][T18262] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  441.517049][T18266] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'.
[  441.537476][T18263] xt_l2tp: v2 tid > 0xffff: 100794368
[  441.696361][T18275] xt_recent: Unsupported userspace flags (00000042)
[  442.239191][T18296] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  442.548193][T18289] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  443.286547][T18317] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
[  443.472319][T18333] xt_CT: You must specify a L4 protocol and not use inversions on it
[  443.680559][T18343] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  443.709244][T18342] netdevsim netdevsim4 netdevsim0: left promiscuous mode
[  443.834635][T18347] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes
[  444.345648][T18369] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  444.422722][T18386] syz-executor.1[18386] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  444.422966][T18386] syz-executor.1[18386] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  444.487547][T18390] IPVS: set_ctl: invalid protocol: 43 172.30.0.5:20004
[  444.534116][T18389] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  444.596562][T18389] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  444.989930][T18393] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  445.246637][T18393] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  445.538171][T18393] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  445.758531][T18393] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  445.975975][T18393] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  446.028026][T18393] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  446.074938][T18393] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  446.101408][T18445] netlink: 'syz-executor.2': attribute type 11 has an invalid length.
[  446.129665][T18393] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  446.193004][T18452] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'.
[  446.325829][T18459] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'.
[  446.896484][T18484] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'.
[  447.003537][ T5129] Bluetooth: hci3: command 0x1407 tx timeout
[  447.003936][   T53] Bluetooth: hci3: Opcode 0x1407 failed: -110
[  447.068282][T18490] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  447.128760][T18490] netlink: 200 bytes leftover after parsing attributes in process `syz-executor.2'.
[  447.147680][T18492] openvswitch: netlink: Key 0 has unexpected len 2 expected 0
[  447.364600][T18503] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.4'.
[  447.504103][   T29] audit: type=1804 audit(1718853928.769:101): pid=18505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir990941857/syzkaller.XEA4PF/64/cgroup.controllers" dev="sda1" ino=1941 res=1 errno=0
[  447.583934][T18513] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  447.616694][T18513] team1 (uninitialized): Failed to send options change via netlink (err -105)
[  447.666132][T18517] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  447.782077][T18523] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  447.807458][T18523] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  448.059254][T18542] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.2'.
[  448.313013][T18557] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[  448.869110][T18592] netlink: 'syz-executor.1': attribute type 10 has an invalid length.
[  448.882997][T18591] netlink: 'syz-executor.3': attribute type 5 has an invalid length.
[  449.059734][T18602] netlink: 'syz-executor.0': attribute type 19 has an invalid length.
[  449.104205][T18596] ------------[ cut here ]------------
[  449.111386][T18596] refcount_t: decrement hit 0; leaking memory.
[  449.162112][T18596] WARNING: CPU: 1 PID: 18596 at lib/refcount.c:31 refcount_warn_saturate+0xfa/0x1d0
[  449.175039][T18596] Modules linked in:
[  449.180951][T18596] CPU: 1 PID: 18596 Comm: syz-executor.2 Not tainted 6.10.0-rc2-syzkaller-00249-gbe27b8965297 #0
[  449.194233][T18596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
2024/06/20 03:25:30 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF
[  449.206706][T18596] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0
[  449.207727][T18606] syzkaller0: entered promiscuous mode
[  449.213454][T18596] Code: b2 00 00 00 e8 f7 be e6 fc 5b 5d c3 cc cc cc cc e8 eb be e6 fc c6 05 cb 64 e8 0a 01 90 48 c7 c7 20 a2 1f 8c e8 67 ed a8 fc 90 <0f> 0b 90 90 eb d9 e8 cb be e6 fc c6 05 a8 64 e8 0a 01 90 48 c7 c7
[  449.243130][T18596] RSP: 0018:ffffc90004187b68 EFLAGS: 00010246
[  449.251197][T18596] RAX: 1d639c8915c94d00 RBX: ffff88802c2e2664 RCX: ffff888023731e00
[  449.260584][T18596] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  449.271938][T18596] RBP: 0000000000000004 R08: ffffffff815857a2 R09: fffffbfff1c39994
[  449.282116][T18596] R10: dffffc0000000000 R11: fffffbfff1c39994 R12: ffff88802c2e2620
[  449.295602][T18596] R13: 0000000000000000 R14: ffff88802c2e2664 R15: dffffc0000000000
[  449.304362][T18596] FS:  0000555582ece480(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000
[  449.314210][T18596] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  449.323061][T18596] CR2: 00005555684be788 CR3: 000000005750e000 CR4: 00000000003506f0
[  449.336458][T18596] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  449.346704][T18596] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  449.357107][T18596] Call Trace:
[  449.361871][T18596]  <TASK>
[  449.365917][T18596]  ? __warn+0x163/0x4e0
[  449.370761][T18596]  ? refcount_warn_saturate+0xfa/0x1d0
[  449.377347][T18596]  ? report_bug+0x2b3/0x500
[  449.382337][T18596]  ? refcount_warn_saturate+0xfa/0x1d0
[  449.388885][T18596]  ? handle_bug+0x3e/0x70
[  449.393893][T18596]  ? exc_invalid_op+0x1a/0x50
[  449.400802][T18596]  ? asm_exc_invalid_op+0x1a/0x20
[  449.406331][T18596]  ? __warn_printk+0x292/0x360
[  449.411233][T18596]  ? refcount_warn_saturate+0xfa/0x1d0
[  449.417343][T18596]  ? refcount_warn_saturate+0xf9/0x1d0
[  449.423054][T18596]  ref_tracker_free+0x6af/0x7e0
[  449.428718][T18596]  ? __pfx_ref_tracker_free+0x10/0x10
[  449.434428][T18596]  ax25_release+0x368/0x950
[  449.439946][T18596]  sock_close+0xbc/0x240
[  449.445527][T18596]  ? __pfx_sock_close+0x10/0x10
[  449.451397][T18596]  __fput+0x406/0x8b0
[  449.456562][T18596]  task_work_run+0x24f/0x310
[  449.462626][T18596]  ? __pfx_task_work_run+0x10/0x10
[  449.468574][T18596]  ? syscall_exit_to_user_mode+0xa3/0x370
[  449.474823][T18596]  syscall_exit_to_user_mode+0x168/0x370
[  449.481030][T18596]  do_syscall_64+0x100/0x230
[  449.487081][T18596]  ? clear_bhb_loop+0x35/0x90
[  449.492384][T18596]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  449.499060][T18596] RIP: 0033:0x7f5d43a7cf29
[  449.503887][T18596] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  449.528167][T18596] RSP: 002b:00007ffe97753f58 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  449.537864][T18596] RAX: 0000000000000000 RBX: 000000000006d975 RCX: 00007f5d43a7cf29
[  449.548772][T18596] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  449.557315][T18596] RBP: ffffffffffffffff R08: 0000000000000001 R09: 0000001d00000000
[  449.566081][T18596] R10: 00007f5d43a00000 R11: 0000000000000246 R12: 00007f5d43bb3f80
[  449.575863][T18596] R13: 00007f5d43bb3f8c R14: 0000000000000032 R15: 00007f5d43bb5980
[  449.584676][T18596]  </TASK>
[  449.587888][T18596] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  449.597547][T18596] CPU: 1 PID: 18596 Comm: syz-executor.2 Not tainted 6.10.0-rc2-syzkaller-00249-gbe27b8965297 #0
[  449.610886][T18596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  449.623114][T18596] Call Trace:
[  449.626819][T18596]  <TASK>
[  449.631973][T18596]  dump_stack_lvl+0x241/0x360
[  449.637877][T18596]  ? __pfx_dump_stack_lvl+0x10/0x10
[  449.643761][T18596]  ? __pfx__printk+0x10/0x10
[  449.649210][T18596]  ? vscnprintf+0x5d/0x90
[  449.654670][T18596]  panic+0x349/0x860
[  449.658823][T18596]  ? __warn+0x172/0x4e0
[  449.665047][T18596]  ? __pfx_panic+0x10/0x10
[  449.670152][T18596]  __warn+0x346/0x4e0
[  449.674598][T18596]  ? refcount_warn_saturate+0xfa/0x1d0
[  449.681037][T18596]  report_bug+0x2b3/0x500
[  449.686441][T18596]  ? refcount_warn_saturate+0xfa/0x1d0
[  449.692408][T18596]  handle_bug+0x3e/0x70
[  449.697598][T18596]  exc_invalid_op+0x1a/0x50
[  449.702255][T18596]  asm_exc_invalid_op+0x1a/0x20
[  449.708047][T18596] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0
[  449.714397][T18596] Code: b2 00 00 00 e8 f7 be e6 fc 5b 5d c3 cc cc cc cc e8 eb be e6 fc c6 05 cb 64 e8 0a 01 90 48 c7 c7 20 a2 1f 8c e8 67 ed a8 fc 90 <0f> 0b 90 90 eb d9 e8 cb be e6 fc c6 05 a8 64 e8 0a 01 90 48 c7 c7
[  449.739283][T18596] RSP: 0018:ffffc90004187b68 EFLAGS: 00010246
[  449.748545][T18596] RAX: 1d639c8915c94d00 RBX: ffff88802c2e2664 RCX: ffff888023731e00
[  449.758116][T18596] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  449.767113][T18596] RBP: 0000000000000004 R08: ffffffff815857a2 R09: fffffbfff1c39994
[  449.775912][T18596] R10: dffffc0000000000 R11: fffffbfff1c39994 R12: ffff88802c2e2620
[  449.785755][T18596] R13: 0000000000000000 R14: ffff88802c2e2664 R15: dffffc0000000000
[  449.795016][T18596]  ? __warn_printk+0x292/0x360
[  449.800543][T18596]  ? refcount_warn_saturate+0xf9/0x1d0
[  449.806254][T18596]  ref_tracker_free+0x6af/0x7e0
[  449.811874][T18596]  ? __pfx_ref_tracker_free+0x10/0x10
[  449.817674][T18596]  ax25_release+0x368/0x950
[  449.822609][T18596]  sock_close+0xbc/0x240
[  449.827784][T18596]  ? __pfx_sock_close+0x10/0x10
[  449.833392][T18596]  __fput+0x406/0x8b0
[  449.838748][T18596]  task_work_run+0x24f/0x310
[  449.843928][T18596]  ? __pfx_task_work_run+0x10/0x10
[  449.849852][T18596]  ? syscall_exit_to_user_mode+0xa3/0x370
[  449.856401][T18596]  syscall_exit_to_user_mode+0x168/0x370
[  449.863311][T18596]  do_syscall_64+0x100/0x230
[  449.868797][T18596]  ? clear_bhb_loop+0x35/0x90
[  449.876602][T18596]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  449.883186][T18596] RIP: 0033:0x7f5d43a7cf29
[  449.888591][T18596] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  449.912170][T18596] RSP: 002b:00007ffe97753f58 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  449.920795][T18596] RAX: 0000000000000000 RBX: 000000000006d975 RCX: 00007f5d43a7cf29
[  449.930870][T18596] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  449.939514][T18596] RBP: ffffffffffffffff R08: 0000000000000001 R09: 0000001d00000000
[  449.950977][T18596] R10: 00007f5d43a00000 R11: 0000000000000246 R12: 00007f5d43bb3f80
[  449.961611][T18596] R13: 00007f5d43bb3f8c R14: 0000000000000032 R15: 00007f5d43bb5980
[  449.971001][T18596]  </TASK>
[  449.974553][T18596] Kernel Offset: disabled
[  449.979535][T18596] Rebooting in 86400 seconds..