last executing test programs:

3.013346391s ago: executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x1099, 0x10001, 0x9, 0x1}, 0x48)

2.923543387s ago: executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x4, 0x3, 0x8}, 0x48)
close(r1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000880), &(0x7f0000000000)=""/5, 0x2}, 0x20)
unshare(0x24020400)
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
setsockopt$rose(r3, 0x104, 0x4, &(0x7f0000000080)=0x2, 0x4)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='scsi_dispatch_cmd_start\x00', r4}, 0x10)
write$cgroup_type(r0, &(0x7f0000000140), 0x9)

2.627522478s ago: executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000002000000008000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00', <r2=>0x0})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x8, 0x1, 0x8d0, 0x221, r1, 0x4, '\x00', r2, 0xffffffffffffffff, 0x1, 0x1, 0x5, 0x1}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0x15, &(0x7f0000001480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f900001ab703000008000000b704000000001500850000003300000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000007c0)='syzkaller\x00'}, 0xf2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r5}, 0x10)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x400c012, r6, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x0})
syz_init_net_socket$ax25(0x3, 0x2, 0xca)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef82, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.50022787s ago: executing program 3:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {}, {0x0, 0x0, 0x4, 0x6}]}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='io_uring_create\x00', r0}, 0x10)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000000000)=0x40001, 0x4)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r2, 0x29, 0x2, &(0x7f0000000080)=0x2, 0x4)
recvmmsg(r2, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/19, 0x13}}], 0x1, 0x0, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
recvmmsg(r1, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x12}}], 0x1, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"/424, @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="e00000017f000001000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000001c000900000000000000000007010000440c0001022101"], 0x230}, 0x0)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6f94f90324fc600e0005000a000200053582c137153e3704000880fc0b09000300", 0x33fe0}], 0x1}, 0x0)

2.488584565s ago: executing program 2:
unshare(0x6a040000)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00'})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000000010000305000000000500000000003a8028d8190cf9664000000f7d2d46c5d556e98b33b1333d2ab7446fcb3cd237fe67e8c4ae049510b0d79f534fd04318472396d1d69db9aa90ec408f370a26e606", @ANYRES32=0x0, @ANYBLOB="0000000006000000"], 0x20}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f0000000040)=0x3, 0x4)
bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10)
socket$inet_sctp(0x2, 0x0, 0x84)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$sock_netdev_private(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$caif_stream(0x25, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f00000001c0)='wg1\x00', 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x80, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7, 0x0, 0x0, 0x8000000000000000}}]}}}]}, 0x80}}, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000280)={'pimreg\x00', 0x5dcf70ef8daa5d0e})
ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x16}]})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x28, 0x107}, 0x14}}, 0x0)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'wg2\x00', 0x400})
ioctl$TUNSETQUEUE(r7, 0x800454d2, &(0x7f0000000000)={'veth1_to_batadv\x00'})
connect$caif(r4, &(0x7f0000000440), 0x18)
listen(r2, 0x2)
syz_emit_ethernet(0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb0800450000280000000000069078ac0314bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="9f1c8952f936e4af1fb8f434675e1ff5631453ea5090ad7d7c29b99c145cb8fc2459820c9c630cf2b20f3e3426a8"], 0x0)

2.456278989s ago: executing program 0:
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000020000000000000004b84ffec850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='ext4_es_lookup_extent_exit\x00', r0}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
socket(0x15, 0xc, 0x400000)
r1 = socket(0x10, 0x80002, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'hsr0\x00', <r3=>0x0})
unshare(0x20000400)
socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x9, &(0x7f0000000040)={0x2, 0x5}, 0x3)
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000000c0)={r3, 0x3, 0x6, @dev}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x7fffffff, 0xcb8, 0x3, 0x140a, r4, 0x3f, '\x00', 0x0, r4, 0x5, 0x2}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000016"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000002000000a1010000000000000000000b9cd75b1c94c0f805cb7b3541fe53fdd7c000200fe8000"/64], 0x30}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000003c0)='fsi_master_gpio_clock_zeros\x00', r6}, 0x10)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r8, &(0x7f0000000180), 0x40010)
r9 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000140)={'virt_wifi0\x00', 0x1})
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f0000000040)={0x0, 0xe00, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000005c000000030a01010000000000000000010000000900030073797a300000000028000480080002400000000208000140000000051400030076657468315f746f5f626174616476000900010073797a30"], 0xa4}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x80)
ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000000)={'virt_wifi0\x00'})

2.137433108s ago: executing program 1:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pim6reg\x00', 0x9f501996c72b655e})
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r1)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'virt_wifi0\x00', 0x400})
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000001c0)=0x1)
r2 = socket$kcm(0xa, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x7)
sendmmsg$alg(r3, &(0x7f0000000400)=[{0x20000000, 0xff00, 0x0, 0x0, &(0x7f0000000140)=[@assoc={0x18, 0x29, 0x43}], 0x18}], 0x1, 0x0)
setsockopt$sock_attach_bpf(r2, 0x29, 0x14, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000200090000000000000000620110000000000095000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x90)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000002000090800000000000000000a00000002000001000000000500130001"], 0x24}}, 0x0)
r6 = socket(0x0, 0x0, 0x10000000000002)
connect$rxrpc(r6, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000340), 0x4)
sendmsg$IPVS_CMD_FLUSH(r6, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080025bd7000fbdbdf25110000000800040008000000080006000000010024000280080007000180000008000600215b000005000d000100000008000400c90000000800050025f6ffff"], 0x50}, 0x1, 0x0, 0x0, 0x4004}, 0x80)
socket$kcm(0x10, 0x2, 0x0)
connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x4, @local, 'bridge0\x00'}}, 0x1e)
syz_init_net_socket$ax25(0x3, 0x5, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000380)={@multicast2, @multicast2, <r7=>0x0}, 0x0)
r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000400), 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xaa48, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r7, r8, 0x0, 0x3, 0x4, 0x3}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

2.091940272s ago: executing program 0:
r0 = socket$kcm(0x11, 0x3, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f00000001c0), 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendto$inet6(r1, &(0x7f0000000080)="e9", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f0000000240)="10", 0x1, 0x0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000300), 0x19ffe)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4a)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000440)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000080)="27010000000100000000002fd0a7d0884ac82b9200008100000088a8ffffdf0d0d0ed7ee6067998f17d77e1454c2ef3599fd", 0x32}], 0x1}, 0x0)
sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x0)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x20}}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0xfecc)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a40000002300000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='fscache_acquire\x00', r3}, 0x10)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xe, 0x50, r2, 0xffffe000)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb3)
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x1}, 0x1c)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="186230a466972d969e00000000000000000000000000000062016000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000070000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x2, 0x300)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02})
close(r5)
socket$netlink(0x10, 0x3, 0x0)

1.843502635s ago: executing program 1:
socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0x1}, 0x4)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0x1, 0x58, &(0x7f0000000380)}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=0xffffffffffffffff, 0x4)
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x2e}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x90)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000940)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b00)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r4, 0x54583}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @dev}, @IFLA_IPTUN_TOS={0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmmsg$inet(r1, &(0x7f0000000d40)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty}}}], 0x20}}, {{&(0x7f00000008c0)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000a80)=[{&(0x7f0000000b80)="95df57b35699d2138e78b56e0ff609f59f8b9159c9336f6d4ca20dd6ed45601d6cc31b88e1c0018b9458ffd37b0d0fcd8cd459f40c3e632273242e4b70524185d13375bb9d11bc7f5a6880265bbdb380b8723a646771084652383eded9fd6b5d49ff831e7f58a99f685376dfd951f8327b530a8df242244cc10d8e6cdc7aef4192d8594ef9aeeccd899a151b71b1c327a10c645ae2bf1789eefcd899741df977a51b51e1986abfeb75089caabb4987f2f06c3c58899d2ff8eb07d863ea66e8c7b5d735d1bcc546fca5e6ffedfd7f4103933894a43953084f8fbef0a899a7d70f0ad65f3b5510d1", 0xe7}, {&(0x7f0000000c80)="48cef4e1e32cf28273cd40c0da1949153031097dafc0f99b9589c69a49a5cc49e8062897676cd9ade4b16bfb9c0f1f60f7c832ca5d7ff2359988c34a288d94cabaae0e840b375225acb17872bdac9ece390ff31c363be423bf354af22a27b22510529ab671172552d6ad2b609e77ac3e9622eb84b8cf65668253ee498c4f0f9c164f492f4a2f75a0cb4e6a1fc422f2be779226b0429dc5e0ab0e43493bf767711ae3a47acbf24253169275c4255225a2fb6e510cae5ff6", 0xb7}], 0x2, &(0x7f0000000ac0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0x18}}], 0x2, 0x80)

1.668225559s ago: executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00', <r2=>0x0})
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8c, 0x8c, 0x6, [@union={0x0, 0x2, 0x0, 0x5, 0x0, 0xc9, [{0x1, 0x4, 0x3}, {0x6, 0x2, 0x7}]}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0x44, 0x0, 0x7, 0x1}, @var={0x1, 0x0, 0x0, 0xe, 0x1}, @volatile={0x8, 0x0, 0x0, 0x9, 0x2}, @const={0x9}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1, 0x46e1}}, @func={0xd, 0x0, 0x0, 0xc, 0x3}]}, {0x0, [0x61, 0x5f, 0x61, 0x0]}}, &(0x7f0000000680)=""/173, 0xaa, 0xad, 0x0, 0x7}, 0x20)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@bloom_filter={0x1e, 0x613cbf6a, 0x101, 0x5, 0x80, 0x1, 0x2, '\x00', r2, r3, 0x5, 0x1, 0x5, 0xf}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x19, 0xc, &(0x7f0000000940)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x82}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f00000003c0)='syzkaller\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x50, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0xfffffffc, 0xc, 0x0, 0x6}, 0x10}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x4, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007baaf8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
setsockopt$sock_attach_bpf(r6, 0x1, 0x2b, &(0x7f0000000900), 0x4)
r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4)
r9 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@bloom_filter={0x1e, 0x6, 0x4, 0x0, 0x1158, 0xffffffffffffffff, 0x8001, '\x00', 0x0, r8, 0x0, 0x0, 0x4, 0xa}, 0x48)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r10, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000007fffffffffffffff00000018f5ff00", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000000e000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x1003, &(0x7f0000001e40)=""/4099}, 0x90)
sendmsg$nl_route(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000ef0300000000000000fffffff700", @ANYRES32=r2, @ANYBLOB="0000000000000000200012800b0001006d61637365630000100002800c0001000000000000000000"], 0x40}}, 0x0)

1.580617036s ago: executing program 0:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r0=>0x0})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={<r1=>0x0, 0x1}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000000c0)={r1, @in6={{0xa, 0x4e24, 0x7f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x74}}}, 0x84)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet6_udp_int(r2, 0x11, 0x8, &(0x7f0000000180), &(0x7f00000001c0)=0x4)
setsockopt$inet6_opts(r2, 0x29, 0x39, &(0x7f0000000200)=@routing={0x29, 0x10, 0x1, 0xf9, 0x0, [@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @private1, @ipv4={'\x00', '\xff\xff', @local}, @loopback, @private2, @private0={0xfc, 0x0, '\x00', 0x1}, @private1, @private0={0xfc, 0x0, '\x00', 0x1}]}, 0x88)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f00000002c0))
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'erspan0\x00', <r3=>0x0, 0x40, 0x20, 0x80000000, 0x1ff, {{0xe, 0x4, 0x1, 0x3f, 0x38, 0x68, 0x0, 0x9, 0x2f, 0x0, @multicast1, @broadcast, {[@rr={0x7, 0x23, 0xc9, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @broadcast, @empty, @private=0xa010102, @multicast2, @rand_addr=0x64010100]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000003c0)={'tunl0\x00', r3, 0x80, 0x7800, 0x7c000, 0x80000001, {{0x50, 0x4, 0x2, 0x8, 0x140, 0x66, 0x0, 0x2, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@timestamp={0x44, 0x20, 0x2c, 0x0, 0xc, [0xa98, 0x2, 0x8001, 0x7f, 0x4383, 0x93f, 0x3]}, @timestamp_addr={0x44, 0x3c, 0xeb, 0x1, 0x4, [{@rand_addr=0x64010101, 0x400}, {@multicast2, 0x7}, {@dev={0xac, 0x14, 0x14, 0x31}, 0x7}, {@private=0xa010101, 0xff}, {@multicast2, 0x9}, {@local, 0xfffff27a}, {@empty, 0xffff0000}]}, @ssrr={0x89, 0x2b, 0x2, [@rand_addr=0x64010102, @broadcast, @empty, @remote, @remote, @loopback, @loopback, @rand_addr=0x64010101, @empty, @broadcast]}, @timestamp={0x44, 0x8, 0x42, 0x0, 0x8, [0x9]}, @ra={0x94, 0x4}, @generic={0x82, 0x7, "9468b35082"}, @lsrr={0x83, 0x17, 0xb5, [@rand_addr=0x64010101, @remote, @loopback, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop, @timestamp_prespec={0x44, 0x34, 0x81, 0x3, 0xe, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6ab5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x80}, {@multicast2, 0x3}, {@multicast2, 0x101}, {@private=0xa010101}, {@loopback, 0x9}]}, @timestamp_prespec={0x44, 0x44, 0x6c, 0x3, 0x3, [{@multicast1}, {@dev={0xac, 0x14, 0x14, 0x20}}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9f2}, {@broadcast, 0x1}, {@multicast2, 0x6}, {@rand_addr=0x64010101, 0x9}, {@loopback, 0x4bea}, {@loopback, 0x8}]}]}}}}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580))
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$FS_IOC_SETFSLABEL(r4, 0x41009432, &(0x7f00000005c0)="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")
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x9c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:apt_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'caif0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gre0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000840), 0xffffffffffffffff)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f00000008c0)={0x0, &(0x7f0000000880)}, 0x10)
socket$can_bcm(0x1d, 0x2, 0x2)
getpeername$packet(r5, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000940)=0x14)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_MPATH(r6, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x58, r7, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x58}}, 0x8000)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000b80), r6)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SWAP(r8, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x4c, 0x6, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x80)

1.572153442s ago: executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x6e}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1})
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller1\x00', 0x20})
r2 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x50, r2, 0x180000000)
socket$netlink(0x10, 0x3, 0x6)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r3, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48)
sendto$netrom(r3, 0x0, 0x0, 0x0, &(0x7f0000000240)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48)

1.445538987s ago: executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@mcast1, 0x0, 0x0, 0xff, 0x1}, 0x20)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
unshare(0x22020400)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x3b, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0xa0}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x3c, r4, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8}]}, 0x3c}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00'})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x55}]}, &(0x7f0000000200)='GPL\x00'}, 0x90)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'geneve0\x00'})
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='tlb_flush\x00', r6}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x10)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r8}, 0x10)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r10, &(0x7f0000000200), 0xf000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0)
bpf$MAP_CREATE(0x6, &(0x7f00000002c0)=@bloom_filter, 0x48)
setsockopt$SO_BINDTODEVICE_wg(r7, 0x1, 0x19, &(0x7f0000000080)='wg2\x00', 0x4)
connect$inet(r7, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_int(r7, 0x0, 0x1, &(0x7f00000009c0)=0x1234, 0x4)
r11 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r11, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)

1.203540627s ago: executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
syz_emit_ethernet(0x3e, &(0x7f0000000580)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, @broadcast, @loopback}}}}}}, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4008}, 0x18)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000003180)=ANY=[], 0x50}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000210a011d29ca1e668192a400020000000c00034000000000000000000900020073797a3200000000090001"], 0x38}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8c}, [@ldst={0x3, 0x0, 0x3}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x52, 0x10, &(0x7f0000000000), 0x85}, 0x52)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000031c0)=ANY=[@ANYBLOB="68100000", @ANYRES16=r1, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r4, @ANYBLOB="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"], 0x1068}}, 0x0)
socket$inet(0x2, 0x1, 0xfff)
sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", "", ""]}, 0x28}}, 0x24000000)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x8000000, '\x00', 0x0, 0x0}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000006000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800a50000000000001e6fd9e2e3f188ad55b6b9dc6886d2df42d49a6f3d69ccd1cd620a67c5ab325d2bab770e4bcb4e14282fa2000000dfc879c100233973c279ef67f87544666323b0a3d8c9154cb970e22f773bcea23598ea2dba1a38c178e62fa61ac3e244cf96072a00903cb311c749faccab3684752e07747be94533a1287de2b679eeaf267d64000bb376d3ce6d4a5dd19db046f45d009370c06192c025c4c2131ac16c3632c4b2adcb2e35d165f38a17203c7d1392e52b08e21e4394441615d6cdd2f9af719f2dff4edb5724f7731354e9124ba0aaca42092158dfd1ed301af639aee4"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='ext4_da_update_reserve_space\x00', r6}, 0x10)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r8, &(0x7f00000000c0), 0x12)
ioctl$SIOCSIFHWADDR(r8, 0x4030582b, &(0x7f0000000080)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x2}})
write$cgroup_int(r8, &(0x7f00000000c0)=0xfdffffffffeffff7, 0x12)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b6080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000b3000000850000000f00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r9}, 0xc)
ioctl$SIOCSIFHWADDR(r7, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x2}})

1.174150949s ago: executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff2300000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010406000015000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b523b85a187b0c65752a3ad50000007ddd0000cb4500639100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4aaab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4872f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611489607a2252c03f90eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa0000000000000033407700009f4d00008b798b4f7458d1863cc67c4c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e2b42bcae95239ef5ca2a730a00c87c493dbfa60e63fda97a29682881eb8c9cfa72b08eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e183722537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d0616a48c7957e122665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d817b324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca681b8574d35570477e2b3a52a0fdecb2717e21f8f187b1866108b6e8c71e26032176066599783568628f0309c3afa716d3706f1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca78a0000000000000010c6560896042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa74000000000010d9c418284324e0b26756e0f3cef66d27b218fb34709275ff40979a05b2978f71e4cf0e69d8bf370bbee602dcf3f0bdd7c375f8a6f92b0c0ad5b61526e5ea9e968fcaeb17127e491f19709978d3899640860307b569d885c77466da123bde42add210247eee66c8210534aa89a3ccd37f9e5a6ca9973a7acd2bd444e355dada4a646bd730f8b9273666186ace5228adcf26a7653f61bb8bdb51c245e604"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x14)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000a636000000007fffffff8500000050000000850000000700000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xf, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f2f, 0xf, 0x3ce, &(0x7f00000007c0)="9f44948721919512684003a40800", 0x0, 0xa6, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23)

1.052350995s ago: executing program 4:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x3b, 0x8, 0x2}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, &(0x7f0000000000), 0x0}, 0x20)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x20}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x0)

961.294791ms ago: executing program 4:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x20, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="a041dbf5b1755d0d72c0c908f5d3a2df1d309171542de2df50eefb1a2729cc2e8934d572b8b52b8c784e2ecbbacb928133f8017ca19849a426940e029ff6615325476dbdc515cb137c671d21448cefb5f9ef36e37c056b64738a4853713914cf7b796187b422af2afdf9a3600426f4870f697af52bd903d764c490d102cd116c41561e5e755d231d5c1f792b1269706465deb6", @ANYRESDEC=r1, @ANYRES16=r1, @ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRESDEC=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9}, 0x90)
r2 = socket(0x10, 0x803, 0x0)
r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {0x4}, {}, {}, {0x4}}}, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x1003, &(0x7f0000001e40)=""/4099}, 0x90)
getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@newlink={0x34, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x5120b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x4}}}]}, 0x34}}, 0x0)
sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0)

957.983866ms ago: executing program 0:
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffed8, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='block_plug\x00', r1}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r2, &(0x7f0000000180), 0x4000)
socket$packet(0x11, 0x2, 0x300)
pipe(&(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket(0x0, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'syz_tun\x00', 0x0})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
close(r6)
r7 = socket$inet6(0x10, 0x0, 0x0)
sendto$inet6(r7, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0)
recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/45, 0x44, 0x0, 0x0, 0xffffffffffffffc3)
writev(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1)
write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r3, 0x0, r2, 0x0, 0x200000000622c, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'ip6tnl0\x00', 0x0, 0x4, 0x6, 0x0, 0x7, 0x0, @dev={0xfe, 0x80, '\x00', 0x28}, @loopback, 0x8031, 0x20, 0x1ff, 0x6765}})
sendmsg$ETHTOOL_MSG_FEATURES_SET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000c00000034000380040001002c000380280001800d00020074687265616465640000000008000100040000000400030008000100000000000c00018008000100", @ANYRES32, @ANYBLOB="2ec993e067b21b7cd168d1066eaa046f4f9042eb88102fd9303c3d0eab8ef5fc27309e456c60693db94a534e873703cde20b9567ab578d4422cb2d420fca5665cc26041f7a88767c26ca09d54c8677f73bdd6de830265d8506786a276abfcad6ec5bbc3ffdaf89b042e9460e67d82063a4aecfb0e452e7fea53c6beff247718347c70309c12f58e16786f1c1f54f23060b13e8c74ac24641133c81792d85f22dcc7d0abecc73e1a77ed7e4545d77058ff7a5030ad95bc354609cb86e55b97bdb388d"], 0x54}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000400)={'syztnl1\x00', <r10=>0x0, 0x4, 0x81, 0x2, 0x0, 0x8, @local, @private1, 0x10, 0x700, 0xfeb, 0x34a2}})
sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES16=r9, @ANYBLOB="200026bd7000fedbdf2518000000080007000000000005000500000005000600010000004c00018008000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYBLOB="1400020076657468315f746f5f6272696467650008000300000000000800030001000000140002006873723000000000000000000000000005000500000000000800070001000000"], 0x88}, 0x1, 0x0, 0x0, 0x40800}, 0x40)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)

946.545329ms ago: executing program 3:
socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0x1}, 0x4)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0x1, 0x58, &(0x7f0000000380)}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=0xffffffffffffffff, 0x4)
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x2e}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x90)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000940)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b00)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r4, 0x54583}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @dev}, @IFLA_IPTUN_TOS={0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmmsg$inet(r1, &(0x7f0000000d40)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty}}}], 0x20}}, {{&(0x7f00000008c0)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000a80)=[{&(0x7f0000000b80)="95df57b35699d2138e78b56e0ff609f59f8b9159c9336f6d4ca20dd6ed45601d6cc31b88e1c0018b9458ffd37b0d0fcd8cd459f40c3e632273242e4b70524185d13375bb9d11bc7f5a6880265bbdb380b8723a646771084652383eded9fd6b5d49ff831e7f58a99f685376dfd951f8327b530a8df242244cc10d8e6cdc7aef4192d8594ef9aeeccd899a151b71b1c327a10c645ae2bf1789eefcd899741df977a51b51e1986abfeb75089caabb4987f2f06c3c58899d2ff8eb07d863ea66e8c7b5d735d1bcc546fca5e6ffedfd7f4103933894a43953084f8fbef0a899a7d70f0ad65f3b5510d1", 0xe7}, {&(0x7f0000000c80)="48cef4e1e32cf28273cd40c0da1949153031097dafc0f99b9589c69a49a5cc49e8062897676cd9ade4b16bfb9c0f1f60f7c832ca5d7ff2359988c34a288d94cabaae0e840b375225acb17872bdac9ece390ff31c363be423bf354af22a27b22510529ab671172552d6ad2b609e77ac3e9622eb84b8cf65668253ee498c4f0f9c164f492f4a2f75a0cb4e6a1fc422f2be779226b0429dc5e0ab0e43493bf767711ae3a47acbf24253169275c4255225a2fb6e510cae5ff6", 0xb7}], 0x2, &(0x7f0000000ac0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0x18}}], 0x2, 0x80)

914.536685ms ago: executing program 1:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000400)=@newqdisc={0x154, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}]}}]}, 0x154}}, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x0, 0x0, 0xfffffffffffffc37)
r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0xfffffffc}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
socket$inet_smc(0x2b, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$igmp(0x2, 0x3, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010003b15000000000000000000004888", @ANYRES32=0x0, @ANYBLOB="d530d995212cf95a2000128008000100687372001400028008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES64=r5], 0x40}}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3)
ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, &(0x7f0000000500))
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='cgroup.events\x00', 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000380)=0x6, 0x4)
socket$inet_tcp(0x2, 0x1, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180))
socket$inet_sctp(0x2, 0x1, 0x84)

744.211588ms ago: executing program 4:
r0 = socket$kcm(0x11, 0x3, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f00000001c0), 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendto$inet6(r1, &(0x7f0000000080)="e9", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f0000000240)="10", 0x1, 0x0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000300), 0x19ffe)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4a)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000440)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000080)="27010000000100000000002fd0a7d0884ac82b9200008100000088a8ffffdf0d0d0ed7ee6067998f17d77e1454c2ef3599fd", 0x32}], 0x1}, 0x0)
sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x0)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x20}}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0xfecc)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a40000002300000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='fscache_acquire\x00', r3}, 0x10)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xe, 0x50, r2, 0xffffe000)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb3)
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x1}, 0x1c)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="186230a466972d969e00000000000000000000000000000062016000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000070000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x2, 0x300)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02})
close(r5)
socket$netlink(0x10, 0x3, 0x0)

679.340934ms ago: executing program 3:
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='ext4_ext_handle_unwritten_extents\x00', r2}, 0x9)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x40305839, &(0x7f0000000540)={'\x00', @link_local={0x1, 0x80, 0xc2, 0x5}})
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000080)={0x0, 0x43, 0x0, 0x4}, 0xc)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r6)
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0xb, 0x0, [@broadcast, @broadcast]}, @timestamp={0x44, 0x10, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000100000008000100040000002c00048005000300010000000500030080ffffff05000300000000000500030080ffffff0500030005000000080002"], 0x50}}, 0x0)
connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xf)
sendmsg$sock(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000004c0)="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", 0x2a1}], 0x1}, 0x0)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r4, 0x0, 0x0}, 0x10)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000004780)=[{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)='l', 0x1}], 0x1}], 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f00000002c0)={0xffffffe1}, 0x4)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)

588.860346ms ago: executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000100), 0xfecc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x5c, 0x34, &(0x7f0000000200)="c18cdfc8163413ea01823fb6bc50167739c7749d1171919f2b768cb00e277e399afe5390a7948f8b023794b0c9cfc130afb91d5e62f38365598107486b4ecbaedaca9d5a6b798df337bec0123655dc47d7af9bcb0fb43f314267f96f", &(0x7f0000000180)=""/52, 0x58, 0x0, 0xe2, 0x97, &(0x7f0000000280)="c4db1e2e50e0eef3c9a525e78530aed3d0a8378377162cf05ca5462613c0531f0105187b32efa772a5bce5d3c187f1e6fc4d473364b8b98699ec346daf77b353db2d5dc3e73adfd5358d298f6283239310620a42f0c4f466c1b9df3310d0afc9c91c6743e13601049073fbc119a3a03342c2ed1c69e3e8972865c875ff400cf029b20523c738e7308dd649537bb722c69f6c34089273fa4cb7f47fc7af87ba9c92eed7f2a10bbcb6d412990a61dafb3c631e3609edc6f8dc5aa8b1d2c2d7ccab109d524912d0c1d9e4d7b6db29e41406f3eca0214bc0cee8d7311a6edd2fcb5953e6", &(0x7f0000000380)="b4b0d7381a11622d4a42b290c7af0e28221b4d9334e2aff19a1464c977655427654134007b101a9b64156f379ac72197e1f14c4b97b7ef4d42b5a37f281ca99be2363bb50be965e8d3db729cbbcaed5764f5577f3f3ff9f8030dae929cfabbecc383abf3e3db656a5ee00c6ca3706d1ad32f5dbf354ce473316cdf05d1b4c29c65607d16970d91362aeba79105a0d9f6c93233dae0d034", 0x1, 0x0, 0x3}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007110ffffff000069d801000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$tipc(r0, &(0x7f0000000440)=@id={0x1e, 0x3, 0x3, {0x4e24, 0x1}}, 0x10)
getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, 0x0, &(0x7f00000000c0))
syz_emit_ethernet(0x1e, &(0x7f0000000040)={@local, @dev, @val, {@llc={0x8100, {@snap={0x0, 0x0, "e8", "1336d0"}}}}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000540)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$sock(r2, &(0x7f0000005600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001b40)=[@timestamping={{0x14, 0x1, 0x25, 0x6}}], 0x18}}], 0x2, 0x0)

536.934383ms ago: executing program 4:
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r0, &(0x7f0000001300)="05", 0x1, 0x0, &(0x7f0000000380)={0xa, 0x0, 0x0, @private1}, 0x1c)
sendto$inet6(r0, &(0x7f00000011c0)="a0", 0x1, 0x0, &(0x7f00000012c0)={0xa, 0x0, 0x0, @private0}, 0x1c)
shutdown(r0, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200), &(0x7f0000000240)=0x20)
socket$inet6(0xa, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001300290a000010000000000000000000", @ANYRES32, @ANYBLOB="00000000000000000c36e0336cc93b8047"], 0x2c}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r3=>0x0})
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x4c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {}, @from_mac, @device_b, @broadcast}, @a_msdu}}]}, 0x4c}}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4}, &(0x7f0000000480), &(0x7f00000002c0)}, 0x20)
socket(0x10, 0x3, 0x0)

492.850174ms ago: executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000017c0)=ANY=[@ANYBLOB="600000070000000000800000000000000000000014000780080011400000000087f6b3f57f26e198050015000f000000050001000608a1b6c94d4af836220535b30000000500000000000005000400000000120900020073797a310000000011000300686173683a69702c6d1135c33ab63f51734cff54f473df3787d7c23f62480dbf5d15918920366b15d30a775181c3a3f415900e69"], 0x60}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000003180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000e0030000000e02000000090001007300803000000000080002400000000214000000110001"], 0x50}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETTABLE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x1, 0xa, 0x301}, 0x14}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r6, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x94, 0x2}]}}}], 0x18}}], 0x1, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
readv(r4, &(0x7f0000000380)=[{&(0x7f0000000340)=""/22, 0x16}], 0x1)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100))
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
getsockname$packet(r9, &(0x7f0000000300)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
socket$nl_generic(0x10, 0x3, 0x10)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r10, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r11], 0x3c}}, 0x0)
r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r7)
sendmsg$IEEE802154_LLSEC_DEL_KEY(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000002500000005002e00000000000a00010000"], 0x30}, 0x1, 0x0, 0x0, 0x20000010}, 0x0)
sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x4, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)

430.758057ms ago: executing program 2:
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000000))
r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x8)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000c00)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@dev}, 0x0, @in=@private}}, &(0x7f00000000c0)=0xe8)
r3 = socket(0xa, 0x3, 0x4)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000ac0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a80)={&(0x7f0000000080)=ANY=[@ANYBLOB="80000000", @ANYRES32=r0, @ANYRES8=0x0], 0x80}, 0x1, 0x0, 0x0, 0x93}, 0x20000000)
getsockopt$nfc_llcp(r3, 0x29, 0x24, 0x0, 0x20000000)
ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000180)={0x3, @default, r2})
r4 = socket$netlink(0x10, 0x3, 0x12)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="dc820000", @ANYRES16=r5, @ANYRESDEC=r0], 0xdc}, 0x1, 0x0, 0x0, 0x80}, 0x4000)
setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f00000003c0)=@bpq0, 0x10)
r6 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x40)
sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10040000}, 0x14)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r4, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x80)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000640)={0x1f, 0x0, 0x2}, 0x6)
r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netdev_private(r7, 0x89f7, &(0x7f0000000680)="ecfb3a4f3bfaf8c9fa9269373e269cbec35cc3eece26eca22ff5ee8d6b77ed2932486c7122fcb84ff20711a1970e841b149392929924a9657fe50e404525d02c7a90ae98d48de9b7f3bfe124a6f6f646bb913a5170fccdd765193f36aa53bb4b27273da54ac75af9e4339b5f735534b65959c499b6f9f7219a0072e42c80de9fa5f138bd0f699ffef59bb096613e2c94e158b8c6eb0f73682b2e5ab96f95dfa1d25c28246229e0367edd9401e85cfb477a1d3ae152fc474ce0814042ebc60b97ec81e6d2d9b50bdd7fcea957031f590a5a8c7f848775b8a602b41711a08f")
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_INTERFACE(r8, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f00000009c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYRES8=r4], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4000004)
syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), r8)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r9, &(0x7f0000000140)={0x1f, 0x2, 0x2}, 0x5)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet_sctp(0x2, 0x1, 0x84)
r10 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r10, &(0x7f0000000980)={0x28, 0x0, 0x0, @hyper}, 0x10)

355.678231ms ago: executing program 1:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x101c, 0x16, 0xa01, 0x0, 0x0, {0x12}, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="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"]}, 0x101c}, 0x1, 0x0, 0x0, 0x40008c1}, 0x0)
r3 = socket(0x2b, 0x1, 0x0)
bind$unix(r3, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00%h', @ANYRES16=r4, @ANYBLOB="0100000000000000000006000000080009000200000008000b0000000010"], 0x24}}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0xf)
pipe(&(0x7f0000000580)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r10, 0x0)
write$binfmt_misc(r8, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r7, 0x0, r9, 0x0, 0x7fff, 0x0)
sendfile(r8, r10, &(0x7f0000000000), 0x1)
vmsplice(r7, &(0x7f0000000100)=[{&(0x7f0000000080)="86", 0x1}], 0x1, 0x0)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, &(0x7f0000000380)='GPL\x00'}, 0x90)
r11 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10)
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r12, &(0x7f0000000040), 0x55af)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r12, 0x0)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r11, 0x84, 0xa, &(0x7f0000000080), &(0x7f0000000340)=0x1b)

51.582357ms ago: executing program 4:
socket$nl_route(0x10, 0x3, 0x0)
pipe(0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x44}}, 0x0)
r0 = socket(0x0, 0xa, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000029c0))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00082bbd7000fbdbdf250900000008000b000500000005002f000000000008003200010000008ca9aec396c416fe9d7dede2fd9b59c0e6b1b1cde589d7a58685d7d696da7b1dcfc9de5933ac4a5672278e4a48ab36777ef444f13d11f929829c664dbefb04bc5332b248f83980d9d1a9fe004d899618fac7ea3a33acc0dd481fd7650aa5f817b984fc6f29cdcf43f059e26413838f048abd2d07e784e3528d9f7311cb5685347a946b787629bd4ad0317834acd2c379cc9b1bdabda6d9a205c057505970eefd59bc33f57ba4eb962ae816b9e36b9926186fa091cb3f9a7d4a1d6f90bff581"], 0x2c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000000)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00'})
setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f00000001c0)=0xfffffffd, 0x4)
pipe(&(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8}, @TCA_CAKE_FWMARK={0x8}]}}]}, 0x44}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[], 0x14}}, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
close(r6)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
r7 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r7, &(0x7f0000000140), 0x10)
setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000540)=0x410, 0x4)
sendmsg$can_bcm(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000a9de51", @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0)
read(r7, &(0x7f0000001480)=""/4096, 0x38)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000bf9800000000000056080000000000006f00000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r4, 0x0, r6, 0x0, 0x4ffe6, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)

50.433605ms ago: executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@mcast1, 0x0, 0x0, 0xff, 0x1}, 0x20)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
unshare(0x22020400)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x3b, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0xa0}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x3c, r4, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8}]}, 0x3c}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00'})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x55}]}, &(0x7f0000000200)='GPL\x00'}, 0x90)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'geneve0\x00'})
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='tlb_flush\x00', r6}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x10)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r8}, 0x10)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r10, &(0x7f0000000200), 0xf000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0)
bpf$MAP_CREATE(0x6, &(0x7f00000002c0)=@bloom_filter, 0x48)
setsockopt$SO_BINDTODEVICE_wg(r7, 0x1, 0x19, &(0x7f0000000080)='wg2\x00', 0x4)
connect$inet(r7, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_int(r7, 0x0, 0x1, &(0x7f00000009c0)=0x1234, 0x4)
r11 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r11, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)

0s ago: executing program 0:
r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff})
unshare(0x40600)
shutdown(r5, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_RX_RING(r6, 0x10e, 0xb, &(0x7f00000000c0)={0xfffffff6}, 0x10)
sendmsg$nl_netfilter(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000049305000000000000000000be95fb7309bd61e56c257ac8efa51b30e2a9cd641a7ae09877066f8398c04bebcf20"], 0x18}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r3, 0x5, 0x0, 0x0, {{0x14}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x28}}, 0x0)
sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r0, @ANYBLOB="0100000000000000000009000000280001801200010069623a73797a6b616c6c6572310000000d0001007564703a73797a3000000000e0000480090001"], 0x11c}}, 0x0)
connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x1, 0x1, 0x1, {0xa, 0x4e20, 0x7, @remote, 0xe00000}}}, 0x32)

kernel console output (not intermixed with test programs):

d promiscuous mode
[   67.346770][ T5395] team0: entered allmulticast mode
[   67.361229][ T5395] team_slave_0: entered allmulticast mode
[   67.382454][ T5395] team_slave_1: entered allmulticast mode
[   67.394841][ T5395] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   67.413970][ T5395] bond0: (slave macvlan2): Enslaving as an active interface with an up link
[   67.560053][ T5405] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[   67.624381][ T5405] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   67.631978][ T5405] IPv6: NLM_F_CREATE should be set when creating new route
[   67.721752][ T5405] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   67.729058][ T5405] IPv6: NLM_F_CREATE should be set when creating new route
[   67.796326][ T5405] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[   67.926580][ T5405] team0: Port device team_slave_0 removed
[   68.038395][ T5418] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   68.134126][ T5418] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   68.217202][ T5434] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[   68.243421][ T5423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   68.267540][ T5431] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[   68.524931][ T5444] bond0: entered promiscuous mode
[   68.532258][ T5444] bond_slave_0: entered promiscuous mode
[   68.545118][ T5444] bond_slave_1: entered promiscuous mode
[   68.552733][ T5444] macvlan2: entered promiscuous mode
[   68.558625][ T5444] team0: entered promiscuous mode
[   68.576681][ T5444] bond0: left promiscuous mode
[   68.584449][ T5444] bond_slave_0: left promiscuous mode
[   68.590293][ T5444] bond_slave_1: left promiscuous mode
[   68.595943][ T5444] macvlan2: left promiscuous mode
[   68.601468][ T5444] team0: left promiscuous mode
[   69.125107][ T5460] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[   69.774559][ T5486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   69.856129][ T5490] syzkaller0: entered promiscuous mode
[   69.863152][ T5490] syzkaller0: entered allmulticast mode
[   69.908166][ T5478] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   70.030779][ T5481] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   70.353964][ T5512] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[   70.566862][ T5519] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
[   71.125338][ T5538] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[   71.324264][ T5544] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[   71.779436][ T1247] ieee802154 phy0 wpan0: encryption failed: -22
[   71.788148][ T1247] ieee802154 phy1 wpan1: encryption failed: -22
[   72.446757][ T5597] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[   72.575447][ T5603] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   72.978689][ T5619] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[   74.106966][ T5659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   74.602103][ T5687] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.2'.
[   75.371980][ T5714] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[   75.436632][ T5717] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[   75.505653][ T5719] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   75.512995][ T5719] IPv6: NLM_F_CREATE should be set when creating new route
[   75.665804][ T5717] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   75.673140][ T5717] IPv6: NLM_F_CREATE should be set when creating new route
[   75.691660][ T5717] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[   75.804068][ T5727] tipc: Started in network mode
[   75.814624][ T5727] tipc: Node identity aaaaaaaaaa32, cluster identity 4711
[   75.828376][ T5727] tipc: Enabled bearer <eth:vlan0>, priority 10
[   75.863685][ T5730] tipc: Resetting bearer <eth:vlan0>
[   76.026707][ T5730] tipc: Disabling bearer <eth:vlan0>
[   76.335640][ T5750] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
[   76.371376][ T5749] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'.
[   76.959999][  T783] cfg80211: failed to load regulatory.db
[   77.179831][ T5781] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[   77.475771][ T5793] Bluetooth: MGMT ver 1.22
[   78.318510][ T5831] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'.
[   79.195234][ T5875] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'.
[   79.371990][ T5876] Bluetooth: MGMT ver 1.22
[   79.376498][ T5876] Bluetooth: hci3: invalid length 0, exp 2 for type 27
[   79.498508][ T5889] netlink: 'syz-executor.1': attribute type 2 has an invalid length.
[   79.903843][ T5900] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'.
[   80.693017][ T5945] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[   80.831800][ T5945] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   80.839108][ T5945] IPv6: NLM_F_CREATE should be set when creating new route
[   80.899204][ T5945] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   80.906491][ T5945] IPv6: NLM_F_CREATE should be set when creating new route
[   80.931714][ T5957] IPv6: Can't replace route, no match found
[   80.992475][ T5959] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'.
[   81.014238][ T5945] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[   81.142518][ T5971] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[   81.336343][ T5979] netlink: 'syz-executor.3': attribute type 12 has an invalid length.
[   81.358267][ T5979] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.3'.
[   81.525471][ T5989] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[   81.576133][ T5990] IPv6: Can't replace route, no match found
[   82.150224][ T6013] netlink: 'syz-executor.4': attribute type 12 has an invalid length.
[   82.169204][ T6013] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.4'.
[   82.321569][ T6020] unknown channel width for channel at 909000KHz?
[   82.329239][ T6020] unknown channel width for channel at 909000KHz?
[   82.737916][ T6040] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
[   82.761626][ T6040] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[   82.897193][ T6048] unknown channel width for channel at 909000KHz?
[   82.912231][ T6048] unknown channel width for channel at 909000KHz?
[   83.178328][ T6053] wg2: entered promiscuous mode
[   83.183241][ T6053] wg2: entered allmulticast mode
[   83.522922][ T6072] syz_tun: entered promiscuous mode
[   83.577422][ T6072] ip6gretap0: entered promiscuous mode
[   83.617084][ T6074] __nla_validate_parse: 1 callbacks suppressed
[   83.617102][ T6074] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'.
[   84.303086][ T6110] netlink: 'syz-executor.1': attribute type 9 has an invalid length.
[   84.322089][ T6110] netlink: 'syz-executor.1': attribute type 7 has an invalid length.
[   84.331420][ T6110] netlink: 'syz-executor.1': attribute type 8 has an invalid length.
[   85.209272][ T6146] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
[   85.535451][ T6162] xt_connbytes: Forcing CT accounting to be enabled
[   85.548515][ T6162] xt_CT: You must specify a L4 protocol and not use inversions on it
[   85.952719][ T6183] netlink: 'syz-executor.0': attribute type 4 has an invalid length.
[   86.053919][ T6191] netlink: 'syz-executor.0': attribute type 4 has an invalid length.
[   86.270652][ T6202] netlink: 201392 bytes leftover after parsing attributes in process `syz-executor.2'.
[   86.274662][ T6203] xt_connbytes: Forcing CT accounting to be enabled
[   86.280885][ T6202] netlink: zone id is out of range
[   86.298215][ T6203] xt_CT: You must specify a L4 protocol and not use inversions on it
[   86.298696][ T6197] warning: `syz-executor.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   86.326367][ T6202] netlink: zone id is out of range
[   86.356786][ T6202] netlink: zone id is out of range
[   86.388109][ T6202] netlink: zone id is out of range
[   86.393438][ T6202] netlink: zone id is out of range
[   86.438169][ T6202] netlink: zone id is out of range
[   86.464192][ T6202] netlink: zone id is out of range
[   86.501182][ T6202] netlink: zone id is out of range
[   86.506432][ T6202] netlink: zone id is out of range
[   86.548090][ T6202] netlink: zone id is out of range
[   86.604033][ T6216] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'.
[   86.626376][ T6214] syz_tun: entered promiscuous mode
[   86.658267][ T6214] ip6gretap0: entered promiscuous mode
[   86.697642][ T6214] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[   86.726381][ T6214] Cannot create hsr debugfs directory
[   86.782902][ T6225] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   86.810528][ T6224] bridge0: port 3(macvlan2) entered blocking state
[   86.817168][ T6224] bridge0: port 3(macvlan2) entered disabled state
[   86.842769][ T6225] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   86.869281][ T6224] macvlan2: entered allmulticast mode
[   86.877573][ T6224] macvlan2: entered promiscuous mode
[   86.998539][ T6235] netlink: 'syz-executor.3': attribute type 4 has an invalid length.
[   87.458559][ T6259] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[   87.494954][ T6261] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'.
[   88.573573][ T5115] Bluetooth: hci0: command tx timeout
[   90.038377][ T6336] xt_CT: You must specify a L4 protocol and not use inversions on it
[   90.043091][ T6339] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
[   90.251204][ T2528] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   90.342105][ T2528] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   90.458864][ T5155] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   90.548334][ T5155] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   90.618212][ T5158] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   90.748416][ T2528] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   90.838239][ T2528] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   90.864857][ T6401] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[   90.927562][ T5158] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   91.018360][ T5158] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   91.078321][ T5155] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   91.290102][ T6426] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'.
[   91.355168][ T6428] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[   91.382988][ T6430] trusted_key: syz-executor.4 sent an empty control message without MSG_MORE.
[   91.431946][ T6432] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[   91.564986][ T6439] vlan2: entered promiscuous mode
[   91.571104][ T6439] bridge0: entered promiscuous mode
[   91.580258][ T6439] bridge0: port 3(vlan2) entered blocking state
[   91.591437][ T6439] bridge0: port 3(vlan2) entered disabled state
[   91.602053][ T6439] vlan2: entered allmulticast mode
[   91.612498][ T6439] bridge0: entered allmulticast mode
[   91.624571][ T6439] vlan2: left allmulticast mode
[   91.639211][ T6439] bridge0: left allmulticast mode
[   91.641476][ T6443] net_ratelimit: 144 callbacks suppressed
[   91.641491][ T6443] openvswitch: netlink: Key type 7982 is out of range max 32
[   91.659172][ T6439] bridge0: left promiscuous mode
[   91.956597][ T6465] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[   91.990009][ T6466] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   92.028558][ T6466] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[   92.214180][ T6474] openvswitch: netlink: Key type 7982 is out of range max 32
[   92.340086][ T6483] vlan2: entered promiscuous mode
[   92.345352][ T6483] bridge0: entered promiscuous mode
[   92.353569][ T6483] bridge0: port 4(vlan2) entered blocking state
[   92.360516][ T6483] bridge0: port 4(vlan2) entered disabled state
[   92.367197][ T6483] vlan2: entered allmulticast mode
[   92.374829][ T6483] bridge0: entered allmulticast mode
[   92.389123][ T6483] vlan2: left allmulticast mode
[   92.395989][ T6483] bridge0: left allmulticast mode
[   92.416717][ T6483] bridge0: left promiscuous mode
[   92.612469][ T6498] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[   92.852089][ T6509] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[   93.176210][ T6537] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'.
[   93.287879][ T6545] netlink: 'syz-executor.0': attribute type 4 has an invalid length.
[   93.317795][ T6547] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[   93.323363][ T6545] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check.
[   93.360968][ T6547] openvswitch: netlink: Message has 16 unknown bytes.
[   93.791354][ T6575] vlan2: entered promiscuous mode
[   93.805052][ T6575] bridge0: entered promiscuous mode
[   93.823509][ T6575] bridge0: port 4(vlan2) entered blocking state
[   93.838329][ T6575] bridge0: port 4(vlan2) entered disabled state
[   93.847191][ T6575] vlan2: entered allmulticast mode
[   93.860396][ T6575] bridge0: entered allmulticast mode
[   93.889589][ T6575] vlan2: left allmulticast mode
[   93.895787][ T6575] bridge0: left allmulticast mode
[   93.915910][ T6575] bridge0: left promiscuous mode
[   94.132972][ T6588] openvswitch: netlink: Message has 16 unknown bytes.
[   94.154977][ T6595] IPv4: Oversized IP packet from 172.20.20.24
[   94.162909][    C0] IPv4: Oversized IP packet from 172.20.20.24
[   94.169660][    C0] IPv4: Oversized IP packet from 172.20.20.24
[   94.217354][ T6599] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[   94.306098][ T6602] ipvlan2: entered promiscuous mode
[   94.315041][ T6602] ipvlan2: entered allmulticast mode
[   94.320613][ T6602] ip6gretap0: entered allmulticast mode
[   94.361223][ T6610] syz-executor.1[6610] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   94.361465][ T6610] syz-executor.1[6610] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   94.404883][ T6608] Â: renamed from pim6reg1
[   94.789862][ T6630] vlan2: entered promiscuous mode
[   94.815106][ T6630] bridge0: entered promiscuous mode
[   94.827261][ T6630] bridge0: port 3(vlan2) entered blocking state
[   94.852488][ T6630] bridge0: port 3(vlan2) entered disabled state
[   94.869460][ T6630] vlan2: entered allmulticast mode
[   94.871399][ T6636] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[   94.893868][ T6630] bridge0: entered allmulticast mode
[   94.901312][ T6630] vlan2: left allmulticast mode
[   94.906203][ T6630] bridge0: left allmulticast mode
[   94.923879][ T6630] bridge0: left promiscuous mode
[   94.952323][ T6634] bond0: option fail_over_mac: unable to set because the bond device has slaves
[   95.185608][ T6646] syz-executor.3[6646] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   95.186415][ T6646] syz-executor.3[6646] is installing a program with bpf_probe_write_user helper that may corrupt user memory!Â: renamed from pim6reg1
[   95.338169][ T6661] netlink: 'syz-executor.0': attribute type 4 has an invalid length.
[   95.361438][ T6661] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check.
[   95.391670][ T6664] netlink: 'syz-executor.1': attribute type 29 has an invalid length.
[   95.400529][ T6664] netlink: 'syz-executor.1': attribute type 29 has an invalid length.
[   95.461355][ T6667] netlink: 'syz-executor.1': attribute type 29 has an invalid length.
[   95.480165][ T6666] hsr0: entered promiscuous mode
[   95.560817][ T6669] bond0: option fail_over_mac: unable to set because the bond device has slaves
[   95.660743][ T6675] ipvlan0: entered promiscuous mode
[   95.666905][ T6675] ipvlan0: entered allmulticast mode
[   95.677845][ T6675] ip6gretap0: entered allmulticast mode
[   96.357660][ T6724] sctp: [Deprecated]: syz-executor.4 (pid 6724) Use of int in max_burst socket option deprecated.
[   96.357660][ T6724] Use struct sctp_assoc_value instead
[   96.656588][ T6738] bond0: option fail_over_mac: unable to set because the bond device has slaves
[   97.372015][ T6784] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[   97.392610][ T6784] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[   97.534811][ T6793] __nla_validate_parse: 1 callbacks suppressed
[   97.534831][ T6793] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.4'.
[   97.576332][ T6795] IPv4: Oversized IP packet from 172.20.20.24
[   97.584088][    C0] IPv4: Oversized IP packet from 172.20.20.24
[   97.590516][    C0] IPv4: Oversized IP packet from 172.20.20.24
[   97.693266][ T6802] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[   98.094385][ T6834] netlink: zone id is out of range
[   98.113976][ T6834] netlink: zone id is out of range
[   98.136811][ T6834] netlink: zone id is out of range
[   98.150913][ T6834] netlink: zone id is out of range
[   98.156403][ T6834] netlink: zone id is out of range
[   98.175102][ T6834] netlink: zone id is out of range
[   98.192353][ T6834] netlink: zone id is out of range
[   98.749049][ T6872] syzkaller1: entered promiscuous mode
[   98.774960][ T6872] syzkaller1: entered allmulticast mode
[   99.000030][ T6892] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'.
[   99.038564][ T6894] TCP: TCP_TX_DELAY enabled
[   99.779313][ T6951] syzkaller0: entered promiscuous mode
[   99.797016][ T6951] syzkaller0: entered allmulticast mode
[   99.813410][ T6951] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487
[   99.934224][ T6963] ip6gretap0: Device is already in use.
[  100.164976][ T6980] sctp: [Deprecated]: syz-executor.3 (pid 6980) Use of struct sctp_assoc_value in delayed_ack socket option.
[  100.164976][ T6980] Use struct sctp_sack_info instead
[  100.253244][ T6985] sock: sock_timestamping_bind_phc: sock not bind to device
[  100.317569][ T6989] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'.
[  100.446774][ T6997] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.4'.
[  100.459809][ T6997] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
[  100.465819][ T6999] syzkaller0: entered promiscuous mode
[  100.476603][ T6999] syzkaller0: entered allmulticast mode
[  100.537663][ T7001] Cannot find add_set index 0 as target
[  100.663465][ T7009] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  100.976527][ T7027] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
[  101.109623][ T7036] bond1: (slave vcan1): The slave device specified does not support setting the MAC address
[  101.187107][ T7036] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode
[  101.226978][ T7036] bond1: (slave vcan1): making interface the new active one
[  101.252603][ T7036] bond1: (slave vcan1): Enslaving as an active interface with an up link
[  101.289786][ T7046] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  101.373912][ T7050] netlink: 'syz-executor.3': attribute type 8 has an invalid length.
[  101.425901][ T7052] ip6tnl1: entered promiscuous mode
[  101.434011][ T7052] ip6tnl1: entered allmulticast mode
[  102.097116][ T7095] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  102.670485][ T7134] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  103.095861][ T7163] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  103.167559][ T7163] bond1: (slave vcan1): The slave device specified does not support setting the MAC address
[  103.215250][ T7163] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode
[  103.259121][ T7163] bond1: (slave vcan1): making interface the new active one
[  103.267544][ T7163] bond1: (slave vcan1): Enslaving as an active interface with an up link
[  103.282701][ T7173] syzkaller0: entered promiscuous mode
[  103.292034][ T7173] syzkaller0: entered allmulticast mode
[  103.334176][ T7176] ip6tnl1: entered promiscuous mode
[  103.340216][ T7176] ip6tnl1: entered allmulticast mode
[  103.530257][ T7181] syzkaller1: entered promiscuous mode
[  103.535980][ T7181] syzkaller1: entered allmulticast mode
[  103.837172][ T7201] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  103.906587][ T7201] bond1: (slave vcan0): The slave device specified does not support setting the MAC address
[  103.916838][ T7201] bond1: (slave vcan0): Setting fail_over_mac to active for active-backup mode
[  103.950564][ T7201] bond1: (slave vcan0): making interface the new active one
[  103.966478][ T7201] bond1: (slave vcan0): Enslaving as an active interface with an up link
[  104.116886][ T7216] vlan0: entered promiscuous mode
[  104.134517][ T7216] veth1_to_hsr: entered promiscuous mode
[  104.165078][ T7216] team0: Port device vlan0 added
[  104.401011][ T7187] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
[  104.591316][ T7247] af_packet: tpacket_rcv: packet too big, clamped from 20 to 4294967272. macoff=96
[  104.777834][ T7257] vlan2: entered promiscuous mode
[  104.820708][ T7257] veth1_to_hsr: entered promiscuous mode
[  104.865706][ T7257] vlan2: entered allmulticast mode
[  104.886023][ T7257] veth1_to_hsr: entered allmulticast mode
[  104.904193][ T7257] team0: Port device vlan2 added
[  104.956095][ T7269] syzkaller1: entered promiscuous mode
[  104.977727][ T7269] syzkaller1: entered allmulticast mode
[  105.318878][ T7292] Cannot find add_set index 0 as target
[  105.427920][ T7299] vlan2: entered promiscuous mode
[  105.652814][ T7310] syzkaller1: entered promiscuous mode
[  105.673854][ T7310] syzkaller1: entered allmulticast mode
[  106.920082][ T7392] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  106.982006][ T7398] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  107.070962][ T7401] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  107.186727][ T7406] netlink: 47 bytes leftover after parsing attributes in process `syz-executor.0'.
[  107.496521][ T7413] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'.
[  107.620259][    C1] net_ratelimit: 7 callbacks suppressed
[  107.620278][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  107.773984][ T7438] TCP: MD5 Hash not found for 172.20.20.187.0->255.255.255.255.20002 [FSP.] L3 index 0
[  108.022549][ T7452] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'.
[  108.487394][ T7475] netlink: 'syz-executor.1': attribute type 10 has an invalid length.
[  108.517454][ T7475] team0: Port device netdevsim0 added
[  109.536049][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  109.677812][ T7533] tipc: Started in network mode
[  109.725235][ T7533] tipc: Node identity 7f000001, cluster identity 4711
[  109.757803][ T7533] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  110.116815][ T7552] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  110.147193][ T7552] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  110.189279][ T7552] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  110.536764][ T7570] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  110.599042][ T7570] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  110.606563][ T7570] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  110.635539][ T7570] team0: Port device netdevsim0 added
[  110.644767][ T7579] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.4'.
[  110.675318][ T7579] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  110.694840][ T7579] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'.
[  111.004813][ T7599] netlink: 'syz-executor.0': attribute type 2 has an invalid length.
[  111.055131][   T29] audit: type=1800 audit(1718170441.134:2): pid=7599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="freezer.self_freezing" dev="sda1" ino=1952 res=0 errno=0
[  111.188570][ T7610] syzkaller1: entered promiscuous mode
[  111.194222][ T7610] syzkaller1: entered allmulticast mode
[  111.550155][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  111.619417][ T7637] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  112.511965][ T5112] syz_tun (unregistering): left promiscuous mode
[  112.681786][ T5112] syz-executor.0 (5112) used greatest stack depth: 19280 bytes left
[  112.805344][ T2869] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.822897][ T4489] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  112.831933][ T4489] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  112.839903][ T4489] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  112.847890][ T4489] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  112.856335][ T4489] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  112.864120][ T4489] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  113.051505][ T2869] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.195877][ T2869] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.326934][ T2869] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode
[  113.357590][ T2869] team0: Port device netdevsim0 removed
[  113.375440][ T2869] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.438227][ T7727] syzkaller1: entered promiscuous mode
[  113.443732][ T7727] syzkaller1: entered allmulticast mode
[  113.470974][ T7741] Bluetooth: MGMT ver 1.22
[  113.492305][ T7741] Bluetooth: hci3: unsupported parameter 64512
[  113.499998][ T7741] Bluetooth: hci3: invalid length 0, exp 2 for type 16
[  113.573518][ T7745] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.1'.
[  113.586287][ T7745] netlink: 'syz-executor.1': attribute type 2 has an invalid length.
[  113.596131][ T7745] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'.
[  113.874024][ T2869] bridge_slave_1: left allmulticast mode
[  113.893454][ T2869] bridge_slave_1: left promiscuous mode
[  113.935336][ T2869] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.963960][ T2869] bridge_slave_0: left allmulticast mode
[  113.985941][ T2869] bridge_slave_0: left promiscuous mode
[  113.993707][ T2869] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.144353][ T7775] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'.
[  114.171288][ T7775] netlink: 'syz-executor.2': attribute type 2 has an invalid length.
[  114.181922][ T7775] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'.
[  114.220432][ T2869] ip6gretap0 (unregistering): left promiscuous mode
[  114.707869][ T2869] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  114.738620][ T2869] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  114.763001][ T2869] bond0 (unregistering): (slave macvlan2): Releasing backup interface
[  114.778862][ T2869] team0: left allmulticast mode
[  114.784403][ T2869] team_slave_0: left allmulticast mode
[  114.790409][ T2869] team_slave_1: left allmulticast mode
[  114.796136][ T2869] vlan2: left allmulticast mode
[  114.810920][ T2869] veth1_to_hsr: left allmulticast mode
[  114.817136][ T2869] team_slave_0: left promiscuous mode
[  114.822865][ T2869] team_slave_1: left promiscuous mode
[  114.837063][ T2869] bond0 (unregistering): Released all slaves
[  114.854550][ T2869] bond1 (unregistering): (slave vcan0): Releasing backup interface
[  114.867228][ T2869] bond1 (unregistering): Released all slaves
[  114.892234][ T4489] Bluetooth: hci3: command tx timeout
[  115.160529][ T7700] chnl_net:caif_netlink_parms(): no params data found
[  115.614765][ T2869] hsr_slave_0: left promiscuous mode
[  115.623489][ T2869] hsr_slave_1: left promiscuous mode
[  115.660435][ T2869] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  115.678165][ T2869] batman_adv: batadv0: Removing interface: batadv_slave_0
[  115.695319][ T2869] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  115.713759][ T2869] batman_adv: batadv0: Removing interface: batadv_slave_1
[  115.745878][ T2869] veth1_to_hsr: left promiscuous mode
[  115.752097][ T2869] veth1_macvtap: left promiscuous mode
[  115.758186][ T2869] veth0_macvtap: left promiscuous mode
[  115.763873][ T2869] veth1_vlan: left promiscuous mode
[  115.769593][ T2869] veth0_vlan: left promiscuous mode
[  115.895263][ T2869] team0 (unregistering): Port device vlan2 removed
[  116.223714][ T2869] team0 (unregistering): Port device team_slave_1 removed
[  116.256778][ T2869] team0 (unregistering): Port device team_slave_0 removed
[  116.627093][ T7827] syzkaller0: tun_chr_ioctl cmd 1074025677
[  116.644572][ T7830] xt_CT: You must specify a L4 protocol and not use inversions on it
[  116.650951][ T7827] syzkaller0: linktype set to 0
[  116.747107][ T7824] syzkaller0: entered promiscuous mode
[  116.757151][ T7824] syzkaller0: entered allmulticast mode
[  116.968706][ T4489] Bluetooth: hci3: command tx timeout
[  118.139539][ T7700] bridge0: port 1(bridge_slave_0) entered blocking state
[  118.146685][ T7700] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.172745][ T7700] bridge_slave_0: entered allmulticast mode
[  118.184976][ T7700] bridge_slave_0: entered promiscuous mode
[  118.215119][ T7855] tipc: Enabled bearer <udp:†Ýj>, priority 10
[  118.237848][ T7700] bridge0: port 2(bridge_slave_1) entered blocking state
[  118.253052][ T7700] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.291553][ T7700] bridge_slave_1: entered allmulticast mode
[  118.299048][ T7700] bridge_slave_1: entered promiscuous mode
[  118.366799][ T7859] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  118.425730][ T7859] dummy0: entered promiscuous mode
[  118.442358][ T7859] macvtap1: entered promiscuous mode
[  118.454102][ T7859] macvtap1: entered allmulticast mode
[  118.462138][ T7859] dummy0: entered allmulticast mode
[  118.492578][ T7866] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  118.519863][ T7866] dummy0: left allmulticast mode
[  118.535416][ T7866] dummy0: left promiscuous mode
[  118.540700][ T7866] macvtap1: left promiscuous mode
[  118.545970][ T7866] macvtap1: left allmulticast mode
[  118.562283][ T7865] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'.
[  118.670303][ T7700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  118.691262][ T7700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  118.787162][ T7700] team0: Port device team_slave_0 added
[  118.803474][ T7700] team0: Port device team_slave_1 added
[  118.837408][ T7882] tipc: Enabled bearer <udp:†Ýj>, priority 10
[  118.872890][ T7700] batman_adv: batadv0: Adding interface: batadv_slave_0
[  118.892559][ T7700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  118.928260][ T7700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  118.940468][ T7885] sit0: entered promiscuous mode
[  118.953080][ T7885] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
[  118.970226][ T7885] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.3'.
[  118.996900][ T7700] batman_adv: batadv0: Adding interface: batadv_slave_1
[  119.016745][ T7700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  119.043136][ T7700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  119.054872][ T4489] Bluetooth: hci3: command tx timeout
[  119.115685][ T7700] hsr_slave_0: entered promiscuous mode
[  119.122626][ T7700] hsr_slave_1: entered promiscuous mode
[  119.137576][ T7700] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  119.145350][ T7700] Cannot create hsr debugfs directory
[  119.330175][  T783] tipc: Node number set to 2130706433
[  119.694354][ T7700] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  119.721757][ T7700] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  119.736715][ T7700] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  119.748303][ T7700] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  119.948109][    T9] tipc: Node number set to 10005162
[  119.960274][ T7700] 8021q: adding VLAN 0 to HW filter on device bond0
[  119.996759][ T7922] tipc: Enabling of bearer <udp:†Ýj> rejected, already enabled
[  120.049330][ T7700] 8021q: adding VLAN 0 to HW filter on device team0
[  120.081131][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.089041][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state
[  120.120052][ T7934] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  120.160990][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.168182][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  120.294250][ T7700] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  120.349356][ T7942] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'.
[  120.705567][   T29] audit: type=1804 audit(1718170450.784:3): pid=7957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D746573746469723833393934383139372F73797A6B616C6C65722E6F35547238482F3233302FB8 dev="sda1" ino=1957 res=1 errno=0
[  120.896457][ T7700] 8021q: adding VLAN 0 to HW filter on device batadv0
[  121.116149][ T7700] veth0_vlan: entered promiscuous mode
[  121.118805][ T5115] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  121.132649][ T5117] Bluetooth: hci3: command tx timeout
[  121.139654][ T5117] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  121.156722][ T5117] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  121.166801][ T5117] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  121.188260][ T5117] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  121.194563][ T7700] veth1_vlan: entered promiscuous mode
[  121.215592][ T5117] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  121.296198][ T7980] xfrm0: entered promiscuous mode
[  121.310625][ T7980] bond0: (slave vlan2): Enslaving as an active interface with an up link
[  121.489897][   T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  121.500001][ T7987] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  121.510295][   T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.564790][ T7700] veth0_macvtap: entered promiscuous mode
[  121.641064][   T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  121.658588][   T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.697446][ T7700] veth1_macvtap: entered promiscuous mode
[  121.745407][ T7991] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  121.803427][   T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  121.822072][   T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.911676][ T7996] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'.
[  121.928549][ T7996] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'.
[  122.009498][   T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  122.044293][   T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.099797][ T8000] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'.
[  122.145478][ T7700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  122.174519][ T7700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.185597][ T7700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  122.198019][ T7700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.218061][ T7700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  122.231163][ T7700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.243541][ T7700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  122.267528][ T7700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.289528][ T7700] batman_adv: batadv0: Interface activated: batadv_slave_0
[  122.325847][ T7700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  122.357762][ T7700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.376161][ T7700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  122.387409][ T7700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.405823][ T7700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  122.417732][ T7700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.433477][ T7700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  122.444240][ T7700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.462588][ T7700] batman_adv: batadv0: Interface activated: batadv_slave_1
[  122.490823][ T8010] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'.
[  122.557617][ T7700] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  122.598416][ T7700] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  122.607153][ T7700] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  122.637664][ T7700] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  122.767777][ T8015] sctp: [Deprecated]: syz-executor.4 (pid 8015) Use of int in max_burst socket option deprecated.
[  122.767777][ T8015] Use struct sctp_assoc_value instead
[  122.940795][   T11] macvlan2: left allmulticast mode
[  122.945991][   T11] macvlan2: left promiscuous mode
[  122.971465][   T11] bridge0: port 3(macvlan2) entered disabled state
[  122.991443][   T11] bridge_slave_1: left allmulticast mode
[  123.004432][   T11] bridge_slave_1: left promiscuous mode
[  123.019544][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  123.045264][   T11] bridge_slave_0: left allmulticast mode
[  123.053504][   T11] bridge_slave_0: left promiscuous mode
[  123.059455][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  123.288319][ T4489] Bluetooth: hci4: command tx timeout
[  123.407122][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  123.419874][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  123.432059][   T11] bond0 (unregistering): Released all slaves
[  123.461818][ T8035] netlink: 'syz-executor.2': attribute type 10 has an invalid length.
[  123.471797][ T8035] ipvlan1: entered promiscuous mode
[  123.506084][ T8035] team0: Device ipvlan1 failed to register rx_handler
[  123.567288][ T2406] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.587626][ T2406] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  123.695840][ T7972] chnl_net:caif_netlink_parms(): no params data found
[  123.734857][ T2844] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.762199][ T2844] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  123.932578][ T7972] bridge0: port 1(bridge_slave_0) entered blocking state
[  123.957841][ T7972] bridge0: port 1(bridge_slave_0) entered disabled state
[  123.984283][ T8057] sctp: [Deprecated]: syz-executor.1 (pid 8057) Use of int in max_burst socket option deprecated.
[  123.984283][ T8057] Use struct sctp_assoc_value instead
[  123.987101][ T7972] bridge_slave_0: entered allmulticast mode
[  124.026163][ T7972] bridge_slave_0: entered promiscuous mode
[  124.072022][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  124.083612][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  124.099496][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  124.114548][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  124.181109][   T11] veth1_macvtap: left promiscuous mode
[  124.186769][   T11] veth0_macvtap: left promiscuous mode
[  124.194106][   T11] veth1_vlan: left promiscuous mode
[  124.199846][   T11] veth0_vlan: left promiscuous mode
[  124.302224][ T8081] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  124.321416][ T8081] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.1'.
[  124.826213][   T11] team0 (unregistering): Port device team_slave_1 removed
[  125.135550][ T7972] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.142982][ T7972] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.157132][ T7972] bridge_slave_1: entered allmulticast mode
[  125.164566][ T7972] bridge_slave_1: entered promiscuous mode
[  125.292565][ T7972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  125.330772][ T7972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  125.348063][ T8103] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  125.371467][ T4489] Bluetooth: hci4: command tx timeout
[  125.372953][ T8103] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  125.386498][ T8103] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  125.395725][ T8103] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  125.404612][ T8103] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  125.423203][ T8103] vxlan0: entered promiscuous mode
[  125.515262][ T7972] team0: Port device team_slave_0 added
[  125.542159][ T7972] team0: Port device team_slave_1 added
[  125.641242][ T8116] IPv6: Can't replace route, no match found
[  125.648880][ T7972] batman_adv: batadv0: Adding interface: batadv_slave_0
[  125.662228][ T7972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  125.723661][ T7972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  125.778667][ T8107] syzkaller0: entered promiscuous mode
[  125.784254][ T8107] syzkaller0: entered allmulticast mode
[  125.792899][ T7972] batman_adv: batadv0: Adding interface: batadv_slave_1
[  125.807537][ T7972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  125.840886][ T7972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  125.890191][ T8119] bridge0: port 3(veth1_to_bridge) entered blocking state
[  125.898237][ T8119] bridge0: port 3(veth1_to_bridge) entered disabled state
[  125.905556][ T8119] veth1_to_bridge: entered allmulticast mode
[  125.913621][ T8119] veth1_to_bridge: entered promiscuous mode
[  125.921815][ T8119] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  125.935931][ T8119] bridge0: port 3(veth1_to_bridge) entered blocking state
[  125.943304][ T8119] bridge0: port 3(veth1_to_bridge) entered forwarding state
[  126.170300][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:45:0c:11:f8:30, vlan:0)
[  126.183205][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:45:0c:11:f8:30, vlan:0)
[  126.195692][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:45:0c:11:f8:30, vlan:0)
[  126.208500][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:45:0c:11:f8:30, vlan:0)
[  126.220953][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:45:0c:11:f8:30, vlan:0)
[  126.233415][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:45:0c:11:f8:30, vlan:0)
[  126.245907][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:45:0c:11:f8:30, vlan:0)
[  126.258398][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:45:0c:11:f8:30, vlan:0)
[  126.270876][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:45:0c:11:f8:30, vlan:0)
[  126.283299][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:45:0c:11:f8:30, vlan:0)
[  127.458247][ T4489] Bluetooth: hci4: command tx timeout
[  129.528337][ T4489] Bluetooth: hci4: command tx timeout
[  131.178336][    C1] net_ratelimit: 17883 callbacks suppressed
[  131.178358][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  131.196604][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:45:0c:11:f8:30, vlan:0)
[  131.209024][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  131.221366][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:45:0c:11:f8:30, vlan:0)
[  131.233731][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  131.245975][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:45:0c:11:f8:30, vlan:0)
[  131.258381][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  131.270723][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:45:0c:11:f8:30, vlan:0)
[  131.282937][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  131.295069][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:45:0c:11:f8:30, vlan:0)
[  133.212869][ T1247] ieee802154 phy0 wpan0: encryption failed: -22
[  133.225928][ T1247] ieee802154 phy1 wpan1: encryption failed: -22
[  136.188059][    C1] net_ratelimit: 19999 callbacks suppressed
[  136.188081][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:45:0c:11:f8:30, vlan:0)
[  136.206210][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  136.218321][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:45:0c:11:f8:30, vlan:0)
[  136.230790][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  136.242974][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:45:0c:11:f8:30, vlan:0)
[  136.255231][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  136.267349][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:45:0c:11:f8:30, vlan:0)
[  136.279544][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  136.291917][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:45:0c:11:f8:30, vlan:0)
[  136.304132][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  140.330338][ T7972] hsr_slave_0: entered promiscuous mode
[  140.410072][ T7972] hsr_slave_1: entered promiscuous mode
[  140.495922][ T7972] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  140.541972][ T7972] Cannot create hsr debugfs directory
[  140.891323][ T8150] Â: renamed from pim6reg1
[  141.198314][    C1] net_ratelimit: 16417 callbacks suppressed
[  141.198332][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:45:0c:11:f8:30, vlan:0)
[  141.216670][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  141.228993][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:45:0c:11:f8:30, vlan:0)
[  141.241405][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  141.253766][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:45:0c:11:f8:30, vlan:0)
[  141.266204][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  141.278539][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:45:0c:11:f8:30, vlan:0)
[  141.290975][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  141.303303][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:45:0c:11:f8:30, vlan:0)
[  141.315768][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  141.583722][ T8170] syzkaller0: entered promiscuous mode
[  141.594684][ T8170] syzkaller0: entered allmulticast mode
[  146.208244][    C1] net_ratelimit: 14204 callbacks suppressed
[  146.208267][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  146.226431][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:45:0c:11:f8:30, vlan:0)
[  146.238721][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  146.251625][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:45:0c:11:f8:30, vlan:0)
[  146.263965][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  146.276444][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:45:0c:11:f8:30, vlan:0)
[  146.289001][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  146.301473][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:45:0c:11:f8:30, vlan:0)
[  146.313884][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  146.326068][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:02:45:0c:11:f8:30, vlan:0)
[  146.391030][ T8206] hsr0: entered promiscuous mode
[  146.656183][ T8207] hsr_slave_0: left promiscuous mode
[  146.690891][ T8207] hsr_slave_1: left promiscuous mode
[  148.737084][ T7972] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  148.789672][ T8274] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  148.860924][ T7972] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  149.018024][ T7972] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  149.096482][ T7972] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  149.696901][ T7972] 8021q: adding VLAN 0 to HW filter on device bond0
[  149.746297][ T8298] hsr0: entered promiscuous mode
[  150.285220][ T8314] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[  150.378806][ T8311] bridge_slave_1: left allmulticast mode
[  150.420003][ T8311] bridge_slave_1: left promiscuous mode
[  150.443539][ T8311] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.483767][ T8311] bridge1: port 1(bridge_slave_1) entered blocking state
[  150.498279][ T8311] bridge1: port 1(bridge_slave_1) entered disabled state
[  150.506523][ T8311] bridge_slave_1: entered allmulticast mode
[  150.514263][ T8311] bridge_slave_1: entered promiscuous mode
[  150.543540][ T7972] 8021q: adding VLAN 0 to HW filter on device team0
[  150.572759][ T8310] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  150.607177][ T5158] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.614366][ T5158] bridge0: port 1(bridge_slave_0) entered forwarding state
[  150.641418][ T5158] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.648642][ T5158] bridge0: port 2(bridge_slave_1) entered forwarding state
[  151.007782][ T7972] 8021q: adding VLAN 0 to HW filter on device batadv0
[  151.023986][ T8327] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[  151.165223][ T7972] veth0_vlan: entered promiscuous mode
[  151.194002][ T7972] veth1_vlan: entered promiscuous mode
[  151.247617][ T8316] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  151.313854][ T7972] veth0_macvtap: entered promiscuous mode
[  151.343251][ T7972] veth1_macvtap: entered promiscuous mode
[  151.392976][ T7972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  151.414898][ T7972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.427028][ T7972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  151.446830][ T7972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.459701][ T7972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  151.470719][ T7972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.483800][ T7972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  151.494688][ T7972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.511355][ T7972] batman_adv: batadv0: Interface activated: batadv_slave_0
[  151.522303][ T7972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  151.534454][ T7972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.545034][ T7972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  151.555659][ T7972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.567079][ T7972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  151.579154][ T7972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.589234][ T7972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  151.599754][ T7972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.613200][ T7972] batman_adv: batadv0: Interface activated: batadv_slave_1
[  151.660337][ T7972] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  151.672122][ T7972] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  151.681960][ T7972] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  151.700526][ T7972] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  151.881233][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  151.901919][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  151.950454][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  151.966864][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  151.990402][ T8359] team0: entered promiscuous mode
[  152.003143][ T8359] team_slave_0: entered promiscuous mode
[  152.009760][ T8359] team_slave_1: entered promiscuous mode
[  152.043563][ T8358] team0: left promiscuous mode
[  152.053866][ T8358] team_slave_0: left promiscuous mode
[  152.061071][ T8358] team_slave_1: left promiscuous mode
[  152.204421][ T8370] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.0'.
[  153.159344][ T8437] netlink: 'syz-executor.1': attribute type 10 has an invalid length.
[  153.684660][ T8483] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  154.041825][ T8502] pim6reg1: entered promiscuous mode
[  154.047248][ T8502] pim6reg1: entered allmulticast mode
[  154.406828][ T8473] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  154.643846][ T8520] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[  154.656092][ T8520] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.4'.
[  155.820009][ T8549] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[  155.902677][ T8549] bridge_slave_1: left allmulticast mode
[  155.918235][ T8549] bridge_slave_1: left promiscuous mode
[  155.924029][ T8549] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.962326][ T8549] bridge2: port 1(bridge_slave_1) entered blocking state
[  155.978905][ T8549] bridge2: port 1(bridge_slave_1) entered disabled state
[  155.996980][ T8549] bridge_slave_1: entered allmulticast mode
[  156.020445][ T8549] bridge_slave_1: entered promiscuous mode
[  156.034277][ T8562] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'.
[  156.068969][ T8548] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  156.156587][   T29] audit: type=1107 audit(1718170486.234:4): pid=8572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='3'
[  156.956912][ T8621] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[  156.983567][ T8619] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  157.083432][ T8626] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[  157.169947][ T8626] bridge_slave_1: left allmulticast mode
[  157.186248][ T8626] bridge_slave_1: left promiscuous mode
[  157.206695][ T8626] bridge2: port 1(bridge_slave_1) entered disabled state
[  157.244765][ T8626] bridge3: port 1(bridge_slave_1) entered blocking state
[  157.269243][ T8626] bridge3: port 1(bridge_slave_1) entered disabled state
[  157.276462][ T8626] bridge_slave_1: entered allmulticast mode
[  157.294178][ T8626] bridge_slave_1: entered promiscuous mode
[  157.377191][ T8625] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  157.525080][ T8656] geneve1: entered allmulticast mode
[  157.595239][ T8656] team0: Port device geneve1 added
[  157.622612][ T8658] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  157.811067][ T8669] net_ratelimit: 10781 callbacks suppressed
[  157.811084][ T8669] IPv4: Oversized IP packet from 127.202.26.0
[  157.970859][ T8681] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[  157.993857][ T8674] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'.
[  157.997332][ T8681] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[  158.027225][ T8686] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[  158.147444][ T8689] geneve1: entered allmulticast mode
[  158.233452][ T8689] team0: Port device geneve1 added
[  158.246323][ T8699] netlink: 'syz-executor.3': attribute type 4 has an invalid length.
[  158.454492][ T8713] tc_dump_action: action bad kind
[  158.892446][ T8740] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'.
[  158.908355][ T8740] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'.
[  159.132539][ T8748] xt_bpf: check failed: parse error
[  159.183928][ T8744] syz-executor.0 (8744) used greatest stack depth: 17424 bytes left
[  159.279763][ T8755] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  159.303901][ T8755] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  159.312915][ T8755] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  159.322113][ T8755] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  159.331392][ T8755] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  159.341200][ T8755] vxlan0: entered promiscuous mode
[  160.881413][ T8860] netlink: 'syz-executor.1': attribute type 29 has an invalid length.
[  160.899502][ T8860] netlink: 'syz-executor.1': attribute type 29 has an invalid length.
[  160.916946][ T8860] netlink: 'syz-executor.1': attribute type 29 has an invalid length.
[  161.487706][ T8886] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.2'.
[  161.594161][ T5117] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  161.603229][ T5117] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  161.614642][ T5117] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  161.623454][ T5117] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  161.632119][ T5117] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  161.643437][ T5117] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  161.849946][ T8894] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'.
[  162.015640][ T8900] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  162.022498][ T8889] chnl_net:caif_netlink_parms(): no params data found
[  162.245675][ T8914] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.2'.
[  162.302110][ T8914] sysfs: cannot create duplicate filename '/class/ieee80211/ü!'
[  162.319370][ T8914] CPU: 0 PID: 8914 Comm: syz-executor.2 Not tainted 6.10.0-rc2-syzkaller-00724-g45403b12c29c #0
[  162.329814][ T8914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  162.339891][ T8914] Call Trace:
[  162.343185][ T8914]  <TASK>
[  162.346134][ T8914]  dump_stack_lvl+0x241/0x360
[  162.350869][ T8914]  ? __pfx_dump_stack_lvl+0x10/0x10
[  162.356095][ T8914]  ? __pfx__printk+0x10/0x10
[  162.360716][ T8914]  ? sysfs_warn_dup+0x51/0xa0
[  162.365427][ T8914]  ? kmalloc_trace_noprof+0x19c/0x2c0
[  162.370829][ T8914]  sysfs_warn_dup+0x8e/0xa0
[  162.375357][ T8914]  sysfs_do_create_link_sd+0xbe/0x110
[  162.380760][ T8914]  device_add_class_symlinks+0x1c5/0x250
[  162.386431][ T8914]  device_add+0x553/0xbf0
[  162.390790][ T8914]  wiphy_register+0x1d3f/0x2b30
[  162.395691][ T8914]  ? __pfx_wiphy_register+0x10/0x10
[  162.400918][ T8914]  ? minstrel_ht_alloc+0x72b/0x860
[  162.406069][ T8914]  ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620
[  162.412164][ T8914]  ieee80211_register_hw+0x3098/0x3d80
[  162.417670][ T8914]  ? ieee80211_register_hw+0x1161/0x3d80
[  162.423334][ T8914]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  162.429175][ T8914]  ? __asan_memset+0x23/0x50
[  162.433791][ T8914]  ? __hrtimer_init+0x170/0x250
[  162.438671][ T8914]  mac80211_hwsim_new_radio+0x2597/0x44c0
[  162.444437][ T8914]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  162.450656][ T8914]  ? kmalloc_node_track_caller_noprof+0x242/0x440
[  162.457093][ T8914]  ? kstrndup+0x5c/0xb0
[  162.461268][ T8914]  ? __asan_memcpy+0x40/0x70
[  162.465884][ T8914]  hwsim_new_radio_nl+0xe4c/0x21d0
[  162.471033][ T8914]  ? __pfx___nla_validate_parse+0x10/0x10
[  162.476782][ T8914]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  162.482389][ T8914]  ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290
[  162.488760][ T8914]  genl_rcv_msg+0xb14/0xec0
[  162.493289][ T8914]  ? mark_lock+0x9a/0x350
[  162.497652][ T8914]  ? __pfx_genl_rcv_msg+0x10/0x10
[  162.502737][ T8914]  ? __pfx_lock_acquire+0x10/0x10
[  162.507784][ T8914]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  162.513351][ T8914]  ? __pfx___might_resched+0x10/0x10
[  162.518670][ T8914]  netlink_rcv_skb+0x1e3/0x430
[  162.523463][ T8914]  ? __pfx_genl_rcv_msg+0x10/0x10
[  162.528519][ T8914]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  162.533844][ T8914]  ? __netlink_deliver_tap+0x77e/0x7c0
[  162.539341][ T8914]  genl_rcv+0x28/0x40
[  162.543353][ T8914]  netlink_unicast+0x7ea/0x980
[  162.548146][ T8914]  ? __pfx_netlink_unicast+0x10/0x10
[  162.553451][ T8914]  ? __virt_addr_valid+0x183/0x520
[  162.558594][ T8914]  ? __check_object_size+0x49c/0x900
[  162.563896][ T8914]  ? bpf_lsm_netlink_send+0x9/0x10
[  162.569039][ T8914]  netlink_sendmsg+0x8db/0xcb0
[  162.573843][ T8914]  ? __pfx_netlink_sendmsg+0x10/0x10
[  162.579153][ T8914]  ? __import_iovec+0x536/0x820
[  162.584032][ T8914]  ? aa_sock_msg_perm+0x91/0x160
[  162.588993][ T8914]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  162.594293][ T8914]  ? security_socket_sendmsg+0x87/0xb0
[  162.599783][ T8914]  ? __pfx_netlink_sendmsg+0x10/0x10
[  162.605086][ T8914]  __sock_sendmsg+0x221/0x270
[  162.609791][ T8914]  ____sys_sendmsg+0x525/0x7d0
[  162.614590][ T8914]  ? __pfx_____sys_sendmsg+0x10/0x10
[  162.619906][ T8914]  ? __sys_sendmsg+0x226/0x3a0
[  162.624701][ T8914]  ? copy_msghdr_from_user+0x10/0x680
[  162.630112][ T8914]  __sys_sendmsg+0x2b0/0x3a0
[  162.634726][ T8914]  ? __pfx___sys_sendmsg+0x10/0x10
[  162.639909][ T8914]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  162.646259][ T8914]  ? do_syscall_64+0x100/0x230
[  162.651054][ T8914]  ? do_syscall_64+0xb6/0x230
[  162.655758][ T8914]  do_syscall_64+0xf3/0x230
[  162.660280][ T8914]  ? clear_bhb_loop+0x35/0x90
[  162.664974][ T8914]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  162.670914][ T8914] RIP: 0033:0x7f21ab67cea9
[  162.675356][ T8914] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  162.694976][ T8914] RSP: 002b:00007f21ac4590c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  162.703416][ T8914] RAX: ffffffffffffffda RBX: 00007f21ab7b3f80 RCX: 00007f21ab67cea9
[  162.711398][ T8914] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003
[  162.719379][ T8914] RBP: 00007f21ab6ebff4 R08: 0000000000000000 R09: 0000000000000000
[  162.727363][ T8914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  162.735347][ T8914] R13: 000000000000000b R14: 00007f21ab7b3f80 R15: 00007ffc76c1aa98
[  162.743354][ T8914]  </TASK>
[  162.757197][ T8889] bridge0: port 1(bridge_slave_0) entered blocking state
[  162.775757][ T8889] bridge0: port 1(bridge_slave_0) entered disabled state
[  162.790512][ T8889] bridge_slave_0: entered allmulticast mode
[  162.828199][ T8889] bridge_slave_0: entered promiscuous mode
[  162.851944][ T8889] bridge0: port 2(bridge_slave_1) entered blocking state
[  162.877815][ T8889] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.885844][ T8889] bridge_slave_1: entered allmulticast mode
[  162.894749][ T8889] bridge_slave_1: entered promiscuous mode
[  162.965840][ T8889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  163.002991][ T8889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  163.064825][ T8889] team0: Port device team_slave_0 added
[  163.076106][ T8889] team0: Port device team_slave_1 added
[  163.129309][ T8889] batman_adv: batadv0: Adding interface: batadv_slave_0
[  163.136610][ T8889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  163.195928][ T8889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  163.239558][ T8889] batman_adv: batadv0: Adding interface: batadv_slave_1
[  163.255202][ T8889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  163.289855][ T8889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  163.424910][ T2844] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  163.441074][ T2844] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.461048][ T8946] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'.
[  163.492387][ T8945] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'.
[  163.581723][ T8889] hsr_slave_0: entered promiscuous mode
[  163.599295][ T8889] hsr_slave_1: entered promiscuous mode
[  163.606790][ T8889] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  163.633741][ T8889] Cannot create hsr debugfs directory
[  163.688367][ T5117] Bluetooth: hci2: command tx timeout
[  163.697730][ T2844] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  163.715255][ T2844] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.738799][ T8952] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  163.759631][   T45] ip6_tnl_xmit_ctl: 3 callbacks suppressed
[  163.759648][   T45] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  163.761517][ T8952] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  163.808386][ T2528] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  163.864154][ T2528] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  163.919917][ T2844] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  163.938522][ T2844] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.966368][ T8954] syzkaller1: entered promiscuous mode
[  163.972807][ T8954] syzkaller1: entered allmulticast mode
[  164.008375][   T45] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  164.058292][  T783] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  164.116015][ T2844] team0: Port device netdevsim0 removed
[  164.133112][ T2844] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  164.147039][ T2844] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.193757][  T783] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  164.242581][  T783] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  164.318103][  T783] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  164.368168][ T5158] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  164.438557][ T5158] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  164.453044][ T2844] bridge_slave_1: left allmulticast mode
[  164.469782][ T2844] bridge_slave_1: left promiscuous mode
[  164.479931][ T2844] bridge0: port 2(bridge_slave_1) entered disabled state
[  164.503695][ T2844] bridge_slave_0: left allmulticast mode
[  164.516257][ T2844] bridge_slave_0: left promiscuous mode
[  164.535635][ T2844] bridge0: port 1(bridge_slave_0) entered disabled state
[  164.835367][ T2844] bond0 (unregistering): (slave vlan2): Releasing backup interface
[  165.005885][ T2844] team0: Port device geneve1 removed
[  165.205716][ T2844] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  165.229190][ T2844] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  165.241664][ T2844] bond0 (unregistering): Released all slaves
[  165.262581][ T2844] bond1 (unregistering): (slave vcan1): Releasing backup interface
[  165.276975][ T2844] bond1 (unregistering): Released all slaves
[  165.303407][ T8977] veth1_macvtap: left promiscuous mode
[  165.357791][ T8989] syzkaller1: entered promiscuous mode
[  165.379135][ T8989] syzkaller1: entered allmulticast mode
[  165.406387][ T2844] tipc: Disabling bearer <udp:†Ýj>
[  165.422636][ T2844] tipc: Left network mode
[  165.768288][ T5117] Bluetooth: hci2: command tx timeout
[  165.780952][ T9025] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[  165.806567][ T9025] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[  165.845412][ T2844] hsr_slave_0: left promiscuous mode
[  165.871289][ T2844] hsr_slave_1: left promiscuous mode
[  165.893848][ T2844] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  165.901632][ T2844] batman_adv: batadv0: Removing interface: batadv_slave_0
[  165.913839][ T2844] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  165.923812][ T2844] batman_adv: batadv0: Removing interface: batadv_slave_1
[  165.957281][ T2844] veth1_to_hsr: left promiscuous mode
[  165.963124][ T2844] veth1_macvtap: left promiscuous mode
[  165.968866][ T2844] veth0_macvtap: left promiscuous mode
[  165.974426][ T2844] veth1_vlan: left promiscuous mode
[  165.979888][ T2844] veth0_vlan: left promiscuous mode
[  166.137137][ T2844] team0 (unregistering): Port device vlan0 removed
[  166.692077][ T2844] team0 (unregistering): Port device team_slave_1 removed
[  166.734077][ T2844] team0 (unregistering): Port device team_slave_0 removed
[  167.044771][ T9025] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[  167.056391][ T9055] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  167.104124][ T9055] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  167.112942][ T9055] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  167.121808][ T9055] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  167.130626][ T9055] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  167.163700][ T9055] vxlan0: entered promiscuous mode
[  167.437069][ T8889] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  167.471249][ T8889] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  167.513065][ T8889] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  167.559821][ T8889] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  167.802609][ T8889] 8021q: adding VLAN 0 to HW filter on device bond0
[  167.846221][ T8889] 8021q: adding VLAN 0 to HW filter on device team0
[  167.854062][ T5117] Bluetooth: hci2: command tx timeout
[  167.872056][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state
[  167.879255][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state
[  167.916513][ T5158] bridge0: port 2(bridge_slave_1) entered blocking state
[  167.919392][ T9095] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.2'.
[  167.923781][ T5158] bridge0: port 2(bridge_slave_1) entered forwarding state
[  167.995581][ T8889] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  168.032495][ T9095] netlink: 'syz-executor.2': attribute type 2 has an invalid length.
[  168.067280][ T9095] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'.
[  168.305527][ T8889] 8021q: adding VLAN 0 to HW filter on device batadv0
[  168.395086][ T9112] netlink: 'syz-executor.4': attribute type 5 has an invalid length.
[  168.445588][ T9112] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.4'.
[  168.591353][ T8889] veth0_vlan: entered promiscuous mode
[  168.617034][ T8889] veth1_vlan: entered promiscuous mode
[  168.730565][ T8889] veth0_macvtap: entered promiscuous mode
[  168.757133][ T8889] veth1_macvtap: entered promiscuous mode
[  168.781591][ T9131] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  168.816043][ T8889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  168.865070][ T8889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.886135][ T8889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  168.906904][ T8889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.908141][   T29] audit: type=1804 audit(1718170498.984:5): pid=9142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1562660432/syzkaller.UwZj5d/344/memory.events" dev="sda1" ino=1956 res=1 errno=0
[  168.928073][ T8889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  168.967183][   T29] audit: type=1804 audit(1718170499.034:6): pid=9142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1562660432/syzkaller.UwZj5d/344/memory.events" dev="sda1" ino=1956 res=1 errno=0
[  168.977515][ T8889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.995428][   T29] audit: type=1804 audit(1718170499.034:7): pid=9142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1562660432/syzkaller.UwZj5d/344/memory.events" dev="sda1" ino=1956 res=1 errno=0
[  169.031882][ T8889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  169.042910][ T8889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.056610][ T8889] batman_adv: batadv0: Interface activated: batadv_slave_0
[  169.067431][ T9139] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.3'.
[  169.097816][ T8889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  169.116495][ T8889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.141692][ T8889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  169.158148][ T8889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.205039][ T8889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  169.242823][ T8889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.277237][ T8889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  169.302500][ T8889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.326787][ T9157] ieee802154 phy0 wpan0: encryption failed: -22
[  169.332654][ T8889] batman_adv: batadv0: Interface activated: batadv_slave_1
[  169.365430][ T9158] tipc: Started in network mode
[  169.378489][ T9158] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711
[  169.397149][ T9158] tipc: Enabled bearer <eth:batadv0>, priority 0
[  169.429765][ T8889] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  169.445038][ T9153] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  169.451217][ T8889] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  169.469363][ T9153] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  169.495865][ T8889] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  169.520598][ T8889] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  169.670219][ T9173] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  169.714530][ T9173] netlink: 168864 bytes leftover after parsing attributes in process `syz-executor.2'.
[  169.759039][ T2844] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  169.786231][ T2844] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  169.831193][ T9172] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.4'.
[  169.848792][ T2844] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  169.866699][ T2844] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  169.928449][ T5117] Bluetooth: hci2: command tx timeout
[  169.955342][ T9178] netlink: 'syz-executor.4': attribute type 10 has an invalid length.
[  169.986851][ T9178] bridge0: port 2(syz_tun) entered blocking state
[  170.009641][ T9178] bridge0: port 2(syz_tun) entered disabled state
[  170.047069][ T9178] syz_tun: entered allmulticast mode
[  170.112269][ T9178] syz_tun: left allmulticast mode
[  170.154571][ T9178] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  170.398848][ T5158] tipc: Node number set to 8432298
[  170.561034][ T9194] bridge0: port 2(team0) entered blocking state
[  170.577740][ T9194] bridge0: port 2(team0) entered disabled state
[  170.659254][   T29] audit: type=1804 audit(1718170500.744:8): pid=9208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2882187596/syzkaller.9ChN6F/130/memory.events" dev="sda1" ino=1965 res=1 errno=0
[  170.748285][   T29] audit: type=1804 audit(1718170500.744:9): pid=9208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir2882187596/syzkaller.9ChN6F/130/memory.events" dev="sda1" ino=1965 res=1 errno=0
[  170.775981][   T29] audit: type=1804 audit(1718170500.744:10): pid=9208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir2882187596/syzkaller.9ChN6F/130/memory.events" dev="sda1" ino=1965 res=1 errno=0
[  171.145195][ T9219] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  171.159634][ T9219] bridge0: port 3(syz_tun) entered blocking state
[  171.166313][ T9219] bridge0: port 3(syz_tun) entered disabled state
[  171.173974][ T9219] syz_tun: entered allmulticast mode
[  171.185908][ T9219] syz_tun: entered promiscuous mode
[  171.192201][ T9219] bridge0: port 3(syz_tun) entered blocking state
[  171.199050][ T9219] bridge0: port 3(syz_tun) entered forwarding state
[  171.285590][ T4489] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  171.294733][ T4489] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  171.303349][ T4489] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  171.311384][ T4489] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  171.319977][ T4489] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  171.327259][ T4489] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  171.634336][ T9225] chnl_net:caif_netlink_parms(): no params data found
[  171.738120][ T9245] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  171.792047][ T9225] bridge0: port 1(bridge_slave_0) entered blocking state
[  171.799926][ T9225] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.807203][ T9225] bridge_slave_0: entered allmulticast mode
[  171.814893][ T9225] bridge_slave_0: entered promiscuous mode
[  171.831082][ T9225] bridge0: port 2(bridge_slave_1) entered blocking state
[  171.842758][ T9225] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.855525][ T9225] bridge_slave_1: entered allmulticast mode
[  171.863658][ T9225] bridge_slave_1: entered promiscuous mode
[  171.920610][ T9225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  171.952939][ T9225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  172.027752][ T5163] IPVS: starting estimator thread 0...
[  172.064875][ T9225] team0: Port device team_slave_0 added
[  172.084068][ T9225] team0: Port device team_slave_1 added
[  172.107130][   T29] audit: type=1804 audit(1718170502.184:11): pid=9257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1562660432/syzkaller.UwZj5d/350/memory.events" dev="sda1" ino=1960 res=1 errno=0
[  172.180815][ T9259] IPVS: using max 19 ests per chain, 45600 per kthread
[  172.189060][   T29] audit: type=1800 audit(1718170502.254:12): pid=9257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="memory.events" dev="sda1" ino=1960 res=0 errno=0
[  172.219616][ T9261] xfrm0: entered promiscuous mode
[  172.234113][ T9261] bond0: (slave vlan3): Enslaving as an active interface with an up link
[  172.243664][ T9225] batman_adv: batadv0: Adding interface: batadv_slave_0
[  172.255343][ T9225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  172.283341][ T9225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  172.325730][ T9225] batman_adv: batadv0: Adding interface: batadv_slave_1
[  172.339165][ T9225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  172.381585][ T9225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  172.494627][ T9225] hsr_slave_0: entered promiscuous mode
[  172.514093][ T9225] hsr_slave_1: entered promiscuous mode
[  172.527718][ T9225] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  172.537824][ T9225] Cannot create hsr debugfs directory
[  172.565435][ T9271] __nla_validate_parse: 6 callbacks suppressed
[  172.565458][ T9271] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  172.586948][ T9276] openvswitch: netlink: ct_state flags 0000ee00 unsupported
[  172.746109][ T9281] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  172.765509][ T9283] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'.
[  172.796396][ T9283] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'.
[  172.934304][ T9225] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.999367][ T9285] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'.
[  173.024181][ T9291] bridge0: port 2(team0) entered blocking state
[  173.037009][ T9291] bridge0: port 2(team0) entered disabled state
[  173.046584][ T9291] team0: entered allmulticast mode
[  173.059739][ T9291] team_slave_0: entered allmulticast mode
[  173.073961][ T9291] team_slave_1: entered allmulticast mode
[  173.091196][ T9291] team0: entered promiscuous mode
[  173.095205][ T9294] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  173.098405][ T9291] team_slave_0: entered promiscuous mode
[  173.111712][ T9291] team_slave_1: entered promiscuous mode
[  173.128828][ T9291] bridge0: port 2(team0) entered blocking state
[  173.135937][ T9291] bridge0: port 2(team0) entered forwarding state
[  173.148727][ T9294] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check.
[  173.240305][ T9300] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'.
[  173.265221][ T9300] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.0'.
[  173.355451][ T9307] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  173.368764][ T4489] Bluetooth: hci2: command tx timeout
[  173.466582][ T9307] openvswitch: netlink: ct_state flags 0000ee00 unsupported
[  173.581878][ T9318] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'.
[  173.610351][ T9322] xt_CT: You must specify a L4 protocol and not use inversions on it
[  173.636389][ T9322] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  173.646057][ T9322] batadv_slave_0: entered promiscuous mode
[  173.654072][ T9322] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  173.662962][ T9322] Cannot create hsr debugfs directory
[  174.007797][ T9334] ip6erspan0: entered promiscuous mode
[  174.240323][ T9225] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.291614][ T9341] bridge0: port 4(team0) entered blocking state
[  174.309448][ T9341] bridge0: port 4(team0) entered disabled state
[  174.315903][ T9341] team0: entered allmulticast mode
[  174.327980][ T9341] team_slave_0: entered allmulticast mode
[  174.333750][ T9341] team_slave_1: entered allmulticast mode
[  174.360561][ T9341] team0: entered promiscuous mode
[  174.365639][ T9341] team_slave_0: entered promiscuous mode
[  174.378396][ T9341] team_slave_1: entered promiscuous mode
[  174.386638][ T9341] bridge0: port 4(team0) entered blocking state
[  174.393056][ T9341] bridge0: port 4(team0) entered forwarding state
[  174.485254][ T9225] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.603819][ T9225] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.631839][  T783] IPVS: starting estimator thread 0...
[  174.676389][   T29] audit: type=1804 audit(1718170504.754:13): pid=9351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir136354477/syzkaller.3YdHsF/77/memory.events" dev="sda1" ino=1946 res=1 errno=0
[  174.738040][   T29] audit: type=1800 audit(1718170504.804:14): pid=9351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.3" name="memory.events" dev="sda1" ino=1946 res=0 errno=0
[  174.748197][ T9352] IPVS: using max 22 ests per chain, 52800 per kthread
[  174.813182][ T2888] bridge_slave_1: left allmulticast mode
[  174.843180][ T2888] bridge_slave_1: left promiscuous mode
[  174.861354][ T2888] bridge0: port 2(bridge_slave_1) entered disabled state
[  174.900291][ T2888] bridge_slave_0: left allmulticast mode
[  174.907185][ T2888] bridge_slave_0: left promiscuous mode
[  174.920642][ T2888] bridge0: port 1(bridge_slave_0) entered disabled state
[  175.179399][ T9361] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  175.400101][ T9365] netlink: 'syz-executor.2': attribute type 4 has an invalid length.
[  175.423157][ T9365] netlink: 'syz-executor.2': attribute type 8 has an invalid length.
[  175.450529][ T4489] Bluetooth: hci2: command tx timeout
[  175.586660][ T2888] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  175.600671][ T2888] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  175.613450][ T2888] bond0 (unregistering): Released all slaves
[  175.822177][ T9225] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  175.908670][ T9225] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  176.001797][   T29] audit: type=1804 audit(1718170506.084:15): pid=9372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir136354477/syzkaller.3YdHsF/78/cgroup.controllers" dev="sda1" ino=1962 res=1 errno=0
[  176.042254][ T9225] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  176.128950][ T9225] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  176.196830][ T2888] hsr_slave_0: left promiscuous mode
[  176.220143][ T2888] hsr_slave_1: left promiscuous mode
[  176.338175][ T2888] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  176.346773][ T2888] batman_adv: batadv0: Removing interface: batadv_slave_0
[  176.363122][ T2888] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  176.370726][ T2888] batman_adv: batadv0: Removing interface: batadv_slave_1
[  176.405938][ T2888] veth1_macvtap: left promiscuous mode
[  176.415959][ T2888] veth0_macvtap: left promiscuous mode
[  176.422354][ T2888] veth1_vlan: left promiscuous mode
[  176.429795][ T2888] veth0_vlan: left promiscuous mode
[  176.855836][ T2888] team0 (unregistering): Port device team_slave_1 removed
[  176.905920][ T2888] team0 (unregistering): Port device team_slave_0 removed
[  177.479546][   T29] audit: type=1804 audit(1718170507.564:16): pid=9399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1562660432/syzkaller.UwZj5d/362/memory.events" dev="sda1" ino=1938 res=1 errno=0
[  177.530909][ T4489] Bluetooth: hci2: command tx timeout
[  177.564943][ T9225] 8021q: adding VLAN 0 to HW filter on device bond0
[  177.575562][   T29] audit: type=1800 audit(1718170507.614:17): pid=9399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="memory.events" dev="sda1" ino=1938 res=0 errno=0
[  177.616721][ T9225] 8021q: adding VLAN 0 to HW filter on device team0
[  177.640413][ T2528] bridge0: port 1(bridge_slave_0) entered blocking state
[  177.647632][ T2528] bridge0: port 1(bridge_slave_0) entered forwarding state
[  177.672915][ T2528] bridge0: port 2(bridge_slave_1) entered blocking state
[  177.680110][ T2528] bridge0: port 2(bridge_slave_1) entered forwarding state
[  177.824283][ T9414] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  177.871130][ T9225] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  178.268834][ T9430] __nla_validate_parse: 7 callbacks suppressed
[  178.268856][ T9430] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.3'.
[  178.400513][ T9225] 8021q: adding VLAN 0 to HW filter on device batadv0
[  178.420898][ T9441] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  178.506202][ T9225] veth0_vlan: entered promiscuous mode
[  178.522780][ T9225] veth1_vlan: entered promiscuous mode
[  178.581175][ T9225] veth0_macvtap: entered promiscuous mode
[  178.594661][ T9225] veth1_macvtap: entered promiscuous mode
[  178.694820][ T9225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  178.707240][ T9225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  178.717216][ T9225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  178.729055][ T9225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  178.744985][ T9225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  178.755436][ T9225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  178.765266][ T9225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  178.776482][ T9225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  178.787637][ T9225] batman_adv: batadv0: Interface activated: batadv_slave_0
[  178.807173][ T9225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  178.819305][ T9225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  178.838485][ T9225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  178.849658][ T9225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  178.860090][ T9225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  178.872599][ T9452] syz-executor.4 uses old SIOCAX25GETINFO
[  178.875477][ T9225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  178.895599][ T9225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  178.908016][ T9225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  178.920626][ T9225] batman_adv: batadv0: Interface activated: batadv_slave_1
[  178.933736][ T9225] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  178.942967][ T9225] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  178.952507][ T9225] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  178.961855][ T9225] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  179.048785][ T2869] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  179.060145][ T2869] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  179.086806][ T2869] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  179.095075][ T2869] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  179.609708][ T5117] Bluetooth: hci2: command tx timeout
[  179.851801][ T9473] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  179.924559][ T9477] netlink: 277 bytes leftover after parsing attributes in process `syz-executor.4'.
[  179.934550][ T9473] netlink: 'syz-executor.0': attribute type 4 has an invalid length.
[  179.934572][ T9473] netlink: 'syz-executor.0': attribute type 8 has an invalid length.
[  179.934584][ T9473] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.0'.
[  180.078546][ T9480] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  180.148507][ T9487] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'.
[  180.195060][ T9487] No such timeout policy "syz1"
[  180.285679][ T9487] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'.
[  180.331924][ T9494] netlink: 'syz-executor.0': attribute type 33 has an invalid length.
[  180.666108][ T9510] bridge_slave_1: left allmulticast mode
[  180.678443][ T9510] bridge_slave_1: left promiscuous mode
[  180.684435][ T9510] bridge0: port 2(bridge_slave_1) entered disabled state
[  180.694927][ T9510] netlink: 'syz-executor.0': attribute type 2 has an invalid length.
[  180.704887][ T9510] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  180.788409][ T9515] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'.
[  181.047885][ T9522] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  181.312907][ T9533] netlink: 277 bytes leftover after parsing attributes in process `syz-executor.2'.
[  181.368895][ T5117] Bluetooth: hci1: command 0x0406 tx timeout
[  181.570517][ T9548] xt_HMARK: spi-set and port-set can't be combined
[  182.675984][ T9535] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'.
[  182.767741][ T9552] geneve0: entered promiscuous mode
[  182.796778][ T9552] geneve0: left promiscuous mode
[  182.887834][ T9555] syzkaller0: entered promiscuous mode
[  182.990654][ T9560] syzkaller0 (unregistering): left promiscuous mode
[  183.306789][ T9572] __nla_validate_parse: 2 callbacks suppressed
[  183.306807][ T9572] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'.
[  183.452508][ T9578] netlink: 'syz-executor.2': attribute type 2 has an invalid length.
[  183.485995][ T9582] netlink: 'syz-executor.0': attribute type 3 has an invalid length.
[  183.666490][ T9593] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.0'.
[  183.680777][ T9593] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'.
[  183.753701][ T9594] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  183.989620][ T9598] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.1'.
[  183.990929][ T9601] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'.
[  184.027307][ T9602] netlink: 277 bytes leftover after parsing attributes in process `syz-executor.4'.
[  184.182615][ T9603] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  184.406049][ T9616] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'.
[  184.637476][ T9625] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  184.813816][ T9634] tap0: tun_chr_ioctl cmd 1074025673
[  184.875425][ T9628] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'.
[  185.008778][ T9639] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  185.078928][ T9645] xt_HMARK: spi-set and port-set can't be combined
[  185.416392][ T9658] veth1_to_bond: entered allmulticast mode
[  185.439677][ T9658] veth1_to_bond: left allmulticast mode
[  185.494669][ T9658] gretap0: entered promiscuous mode
[  185.521517][ T9664] 0ªX¹¦D: renamed from gretap0
[  185.566586][ T9664] 0ªX¹¦D: left promiscuous mode
[  185.584366][ T9664] 0ªX¹¦D: entered allmulticast mode
[  185.608197][ T4489] Bluetooth: hci0: Opcode 0x0401 failed: -110
[  185.625843][ T9664] A link change request failed with some changes committed already. Interface 
30ªX¹¦D may have been left with an inconsistent configuration, please check.
[  185.916761][ T9674] syzkaller0: entered promiscuous mode
[  185.922910][ T9674] syzkaller0: entered allmulticast mode
[  186.212922][ T9694] ip6t_srh: unknown srh invflags 7863
[  187.618936][ T9693] tap0: tun_chr_ioctl cmd 1074025673
[  187.759116][ T9712] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  187.767233][ T9712] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  187.816047][ T9712] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  187.913918][ T9712] lo speed is unknown, defaulting to 1000
[  187.952690][ T9712] lo speed is unknown, defaulting to 1000
[  187.986247][ T9712] lo speed is unknown, defaulting to 1000
[  188.065926][ T9729] openvswitch: netlink: ct_state flags 0000ee00 unsupported
[  188.376330][ T9747] ip6t_srh: unknown srh invflags 7863
[  188.409037][ T9741] syzkaller0: entered promiscuous mode
[  188.463877][ T9734] syzkaller0 (unregistering): left promiscuous mode
[  188.554275][  T783] lo speed is unknown, defaulting to 1000
[  188.556539][ T9712] infiniband syz0: set active
[  188.577839][ T9712] infiniband syz0: added lo
[  188.612924][ T9712] syz0: rxe_create_cq: returned err = -12
[  188.643795][ T9712] infiniband syz0: Couldn't create ib_mad CQ
[  188.659401][ T9712] infiniband syz0: Couldn't open port 1
[  188.743341][ T9712] RDS/IB: syz0: added
[  188.747889][ T9712] smc: adding ib device syz0 with port count 1
[  188.768419][ T9712] smc:    ib device syz0 port 1 has pnetid 
[  188.791955][ T5158] lo speed is unknown, defaulting to 1000
[  188.806013][ T9712] lo speed is unknown, defaulting to 1000
[  188.963695][ T9761] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
[  189.144721][ T9765] ipip0: entered promiscuous mode
[  189.151465][ T9712] lo speed is unknown, defaulting to 1000
[  189.171793][ T9761] 8021q: adding VLAN 0 to HW filter on device bond1
[  189.454156][ T9763] bond1 (unregistering): Released all slaves
[  189.525923][ T9712] lo speed is unknown, defaulting to 1000
[  189.959841][ T9712] lo speed is unknown, defaulting to 1000
[  190.195894][ T9796] ip6t_srh: unknown srh invflags 7863
[  190.223488][ T9793] batadv_slave_1: entered promiscuous mode
[  190.244578][ T9793] vlan1: entered promiscuous mode
[  190.317367][ T9792] vlan1: left promiscuous mode
[  190.333465][ T9792] batadv_slave_1: left promiscuous mode
[  190.422843][ T9712] lo speed is unknown, defaulting to 1000
[  190.485300][ T9799] ipip0: entered promiscuous mode
[  190.693361][ T9802] veth1_to_bond: entered allmulticast mode
[  190.721667][ T9802] veth1_to_bond: left allmulticast mode
[  190.732931][   T29] audit: type=1804 audit(1718170520.814:18): pid=9803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir136354477/syzkaller.3YdHsF/109/cgroup.controllers" dev="sda1" ino=1963 res=1 errno=0
[  190.748274][ T9802] __nla_validate_parse: 9 callbacks suppressed
[  190.748291][ T9802] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.4'.
[  190.826050][ T9802] gretap0: entered promiscuous mode
[  190.909888][ T9805] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.4'.
[  190.934561][ T9805] 0ªX¹¦D: renamed from gretap0
[  190.951577][ T9805] 0ªX¹¦D: left promiscuous mode
[  190.973211][ T9805] 0ªX¹¦D: entered allmulticast mode
[  190.985139][ T9805] A link change request failed with some changes committed already. Interface 
30ªX¹¦D may have been left with an inconsistent configuration, please check.
[  191.011605][ T9809] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  191.306172][   T29] audit: type=1800 audit(1718170521.384:19): pid=9823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1938 res=0 errno=0
[  191.353882][ T9827] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
[  191.367232][   T29] audit: type=1804 audit(1718170521.424:20): pid=9823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir2104045925/syzkaller.PNMyM6/25/memory.events" dev="sda1" ino=1938 res=1 errno=0
[  191.443519][   T29] audit: type=1804 audit(1718170521.434:21): pid=9823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir2104045925/syzkaller.PNMyM6/25/memory.events" dev="sda1" ino=1938 res=1 errno=0
[  191.548060][   T29] audit: type=1804 audit(1718170521.454:22): pid=9823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir2104045925/syzkaller.PNMyM6/25/memory.events" dev="sda1" ino=1938 res=1 errno=0
[  191.666762][   T29] audit: type=1804 audit(1718170521.504:23): pid=9834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir2104045925/syzkaller.PNMyM6/25/memory.events" dev="sda1" ino=1938 res=1 errno=0
[  191.791289][   T29] audit: type=1804 audit(1718170521.504:24): pid=9834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir2104045925/syzkaller.PNMyM6/25/memory.events" dev="sda1" ino=1938 res=1 errno=0
[  191.886647][   T29] audit: type=1800 audit(1718170521.964:25): pid=9854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1939 res=0 errno=0
[  191.929219][ T9857] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 3, id = 0
[  191.956174][   T29] audit: type=1804 audit(1718170521.964:26): pid=9854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir136354477/syzkaller.3YdHsF/111/memory.events" dev="sda1" ino=1939 res=1 errno=0
[  192.017271][   T29] audit: type=1804 audit(1718170521.964:27): pid=9854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir136354477/syzkaller.3YdHsF/111/memory.events" dev="sda1" ino=1939 res=1 errno=0
[  192.063177][ T9866] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'.
[  192.077752][ T9862] Page cache invalidation failure on direct I/O.  Possible data corruption due to collision with buffered I/O!
[  192.102536][ T9862] File: /root/syzkaller-testdir136354477/syzkaller.3YdHsF/111/memory.events PID: 9862 Comm: syz-executor.3
[  192.112833][ T9867] ip6t_srh: unknown srh invflags 7863
[  192.313569][ T9876] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[  192.330801][ T9882] ebt_limit: overflow, try lower: 0/0
[  192.399501][ T9876] vlan4: entered promiscuous mode
[  192.413873][ T9876] bond0: entered promiscuous mode
[  192.450684][ T9876] bond_slave_0: entered promiscuous mode
[  192.456553][ T9876] bond_slave_1: entered promiscuous mode
[  192.483242][ T9889] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'.
[  192.488797][ T9876] vlan3: entered promiscuous mode
[  192.531406][ T9876] bond0: left promiscuous mode
[  192.545580][ T9876] bond_slave_0: left promiscuous mode
[  192.561533][ T9876] bond_slave_1: left promiscuous mode
[  192.582982][ T9876] vlan3: left promiscuous mode
[  192.636865][ T9878] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
[  192.675763][ T9894] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[  192.824392][ T9904] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  192.921278][ T9908] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[  192.942610][ T9908] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  193.007260][ T9910] netlink: 284 bytes leftover after parsing attributes in process `syz-executor.0'.
[  193.333704][ T9922] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
[  193.489307][ T9929] Page cache invalidation failure on direct I/O.  Possible data corruption due to collision with buffered I/O!
[  193.538899][ T9929] File: /root/syzkaller-testdir2104045925/syzkaller.PNMyM6/31/memory.events PID: 9929 Comm: syz-executor.1
[  193.539805][ T9922] 8021q: adding VLAN 0 to HW filter on device bond1
[  193.559692][ T9925] No such timeout policy "syz0"
[  193.964786][ T9922] bond1 (unregistering): Released all slaves
[  194.016463][ T9941] vlan3: entered promiscuous mode
[  194.021896][ T9941] bond0: entered promiscuous mode
[  194.026970][ T9941] bond_slave_0: entered promiscuous mode
[  194.048686][ T9941] bond_slave_1: entered promiscuous mode
[  194.067121][ T9941] bond0: left promiscuous mode
[  194.074550][ T9941] bond_slave_0: left promiscuous mode
[  194.088851][ T9941] bond_slave_1: left promiscuous mode
[  194.134474][ T9943] netlink: 'syz-executor.1': attribute type 4 has an invalid length.
[  194.223170][ T9948] bridge3: entered promiscuous mode
[  194.238290][ T9948] bridge3: entered allmulticast mode
[  194.664396][ T1247] ieee802154 phy0 wpan0: encryption failed: -22
[  194.670486][ T9977] Page cache invalidation failure on direct I/O.  Possible data corruption due to collision with buffered I/O!
[  194.670850][ T1247] ieee802154 phy1 wpan1: encryption failed: -22
[  194.725510][ T9977] File: /root/syzkaller-testdir136354477/syzkaller.3YdHsF/118/memory.events PID: 9977 Comm: syz-executor.3
[  194.982623][ T9987] netlink: 'syz-executor.1': attribute type 4 has an invalid length.
[  195.051683][ T9989] Bluetooth: hci3: invalid length 0, exp 2 for type 12
[  195.110480][ T9989] macvlan2: entered allmulticast mode
[  195.117565][ T9989] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode
[  195.137385][ T9989] mac80211_hwsim hwsim14 wlan0: entered allmulticast mode
[  195.166770][ T9989] team0: Port device macvlan2 added
[  195.201341][ T9996] vlan3: entered promiscuous mode
[  195.219380][ T9996] bond0: entered promiscuous mode
[  195.243511][ T9996] bond_slave_0: entered promiscuous mode
[  195.251451][ T9996] bond_slave_1: entered promiscuous mode
[  195.276424][ T9996] bond0: left promiscuous mode
[  195.307427][ T9996] bond_slave_0: left promiscuous mode
[  195.320194][ T9996] bond_slave_1: left promiscuous mode
[  195.948984][T10032] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  196.433655][T10039] Bluetooth: hci3: invalid length 0, exp 2 for type 12
[  196.559184][T10050] __nla_validate_parse: 13 callbacks suppressed
[  196.559202][T10050] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  196.579459][T10051] macvlan3: entered allmulticast mode
[  196.585252][T10051] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode
[  196.624543][T10051] mac80211_hwsim hwsim12 wlan0: entered allmulticast mode
[  196.661817][T10051] macvlan3: entered promiscuous mode
[  196.677431][T10055] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'.
[  196.687790][T10051] team0: Port device macvlan3 added
[  196.716540][T10058] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[  196.744329][T10055] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'.
[  196.771929][T10058] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[  196.801950][T10060] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[  196.842630][T10060] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[  196.883097][T10060] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[  196.918432][T10060] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[  196.951259][T10060] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[  197.576341][T10095] tipc: Started in network mode
[  197.604473][T10095] tipc: Node identity fffffffd, cluster identity 4711
[  197.634240][T10095] tipc: Node number set to 4294967293
[  197.956931][   T29] kauditd_printk_skb: 19 callbacks suppressed
[  197.956948][   T29] audit: type=1800 audit(1718170528.034:47): pid=10116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1953 res=0 errno=0
[  198.017888][   T29] audit: type=1804 audit(1718170528.094:48): pid=10116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir2104045925/syzkaller.PNMyM6/39/memory.events" dev="sda1" ino=1953 res=1 errno=0
[  198.098215][   T29] audit: type=1804 audit(1718170528.104:49): pid=10116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir2104045925/syzkaller.PNMyM6/39/memory.events" dev="sda1" ino=1953 res=1 errno=0
[  198.158898][   T29] audit: type=1804 audit(1718170528.104:50): pid=10116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir2104045925/syzkaller.PNMyM6/39/memory.events" dev="sda1" ino=1953 res=1 errno=0
[  198.202973][   T29] audit: type=1804 audit(1718170528.144:51): pid=10116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir2104045925/syzkaller.PNMyM6/39/memory.events" dev="sda1" ino=1953 res=1 errno=0
[  198.228815][   T29] audit: type=1804 audit(1718170528.214:52): pid=10125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir2104045925/syzkaller.PNMyM6/39/memory.events" dev="sda1" ino=1953 res=1 errno=0
[  198.258834][   T29] audit: type=1804 audit(1718170528.214:53): pid=10125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir2104045925/syzkaller.PNMyM6/39/memory.events" dev="sda1" ino=1953 res=1 errno=0
[  198.291044][T10128] bridge0: port 2(geneve1) entered blocking state
[  198.308114][T10128] bridge0: port 2(geneve1) entered disabled state
[  198.330210][T10128] geneve1: entered allmulticast mode
[  198.388972][T10128] geneve1: entered promiscuous mode
[  198.401498][T10128] bridge0: port 2(geneve1) entered blocking state
[  198.408081][T10128] bridge0: port 2(geneve1) entered forwarding state
[  198.484527][T10131] geneve1: left allmulticast mode
[  198.490931][T10134] lo speed is unknown, defaulting to 1000
[  198.497193][T10131] geneve1: left promiscuous mode
[  198.514463][T10131] bridge0: port 2(geneve1) entered disabled state
[  198.553405][T10137] bridge1: entered promiscuous mode
[  198.579178][T10137] bridge1: entered allmulticast mode
[  198.758212][T10142] vlan4: entered promiscuous mode
[  198.946014][   T29] audit: type=1800 audit(1718170529.024:54): pid=10147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1957 res=0 errno=0
[  199.018331][   T29] audit: type=1804 audit(1718170529.054:55): pid=10147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3432912045/syzkaller.Rh6BDq/396/memory.events" dev="sda1" ino=1957 res=1 errno=0
[  199.074489][   T29] audit: type=1804 audit(1718170529.134:56): pid=10150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3432912045/syzkaller.Rh6BDq/396/memory.events" dev="sda1" ino=1957 res=1 errno=0
[  199.456002][T10161] veth1_to_bond: entered allmulticast mode
[  199.479122][T10161] veth1_to_bond: left allmulticast mode
[  199.538443][T10165] netlink: 'syz-executor.1': attribute type 32 has an invalid length.
[  199.728524][T10174] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4095 (only 8 groups)
[  199.773955][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[  199.814628][T10130] netdevsim netdevsim4 €: renamed from netdevsim0 (while UP)
[  200.530508][    C1] vcan0: j1939_tp_rxtimer: 0xffff88801d2ebc00: rx timeout, send abort
[  200.550252][T10197] veth1_to_bond: entered allmulticast mode
[  200.572399][T10197] veth1_to_bond: left allmulticast mode
[  200.871286][T10210] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4095 (only 8 groups)
[  201.040001][    C1] vcan0: j1939_tp_rxtimer: 0xffff88801d2ebc00: abort rx timeout. Force session deactivation
[  201.393619][T10235] xt_TCPMSS: Only works on TCP SYN packets
[  201.404731][T10235] rdma_op ffff8880778909f0 conn xmit_rdma 0000000000000000
[  201.694562][T10254] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4095 (only 8 groups)
[  201.860417][T10258] __nla_validate_parse: 30 callbacks suppressed
[  201.860436][T10258] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'.
[  201.889001][T10258] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  202.053435][T10267] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'.
[  202.125196][T10265] lo speed is unknown, defaulting to 1000
[  202.280917][T10272] vxcan0: tx drop: invalid da for name 0x0000000000000002
[  202.410500][T10276] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'.
[  202.468564][T10276] netlink: 'syz-executor.3': attribute type 4 has an invalid length.
[  202.756499][T10288] netlink: 4100 bytes leftover after parsing attributes in process `syz-executor.0'.
[  203.152511][   T29] kauditd_printk_skb: 3 callbacks suppressed
[  203.152529][   T29] audit: type=1800 audit(1718170533.234:60): pid=10301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1962 res=0 errno=0
[  203.210922][   T29] audit: type=1804 audit(1718170533.274:61): pid=10301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1562660432/syzkaller.UwZj5d/424/memory.events" dev="sda1" ino=1962 res=1 errno=0
[  203.277161][   T29] audit: type=1804 audit(1718170533.344:62): pid=10305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1562660432/syzkaller.UwZj5d/424/memory.events" dev="sda1" ino=1962 res=1 errno=0
[  203.575756][T10317] bridge0: port 2(geneve1) entered blocking state
[  203.583024][T10317] bridge0: port 2(geneve1) entered disabled state
[  203.590447][T10317] geneve1: entered allmulticast mode
[  203.591922][T10317] geneve1: entered promiscuous mode
[  203.602317][T10317] bridge0: port 2(geneve1) entered blocking state
[  203.609669][T10317] bridge0: port 2(geneve1) entered forwarding state
[  203.676789][T10317] geneve1: left allmulticast mode
[  203.686303][T10317] geneve1: left promiscuous mode
[  203.692164][T10317] bridge0: port 2(geneve1) entered disabled state
[  203.882264][T10321] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  204.021794][T10321] lo speed is unknown, defaulting to 1000
[  204.217577][T10330] vlan4: entered promiscuous mode
[  204.243749][T10330] bridge0: entered promiscuous mode
[  204.255826][T10330] bridge0: port 3(vlan4) entered blocking state
[  204.278574][T10330] bridge0: port 3(vlan4) entered disabled state
[  204.288364][T10330] vlan4: entered allmulticast mode
[  204.301260][T10330] bridge0: entered allmulticast mode
[  204.342702][T10330] vlan4: left allmulticast mode
[  204.347592][T10330] bridge0: left allmulticast mode
[  204.410124][T10330] bridge0: left promiscuous mode
[  204.599646][T10340] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  204.984552][T10352] x_tables: duplicate underflow at hook 2
[  204.999916][T10352] x_tables: duplicate underflow at hook 2
[  205.028891][T10356] xt_policy: output policy not valid in PREROUTING and INPUT
[  205.105621][T10321] netdevsim netdevsim1 €: renamed from netdevsim0 (while UP)
[  205.116556][T10356] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[  205.172792][T10357] lo speed is unknown, defaulting to 1000
[  205.407173][T10370] infiniband syz0: set active
[  205.438406][T10370] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  205.485324][ T5159] lo speed is unknown, defaulting to 1000
[  205.517202][T10373] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'.
[  205.553622][T10373] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'.
[  206.064546][T10385] hsr0: entered promiscuous mode
[  206.217131][T10391] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  206.232245][T10397] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'.
[  206.580675][T10401] ip6erspan0: entered promiscuous mode
[  206.870854][T10415] ipip0: entered promiscuous mode
[  207.101849][T10428] __nla_validate_parse: 1 callbacks suppressed
[  207.101869][T10428] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'.
[  207.167258][T10437] netlink: 201400 bytes leftover after parsing attributes in process `syz-executor.3'.
[  207.211980][T10430] lo speed is unknown, defaulting to 1000
[  207.264090][T10442] netlink: 'syz-executor.1': attribute type 4 has an invalid length.
[  207.286958][T10444] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  208.166158][T10478] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  208.227245][T10478] batadv0: entered promiscuous mode
[  208.245274][T10478] macvtap1: entered promiscuous mode
[  208.261990][T10478] macvtap1: entered allmulticast mode
[  208.267866][T10478] batadv0: entered allmulticast mode
[  208.275812][T10478] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  208.286751][T10478] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  208.439598][T10485] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'.
[  208.774526][T10500] ipip0: entered promiscuous mode
[  208.823736][T10502] team0: entered promiscuous mode
[  208.848979][T10502] team_slave_0: entered promiscuous mode
[  208.868823][T10502] team_slave_1: entered promiscuous mode
[  208.888504][T10502] bond0: entered promiscuous mode
[  208.908054][T10502] bond_slave_0: entered promiscuous mode
[  208.943091][T10502] bond_slave_1: entered promiscuous mode
[  208.967247][T10502] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  208.976543][T10502] Cannot create hsr debugfs directory
[  209.184482][T10516] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  209.283350][T10524] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  209.338637][T10516] batadv0: entered promiscuous mode
[  209.364576][T10516] macvtap1: entered promiscuous mode
[  209.384827][T10516] macvtap1: entered allmulticast mode
[  209.392635][T10516] batadv0: entered allmulticast mode
[  209.400685][T10516] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  209.409769][T10521] netlink: 4100 bytes leftover after parsing attributes in process `syz-executor.1'.
[  209.444467][T10517] ------------[ cut here ]------------
[  209.450696][T10517] refcount_t: decrement hit 0; leaking memory.
[  209.501900][T10517] WARNING: CPU: 1 PID: 10517 at lib/refcount.c:31 refcount_warn_saturate+0xfa/0x1d0
[  209.511640][T10517] Modules linked in:
[  209.515577][T10517] CPU: 1 PID: 10517 Comm: syz-executor.2 Not tainted 6.10.0-rc2-syzkaller-00724-g45403b12c29c #0
[  209.526765][T10517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  209.537372][T10517] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0
2024/06/12 05:35:39 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF
[  209.544651][T10517] Code: b2 00 00 00 e8 e7 ac e6 fc 5b 5d c3 cc cc cc cc e8 db ac e6 fc c6 05 4e 66 e8 0a 01 90 48 c7 c7 20 a5 1f 8c e8 47 db a8 fc 90 <0f> 0b 90 90 eb d9 e8 bb ac e6 fc c6 05 2b 66 e8 0a 01 90 48 c7 c7
[  209.564640][T10517] RSP: 0018:ffffc90009687b68 EFLAGS: 00010246
[  209.570826][T10517] RAX: 6d07a56d679b8f00 RBX: ffff88802c4f0664 RCX: ffff888020bc0000
[  209.578921][T10517] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  209.586908][T10517] RBP: 0000000000000004 R08: ffffffff815857a2 R09: fffffbfff1c39994
[  209.594947][T10517] R10: dffffc0000000000 R11: fffffbfff1c39994 R12: ffff88802c4f0620
[  209.603015][T10517] R13: 0000000000000000 R14: ffff88802c4f0664 R15: dffffc0000000000
[  209.611455][T10517] FS:  000055557f2d9480(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000
[  209.620698][T10517] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  209.627294][T10517] CR2: 00007f8f7dce56c6 CR3: 000000002b6cc000 CR4: 00000000003506f0
[  209.635624][T10517] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  209.643961][T10517] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  209.652073][T10517] Call Trace:
[  209.655370][T10517]  <TASK>
[  209.658406][T10517]  ? __warn+0x163/0x4e0
[  209.662590][T10517]  ? refcount_warn_saturate+0xfa/0x1d0
[  209.668130][T10517]  ? report_bug+0x2b3/0x500
[  209.672645][T10517]  ? refcount_warn_saturate+0xfa/0x1d0
[  209.678178][T10517]  ? handle_bug+0x3e/0x70
[  209.682526][T10517]  ? exc_invalid_op+0x1a/0x50
[  209.687224][T10517]  ? asm_exc_invalid_op+0x1a/0x20
[  209.692570][T10517]  ? __warn_printk+0x292/0x360
[  209.697362][T10517]  ? refcount_warn_saturate+0xfa/0x1d0
[  209.703267][T10517]  ? refcount_warn_saturate+0xf9/0x1d0
[  209.709134][T10517]  ref_tracker_free+0x6af/0x7e0
[  209.714014][T10517]  ? __pfx_ref_tracker_free+0x10/0x10
[  209.719731][T10517]  ax25_release+0x368/0x950
[  209.724269][T10517]  sock_close+0xbc/0x240
[  209.728567][T10517]  ? __pfx_sock_close+0x10/0x10
[  209.733745][T10517]  __fput+0x406/0x8b0
[  209.737763][T10517]  task_work_run+0x24f/0x310
[  209.742661][T10517]  ? __pfx_task_work_run+0x10/0x10
[  209.747806][T10517]  ? syscall_exit_to_user_mode+0xa3/0x370
[  209.753647][T10517]  syscall_exit_to_user_mode+0x168/0x370
[  209.759369][T10517]  do_syscall_64+0x100/0x230
[  209.763971][T10517]  ? clear_bhb_loop+0x35/0x90
[  209.768713][T10517]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  209.774630][T10517] RIP: 0033:0x7f21ab67cea9
[  209.779142][T10517] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  209.798843][T10517] RSP: 002b:00007ffc76c1ab78 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  209.807275][T10517] RAX: 0000000000000000 RBX: 00007f21ab7b5980 RCX: 00007f21ab67cea9
[  209.815306][T10517] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  209.823383][T10517] RBP: 00007f21ab7b5980 R08: 000000008136572d R09: 0000001e00000000
[  209.831415][T10517] R10: 0000000080000000 R11: 0000000000000246 R12: 0000000000033426
[  209.839803][T10517] R13: 00007f21ab7b412c R14: 0000000000000032 R15: 00007f21ab7b5980
[  209.847827][T10517]  </TASK>
[  209.851229][T10517] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  209.858515][T10517] CPU: 1 PID: 10517 Comm: syz-executor.2 Not tainted 6.10.0-rc2-syzkaller-00724-g45403b12c29c #0
[  209.869017][T10517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  209.879077][T10517] Call Trace:
[  209.882362][T10517]  <TASK>
[  209.885294][T10517]  dump_stack_lvl+0x241/0x360
[  209.889991][T10517]  ? __pfx_dump_stack_lvl+0x10/0x10
[  209.895202][T10517]  ? __pfx__printk+0x10/0x10
[  209.899811][T10517]  ? vscnprintf+0x5d/0x90
[  209.904158][T10517]  panic+0x349/0x860
[  209.908066][T10517]  ? __warn+0x172/0x4e0
[  209.912237][T10517]  ? __pfx_panic+0x10/0x10
[  209.916688][T10517]  __warn+0x346/0x4e0
[  209.920696][T10517]  ? refcount_warn_saturate+0xfa/0x1d0
[  209.926180][T10517]  report_bug+0x2b3/0x500
[  209.930531][T10517]  ? refcount_warn_saturate+0xfa/0x1d0
[  209.936011][T10517]  handle_bug+0x3e/0x70
[  209.940185][T10517]  exc_invalid_op+0x1a/0x50
[  209.944705][T10517]  asm_exc_invalid_op+0x1a/0x20
[  209.949571][T10517] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0
[  209.955658][T10517] Code: b2 00 00 00 e8 e7 ac e6 fc 5b 5d c3 cc cc cc cc e8 db ac e6 fc c6 05 4e 66 e8 0a 01 90 48 c7 c7 20 a5 1f 8c e8 47 db a8 fc 90 <0f> 0b 90 90 eb d9 e8 bb ac e6 fc c6 05 2b 66 e8 0a 01 90 48 c7 c7
[  209.975272][T10517] RSP: 0018:ffffc90009687b68 EFLAGS: 00010246
[  209.981332][T10517] RAX: 6d07a56d679b8f00 RBX: ffff88802c4f0664 RCX: ffff888020bc0000
[  209.989290][T10517] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  209.997246][T10517] RBP: 0000000000000004 R08: ffffffff815857a2 R09: fffffbfff1c39994
[  210.005202][T10517] R10: dffffc0000000000 R11: fffffbfff1c39994 R12: ffff88802c4f0620
[  210.013167][T10517] R13: 0000000000000000 R14: ffff88802c4f0664 R15: dffffc0000000000
[  210.021139][T10517]  ? __warn_printk+0x292/0x360
[  210.025941][T10517]  ? refcount_warn_saturate+0xf9/0x1d0
[  210.031400][T10517]  ref_tracker_free+0x6af/0x7e0
[  210.036244][T10517]  ? __pfx_ref_tracker_free+0x10/0x10
[  210.041621][T10517]  ax25_release+0x368/0x950
[  210.046121][T10517]  sock_close+0xbc/0x240
[  210.050357][T10517]  ? __pfx_sock_close+0x10/0x10
[  210.055198][T10517]  __fput+0x406/0x8b0
[  210.059179][T10517]  task_work_run+0x24f/0x310
[  210.063770][T10517]  ? __pfx_task_work_run+0x10/0x10
[  210.068873][T10517]  ? syscall_exit_to_user_mode+0xa3/0x370
[  210.074587][T10517]  syscall_exit_to_user_mode+0x168/0x370
[  210.080211][T10517]  do_syscall_64+0x100/0x230
[  210.084793][T10517]  ? clear_bhb_loop+0x35/0x90
[  210.089465][T10517]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  210.095348][T10517] RIP: 0033:0x7f21ab67cea9
[  210.099753][T10517] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  210.119344][T10517] RSP: 002b:00007ffc76c1ab78 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  210.127747][T10517] RAX: 0000000000000000 RBX: 00007f21ab7b5980 RCX: 00007f21ab67cea9
[  210.135705][T10517] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  210.143662][T10517] RBP: 00007f21ab7b5980 R08: 000000008136572d R09: 0000001e00000000
[  210.151623][T10517] R10: 0000000080000000 R11: 0000000000000246 R12: 0000000000033426
[  210.159582][T10517] R13: 00007f21ab7b412c R14: 0000000000000032 R15: 00007f21ab7b5980
[  210.167555][T10517]  </TASK>
[  210.170778][T10517] Kernel Offset: disabled
[  210.175146][T10517] Rebooting in 86400 seconds..