last executing test programs:

4.458821257s ago: executing program 1:
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
unshare(0x60040000)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x2, 0x0, 0x101, 0x8}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_emit_ethernet(0x36, &(0x7f0000000e00)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2b, 0x0, @private=0xa010101, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
unshare(0x20000400)
socket$can_raw(0x1d, 0x3, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x0, 0x7fe2, 0x1}, 0x48)
sendmmsg$inet6(r0, 0x0, 0x5a, 0x8800)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0)

4.140606893s ago: executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="2598ccde00000000b70800004e9d00007b8af8ff00000000bfa20000fbff000007020000f8fffffdb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_buf(r1, 0x29, 0x3a, 0x0, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x81b, 0x8, 0x40}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r3}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r3, &(0x7f0000000580), 0x0}, 0x20)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x13, r4, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@snprintf={{}, {0x3, 0x3, 0x6, 0x2, 0xa, 0xfff8, 0x41}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000300)='GPL\x00', 0x8, 0xff7, &(0x7f0000001e00)=""/4087}, 0x90)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6}]}, 0x10)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r0, 0x84, 0x10, &(0x7f0000001f00)=""/4062, &(0x7f00000004c0)=0x744)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
pipe(&(0x7f0000000080)={<r7=>0xffffffffffffffff})
ioctl$int_in(r7, 0x5452, &(0x7f0000000040)=0x8000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000006c0)=@gettaction={0x14}, 0x14}}, 0x0)
r8 = socket(0x10, 0x803, 0x0)
sendto(r8, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r8, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x4, &(0x7f0000003700)={0x77359400})
close(r7)

3.218063383s ago: executing program 1:
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000400)='jbd2_handle_stats\x00', r1}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0)

3.1609311s ago: executing program 4:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000200)=0x14)

3.064449632s ago: executing program 1:
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000e480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f000000e4c0)={{0x14}, [@NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x201, 0x0, 0x0, {0x3}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x48}}, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22}, 0x48)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)={@map=r2, r1, 0x5}, 0x10)
r3 = socket(0x1, 0x3, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000680), &(0x7f0000000080)=@udp6=r3}, 0x20)
bind$unix(r3, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000380))
recvfrom(r3, &(0x7f0000000240)=""/13, 0xd, 0x0, 0x0, 0x0)
r4 = socket(0x1, 0x3, 0x0)
sendmmsg$unix(r4, &(0x7f0000000c80)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0)
r5 = socket$inet6(0xa, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}}, 0x0, @in=@multicast1}}, 0xe8)
setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@private0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, 0x0, @in6=@loopback}}, 0xe8)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_int(r7, 0x0, 0x2, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x27)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x2b8, 0x180, 0x0, 0x148, 0x0, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x84}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318)
close(r5)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000640)={<r9=>r8, 0x9, 0x100000001, 0x5})
bind$unix(r9, &(0x7f0000000680)=@file={0x0, './file0\x00'}, 0x6e)
socket$packet(0x11, 0x2, 0x300)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r10, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x170, r11, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xfffffffffffffe9e}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x170}}, 0x4040)

3.041694934s ago: executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='pids.current\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000080), 0x4)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_T4(r1, 0x103, 0x4, 0x0, &(0x7f00000000c0))
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}]}, 0x20}}, 0x0)
r2 = socket$kcm(0x2, 0x3, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2ccf3766}, 0x48)
ioctl$SIOCSIFHWADDR(r2, 0x8b0b, &(0x7f0000000040)={'virt_wifi0\x00', @local})
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
unshare(0x62040200)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001100)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000001080), &(0x7f00000010c0)='%pK    \x00'}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000080a00000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c80)={0x5, 0xb, &(0x7f0000000540)=@framed={{}, [@printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x19}}]}, &(0x7f0000000380)='syzkaller\x00', 0x3, 0xb2, &(0x7f0000000ac0)=""/178}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e40)={&(0x7f0000000600)='ext4_free_blocks\x00', r5}, 0x10)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0)
write$cgroup_int(r6, &(0x7f0000000100), 0x1001)
ioctl$SIOCSIFHWADDR(r6, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r7 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r7, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r7, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x4}, 0x0)

2.559878782s ago: executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x54, 0x0, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x14, 0x6, "8a2679a473b71811a8758042209996f8"}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWTABLE={0x16c, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x60, 0x6, "2cb7a7365f3e6b5df2674a0b51428a86325e74b2438ce12a1328688974c3473ef2669e626f601de954adf3a532a0948e922b31cdf69f9f123f2e17355437cc5281fbb29e5ab88671847b27f4d5c16619fcfea74f39b81a68cae100fb"}, @NFTA_TABLE_USERDATA={0xec, 0x6, "ab03295e8889db8233ae3ab6162f41b965700f05186c667f520a1083b7e27dd355148c9527573cecab5643dbb83ba372788b4d2c3b1c81da8dd4102950b68b8945d361f6c7010474fa5704aef0229bf759c1e1d874c5a7ee1af700388c69e2ba76377eefcbd3a4638c1337b1fea217b3b2ed1fc4181e04b0102abb4c15c440833cade7a6e86500ef96439280e43bb512eb86cf9d634ce1b7c2b1e70602a0a14ab1e2e9834b7ad08232f162289eb505f16fb7a48cb40e1d8a7c0d924ba59c08b5446872ebb9929648021157ab9d9f5e0ad80f253c82c878f95b636d16ee3173810aaa502a4903cdb8"}]}, @NFT_MSG_DELCHAIN={0x24, 0x5, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x144, 0x18, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x58, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'netpci0\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0xa4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'geneve0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'batadv0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x301, 0x0, 0x0, {0xe}}], {0x14}}, 0x384}, 0x1, 0x0, 0x0, 0x800}, 0x40)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='scalable\x00', 0x9)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10)
sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001080)={{0x14}, [@NFT_MSG_NEWTABLE={0xa0, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x7d, 0x6, "5d4fcbdaef73baf66efc3f151c2101bba3fde400b69e5a301caac130503ef9a3a5d149a55e675f7b70701bf57d98fa10d98415e926e04ad672afbe47ff685eb1e8e62f16763943b5e3d23f85f8ff62e519d0ed6b75384d6d564d190cff45c2254206345bc3ea47d36509286b711d391142a8250a25809c7a17"}]}, @NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x301, 0x0, 0x0, {0xc, 0x0, 0x8}}, @NFT_MSG_NEWSETELEM={0x47c, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x450, 0x3, 0x0, 0x1, [{0x18c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x80000000}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY={0x174, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0xfd6f, 0x3, 0x1, 0x0, 0xffffffe0}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xf9}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x2f, 0x1, "e6e5bf0e8d34678980788bf029827bbc5c86ceb33f429ccd4485b1d8568327a253bdd36b00d44e084be591"}, @NFTA_DATA_VALUE={0xfc, 0x1, "634424e9a551165d68c84f568c85843a1542d9d8ee62979eabd59ee1d3ad64f574bce57b2bf150023bed06edb2b22a398ed37b47d946b1b35246797eae39228d2b3fe47672c2826f78bc970cbdcc439a88504917e911ce3c42798a9aa50967ab36f1b79408e69bc382f8ec94a2d4f50dcfa56909199aebf459cc5136a3e9b1f9331a681044aa1d02b10d4a9afe915f3e16460994dd932eebef18ac3eac1219ec2d10c0317e6402cc9bbc55df019e964ea7fed0e7cbc56d6c3e8c5c6b7233b5d63bff4539cfecbc69ef3e8ba7e569089b499bfe4c1a12797660d1b795c282f09a26ac2249f4b62b8abaa326e382cc8ba20ff9758aab7fb6bf"}]}]}, {0x2c0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x194, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x96, 0x1, "de1c51b56ae2f9e4dcba3bcc7b729b2cff7fb415855e8c89f35db638259d13adaf06d625603086b5858e8a769336cd316062a3ed2e6cfc5aa155c2cdd9db6a35d49705e25f98a5e2c4b330e47fed75fa2f150d19cc52fe3ee0a317984d462842326a0957ba669f6d4a0c9b338204c04b161ab1639f567eb1e0a1e668398089374e9b99f6925ace2ed70cbd21b45a65b5834d"}, @NFTA_DATA_VALUE={0xf8, 0x1, "6d81f8d45777d201436c615244881e36c8fb9c0d814ba56ce364b4008b486deea772748160fe8f3ee6cdaa72abf9e0e21413c72a334e6176249a3eaaf6a68bbd823580e7355f9dcefd857fb9281436b5656b0039279af8b4e8b083d11cd1b2e491d14611f26b68f18bb373cc04deac3ee2d2d89f0bb36603bc095a87e52f29173860a0510215398592c501917aaf8a726eb26c446c8d2793253bf6ffa8dcede23b5442c9b92f0412b7123bfa70560e4f1874c1c3a227e3b51a6577f79462d39d4608d71a89d004d262f86463a651d63953227df086b0ddc6ed0708ea2a67ca94e207f2165e7354c38704209f155180b73fb31c2e"}]}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_DATA={0xf4, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x98, 0x1, "abd9152f7bd76edd6c642832e4d9a98806cad3c83e14c5c88e88bd1532bd653a2e22e3752b31b78b9dc54fa50662d3ba67008c8fa12ddcb8d9d42f1810df3f3893827ae117126ff76fd0f3fb95026d4e37c560d45fec6c148eb0e6637d9654fca024991ad5b53823b8b14dc961da8174678ff135cacc7438e5c450d5409533a5e0e866a2b2980727b9c1d26c1be2d98d47b05781"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x5}]}]}, @NFTA_SET_ELEM_USERDATA={0x2e, 0x6, 0x1, 0x0, "f24f0b11ab210d0280f609acb406d48e7874b04aad410e8afb702108710bea3c59b1057a21bc14945619"}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x564}}, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfecc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2)
sendmsg$NL80211_CMD_LEAVE_MESH(r4, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYRESOCT=r5], 0x14}, 0x1, 0x0, 0x0, 0x4008010}, 0x8004)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r8, @ANYBLOB="14005e8008001e02000000000008000100000000"], 0x30}}, 0x0)
syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), 0xffffffffffffffff)
bind$llc(r4, &(0x7f0000000a00)={0x1a, 0x303, 0x9, 0x1, 0x81, 0x5, @multicast}, 0x10)
ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0)
ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000003700)={0x0, 0x0, &(0x7f00000036c0)={&(0x7f0000000740)={0x44, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0xfc5b}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}]}, 0x44}}, 0x0)

2.458024063s ago: executing program 0:
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
recvmsg$kcm(r1, &(0x7f0000006480)={0x0, 0x0, &(0x7f0000006300)=[{&(0x7f0000005080)=""/15, 0xf}, {&(0x7f00000050c0)=""/231, 0xe7}, {&(0x7f0000005200)=""/35, 0x23}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000006280)=""/108, 0x6c}], 0x5}, 0x0)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029ea69801d76ab0a272a2a788bab6c95f79725074", 0x1c}], 0x1}, 0x0)
recvmsg$kcm(r1, &(0x7f0000002240)={0x0, 0x0, 0x0}, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x6, 0x0, 0xd}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f00000003c0)='syzkaller\x00', 0x2, 0x2292f76207602815, &(0x7f0000000240)=""/146, 0x0, 0x8}, 0x80)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1}, &(0x7f0000000000), &(0x7f0000000040)=r2}, 0x20)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001180)={r0, 0x58, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x12, 0x80000000, 0x9, 0x7, 0x2080, 0xffffffffffffffff, 0x0, '\x00', r3, 0xffffffffffffffff, 0x4, 0x5, 0x2}, 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0)
recvmsg$unix(r4, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x2a, &(0x7f0000000100)=r6, 0x4)
sendmsg$unix(r5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[@rights={{0x14, 0x1, 0x1, [r6]}}], 0x18}, 0x0)
r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x4, 0x0, r6, 0x0, '\x00', 0x0, r7, 0x1, 0x2, 0x0, 0x6}, 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x2, '\x00', r3, r6, 0x3, 0x1, 0x2}, 0x48)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x19, 0x4, 0x4, 0x20001, 0x0, 0x1}, 0x1d)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r8, 0x0, 0x0}, 0x20)

2.15473841s ago: executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000), 0x4)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e097566f5bec64466cf0925782dd", 0x0, 0x8c9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_emit_ethernet(0x6e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa93aaaaaaaa86dd6000104000380600fe6a0000000000000000000000000001fe80000000000000000000000000c4b3c51b837e8b177951a15619fc9da2cbcb1f793d233755b008e7a16b9c728a6133c78bf8acbb36afd7c1730762adf62c8bd28aeaab5de63b37b08b923db44deb84ea165204246ca76273f0f6ddee4ed9ccab27be8c0caa5d7cc095bc5e1b5fd50b9087181cbd5150131d9f15b3bf5fb0cf529c5ac93aa2216ceaf96825c49139b9bc41b1e7bc8059082b01a38bb5b0e123bfe76765a200683dc0262bfd1cd4c3c13ec74bc9aaaf468be665692519c8", @ANYRES8, @ANYRES8, @ANYRES64=r1], 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000500)=ANY=[@ANYRES8=0x0, @ANYRESHEX=r0, @ANYRESHEX=r2], 0x0)
setsockopt$inet6_int(r3, 0x29, 0x4b, &(0x7f0000000040)=0x8, 0x4)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@private1, 0xfff, 0x1, 0x4, 0x5, 0x6, 0xffff}, 0x20)
r4 = epoll_create1(0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000240))
epoll_pwait(r4, &(0x7f0000000080)=[{}], 0x1, 0xffff, 0x0, 0x0)
r6 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000040))
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000280)={0x60000004})
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x85c, @private2}, 0x1c)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_LIST(r7, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="066ec5001e86a7e686e44827b8f883e928758719255fb3d6fcd5a475b9dd9fc2cce4e3dc6ed8e4b04f3b3fe550c35dd126a4c99459247274d6a44d58ecf1b52a848bf92b8a94aeb723965570a7c7ceaa959b16f176926e7e5d22b37af8bcea4a146e985db4a0d9aa53ac06104e6a89157115ca113b783ebf04e9a4ab2eb899878ad2685dd232b0399d7201a26b0627fea5b39ecac7c91600138dbaeb767a2fa7f23c37c9222a69e6dd82ce5184181523802b194ce4c7da1da3a3b587c11c545bfaad66de3c1875b22028aece0c50507ab7", @ANYRES16=r8, @ANYBLOB="080029bd7000fbdbdf250200000014000600776c616e3100"/34], 0x28}, 0x1, 0x0, 0x0, 0x68086}, 0x24040005)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r9, &(0x7f0000000040), 0x208e24b)
r10 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r10, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10)
recvmmsg(0xffffffffffffffff, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}, 0x10}], 0x1, 0x0, 0x0)
sendfile(r10, r9, 0x0, 0xffefffff)

1.584273842s ago: executing program 1:
socket$vsock_stream(0x28, 0x1, 0x0)
r0 = socket$xdp(0x2c, 0x3, 0x0)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0x1, 0x0, 0x0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x5, &(0x7f00000033c0)={&(0x7f0000000000)=""/5}, 0x20)
sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)

1.49097205s ago: executing program 4:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000200)=0x14)

1.302589992s ago: executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x1008, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8)

1.081460757s ago: executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x300, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001500010300000000000000000a"], 0x14}}, 0x0)

1.071187326s ago: executing program 4:
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
recvmsg$kcm(r1, &(0x7f0000006480)={0x0, 0x0, &(0x7f0000006300)=[{&(0x7f0000005080)=""/15, 0xf}, {&(0x7f00000050c0)=""/231, 0xe7}, {&(0x7f0000005200)=""/35, 0x23}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000006280)=""/108, 0x6c}], 0x5}, 0x0)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029ea69801d76ab0a272a2a788bab6c95f79725074", 0x1c}], 0x1}, 0x0)
recvmsg$kcm(r1, &(0x7f0000002240)={0x0, 0x0, 0x0}, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x6, 0x0, 0xd}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f00000003c0)='syzkaller\x00', 0x2, 0x2292f76207602815, &(0x7f0000000240)=""/146, 0x0, 0x8}, 0x80)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1}, &(0x7f0000000000), &(0x7f0000000040)=r2}, 0x20)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001180)={r0, 0x58, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x12, 0x80000000, 0x9, 0x7, 0x2080, 0xffffffffffffffff, 0x0, '\x00', r3, 0xffffffffffffffff, 0x4, 0x5, 0x2}, 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0)
recvmsg$unix(r4, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x2a, &(0x7f0000000100)=r6, 0x4)
sendmsg$unix(r5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[@rights={{0x14, 0x1, 0x1, [r6]}}], 0x18}, 0x0)
r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x4, 0x0, r6, 0x0, '\x00', 0x0, r7, 0x1, 0x2, 0x0, 0x6}, 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x2, '\x00', r3, r6, 0x3, 0x1, 0x2}, 0x48)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x19, 0x4, 0x4, 0x20001, 0x0, 0x1}, 0x1d)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r8, 0x0, 0x0}, 0x20)

1.047869666s ago: executing program 0:
r0 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x8000, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, 0x0, 0x0)
sendmsg$rds(r1, 0x0, 0x0)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r2, 0x0, 0xc8, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x4)
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040), 0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000080), 0x4)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03052a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37040c188005ac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0)
syz_emit_ethernet(0x257, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00ed00", 0x221, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78c000005dc8080a2030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "00000500000000de25000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x9, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3be"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d180610027628cf9ef083611c9f68e2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0)

947.535905ms ago: executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000000)=0x1, 0x4)
getsockopt$inet6_tcp_int(r0, 0x6, 0x9, 0x0, &(0x7f0000000080))
syz_init_net_socket$rose(0xb, 0x5, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x5c, r2, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}, 0x1, 0x620b}, 0x0)

859.325489ms ago: executing program 2:
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = accept(0xffffffffffffffff, &(0x7f00000017c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000700)=0x80)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001880)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000018c0)=0x14)
sendmsg$nl_route(r1, &(0x7f00000019c0)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001980)={&(0x7f0000001900)=@newneigh={0x48, 0x1c, 0x800, 0x70bd2a, 0x25dfdbfe, {0x2, 0x0, 0x0, r2, 0x20, 0x25, 0x9}, [@NDA_DST_IPV4={0x8, 0x1, @remote}, @NDA_DST_IPV4={0x8, 0x1, @broadcast}, @NDA_PROBES={0x8, 0x4, 0x1a1}, @NDA_CACHEINFO={0x14, 0x3, {0x0, 0xc6, 0xfffffffd, 0x9}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4c000}, 0x804)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4e0, 0xd0, 0x3d0, 0x3d0, 0x300, 0x3d0, 0xd0, 0x608, 0x608, 0x608, 0x608, 0x6, 0x0, {[{{@ipv6={@private1, @mcast1, [], [], 'veth0_to_bridge\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'netpci0\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, <r4=>0xffffffffffffffff}, 0x4)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000007c0)="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", 0x1000}, {&(0x7f0000000080)="50f4ae81a33f2ff444276f7ddd852e83c8d0d00e5247d86480f01267eef623cea295ca853fbd11fef20be42f29372bba1ce8223f762f8c48561178cf206b232c43bb6b5def210934b0d9c8183386be0fd162befcd4047c7fef107c5d1fd440eee0bf7cc401a4b101f4784c3fef93dfe4b273658ae90c8157f81e", 0x7a}, {&(0x7f0000000000)="1b11e7e22f95a138bbb1fbbc", 0xc}, {&(0x7f0000000100)="3d1b0363b3924223ab9affd9eea75cfccd39d5aad10e3c395d8a2a6afa2a20e64e22331607d9611f26f3e52906bfe69c9a87c6e8b73c38ce7d171fec50516b42f5e0b34662c71a96f8512aa82e2ad8a4a25d4a9cf00006d0e5e80f6d2a78d4b4116bcdfb6b97a5de5581acf0acb43cb3bffb1d73f398c1820efcfa73c30ff0c0f18b88271134c3c5ab60a81959715fdbaaa70b91148487ccc87d33a1d7b8efba0217ce460be2d0dc3849e715f153f37eab958fcb22", 0xb5}], 0x4}, 0x50000)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x3, [@int={0x2, 0x0, 0x0, 0x1, 0x0, 0x67, 0x0, 0x1c, 0x1}, @volatile={0xe}]}, {0x0, [0x0]}}, &(0x7f0000000440)=""/248, 0x37, 0xf8, 0x1, 0x502}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r6=>0x0, 0xab, &(0x7f0000000680)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000006c0), 0x0, 0x0, 0x67, 0x8, 0x8, &(0x7f0000000740)}}, 0x10)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000008c0)={0x1, <r8=>0xffffffffffffffff}, 0x4)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000980)={{0xffffffffffffffff, <r9=>0xffffffffffffffff}, &(0x7f0000000900), &(0x7f0000000940)='%pI4   \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x13, 0x38, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1ff}, {}, {}, [@map_val={0x18, 0xc, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7f}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @jmp={0x5, 0x0, 0x3, 0x4, 0x9, 0xfffffffffffffff8, 0x10}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc8ce}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0xffffffffffffffff, 0x40f00, 0x68, '\x00', 0x0, 0x23, r5, 0x8, &(0x7f0000000580)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, r6, 0xffffffffffffffff, 0x0, &(0x7f00000009c0)=[r8, r8, r9], &(0x7f0000000a00), 0x10, 0xf0}, 0x90)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400))
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x10, &(0x7f0000000740)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {0x6}, {}, {0x5}, {0x7, 0x0, 0x0, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x5b}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

845.42226ms ago: executing program 3:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, 0x0, 0x0, 0x7}, 0x90)
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r0, &(0x7f0000001440), 0x0, 0x200000d8)
socket$tipc(0x1e, 0x0, 0x0)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f0000001a40), 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local}, 0x1c)
listen(0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x66, 0x0, 0x0)
r1 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x20)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
openat$cgroup_ro(r3, 0x0, 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20)

737.495931ms ago: executing program 4:
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r1, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10)
r2 = socket$igmp(0x2, 0x3, 0x2)
recvmmsg(r2, &(0x7f0000005280), 0x18, 0x40012000, 0x0)
sendmsg$sock(r1, &(0x7f00000034c0)={&(0x7f0000005440)=@caif, 0x80, &(0x7f0000003440), 0x0, &(0x7f0000005580)=[@mark={{0x14, 0x1, 0x24, 0x1800}}, @txtime={{0x18, 0x1, 0x3d, 0xfff}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x7ff}}, @timestamping={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @mark={{0x14}}], 0xc0}, 0x8001)
sendfile(r1, r0, 0x0, 0xffefffff)
ioctl$SIOCSIFHWADDR(r0, 0x4030582b, &(0x7f0000003400)={'pim6reg1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001a00)={0x0, ""/256, <r3=>0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, <r4=>0x0})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001cc0)={0x0, r3, "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", "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"})
syz_emit_ethernet(0x5e, &(0x7f0000000080)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private0, @mcast1}}}}}}, 0x0)
mmap(&(0x7f00001e7000/0x3000)=nil, 0x3000, 0x0, 0x28011, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x19, 0x2f, &(0x7f0000000d00)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x9, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x2, 0xe, 0x2, 0x80000000}, 0x10, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000780)=[{0x1, 0x5, 0xf, 0x1}, {0x0, 0x1, 0xd, 0x1}, {0x0, 0x1, 0xb, 0xd}], 0x10, 0x808001}, 0x90)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
sendto$inet(r5, &(0x7f0000000180)="ea2413146b259d52cb21a047f96cc6f2978dae7614c0a1bfdf50e0aa8df93c406979e11edd993b7cfbe4595e35e51c7478", 0x31, 0x44890, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002840)=ANY=[@ANYRES32=r4], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xa, 0x0, 0xffffffffffffffff, 0x5b, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90)

723.636302ms ago: executing program 0:
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @remote, 'team_slave_1\x00'}}, 0x1e)
socket$pppoe(0x18, 0x1, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r3=>0x0})
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000500)=0x100000001, 0x4)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000440)=@gcm_128={{0x304}, "e453f079df21d540", "1ec2d524d78682576ec2d9e13dad1018", "993161e3", "be0692db0b429ee8"}, 0x28)
write$binfmt_script(r5, &(0x7f00000009c0)={'#! ', '', [{0x20, 'vcan0\x00'}, {0x20, '\xaa\xaa\xaa\xaa\xaa'}, {0x20, 'vcan0\x00'}], 0xa, "71669900e6d964743f1b915d4604701fb06cdf078b910545d0fdc11f2a72ce8537ebf9e45431e6a481cf6f4ba34b56a4ca0c5adbff99483f854a498970fa74e0e4d07d"}, 0x5b)
sendmsg$AUDIT_GET(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x55, 0x3e8, 0x100, 0x70bd2b, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000091}, 0x404c805)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfccf}, &(0x7f0000000240)=0x40)
writev(r5, &(0x7f00000030c0)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000180)=0x40)
writev(r5, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0x1}], 0x1)
close(r5)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r7=>0x0})
bind$can_j1939(r4, &(0x7f0000000240)={0x1d, r7}, 0x18)
sendmsg$can_j1939(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, 0x0, 0x3}, 0x18, &(0x7f00000001c0)={&(0x7f00000013c0)='Z', 0x1c9dc38a}, 0x2, 0x0, 0x0, 0x4014880}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="3400000011000500000000000000000007000000", @ANYRES32=r3, @ANYBLOB="000000000000000014001a80100004"], 0x34}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000085a5fcc1e4fdcdf731b226ba0c3aef5710000003000000180000000000000000000000000000009500000000000000cdaa0000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xec, &(0x7f00000004c0)=""/236}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b7050073cfa5d3d47c52da73e32027b83101010000000000ce0026f1e3f50ca2e261108a000000000000000000010000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000700)=""/200, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xcf, 0x0, 0xffffffffffffffff, 0x3c}, 0x2a)
r8 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3)
sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001600010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="080008000000114a"], 0x20}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adffa87d2255f674412d020000000000005ab527ee3697f1ec4436dd1164b9b3f427f6ba6b34f98125f30e6926996a3cfee33025a30b273683626e00dc254d570dca6b78ad833488cfe4109eaf009edd3e69613d3cd6aaa300006eee8501000000520a0000151d010000000100bf00000000cc587424363dc6ad7f3bbd424c6e6cafbe9309aba218a52001a3cd000041f0db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de4758c1096a1dc52f29e470a000517ebc406e89dcbb7677e6528b0856e31ed9474ac24cf609068f645ce971fc0480737a55ebb0bd701f7ff21e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d933bed759ff232cebc68b91af50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56d0f9a3b8e055cc4eed3f0a1aab71587a21c8f1b3369ebfcba105a6ccdd01b0f04edb256c604f068773f6ff000000000000006ffbfe5ca32142b0195531458b7d1e341c6f864f983d745f5865aad41d2915aae7602a2d6cd415e8351ebc4223f54d6bec664709ff03f1aa3dc7f1580ace9bf2afd28d7157e67fb98d121ad6eb372713255012e028cb2654d493a0b4b35faae176c89b745eda2967199cc936859a537e8e4871d4acf3e3dc10bf647da1c6e7f20e5c6e22a10aa3fb50e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0cff28235a3cbb5d33b09bc30cf2880c586272c3f4d79bc36305745cb1cb385e6add14652003c7cdd3324f07d134d3ed07f1c10900000009dd872ec66ea6c718bbd1aa59114000f0be4c6f8df084c5e9734ae30aa9afdc719bf01ab03a9b1074407136b4506000f0916a39d3057d50183612b39e73aeeb6eaf14652dda68e98ef938e6515a94a71836469e2051d9b7eb85f3f2d5ae2c51944da8d7391d6d6b97419a3b7660df4c5124ca425d374b371867a79b31c6617fc3327191fbf514573f0e30d1d60be2168fe6c2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257484000000b749ccd74089ed6b86f81ca3d247d8f71d290ed1b1a11f7a67125170c88c3b6a50696332226401b110da9c786eeca22debc99335583b54c13c3130978fa069af8223b38ced735c2d905f51ca85ffa4add5647489b3960127696cf2f16625c0c102000000000000009ef52134842e64171f3963841086e3797a4825d081f2d987f05c5341877386ec55d7dc958fd235d6071619a65d4b82d9c162f3556076b80550d961ca74f1ffdaccf0ea5f02e0fca8b27ff3983ab74fd3d560700a1fbb44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada800000000000000fdaf4660402f7b3b79a433e08074ea2462974ab2cbd247eb1cfa2638f56daee57ed14bc74de0fd87a9ce638190f3570e0b4c80ef682df22237270955afb6008846557ee3bc09fda6dbb6542e597300eb82a184c96ffde5a30e5433d86666cb045bdd02c804c22ff2635c7bfbf5c0d586cdb5e1e88a4d41dee7cc74f822278d124638fec58faeb48afe324369cc51204158bb440df2a6949dfbbdde54c4f2f4cdcaa4f65c22f000000000000000000000000000d503d79906958102000000000000000000001ffff0ef89b2a635edb2dd163e863315e84498dfb52b7f54da6398cbedaa42cc17c4563c859656a357770289a61faa00000000cfb7f2fd7252e9322abe282c3344fc6738b4467893b9bf0d1c8130ae6b226900110635376413c29f7c6f7b7e29b9f4bddd5e328661f4046e01f7d7dc22174e5e627a6f608ad53a4168d4d8f7fbc71104512efe8e5d7d934aa289b4db2b870000000000000000000000000000000000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cd3ace2b322ac31bfa27847c799c8a69a1ea5b98e525e6383ad7fd9795170e7b11e4fa990b9386910a6a1a66a70eaff01247603c2ff49d3979676bffb3049166ab84a0f061991bd57c2566c10c282352a5105b6164e3f2491e4793e590dcc71de10da96fdff40dd44a2c9882d3aa0f8a797b8fea6efcfb5276b7679f15559cdaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd50c5e22ade17556abb722d9c085b189b5fd1f30e8dc813f60870fde1f88d830b11002135e8e7262f299ed7923bfbe00ad88be179e56b41ff3792cee2fc37eee739c3e3af923e8738d93d583a9cf00b946960fc38cf85aae7cf708f9a9d166f2e352a06d99b8be476d1cc2a53a859ae4fdab2a987925d12422474ac044ffe9fe2bf9bf9"], 0x0}, 0x90)

700.778745ms ago: executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0}) (async)
socket$inet_udplite(0x2, 0x2, 0x88) (async)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000540)={'macvlan0\x00', 0x100}) (async)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r4, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x2, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x2e)
ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f00000000c0)={'team_slave_1\x00', 0x1ff}) (async)
ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000080)={'veth1_macvtap\x00', 0x1000})
ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000000)={'batadv_slave_0\x00', 0x5}) (async)
ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000040)={'veth1_vlan\x00', 0xd3})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) (async)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r1, @ANYRES64=0x0], 0x74}}, 0x0) (async)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x1, 0x80010, r0, 0x87790000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000100)={0x38, r6, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x38}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0x1003, &(0x7f0000001e40)=""/4099}, 0x90) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'veth1_to_batadv\x00'})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) (async)
write$cgroup_subtree(r7, &(0x7f0000000080)={[{0x2d, 'pids'}, {0x2d, 'perf_event'}]}, 0x12)

699.95764ms ago: executing program 2:
socket$l2tp6(0xa, 0x2, 0x73)
r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB="effdffff", @ANYRES16=r0, @ANYBLOB="030700000000000000000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000"], 0x7c}}, 0x0)

613.440403ms ago: executing program 2:
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000200)=@newtaction={0x68, 0x30, 0x101, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x20000000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)
sendmsg$nl_crypto(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000080)=@alg={0x100, 0x10, 0x301, 0x0, 0x0, {{'ctr(des3_ede)\x00'}}, [{0x8}, {0x8}, {0x5}, {0x8}]}, 0x100}}, 0x0)

519.800366ms ago: executing program 0:
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getspdinfo={0x14}, 0x14}}, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@generic={0x0, 0x4}]}}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "6d4dfdeb8cf7bbfe143803bec2ce783e04cd32308cdd8dde", "c71cb8adfce542a4bc5a026c208fd0c45787e4aa384e3d26b21ea41cc128364c"}}}}}}, 0x0)
getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
setsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000280)=@int=0x4, 0x4)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14711}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0)

448.389211ms ago: executing program 2:
r0 = socket(0x1d, 0x2, 0x6)
getsockopt$nfc_llcp(r0, 0x6a, 0x0, 0x0, 0x20000071)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0xc0}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000080)=ANY=[@ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRES16=r1], &(0x7f0000000140)='GPL\x00', 0xa, 0xa6, &(0x7f00000003c0)=""/166, 0x40f00, 0x0, '\x00', 0x0, 0x20}, 0x90)
accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x2}, 0x10)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2, 0x18, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}]}, 0x38}}, 0x0)
r4 = socket$tipc(0x1e, 0x2, 0x0)
r5 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x0, 0xfffffff5}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10)
sendmsg$tipc(r4, &(0x7f0000001e00)={0x0, 0x0, 0x0}, 0x0)
sendmsg$tipc(r4, &(0x7f0000000340)={&(0x7f0000000000), 0x10, 0x0}, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x4, 0x8, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r7}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r6}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700)
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000000800018004b140d1500002800800020000000000080001"], 0x30}}, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xbc}}, 0x0)
sendmsg$netlink(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002b0001ca650000000000001806"], 0x114}], 0x1}, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0}, 0x10)

406.349298ms ago: executing program 3:
socket$nl_route(0x10, 0x3, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
socket$unix(0x1, 0x0, 0x0)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
accept$unix(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$802154_raw(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)="9989f66cad7f1355040076d77a62a870bb018b6c9540242f5db0f59a98d1e01332ad113886d960f2f7cce73a57e946c6bea04c9b8dd56f3710209cd16ff5080c2a9bad7dc2977d7fc36fd396e9f2ffa84cb862d6a850e41643a3d272e75e760f42d519decb8e27c0a204daea10ef", 0x6e}}, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000280)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
read(r2, &(0x7f0000000100)=""/32, 0x20)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@multicast1, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0, <r4=>0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000040)=0xe8)
ioctl$SIOCAX25GETUID(r2, 0x89e0, &(0x7f0000000080)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, r4})
socket$unix(0x1, 0x0, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r5, 0x0, 0x0)
setsockopt$sock_int(r5, 0x1, 0x25, &(0x7f0000000100), 0x4)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @ptr={0xe, 0x0, 0x0, 0x9}, @enum={0x7, 0x7, 0x0, 0x6, 0x4, [{0x6, 0x80}, {0x6, 0x20}, {0x7, 0x401}, {0x5, 0xfffffffd}, {0xd, 0x80000000}, {0x2, 0x7}, {0x5, 0x3}]}, @volatile={0x0, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x0, 0x71, 0x0, 0x61]}}, 0x0, 0x8a}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000700)=ANY=[], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x90)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x10, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ldst={0x0, 0x1, 0x4, 0x13, 0x0, 0x2, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0xc, '\x00', r3, 0x0, r2, 0x8, &(0x7f00000004c0)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, 0xffffffffffffffff, r2], 0x0, 0x10, 0xfffffffa}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='kfree\x00', r6}, 0x10)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
openat$cgroup_devices(r7, &(0x7f0000000600)='devices.allow\x00', 0x2, 0x0)
ioctl$FITRIM(r7, 0xc0185879, &(0x7f0000000000)={0x0, 0xffbffffffffffff8})

268.641405ms ago: executing program 2:
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'macvlan1\x00'})
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007b9, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f00000021c0)=[{{0x0, 0x4, &(0x7f0000001cc0)=[{&(0x7f0000000940)="014bb6a68759182ab7e144f718ee0b9d487461d1899d71f57a540210b1b32e260da68c9e0f737a3249b8ea993d8e39a99583a02b664e8f3166bcc2", 0x3b}, {0x0}, {&(0x7f00000005c0)}], 0x3}}], 0x1, 0x20008805)

178.546526ms ago: executing program 2:
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="382000001000f30300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000005002700020000000d0024007f9b40b10646709a07000000"], 0x38}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180010000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
r0 = socket(0x18, 0x4, 0xff)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
recvmmsg(r1, &(0x7f0000000640)=[{{&(0x7f0000000300)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000000200)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/181, 0xb5}, {&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f0000000100)=""/63, 0x3f}], 0x4, &(0x7f00000004c0)=""/13, 0xd}, 0xd0}], 0x2, 0x10022, &(0x7f00000005c0))
r2 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x772}, 0x1c)
sendmmsg$inet6(r2, &(0x7f0000000280)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100), 0xffffffae}], 0x1}}], 0x1, 0x4000)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000800)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xc4, r4, 0x400, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff5c06}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}]}, @TIPC_NLA_NODE={0x24, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffb}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xef}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0xc000}, 0x884)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f00000000c0)=0x8)
r5 = socket(0x0, 0x3, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
r6 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r6, &(0x7f0000000540)={0xa, 0x4e20, 0x0, @private0, 0x3}, 0x1c)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x20, 0x1418, 0x1, 0x0, 0x0, "", [{{0x10}, {0x8}}]}, 0x20}}, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10)
getsockopt$inet_int(r5, 0x10d, 0x2, &(0x7f0000000000), &(0x7f0000000240)=0x4)
r8 = socket$kcm(0x10, 0x2, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0)

130.951538ms ago: executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x9000000, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0600eb"], 0x30}}, 0x0)

0s ago: executing program 3:
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
recvmsg$kcm(r1, &(0x7f0000006480)={0x0, 0x0, &(0x7f0000006300)=[{&(0x7f0000005080)=""/15, 0xf}, {&(0x7f00000050c0)=""/231, 0xe7}, {&(0x7f0000005200)=""/35, 0x23}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000006280)=""/108, 0x6c}], 0x5}, 0x0)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029ea69801d76ab0a272a2a788bab6c95f79725074", 0x1c}], 0x1}, 0x0)
recvmsg$kcm(r1, &(0x7f0000002240)={0x0, 0x0, 0x0}, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x6, 0x0, 0xd}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f00000003c0)='syzkaller\x00', 0x2, 0x2292f76207602815, &(0x7f0000000240)=""/146, 0x0, 0x8}, 0x80)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1}, &(0x7f0000000000), &(0x7f0000000040)=r2}, 0x20)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001180)={r0, 0x58, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x12, 0x80000000, 0x9, 0x7, 0x2080, 0xffffffffffffffff, 0x0, '\x00', r3, 0xffffffffffffffff, 0x4, 0x5, 0x2}, 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0)
recvmsg$unix(r4, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x2a, &(0x7f0000000100)=r6, 0x4)
sendmsg$unix(r5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[@rights={{0x14, 0x1, 0x1, [r6]}}], 0x18}, 0x0)
r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x4, 0x0, r6, 0x0, '\x00', 0x0, r7, 0x1, 0x2, 0x0, 0x6}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@bloom_filter={0x1e, 0x3, 0x2, 0x5, 0x80, 0xffffffffffffffff, 0x4, '\x00', r3, r6, 0x3, 0x1, 0x0, 0x4}, 0x48)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x19, 0x4, 0x4, 0x20001, 0x0, 0x1}, 0x1d)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r8, 0x0, 0x0}, 0x20)

kernel console output (not intermixed with test programs):

esses unique to avoid problems!
[  126.381280][ T6952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  126.391968][ T6952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  126.415275][ T6952] batman_adv: batadv0: Interface activated: batadv_slave_0
[  126.441500][ T7259] netlink: 'syz-executor.3': attribute type 64 has an invalid length.
[  126.455111][ T7259] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  126.483157][ T6952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  126.505121][ T6952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  126.516937][ T6952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  126.529593][ T6952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  126.544621][ T6952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  126.555488][ T6952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  126.599779][ T6952] batman_adv: batadv0: Interface activated: batadv_slave_1
[  126.612311][ T7190] lo speed is unknown, defaulting to 1000
[  126.625509][ T6952] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  126.643367][ T6952] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  126.660299][ T6952] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  126.685915][ T6952] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  126.925209][ T2803] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.947022][ T7263] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups)
[  126.957773][ T2803] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.002876][ T7268] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow
[  127.021543][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.064936][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.111153][ T7190] lo speed is unknown, defaulting to 1000
[  127.311312][ T7280] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[  127.352164][ T7280] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  127.388145][ T7280] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[  127.429275][ T7280] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  127.501249][ T7285] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  127.915532][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.136157][ T7307] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'.
[  128.156604][ T7306] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups)
[  128.211131][ T7308] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow
[  128.474635][ T7323] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[  128.570895][ T7323] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'.
[  128.613478][ T7323] openvswitch: netlink: Key type 29 is not supported
[  128.755170][  T932] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.834258][ T7330] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  129.104176][   T29] audit: type=1800 audit(1718005171.014:11): pid=7359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1961 res=0 errno=0
[  129.134365][   T29] audit: type=1804 audit(1718005171.024:12): pid=7359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir2352552031/syzkaller.el3hsx/100/memory.events" dev="sda1" ino=1961 res=1 errno=0
[  129.213996][   T29] audit: type=1804 audit(1718005171.024:13): pid=7359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir2352552031/syzkaller.el3hsx/100/memory.events" dev="sda1" ino=1961 res=1 errno=0
[  129.314372][   T29] audit: type=1804 audit(1718005171.114:14): pid=7363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir2352552031/syzkaller.el3hsx/100/memory.events" dev="sda1" ino=1961 res=1 errno=0
[  129.657445][ T7385] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'.
[  130.409578][ T7413] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  130.733840][ T7425] warning: `syz-executor.2' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  130.955904][   T29] audit: type=1804 audit(1718005172.874:15): pid=7438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3904874680/syzkaller.o49bhZ/148/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0
[  130.961406][ T7433] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  132.503286][   T29] audit: type=1804 audit(1718005174.424:16): pid=7492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3467901568/syzkaller.hNeKxz/9/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0
[  132.571291][ T7504] veth1_macvtap: left promiscuous mode
[  132.592286][ T7504] macsec0: entered promiscuous mode
[  132.601154][ T7504] macsec0: entered allmulticast mode
[  133.159781][ T1248] ieee802154 phy0 wpan0: encryption failed: -22
[  133.371442][ T7548] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  133.826087][ T7576] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  134.295681][ T7588] veth1_macvtap: left promiscuous mode
[  134.321440][ T7588] macsec0: entered promiscuous mode
[  134.339552][ T7588] macsec0: entered allmulticast mode
[  134.562344][ T7597] netlink: 'syz-executor.0': attribute type 12 has an invalid length.
[  134.582207][ T7597] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[  134.605027][ T7597] netlink: 'syz-executor.0': attribute type 2 has an invalid length.
[  134.626657][ T7597] netlink: 'syz-executor.0': attribute type 2 has an invalid length.
[  134.678775][ T7597] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  134.699433][ T7597] netlink: 'syz-executor.0': attribute type 37 has an invalid length.
[  134.718608][ T7597] netlink: 'syz-executor.0': attribute type 2 has an invalid length.
[  134.737780][ T7597] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.834643][ T7639] netlink: 'syz-executor.2': attribute type 3 has an invalid length.
[  135.862512][ T7639] netlink: 'syz-executor.2': attribute type 3 has an invalid length.
[  135.878052][ T7643] veth1_macvtap: left promiscuous mode
[  135.884127][ T7643] macsec0: entered promiscuous mode
[  135.889727][ T7643] macsec0: entered allmulticast mode
[  136.252994][ T7658] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  137.126008][ T7690] netlink: 328 bytes leftover after parsing attributes in process `syz-executor.2'.
[  137.514614][ T7703] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  139.657899][ T5163] IPVS: starting estimator thread 0...
[  139.777021][ T7783] IPVS: using max 18 ests per chain, 43200 per kthread
[  141.658094][ T7871] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  142.061813][ T7894] Cannot find add_set index 0 as target
[  142.372843][ T7916] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow
[  142.378237][ T7912] netlink: 'syz-executor.1': attribute type 3 has an invalid length.
[  142.822825][ T7941] netlink: 'syz-executor.1': attribute type 10 has an invalid length.
[  142.966373][ T7953] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow
[  143.414621][ T7988] netlink: 'syz-executor.4': attribute type 10 has an invalid length.
[  143.462685][ T7988] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  143.594078][ T7998] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow
[  143.923443][ T8010] netlink: 'syz-executor.3': attribute type 8 has an invalid length.
[  144.137510][ T8022] netlink: 'syz-executor.4': attribute type 10 has an invalid length.
[  145.074082][ T8074] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[  145.813346][ T8113] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[  146.127643][ T8128] dummy0: entered promiscuous mode
[  146.138957][ T8128] vlan3: entered promiscuous mode
[  146.152451][ T8128] vlan3: entered allmulticast mode
[  146.171355][ T8128] dummy0: entered allmulticast mode
[  146.437056][ T8137] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[  146.702181][ T8154] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[  146.755777][ T8159] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  147.929629][ T8217] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  148.006008][ T8223] netlink: 'syz-executor.0': attribute type 32 has an invalid length.
[  148.220979][ T8233] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  148.258327][ T8233] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  148.284280][ T8233] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  148.486630][ T8243] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  148.542500][ T8243] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  149.251073][ T8270] lo speed is unknown, defaulting to 1000
[  150.384394][   T29] audit: type=1804 audit(1718005192.304:17): pid=8318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3904874680/syzkaller.o49bhZ/211/cgroup.controllers" dev="sda1" ino=1934 res=1 errno=0
[  150.512988][ T8270] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  150.646990][ T8270] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'.
[  150.908062][ T8342] netlink: 27 bytes leftover after parsing attributes in process `syz-executor.0'.
[  151.237904][ T8350] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  151.268740][ T8350] IPVS: Error joining to the multicast group
[  151.648686][ T5120] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  151.684399][ T5120] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  151.697968][ T5120] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  151.716639][ T5120] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  151.736433][ T5120] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  151.746558][ T5120] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  151.824888][ T8368] lo speed is unknown, defaulting to 1000
[  151.987930][ T1101] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.115940][ T1101] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.214983][ T1101] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.370061][ T1101] bond0: (slave netdevsim0): Releasing backup interface
[  152.387786][ T1101] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode
[  152.414207][ T1101] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.597523][ T8398] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  152.630289][ T8368] chnl_net:caif_netlink_parms(): no params data found
[  152.660407][ T8398] IPVS: Error joining to the multicast group
[  152.673314][ T8401] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  152.695895][ T1101] bridge_slave_1: left allmulticast mode
[  152.705263][ T1101] bridge_slave_1: left promiscuous mode
[  152.732082][ T1101] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.778168][ T1101] bridge_slave_0: left allmulticast mode
[  152.783872][ T1101] bridge_slave_0: left promiscuous mode
[  152.799539][ T1101] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.016431][ T1101] ip6gretap0 (unregistering): left promiscuous mode
[  153.384120][ T1101] team0: Port device bridge1 removed
[  153.642071][ T5120] Bluetooth: hci0: command 0x0405 tx timeout
[  153.727001][ T1101] bond0 (unregistering): left promiscuous mode
[  153.733202][ T1101] bond_slave_0: left promiscuous mode
[  153.758034][ T1101] bond_slave_1: left promiscuous mode
[  153.791869][ T1101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  153.807096][ T5124] Bluetooth: hci4: command tx timeout
[  153.830154][ T1101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  153.852582][ T1101] bond0 (unregistering): Released all slaves
[  153.898139][ T8409] bridge2: entered promiscuous mode
[  153.911644][ T8409] bridge2: entered allmulticast mode
[  154.252261][ T8368] bridge0: port 1(bridge_slave_0) entered blocking state
[  154.273820][ T8368] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.317034][ T8368] bridge_slave_0: entered allmulticast mode
[  154.324388][ T8368] bridge_slave_0: entered promiscuous mode
[  154.345887][ T8368] bridge0: port 2(bridge_slave_1) entered blocking state
[  154.363555][ T8368] bridge0: port 2(bridge_slave_1) entered disabled state
[  154.380764][ T8368] bridge_slave_1: entered allmulticast mode
[  154.400101][ T8368] bridge_slave_1: entered promiscuous mode
[  154.508838][ T8368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  154.541046][ T8368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  154.599476][ T8445] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  154.622574][ T8368] team0: Port device team_slave_0 added
[  154.634360][ T8445] IPVS: Error joining to the multicast group
[  154.675277][ T8368] team0: Port device team_slave_1 added
[  154.763115][ T8368] batman_adv: batadv0: Adding interface: batadv_slave_0
[  154.786797][ T8368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  154.856773][ T8368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  154.888960][ T8368] batman_adv: batadv0: Adding interface: batadv_slave_1
[  154.901034][ T8368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  154.939663][ T8368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  155.091969][ T8368] hsr_slave_0: entered promiscuous mode
[  155.114775][ T8368] hsr_slave_1: entered promiscuous mode
[  155.130721][ T8368] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  155.146801][ T8368] Cannot create hsr debugfs directory
[  155.819720][ T8473] lo speed is unknown, defaulting to 1000
[  155.886922][ T5124] Bluetooth: hci4: command tx timeout
[  155.910868][ T8482] syz_tun: entered promiscuous mode
[  155.934714][ T8482] syz_tun: left promiscuous mode
[  156.437080][ T8368] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  156.544523][ T8368] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  156.564694][ T8368] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  156.597721][ T1101] hsr_slave_0: left promiscuous mode
[  156.638889][ T1101] hsr_slave_1: left promiscuous mode
[  156.648530][ T1101] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  156.663386][ T1101] batman_adv: batadv0: Removing interface: batadv_slave_0
[  156.688918][ T1101] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  156.696516][ T1101] batman_adv: batadv0: Removing interface: batadv_slave_1
[  156.764035][ T1101] veth1_macvtap: left promiscuous mode
[  156.769714][ T1101] veth0_macvtap: left promiscuous mode
[  156.775278][ T1101] veth1_vlan: left promiscuous mode
[  156.796911][ T1101] veth0_vlan: left promiscuous mode
[  157.380442][ T1101] team0 (unregistering): Port device team_slave_1 removed
[  157.414279][ T1101] team0 (unregistering): Port device team_slave_0 removed
[  157.732359][ T8368] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  157.938105][ T8522] syzkaller0: entered promiscuous mode
[  157.940055][ T8524] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'.
[  157.948982][ T8522] syzkaller0: entered allmulticast mode
[  157.967847][ T5124] Bluetooth: hci4: command tx timeout
[  157.984068][ T8526] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'.
[  158.021151][ T8522] syz-executor.4: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1
[  158.086453][ T8522] CPU: 0 PID: 8522 Comm: syz-executor.4 Not tainted 6.10.0-rc2-syzkaller-00443-g28f961f9d5b7 #0
[  158.096920][ T8522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[  158.105565][ T8368] 8021q: adding VLAN 0 to HW filter on device bond0
[  158.106982][ T8522] Call Trace:
[  158.116932][ T8522]  <TASK>
[  158.119886][ T8522]  dump_stack_lvl+0x241/0x360
[  158.124627][ T8522]  ? __pfx_dump_stack_lvl+0x10/0x10
[  158.129850][ T8522]  ? __pfx__printk+0x10/0x10
[  158.134468][ T8522]  ? cpuset_print_current_mems_allowed+0x1f/0x350
[  158.140908][ T8522]  ? cpuset_print_current_mems_allowed+0x31e/0x350
[  158.146788][ T8368] 8021q: adding VLAN 0 to HW filter on device team0
[  158.147422][ T8522]  warn_alloc+0x278/0x410
[  158.158350][ T8522]  ? stack_depot_save_flags+0x29/0x830
[  158.163840][ T8522]  ? __vmalloc_node_range_noprof+0x10b/0x1460
[  158.169928][ T8522]  ? __pfx_warn_alloc+0x10/0x10
[  158.174811][ T8522]  ? kasan_save_track+0x3f/0x80
[  158.179685][ T8522]  ? __kasan_kmalloc+0x98/0xb0
[  158.184472][ T8522]  ? xsk_setsockopt+0x598/0x950
[  158.189343][ T8522]  ? do_sock_setsockopt+0x3af/0x720
[  158.189975][ T8368] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  158.194540][ T8522]  ? __sys_setsockopt+0x1ae/0x250
[  158.194562][ T8522]  ? __x64_sys_setsockopt+0xb5/0xd0
[  158.194579][ T8522]  ? do_syscall_64+0xf3/0x230
[  158.205011][ T8368] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  158.209882][ T8522]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.209930][ T8522]  __vmalloc_node_range_noprof+0x130/0x1460
[  158.209980][ T8522]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  158.248428][ T8522]  ? __kasan_kmalloc+0x98/0xb0
[  158.253200][ T8522]  ? xskq_create+0x54/0x170
[  158.257700][ T8522]  vmalloc_user_noprof+0x74/0x80
[  158.262635][ T8522]  ? xskq_create+0xb6/0x170
[  158.267138][ T8522]  xskq_create+0xb6/0x170
[  158.271461][ T8522]  xsk_init_queue+0xa1/0x100
[  158.276044][ T8522]  xsk_setsockopt+0x598/0x950
[  158.280714][ T8522]  ? __pfx_xsk_setsockopt+0x10/0x10
[  158.285903][ T8522]  ? __pfx_lock_acquire+0x10/0x10
[  158.290924][ T8522]  ? aa_sock_opt_perm+0x79/0x120
[  158.295862][ T8522]  ? bpf_lsm_socket_setsockopt+0x9/0x10
[  158.301394][ T8522]  ? security_socket_setsockopt+0x87/0xb0
[  158.307110][ T8522]  ? __pfx_xsk_setsockopt+0x10/0x10
[  158.312297][ T8522]  do_sock_setsockopt+0x3af/0x720
[  158.317316][ T8522]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  158.322855][ T8522]  ? __fget_files+0x29/0x470
[  158.327442][ T8522]  ? __fget_files+0x3f6/0x470
[  158.332130][ T8522]  __sys_setsockopt+0x1ae/0x250
[  158.337011][ T8522]  __x64_sys_setsockopt+0xb5/0xd0
[  158.342028][ T8522]  do_syscall_64+0xf3/0x230
[  158.346525][ T8522]  ? clear_bhb_loop+0x35/0x90
[  158.351218][ T8522]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.357130][ T8522] RIP: 0033:0x7fd81ba7cf69
[  158.361553][ T8522] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  158.381159][ T8522] RSP: 002b:00007fd81c8830c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  158.389573][ T8522] RAX: ffffffffffffffda RBX: 00007fd81bbb3f80 RCX: 00007fd81ba7cf69
[  158.397535][ T8522] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000003
[  158.405494][ T8522] RBP: 00007fd81bada6fe R08: 0000000000000020 R09: 0000000000000000
[  158.413469][ T8522] R10: 00000000200033c0 R11: 0000000000000246 R12: 0000000000000000
[  158.421428][ T8522] R13: 000000000000000b R14: 00007fd81bbb3f80 R15: 00007fffecd737d8
[  158.429422][ T8522]  </TASK>
[  158.435805][ T8522] Mem-Info:
[  158.439826][ T8522] active_anon:17604 inactive_anon:0 isolated_anon:0
[  158.439826][ T8522]  active_file:0 inactive_file:46461 isolated_file:0
[  158.439826][ T8522]  unevictable:768 dirty:29 writeback:0
[  158.439826][ T8522]  slab_reclaimable:10600 slab_unreclaimable:96747
[  158.439826][ T8522]  mapped:21441 shmem:4506 pagetables:611
[  158.439826][ T8522]  sec_pagetables:0 bounce:0
[  158.439826][ T8522]  kernel_misc_reclaimable:0
[  158.439826][ T8522]  free:1386154 free_pcp:1012 free_cma:0
[  158.490602][ T5164] bridge0: port 1(bridge_slave_0) entered blocking state
[  158.497801][ T5164] bridge0: port 1(bridge_slave_0) entered forwarding state
[  158.608947][ T8522] Node 0 active_anon:70544kB inactive_anon:0kB active_file:0kB inactive_file:185776kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:85668kB dirty:112kB writeback:0kB shmem:16488kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10412kB pagetables:2616kB sec_pagetables:0kB all_unreclaimable? no
[  158.644505][ T5164] bridge0: port 2(bridge_slave_1) entered blocking state
[  158.651718][ T5164] bridge0: port 2(bridge_slave_1) entered forwarding state
[  158.666528][ T8522] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  158.816912][ T8522] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  158.874715][ T8522] lowmem_reserve[]: 0 2571 2571 0 0
[  158.898522][ T8522] Node 0 DMA32 free:1588224kB boost:0kB min:35108kB low:43884kB high:52660kB reserved_highatomic:0KB active_anon:70200kB inactive_anon:0kB active_file:0kB inactive_file:185468kB unevictable:1536kB writepending:112kB present:3129332kB managed:2659884kB mlocked:0kB bounce:0kB free_pcp:2360kB local_pcp:1044kB free_cma:0kB
[  158.963559][ T8522] lowmem_reserve[]: 0 0 0 0 0
[  158.982354][ T8522] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:308kB unevictable:0kB writepending:0kB present:1048576kB managed:360kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[  159.012108][ T8522] lowmem_reserve[]: 0 0 0 0 0
[  159.018761][ T8550] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  159.023268][ T8522] Node 1 
[  159.044612][ T8550] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[  159.049307][ T8522] Normal free:3944208kB boost:0kB min:54788kB low:68484kB high:82180kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB writepending:4kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:1760kB local_pcp:0kB free_cma:0kB
[  159.114085][ T8368] 8021q: adding VLAN 0 to HW filter on device batadv0
[  159.147579][ T8522] lowmem_reserve[]: 0 0 0 0 0
[  159.163772][ T8522] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  159.200308][ T8522] Node 0 DMA32: 651*4kB (UME) 378*8kB (UME) 206*16kB (ME) 315*32kB (UME) 47*64kB (UME) 48*128kB (UME) 40*256kB (UME) 22*512kB (UME) 15*1024kB (UE) 12*2048kB (UME) 367*4096kB (UM) = 1592828kB
[  159.232728][ T8368] veth0_vlan: entered promiscuous mode
[  159.239809][ T8522] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  159.264899][ T8368] veth1_vlan: entered promiscuous mode
[  159.271680][ T8522] Node 1 Normal: 0*4kB 0*8kB 1*16kB (U) 0*32kB 2*64kB (UM) 1*128kB (U) 2*256kB (UM) 2*512kB (UM) 0*1024kB 1*2048kB (U) 962*4096kB (M) = 3944208kB
[  159.299447][ T8522] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  159.325716][ T8522] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  159.350423][ T8522] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  159.362979][ T8522] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  159.370584][ T8368] veth0_macvtap: entered promiscuous mode
[  159.373577][ T8522] 48644 total pagecache pages
[  159.383323][ T8522] 0 pages in swap cache
[  159.389089][ T8522] Free swap  = 124996kB
[  159.393586][ T8522] Total swap = 124996kB
[  159.399077][ T8522] 2097051 pages RAM
[  159.403422][ T8522] 0 pages HighMem/MovableOnly
[  159.405628][ T8368] veth1_macvtap: entered promiscuous mode
[  159.408608][ T8522] 400870 pages reserved
[  159.420952][ T8522] 0 pages cma reserved
[  159.463164][ T8368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  159.476461][ T8368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  159.487183][ T8368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  159.498236][ T8368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  159.508751][ T8368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  159.519948][ T8368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  159.536808][ T8368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  159.554019][ T8368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  159.591384][ T8368] batman_adv: batadv0: Interface activated: batadv_slave_0
[  159.621576][ T8368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  159.641900][ T8368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  159.654322][ T8368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  159.672223][ T8368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  159.683897][ T8368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  159.694760][ T8368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  159.708848][ T8368] batman_adv: batadv0: Interface activated: batadv_slave_1
[  159.734692][ T8368] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  159.760294][ T8368] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  159.770807][ T8368] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  159.780762][ T8368] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  159.968419][  T957] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  159.992617][  T957] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  160.033734][  T957] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  160.041960][ T5124] Bluetooth: hci4: command tx timeout
[  160.054771][ T8587] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  160.084248][  T957] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  160.129563][ T8583] lo speed is unknown, defaulting to 1000
[  160.843704][ T8611] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  161.373733][ T8630] lo speed is unknown, defaulting to 1000
[  161.563906][ T8643] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  161.593205][ T8643] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  161.619008][ T8643] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'.
[  161.912401][ T8666] geneve0: entered promiscuous mode
[  161.926537][ T8666] geneve0: left promiscuous mode
[  161.949673][ T8669] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'.
[  162.293559][ T8680] raw_sendmsg: syz-executor.2 forgot to set AF_INET. Fix it!
[  162.899905][ T8699] netlink: 'syz-executor.0': attribute type 22 has an invalid length.
[  163.155551][ T8706] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'.
[  163.726361][ T8743] netlink: 'syz-executor.3': attribute type 21 has an invalid length.
[  163.747076][ T8743] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.3'.
[  163.919040][ T8750] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[  163.934779][ T8750] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[  163.956438][ T8750] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'.
[  163.984284][ T8750] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  164.011011][ T8758] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  164.036323][ T8758] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  164.073600][ T8758] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'.
[  164.235664][ T8769] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[  164.408641][ T8769] team0: Port device bridge1 added
[  164.861098][ T8810] lo speed is unknown, defaulting to 1000
[  165.358076][ T8837] netlink: 'syz-executor.1': attribute type 11 has an invalid length.
[  165.625490][   T29] audit: type=1804 audit(1718005207.544:18): pid=8848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3467901568/syzkaller.hNeKxz/94/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0
[  166.082713][ T8862] netlink: 'syz-executor.4': attribute type 10 has an invalid length.
[  166.167784][ T8862] 8021q: adding VLAN 0 to HW filter on device team0
[  166.227913][ T8862] bond0: (slave team0): Enslaving as an active interface with an up link
[  166.277289][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  166.327909][ T8862] netlink: 'syz-executor.4': attribute type 10 has an invalid length.
[  166.371179][ T8862] bond0: (slave team0): Releasing backup interface
[  166.432767][ T8862] bridge0: port 3(team0) entered blocking state
[  166.463350][ T8862] bridge0: port 3(team0) entered disabled state
[  166.488308][ T8862] team0: entered allmulticast mode
[  166.500587][ T8862] team_slave_0: entered allmulticast mode
[  166.520472][ T8862] team_slave_1: entered allmulticast mode
[  166.538886][ T8862] bridge1: entered allmulticast mode
[  166.572488][ T8862] team0: entered promiscuous mode
[  166.586284][ T8862] team_slave_0: entered promiscuous mode
[  166.600492][ T8862] team_slave_1: entered promiscuous mode
[  166.614635][ T8862] bridge1: entered promiscuous mode
[  166.917077][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  167.331596][ T8916] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  167.333164][ T8917] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  167.545057][ T8916] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  167.574400][ T8916] bridge0: port 3(team0) entered blocking state
[  167.587076][ T8916] bridge0: port 3(team0) entered disabled state
[  167.613769][ T8916] team0: entered allmulticast mode
[  167.641989][ T8916] team_slave_0: entered allmulticast mode
[  167.669337][ T8916] team_slave_1: entered allmulticast mode
[  167.705968][ T8916] bridge1: entered allmulticast mode
[  167.732358][ T8916] team0: left allmulticast mode
[  167.755781][ T8916] team_slave_0: left allmulticast mode
[  167.783154][ T8916] team_slave_1: left allmulticast mode
[  167.805362][ T8916] bridge1: left allmulticast mode
[  168.692521][ T8972] netlink: 'syz-executor.4': attribute type 10 has an invalid length.
[  168.737061][ T8972] team0: left allmulticast mode
[  168.753600][ T8972] team_slave_0: left allmulticast mode
[  168.798937][ T8972] team_slave_1: left allmulticast mode
[  168.816269][ T8972] bridge1: left allmulticast mode
[  168.843072][ T8972] team0: left promiscuous mode
[  168.871612][ T8972] team_slave_0: left promiscuous mode
[  168.897102][ T8972] team_slave_1: left promiscuous mode
[  168.926510][ T8972] bridge1: left promiscuous mode
[  168.949020][ T8972] bridge0: port 3(team0) entered disabled state
[  169.026658][ T8972] 8021q: adding VLAN 0 to HW filter on device team0
[  169.085775][ T8972] bond0: (slave team0): Enslaving as an active interface with an up link
[  169.124802][ T8978] __nla_validate_parse: 11 callbacks suppressed
[  169.124823][ T8978] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'.
[  169.171626][ T8982] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  169.261225][ T8984] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  169.328182][ T8972] netlink: 'syz-executor.4': attribute type 10 has an invalid length.
[  169.360584][ T8972] bond0: (slave team0): Releasing backup interface
[  169.437904][ T8972] bridge0: port 3(team0) entered blocking state
[  169.458827][ T8972] bridge0: port 3(team0) entered disabled state
[  169.465307][ T8972] team0: entered allmulticast mode
[  169.485460][ T8972] team_slave_0: entered allmulticast mode
[  169.505599][ T8972] team_slave_1: entered allmulticast mode
[  169.525462][ T8972] bridge1: entered allmulticast mode
[  169.547948][ T8972] team0: entered promiscuous mode
[  169.582080][ T8972] team_slave_0: entered promiscuous mode
[  169.603670][ T8972] team_slave_1: entered promiscuous mode
[  169.625124][ T8972] bridge1: entered promiscuous mode
[  169.651548][ T9003] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  169.720809][ T9003] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  169.737080][ T9003] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'.
[  169.850479][ T9014] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[  169.874813][ T9014] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  170.031839][ T9028] tipc: Started in network mode
[  170.063762][ T9028] tipc: Node identity ac1414aa, cluster identity 4711
[  170.077833][ T9028] tipc: New replicast peer: 0.0.0.0
[  170.097671][ T9028] tipc: Enabled bearer <udp:syz1>, priority 10
[  170.573620][ T9054] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'.
[  170.670291][ T9054] tipc: Can't bind to reserved service type 0
[  170.843620][ T9065] netlink: 210620 bytes leftover after parsing attributes in process `syz-executor.4'.
[  170.876603][ T9065] openvswitch: netlink: ufid size 2296 bytes exceeds the range (1, 16)
[  171.077809][ T9072] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[  171.218942][  T932] tipc: Node number set to 2886997162
[  171.494088][ T9085] macvlan1: entered allmulticast mode
[  171.684565][ T9094] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[  171.752198][ T9100] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  171.762592][ T9100] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  171.771907][ T9100] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  171.781014][ T9100] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  171.802584][ T9100] vxlan0: entered promiscuous mode
[  171.814836][ T9100] vxlan0: entered allmulticast mode
[  171.835529][ T9103] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'.
[  171.864503][ T9100] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  171.873944][ T9100] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  171.883644][ T9100] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  171.892743][ T9100] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  172.462151][ T9137] netlink: 'syz-executor.0': attribute type 6 has an invalid length.
[  172.853993][ T9165] netlink: 'syz-executor.0': attribute type 12 has an invalid length.
[  173.019580][ T9176] netlink: 'syz-executor.2': attribute type 6 has an invalid length.
[  173.332515][ T9188] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  173.650052][ T9204] netlink: 'syz-executor.3': attribute type 12 has an invalid length.
[  173.934193][ T9214] netlink: 'syz-executor.3': attribute type 5 has an invalid length.
[  174.205347][ T9232] xt_ipcomp: unknown flags B
[  174.255081][ T9239] netlink: 'syz-executor.4': attribute type 12 has an invalid length.
[  174.302752][ T9239] __nla_validate_parse: 7 callbacks suppressed
[  174.302773][ T9239] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  174.531774][ T9258] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  175.026304][ T9290] netlink: 'syz-executor.3': attribute type 12 has an invalid length.
[  175.071739][ T9290] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  175.634071][   T29] audit: type=1804 audit(1718005217.554:19): pid=9313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir472244918/syzkaller.kb7ORm/52/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0
[  175.680834][ T9313] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.3'.
[  176.042688][ T9348] sit0: entered promiscuous mode
[  176.063751][ T9348] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  176.116046][ T9348] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.2'.
[  176.283712][ T9357] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  176.296444][ T9357] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  176.990781][   T29] audit: type=1804 audit(1718005218.914:20): pid=9374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2352552031/syzkaller.el3hsx/236/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0
[  177.045322][ T9374] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.0'.
[  177.249481][ T5110] syz-executor.1 (5110) used greatest stack depth: 17968 bytes left
[  177.447377][   T51] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.673553][   T51] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.718667][ T9415] netlink: 'syz-executor.2': attribute type 10 has an invalid length.
[  177.808356][ T9415] 8021q: adding VLAN 0 to HW filter on device team0
[  177.827557][ T9415] team0: entered promiscuous mode
[  177.833088][ T9415] team_slave_0: entered promiscuous mode
[  177.846496][ T9415] team_slave_1: entered promiscuous mode
[  177.866626][ T9415] bond0: (slave team0): Enslaving as an active interface with an up link
[  178.001413][   T51] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.100034][ T9429] veth1_macvtap: left promiscuous mode
[  178.129218][ T9429] macsec0: entered allmulticast mode
[  178.177631][ T9429] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  178.266595][   T51] bond0: (slave netdevsim0): Releasing backup interface
[  178.312055][   T51] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode
[  178.331708][   T51] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.343432][ T5120] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  178.353192][ T5120] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  178.376969][ T5120] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  178.395738][ T5120] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  178.404574][ T5120] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  178.419868][ T5120] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  178.460618][ T9442] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  178.485604][ T9434] lo speed is unknown, defaulting to 1000
[  178.770314][   T51] bridge_slave_1: left allmulticast mode
[  178.788661][   T51] bridge_slave_1: left promiscuous mode
[  178.802500][   T51] bridge0: port 2(bridge_slave_1) entered disabled state
[  178.816485][   T51] bridge_slave_0: left allmulticast mode
[  178.822434][   T51] bridge_slave_0: left promiscuous mode
[  178.829049][   T51] bridge0: port 1(bridge_slave_0) entered disabled state
[  178.962336][   T51] ip6gretap0 (unregistering): left promiscuous mode
[  179.512397][   T51] bond0 (unregistering): left promiscuous mode
[  179.520975][   T51] bond_slave_0: left promiscuous mode
[  179.526618][   T51] bond_slave_1: left promiscuous mode
[  179.550973][   T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  179.563122][   T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  179.577969][   T51] bond0 (unregistering): Released all slaves
[  179.876252][ T9479] macsec0: entered promiscuous mode
[  180.109883][ T9486] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[  180.163811][ T9434] chnl_net:caif_netlink_parms(): no params data found
[  180.381191][ T9501] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[  180.514007][ T9505] bridge2: entered promiscuous mode
[  180.520414][ T9505] bridge2: entered allmulticast mode
[  180.521619][ T5124] Bluetooth: hci2: command tx timeout
[  180.534292][ T9505] team0: Port device bridge2 added
[  180.629344][   T51] hsr_slave_0: left promiscuous mode
[  180.662624][   T51] hsr_slave_1: left promiscuous mode
[  180.670775][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  180.689691][   T51] batman_adv: batadv0: Removing interface: batadv_slave_0
[  180.705822][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  180.726830][   T51] batman_adv: batadv0: Removing interface: batadv_slave_1
[  180.786020][   T51] veth0_macvtap: left promiscuous mode
[  181.038131][   T51] infiniband syz0: set down
[  181.321635][ T5124] Bluetooth: hci1: command 0x0406 tx timeout
[  181.370068][   T51] team0 (unregistering): Port device team_slave_1 removed
[  181.411012][   T51] team0 (unregistering): Port device team_slave_0 removed
[  181.784515][ T2844] smc: removing ib device syz0
[  181.817265][ T9518] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'.
[  181.834659][ T9522] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.0'.
[  181.845460][ T9522] 0ªX¹¦D: renamed from gretap0 (while UP)
[  181.875411][ T9522] 0ªX¹¦D: entered allmulticast mode
[  181.886115][ T9522] A link change request failed with some changes committed already. Interface 
50ªX¹¦D may have been left with an inconsistent configuration, please check.
[  181.951015][  T932] lo speed is unknown, defaulting to 1000
[  182.088558][ T9434] bridge0: port 1(bridge_slave_0) entered blocking state
[  182.097321][ T9434] bridge0: port 1(bridge_slave_0) entered disabled state
[  182.129140][ T9434] bridge_slave_0: entered allmulticast mode
[  182.167454][ T9434] bridge_slave_0: entered promiscuous mode
[  182.240593][ T9533] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
[  182.513388][ T9434] bridge0: port 2(bridge_slave_1) entered blocking state
[  182.544662][ T9434] bridge0: port 2(bridge_slave_1) entered disabled state
[  182.571495][ T9434] bridge_slave_1: entered allmulticast mode
[  182.600208][ T5120] Bluetooth: hci2: command tx timeout
[  182.618389][ T9434] bridge_slave_1: entered promiscuous mode
[  182.640006][ T9558] Cannot find set identified by id 632 to match
[  182.696412][ T9559] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[  182.810049][ T5160] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  183.000945][ T9434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  183.067242][ T5160] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  183.085467][ T9434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  183.146955][   T45] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  183.253523][ T9568] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[  183.391805][ T9577] netlink: 'syz-executor.0': attribute type 3 has an invalid length.
[  183.402419][ T9434] team0: Port device team_slave_0 added
[  183.417078][   T45] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  183.426191][ T9577] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  183.463560][ T9434] team0: Port device team_slave_1 added
[  183.466964][ T9577] netlink: 191416 bytes leftover after parsing attributes in process `syz-executor.0'.
[  183.490107][ T9568] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  183.527049][ T5191] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  183.578873][ T9434] batman_adv: batadv0: Adding interface: batadv_slave_0
[  183.599696][ T9434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  183.631275][ T9434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  183.646831][ T9434] batman_adv: batadv0: Adding interface: batadv_slave_1
[  183.654194][ T9434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  183.682869][ T9434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  183.718865][   T51] IPVS: stop unused estimator thread 0...
[  183.803945][ T9434] hsr_slave_0: entered promiscuous mode
[  183.834463][ T9434] hsr_slave_1: entered promiscuous mode
[  184.010896][ T9589] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'.
[  184.315300][ T9606] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
[  184.359420][ T9434] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  184.379754][ T9434] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  184.399919][ T9434] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  184.427368][ T9434] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  184.437290][ T5191] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  184.570412][ T9434] 8021q: adding VLAN 0 to HW filter on device bond0
[  184.611144][ T9434] 8021q: adding VLAN 0 to HW filter on device team0
[  184.633225][ T5164] bridge0: port 1(bridge_slave_0) entered blocking state
[  184.640547][ T5164] bridge0: port 1(bridge_slave_0) entered forwarding state
[  184.669870][ T5160] bridge0: port 2(bridge_slave_1) entered blocking state
[  184.677216][ T5160] bridge0: port 2(bridge_slave_1) entered forwarding state
[  184.677234][ T5120] Bluetooth: hci2: command tx timeout
[  184.725510][ T9434] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  184.791263][ T9434] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  184.868842][ T9615] IPv4: Oversized IP packet from 127.202.26.0
[  184.889885][ T9613] netlink: 'syz-executor.0': attribute type 16 has an invalid length.
[  185.050181][ T9434] 8021q: adding VLAN 0 to HW filter on device batadv0
[  185.199518][ T9434] veth0_vlan: entered promiscuous mode
[  185.236152][ T9434] veth1_vlan: entered promiscuous mode
[  185.351412][ T9434] veth0_macvtap: entered promiscuous mode
[  185.379623][ T9434] veth1_macvtap: entered promiscuous mode
[  185.418913][ T9434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  185.489612][ T9434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  185.518944][ T9434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  185.554999][ T9434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  185.580626][ T9434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  185.603366][ T9434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  185.623545][ T9434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  185.644346][ T9434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  185.678606][ T9434] batman_adv: batadv0: Interface activated: batadv_slave_0
[  185.703134][ T9434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  185.745422][ T9434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  185.769219][ T9434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  185.780281][ T9434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  185.800494][ T9434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  185.806589][ T9645] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'.
[  185.820061][ T9434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  185.839426][ T9434] batman_adv: batadv0: Interface activated: batadv_slave_1
[  185.941451][ T9434] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  185.967569][ T9434] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  185.980897][ T9434] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  186.005066][ T9434] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  186.085965][ T9652] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'.
[  186.302489][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  186.328593][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  186.412377][ T1096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  186.423360][ T1096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  186.624977][ T9678] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  186.666643][ T9685] netlink: 'syz-executor.0': attribute type 16 has an invalid length.
[  186.733107][ T9687] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  186.757270][ T5120] Bluetooth: hci2: command tx timeout
[  187.829299][ T9732] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.0'.
[  188.086157][ T9742] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  188.320302][ T9753] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[  188.366275][ T9753] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
[  188.961024][ T9761] netlink: 'syz-executor.1': attribute type 16 has an invalid length.
[  189.707627][ T9790] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[  189.744812][ T9790] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  189.951794][ T9796] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'.
[  190.138869][ T9802] netlink: 'syz-executor.0': attribute type 16 has an invalid length.
[  191.045106][ T9834] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'.
[  191.297133][ T9837] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  191.698801][ T9850] FAULT_INJECTION: forcing a failure.
[  191.698801][ T9850] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  191.722328][ T9850] CPU: 0 PID: 9850 Comm: syz-executor.0 Not tainted 6.10.0-rc2-syzkaller-00443-g28f961f9d5b7 #0
[  191.733158][ T9850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[  191.743327][ T9850] Call Trace:
[  191.747149][ T9850]  <TASK>
[  191.750106][ T9850]  dump_stack_lvl+0x241/0x360
[  191.754829][ T9850]  ? __pfx_dump_stack_lvl+0x10/0x10
[  191.760065][ T9850]  ? __pfx__printk+0x10/0x10
[  191.764975][ T9850]  ? __pfx_lock_release+0x10/0x10
[  191.770039][ T9850]  should_fail_ex+0x3b0/0x4e0
[  191.774756][ T9850]  _copy_from_user+0x2f/0xe0
[  191.779474][ T9850]  copy_msghdr_from_user+0xae/0x680
[  191.785028][ T9850]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  191.790885][ T9850]  __sys_sendmsg+0x23d/0x3a0
[  191.795506][ T9850]  ? __pfx___sys_sendmsg+0x10/0x10
[  191.800712][ T9850]  ? vfs_write+0x7c4/0xc90
[  191.805302][ T9850]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  191.811698][ T9850]  ? do_syscall_64+0x100/0x230
[  191.816495][ T9850]  ? do_syscall_64+0xb6/0x230
[  191.821215][ T9850]  do_syscall_64+0xf3/0x230
[  191.825918][ T9850]  ? clear_bhb_loop+0x35/0x90
[  191.830807][ T9850]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  191.836827][ T9850] RIP: 0033:0x7f711147cf69
[  191.841457][ T9850] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  191.861725][ T9850] RSP: 002b:00007f71122210c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  191.870270][ T9850] RAX: ffffffffffffffda RBX: 00007f71115b3f80 RCX: 00007f711147cf69
[  191.878383][ T9850] RDX: 0000000000000000 RSI: 00000000200006c0 RDI: 0000000000000003
[  191.887586][ T9850] RBP: 00007f7112221120 R08: 0000000000000000 R09: 0000000000000000
[  191.897632][ T9850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  191.911628][ T9850] R13: 000000000000000b R14: 00007f71115b3f80 R15: 00007fff9554ee48
[  191.920439][ T9850]  </TASK>
[  191.948466][ T9855] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  192.743945][ T9877] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.2'.
[  192.757059][ T9877] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
[  192.945977][ T9890] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  193.044911][ T9890] team1: Mode changed to "broadcast"
[  193.181852][ T5191] bridge0: port 2(bridge_slave_1) entered disabled state
[  193.422635][ T9919] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[  193.500850][ T9919] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  194.040261][ T9935] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  194.222646][ T9940] veth1_macvtap: entered promiscuous mode
[  194.255387][ T9940] veth1_macvtap: entered allmulticast mode
[  194.269023][ T9940] macsec0: left promiscuous mode
[  194.292475][ T9940] macsec0: left allmulticast mode
[  194.311431][ T9940] veth1_macvtap: left allmulticast mode
[  194.336331][ T9947] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  194.367752][ T9947] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'.
[  194.607484][ T1248] ieee802154 phy0 wpan0: encryption failed: -22
[  195.023372][ T9973] syzkaller0: left promiscuous mode
[  195.037945][ T9973] syzkaller0: left allmulticast mode
[  195.097436][ T9973] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  195.139143][ T9973] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  195.166329][ T9973] netdevsim netdevsim4 netdevsim0: left promiscuous mode
[  195.183884][   T29] audit: type=1804 audit(1718005237.104:21): pid=9978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2352552031/syzkaller.el3hsx/278/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0
[  195.441755][ T9989] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'.
[  195.483878][ T9989] netlink: 'syz-executor.1': attribute type 214 has an invalid length.
[  195.752173][T10000] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  195.832813][ T9999] batadv_slave_0: entered promiscuous mode
[  196.433207][ T9991] batadv_slave_0: left promiscuous mode
[  196.891642][T10031] bond_slave_0: entered promiscuous mode
[  196.897874][T10031] bond_slave_1: entered promiscuous mode
[  196.908573][T10031] macsec1: entered promiscuous mode
[  196.924654][T10031] bond0: entered promiscuous mode
[  196.940771][T10031] macsec1: entered allmulticast mode
[  196.948511][T10031] bond0: entered allmulticast mode
[  196.963450][T10031] bond_slave_0: entered allmulticast mode
[  196.983370][T10031] bond_slave_1: entered allmulticast mode
[  197.097348][T10037] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'.
[  197.132311][T10037] netlink: 9392 bytes leftover after parsing attributes in process `syz-executor.2'.
[  197.168508][T10037] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.2'.
[  197.426939][T10050] netlink: 172 bytes leftover after parsing attributes in process `syz-executor.0'.
[  197.584620][T10053] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  197.762458][T10062] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  198.510556][T10077] netlink: 'syz-executor.4': attribute type 16 has an invalid length.
[  199.263786][T10097] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'.
[  199.464299][T10107] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  199.515444][T10108] sctp: [Deprecated]: syz-executor.2 (pid 10108) Use of int in max_burst socket option deprecated.
[  199.515444][T10108] Use struct sctp_assoc_value instead
[  199.614819][T10111] netlink: 'syz-executor.1': attribute type 16 has an invalid length.
[  199.642705][T10112] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  199.950232][T10121] syzkaller0: entered promiscuous mode
[  199.983585][T10121] syzkaller0: entered allmulticast mode
[  200.993108][   T29] audit: type=1804 audit(1718005242.914:22): pid=10128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3467901568/syzkaller.hNeKxz/173/cgroup.controllers" dev="sda1" ino=1953 res=1 errno=0
[  201.775998][T10170] netlink: 'syz-executor.4': attribute type 10 has an invalid length.
[  202.009471][T10183] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  203.455305][T10221] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  204.135676][T10239] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  205.013156][T10257] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  205.595218][T10285] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  206.727085][T10307] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'.
[  206.775775][T10309] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  206.889941][T10315] netlink: 'syz-executor.2': attribute type 10 has an invalid length.
[  206.990563][T10315] team0: Device netdevsim0 failed to register rx_handler
[  207.416258][T10333] netlink: 'syz-executor.1': attribute type 9 has an invalid length.
[  207.427891][T10334] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  207.443142][T10333] netlink: 'syz-executor.1': attribute type 7 has an invalid length.
[  207.469051][T10333] netlink: 'syz-executor.1': attribute type 8 has an invalid length.
[  207.946536][   T29] audit: type=1804 audit(1718005249.864:23): pid=10327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3467901568/syzkaller.hNeKxz/188/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0
[  208.241701][T10350] netlink: 'syz-executor.1': attribute type 10 has an invalid length.
[  208.282004][T10350] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  208.304238][T10350] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  208.328797][T10350] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  208.352259][T10352] netlink: 328 bytes leftover after parsing attributes in process `syz-executor.2'.
[  208.602537][T10360] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  208.682221][T10360] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[  208.717106][T10360] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[  208.989519][T10378] netlink: 'syz-executor.4': attribute type 10 has an invalid length.
[  209.033034][T10379] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  209.140372][T10387] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  209.157392][T10387] netlink: 168864 bytes leftover after parsing attributes in process `syz-executor.2'.
[  209.376897][T10395] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'.
[  209.408188][T10395] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8
[  209.995480][T10411] netlink: 'syz-executor.4': attribute type 10 has an invalid length.
[  210.858017][ T5163] IPVS: starting estimator thread 0...
[  210.976913][T10468] IPVS: using max 19 ests per chain, 45600 per kthread
[  212.341635][T10534] netlink: 'syz-executor.3': attribute type 25 has an invalid length.
[  212.362135][T10534] netlink: 'syz-executor.3': attribute type 7 has an invalid length.
[  212.407667][T10527] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.3'.
[  213.434310][T10580] netlink: 'syz-executor.1': attribute type 25 has an invalid length.
[  213.470622][T10580] netlink: 'syz-executor.1': attribute type 7 has an invalid length.
[  213.527484][T10574] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.1'.
[  213.737387][T10587] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.2'.
[  213.839159][T10592] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  213.909381][T10592] bond0: entered promiscuous mode
[  213.947875][T10592] bond_slave_0: entered promiscuous mode
[  213.957398][T10592] bond_slave_1: entered promiscuous mode
[  213.963296][T10592] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  214.683785][T10623] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'.
[  214.772106][T10627] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  214.791819][T10627] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  214.812712][T10627] batman_adv: batadv0: Removing interface: batadv_slave_0
[  214.846351][T10627] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  214.867117][T10627] batman_adv: batadv0: Removing interface: batadv_slave_1
[  215.530700][ T5163] IPVS: starting estimator thread 0...
[  215.637387][T10657] IPVS: using max 18 ests per chain, 43200 per kthread
[  217.034161][T10720] sctp: [Deprecated]: syz-executor.0 (pid 10720) Use of int in max_burst socket option deprecated.
[  217.034161][T10720] Use struct sctp_assoc_value instead
[  217.156974][ T5120] Bluetooth: hci3: command 0x0406 tx timeout
[  217.954588][T10766] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  218.628082][T10791] netlink: 'syz-executor.1': attribute type 10 has an invalid length.
[  220.156198][T10846] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[  220.219601][T10846] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  220.840414][ T5120] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  220.853266][ T5120] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  220.863452][ T5120] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  220.898075][ T5120] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  220.912330][ T5120] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  220.932039][ T5120] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  221.375536][T10874] bridge_slave_1: left allmulticast mode
[  221.386417][T10874] bridge_slave_1: left promiscuous mode
[  221.397239][T10874] bridge0: port 2(bridge_slave_1) entered disabled state
[  221.508690][T10862] chnl_net:caif_netlink_parms(): no params data found
[  221.687988][T10896] bond0: (slave macsec1): Error -34 calling dev_set_mtu
[  221.777396][T10903] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  221.811937][T10862] bridge0: port 1(bridge_slave_0) entered blocking state
[  221.837567][T10862] bridge0: port 1(bridge_slave_0) entered disabled state
[  221.855735][T10862] bridge_slave_0: entered allmulticast mode
[  221.868793][T10862] bridge_slave_0: entered promiscuous mode
[  221.897203][T10862] bridge0: port 2(bridge_slave_1) entered blocking state
[  221.928555][T10862] bridge0: port 2(bridge_slave_1) entered disabled state
[  221.954058][T10862] bridge_slave_1: entered allmulticast mode
[  221.982917][T10862] bridge_slave_1: entered promiscuous mode
[  222.003926][T10903] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  222.073937][T10862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  222.093922][T10862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  222.215071][T10862] team0: Port device team_slave_0 added
[  222.229929][T10862] team0: Port device team_slave_1 added
[  222.340151][T10862] batman_adv: batadv0: Adding interface: batadv_slave_0
[  222.357679][T10862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  222.403579][T10862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  222.443724][T10862] batman_adv: batadv0: Adding interface: batadv_slave_1
[  222.468101][T10862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  222.558097][T10862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  222.703710][T10862] hsr_slave_0: entered promiscuous mode
[  222.721463][T10862] hsr_slave_1: entered promiscuous mode
[  222.737694][T10862] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  222.752781][T10862] Cannot create hsr debugfs directory
[  222.854386][T10940] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[  222.920369][T10940] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  222.997503][ T5124] Bluetooth: hci3: command tx timeout
[  223.247151][T10862] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  223.396177][T10862] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  223.530519][T10862] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  223.693196][T10862] bond0: (slave netdevsim0): Releasing backup interface
[  223.714017][T10862] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode
[  223.749357][T10862] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  223.974933][T10862] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  223.988478][T10862] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  224.005862][T10862] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  224.022718][T10862] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  224.043902][T10980] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  224.125976][T10980] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  224.210638][T10862] 8021q: adding VLAN 0 to HW filter on device bond0
[  224.266269][T10862] 8021q: adding VLAN 0 to HW filter on device team0
[  224.303080][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state
[  224.310393][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state
[  224.347021][  T785] bridge0: port 2(bridge_slave_1) entered blocking state
[  224.354468][  T785] bridge0: port 2(bridge_slave_1) entered forwarding state
[  224.775200][T10862] 8021q: adding VLAN 0 to HW filter on device batadv0
[  224.916121][T10862] veth0_vlan: entered promiscuous mode
[  225.004624][T10862] veth1_vlan: entered promiscuous mode
[  225.080974][ T5124] Bluetooth: hci3: command tx timeout
[  225.135669][T10862] veth0_macvtap: entered promiscuous mode
[  225.148576][T10862] veth1_macvtap: entered promiscuous mode
[  225.174237][T10862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  225.196867][T10862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.211174][T10862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  225.234225][T10862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.246301][T10862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  225.266746][T10862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.287677][T10862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  225.313680][T10862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.341846][T10862] batman_adv: batadv0: Interface activated: batadv_slave_0
[  225.381720][T10862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  225.392885][T10862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.422245][T10862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  225.458122][T10862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.486228][T10862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  225.514625][T10862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.539128][T10862] batman_adv: batadv0: Interface activated: batadv_slave_1
[  225.558318][T11033] netlink: 'syz-executor.1': attribute type 16 has an invalid length.
[  225.640189][T10862] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  225.655892][T10862] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  225.673687][T10862] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  225.685685][T10862] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  225.941304][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  225.964863][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  226.029132][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  226.063119][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  226.331002][T11068] batadv0: entered promiscuous mode
[  226.432374][T11068] 8021q: adding VLAN 0 to HW filter on device batadv0
[  226.473611][T11072] netlink: 'syz-executor.2': attribute type 16 has an invalid length.
[  226.946965][   T29] audit: type=1800 audit(1718005268.864:24): pid=11087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1965 res=0 errno=0
[  226.983956][   T29] audit: type=1804 audit(1718005268.874:25): pid=11087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir472244918/syzkaller.kb7ORm/139/memory.events" dev="sda1" ino=1965 res=1 errno=0
[  227.024925][   T29] audit: type=1804 audit(1718005268.874:26): pid=11087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir472244918/syzkaller.kb7ORm/139/memory.events" dev="sda1" ino=1965 res=1 errno=0
[  227.114351][   T29] audit: type=1804 audit(1718005268.944:27): pid=11091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir472244918/syzkaller.kb7ORm/139/memory.events" dev="sda1" ino=1965 res=1 errno=0
[  227.158954][ T5124] Bluetooth: hci3: command tx timeout
[  227.161986][T11091] can: request_module (can-proto-0) failed.
[  227.191958][   T29] audit: type=1804 audit(1718005268.944:28): pid=11091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir472244918/syzkaller.kb7ORm/139/memory.events" dev="sda1" ino=1965 res=1 errno=0
[  227.545816][T11104] dccp_invalid_packet: P.Data Offset(0) too small
[  227.690465][T11112] netlink: 'syz-executor.1': attribute type 16 has an invalid length.
[  227.907400][T11121] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[  227.973606][T11121] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  228.768231][T11146] netlink: 'syz-executor.2': attribute type 16 has an invalid length.
[  228.928934][T11149] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'.
[  229.254280][ T5120] Bluetooth: hci3: command tx timeout
[  229.424296][T11166] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[  229.525388][T11166] team0: Port device bridge1 added
[  229.621689][T11169] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  229.678308][T11169] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  229.862583][T11179] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[  229.925165][T11179] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  230.562027][T11194] bridge0: port 1(bridge_slave_0) entered disabled state
[  230.850707][T11204] netlink: 'syz-executor.3': attribute type 4 has an invalid length.
[  231.134508][T11214] pim6reg: entered allmulticast mode
[  231.211430][T11217] netlink: 'syz-executor.1': attribute type 3 has an invalid length.
[  231.317385][ T5120] Bluetooth: hci3: command 0x0405 tx timeout
[  231.628691][T11231] macsec1: entered promiscuous mode
[  231.634043][T11231] vlan0: entered promiscuous mode
[  231.651053][T11231] vlan0: left promiscuous mode
[  232.269903][T11247] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  232.426923][T11255] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  232.510701][T11255] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  233.283244][T11268] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'.
[  233.394925][T11276] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  234.356366][T11303] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  234.559478][T11310] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0
[  234.808646][T11314] netlink: 328 bytes leftover after parsing attributes in process `syz-executor.2'.
[  235.377073][T11335] Bluetooth: MGMT ver 1.22
[  235.400495][T11335] Bluetooth: hci3: invalid length 0, exp 2 for type 12
[  235.488945][T11335] macvlan1: entered allmulticast mode
[  235.506979][T11335] macvlan1: mtu greater than device maximum
[  236.000956][T11364] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[  236.086375][T11364] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  236.240081][T11372] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  237.096360][T11395] Bluetooth: hci3: invalid length 0, exp 2 for type 12
[  237.162547][T11395] macvlan3: entered allmulticast mode
[  237.201904][T11395] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  237.241942][T11395] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  237.283043][T11395] macvlan3: entered promiscuous mode
[  237.298134][T11395] team0: Port device macvlan3 added
[  237.305406][T11401] netlink: 'syz-executor.1': attribute type 16 has an invalid length.
[  237.755806][T11421] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[  237.809983][T11421] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  238.096436][T11435] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  238.465397][T11444] netlink: 'syz-executor.1': attribute type 16 has an invalid length.
[  238.534459][T11448] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[  238.608416][T11448] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  239.054954][T11475] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  239.104984][T11475] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  239.423155][T11484] syz-executor.0: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1
[  239.464327][T11484] CPU: 1 PID: 11484 Comm: syz-executor.0 Not tainted 6.10.0-rc2-syzkaller-00443-g28f961f9d5b7 #0
[  239.474974][T11484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[  239.485143][T11484] Call Trace:
[  239.488453][T11484]  <TASK>
[  239.491493][T11484]  dump_stack_lvl+0x241/0x360
[  239.496210][T11484]  ? __pfx_dump_stack_lvl+0x10/0x10
[  239.501449][T11484]  ? __pfx__printk+0x10/0x10
[  239.506074][T11484]  ? cpuset_print_current_mems_allowed+0x1f/0x350
[  239.512527][T11484]  ? cpuset_print_current_mems_allowed+0x31e/0x350
[  239.519342][T11484]  warn_alloc+0x278/0x410
[  239.523716][T11484]  ? stack_depot_save_flags+0x29/0x830
[  239.529224][T11484]  ? __vmalloc_node_range_noprof+0x10b/0x1460
[  239.535333][T11484]  ? __pfx_warn_alloc+0x10/0x10
[  239.541026][T11484]  ? kasan_save_track+0x3f/0x80
[  239.545921][T11484]  ? __kasan_kmalloc+0x98/0xb0
[  239.550729][T11484]  ? xsk_setsockopt+0x598/0x950
[  239.555619][T11484]  ? do_sock_setsockopt+0x3af/0x720
[  239.560847][T11484]  ? __sys_setsockopt+0x1ae/0x250
[  239.565985][T11484]  ? __x64_sys_setsockopt+0xb5/0xd0
[  239.571220][T11484]  ? do_syscall_64+0xf3/0x230
[  239.575925][T11484]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  239.582121][T11484]  __vmalloc_node_range_noprof+0x130/0x1460
[  239.588075][T11484]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  239.594443][T11484]  ? __kasan_kmalloc+0x98/0xb0
[  239.599240][T11484]  ? xskq_create+0x54/0x170
[  239.603780][T11484]  vmalloc_user_noprof+0x74/0x80
[  239.608756][T11484]  ? xskq_create+0xb6/0x170
[  239.613293][T11484]  xskq_create+0xb6/0x170
[  239.617660][T11484]  xsk_init_queue+0xa1/0x100
[  239.622281][T11484]  xsk_setsockopt+0x598/0x950
[  239.627007][T11484]  ? __pfx_xsk_setsockopt+0x10/0x10
[  239.632323][T11484]  ? __pfx_lock_acquire+0x10/0x10
[  239.637377][T11484]  ? aa_sock_opt_perm+0x79/0x120
[  239.642350][T11484]  ? bpf_lsm_socket_setsockopt+0x9/0x10
[  239.648101][T11484]  ? security_socket_setsockopt+0x87/0xb0
[  239.653852][T11484]  ? __pfx_xsk_setsockopt+0x10/0x10
[  239.659082][T11484]  do_sock_setsockopt+0x3af/0x720
[  239.664152][T11484]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  239.669733][T11484]  ? __fget_files+0x29/0x470
[  239.674377][T11484]  ? __fget_files+0x3f6/0x470
[  239.679101][T11484]  __sys_setsockopt+0x1ae/0x250
[  239.683988][T11484]  __x64_sys_setsockopt+0xb5/0xd0
[  239.689140][T11484]  do_syscall_64+0xf3/0x230
[  239.693693][T11484]  ? clear_bhb_loop+0x35/0x90
[  239.698416][T11484]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  239.704373][T11484] RIP: 0033:0x7f727227cf69
[  239.708877][T11484] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  239.728611][T11484] RSP: 002b:00007f7271dde0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  239.737157][T11484] RAX: ffffffffffffffda RBX: 00007f72723b4050 RCX: 00007f727227cf69
[  239.745345][T11484] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000003
[  239.753386][T11484] RBP: 00007f72722da6fe R08: 0000000000000020 R09: 0000000000000000
[  239.761607][T11484] R10: 00000000200033c0 R11: 0000000000000246 R12: 0000000000000000
[  239.769698][T11484] R13: 000000000000000b R14: 00007f72723b4050 R15: 00007fffdfad0308
[  239.778061][T11484]  </TASK>
[  239.792606][T11484] Mem-Info:
[  239.795867][T11484] active_anon:14992 inactive_anon:0 isolated_anon:0
[  239.795867][T11484]  active_file:15 inactive_file:47729 isolated_file:0
[  239.795867][T11484]  unevictable:768 dirty:1098 writeback:0
[  239.795867][T11484]  slab_reclaimable:12127 slab_unreclaimable:97606
[  239.795867][T11484]  mapped:19112 shmem:1674 pagetables:670
[  239.795867][T11484]  sec_pagetables:0 bounce:0
[  239.795867][T11484]  kernel_misc_reclaimable:0
[  239.795867][T11484]  free:1384886 free_pcp:288 free_cma:0
[  239.885564][T11484] Node 0 active_anon:59868kB inactive_anon:0kB active_file:60kB inactive_file:191548kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:74448kB dirty:4988kB writeback:0kB shmem:5160kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10692kB pagetables:2580kB sec_pagetables:0kB all_unreclaimable? no
[  239.990209][T11484] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  240.056457][T11484] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  240.132654][T11484] lowmem_reserve[]: 0 2571 2571 0 0
[  240.147345][T11484] Node 0 DMA32 free:1566176kB boost:0kB min:35108kB low:43884kB high:52660kB reserved_highatomic:0KB active_anon:60024kB inactive_anon:0kB active_file:60kB inactive_file:194040kB unevictable:1536kB writepending:7784kB present:3129332kB managed:2659884kB mlocked:0kB bounce:0kB free_pcp:5788kB local_pcp:5148kB free_cma:0kB
[  240.220589][T11484] lowmem_reserve[]: 0 0 0 0 0
[  240.256961][T11484] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:308kB unevictable:0kB writepending:4kB present:1048576kB managed:360kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[  240.346397][T11484] lowmem_reserve[]: 0 0 0 0 0
[  240.364740][T11484] Node 1 Normal free:3945968kB boost:0kB min:54788kB low:68484kB high:82180kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB writepending:4kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  240.404549][T11484] lowmem_reserve[]: 0 0 0 0 0
[  240.420693][T11484] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  240.452393][T11484] Node 0 DMA32: 1004*4kB (UME) 126*8kB (UME) 107*16kB (UME) 281*32kB (UME) 88*64kB (UME) 49*128kB (UME) 25*256kB (UME) 24*512kB (UME) 23*1024kB (UME) 10*2048kB (UE) 364*4096kB (UM) = 1581296kB
[  240.537443][T11484] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  240.560646][T11484] Node 1 Normal: 2*4kB (U) 5*8kB (U) 6*16kB (U) 11*32kB (U) 6*64kB (UM) 3*128kB (U) 1*256kB (M) 2*512kB (UM) 1*1024kB (U) 1*2048kB (U) 962*4096kB (M) = 3945968kB
[  240.596889][T11484] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  240.615643][T11484] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  240.631783][T11484] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  240.658125][T11484] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  240.721798][T11484] 48386 total pagecache pages
[  240.732402][ T1096] bridge_slave_1: left allmulticast mode
[  240.745318][ T1096] bridge_slave_1: left promiscuous mode
[  240.751560][T11484] 0 pages in swap cache
[  240.755886][T11484] Free swap  = 124996kB
[  240.760609][T11484] Total swap = 124996kB
[  240.764972][T11484] 2097051 pages RAM
[  240.771484][T11484] 0 pages HighMem/MovableOnly
[  240.776556][T11484] 400870 pages reserved
[  240.781833][T11484] 0 pages cma reserved
[  240.808930][ T1096] bridge0: port 2(bridge_slave_1) entered disabled state
[  240.851490][ T1096] bridge_slave_0: left allmulticast mode
[  240.858178][ T1096] bridge_slave_0: left promiscuous mode
[  240.864255][ T1096] bridge0: port 1(bridge_slave_0) entered disabled state
[  240.950758][T11546] Bluetooth: hci3: invalid length 0, exp 2 for type 12
[  240.968968][T11547] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  241.031434][ T1096] ip6gretap0 (unregistering): left promiscuous mode
[  241.434412][ T1096] bridge0 (unregistering): left promiscuous mode
[  241.541062][ T1096] bridge1 (unregistering): left promiscuous mode
[  241.564938][ T1096] team0: Port device bridge1 removed
[  241.789342][ T1096] bond0 (unregistering): left promiscuous mode
[  241.795955][ T1096] bond_slave_0: left promiscuous mode
[  241.813188][ T1096] bond_slave_1: left promiscuous mode
[  241.857711][ T1096] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  241.880458][ T1096] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  241.901322][ T1096] bond0 (unregistering): Released all slaves
[  241.939900][T11549] macvlan1: entered allmulticast mode
[  241.959703][T11549] macvlan1: mtu greater than device maximum
[  242.029497][ T1096] tipc: Disabling bearer <udp:syz1>
[  242.048606][ T1096] tipc: Left network mode
[  242.276985][T11563] netlink: 'syz-executor.3': attribute type 16 has an invalid length.
[  242.286977][T11560] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  242.412344][ T1096] team0: left promiscuous mode
[  242.437169][ T1096] team_slave_0: left promiscuous mode
[  242.455823][ T1096] team_slave_1: left promiscuous mode
[  242.482299][T11577] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[  242.514334][ T1096] hsr_slave_0: left promiscuous mode
[  242.529575][ T1096] hsr_slave_1: left promiscuous mode
[  242.580466][ T1096] dummy0: left allmulticast mode
[  242.591621][ T1096] dummy0: left promiscuous mode
[  242.603636][ T1096] veth0_macvtap: left promiscuous mode
[  242.616453][ T1096] veth1_vlan: left promiscuous mode
[  242.633045][ T1096] veth0_vlan: left promiscuous mode
[  242.761626][ T5124] Bluetooth: hci0: command 0x0405 tx timeout
[  243.757695][ T1096] team0 (unregistering): Port device team_slave_1 removed
[  243.847881][ T1096] team0 (unregistering): Port device team_slave_0 removed
[  243.914532][T11607] Bluetooth: hci3: invalid length 0, exp 2 for type 12
[  244.533885][T11577] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  244.562624][T11609] macvlan2: entered allmulticast mode
[  244.582823][T11609] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode
[  244.607962][T11609] mac80211_hwsim hwsim16 wlan0: entered allmulticast mode
[  244.635948][T11609] team0: Port device macvlan2 added
[  244.819136][T11628] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  244.847538][T11626] x_tables: duplicate underflow at hook 2
[  245.089989][T11638] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  245.153042][T11638] batadv0: entered promiscuous mode
[  245.189021][T11646] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  245.217617][T11638] macvtap1: entered promiscuous mode
[  245.223532][T11638] macvtap1: entered allmulticast mode
[  245.269094][T11638] batadv0: entered allmulticast mode
[  245.297974][T11638] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  245.859183][ T5124] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  245.869899][ T5124] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  245.884522][ T5124] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  245.917067][ T5124] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  245.917403][ T1096] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  245.955716][ T5124] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  245.967407][ T5124] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  246.131730][ T1096] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.287020][ T1096] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.454011][ T1096] bond0: (slave netdevsim0): Releasing backup interface
[  246.480079][ T1096] netdevsim netdevsim4 netdevsim0 (unregistering): left promiscuous mode
[  246.500401][ T1096] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.605179][T11704] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  246.992526][T11664] chnl_net:caif_netlink_parms(): no params data found
[  247.072840][ T1096] team0: left allmulticast mode
[  247.086205][ T1096] team_slave_0: left allmulticast mode
[  247.105203][ T1096] team_slave_1: left allmulticast mode
[  247.123423][ T1096] bridge1: left allmulticast mode
[  247.146504][ T1096] bridge2: left allmulticast mode
[  247.165879][ T1096] team0: left promiscuous mode
[  247.182981][ T1096] team_slave_0: left promiscuous mode
[  247.206106][ T1096] team_slave_1: left promiscuous mode
[  247.230206][ T1096] bridge1: left promiscuous mode
[  247.251723][ T1096] bridge2: left promiscuous mode
[  247.271505][ T1096] bridge0: port 3(team0) entered disabled state
[  247.279969][T11722] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  247.363483][ T1096] bridge_slave_1: left allmulticast mode
[  247.377129][ T1096] bridge_slave_1: left promiscuous mode
[  247.401811][ T1096] bridge0: port 2(bridge_slave_1) entered disabled state
[  247.431158][ T1096] bridge_slave_0: left allmulticast mode
[  247.446033][ T1096] bridge_slave_0: left promiscuous mode
[  247.455911][ T1096] bridge0: port 1(bridge_slave_0) entered disabled state
[  248.036891][ T5120] Bluetooth: hci0: command tx timeout
[  248.111965][ T1096] team0: Port device bridge1 removed
[  248.157132][ T1096] team0: Port device bridge2 removed
[  248.356540][ T1096] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  248.370932][ T1096] bond_slave_0: left promiscuous mode
[  248.381383][ T1096] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  248.391369][ T1096] bond_slave_1: left promiscuous mode
[  248.402160][ T1096] bond0 (unregistering): Released all slaves
[  248.415303][ T1096] bond1 (unregistering): Released all slaves
[  248.702896][T11664] bridge0: port 1(bridge_slave_0) entered blocking state
[  248.711555][T11664] bridge0: port 1(bridge_slave_0) entered disabled state
[  248.722411][T11664] bridge_slave_0: entered allmulticast mode
[  248.735535][T11664] bridge_slave_0: entered promiscuous mode
[  248.792222][T11664] bridge0: port 2(bridge_slave_1) entered blocking state
[  248.811639][T11664] bridge0: port 2(bridge_slave_1) entered disabled state
[  248.826084][T11664] bridge_slave_1: entered allmulticast mode
[  248.842705][T11664] bridge_slave_1: entered promiscuous mode
[  248.945177][T11766] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  248.954918][T11664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  249.000017][T11664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  249.111153][T11664] team0: Port device team_slave_0 added
[  249.143928][T11664] team0: Port device team_slave_1 added
[  249.269521][T11664] batman_adv: batadv0: Adding interface: batadv_slave_0
[  249.283001][T11664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  249.353538][T11664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  249.390991][T11664] batman_adv: batadv0: Adding interface: batadv_slave_1
[  249.408404][T11664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  249.470312][T11664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  249.672662][T11664] hsr_slave_0: entered promiscuous mode
[  249.697173][T11664] hsr_slave_1: entered promiscuous mode
[  249.703561][T11664] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  249.714363][T11664] Cannot create hsr debugfs directory
[  250.136826][ T5120] Bluetooth: hci0: command tx timeout
[  250.520362][T11837] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'.
[  250.759944][ T1096] hsr_slave_0: left promiscuous mode
[  250.781815][ T1096] hsr_slave_1: left promiscuous mode
[  250.792528][ T1096] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  250.803565][ T1096] batman_adv: batadv0: Removing interface: batadv_slave_0
[  250.816353][ T1096] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  250.838393][ T1096] batman_adv: batadv0: Removing interface: batadv_slave_1
[  250.882860][ T1096] veth1_macvtap: left promiscuous mode
[  250.894995][ T1096] veth0_macvtap: left promiscuous mode
[  250.903518][ T1096] veth1_vlan: left promiscuous mode
[  250.916087][ T1096] veth0_vlan: left promiscuous mode
[  251.737869][ T1096] team0 (unregistering): Port device team_slave_1 removed
[  251.809365][ T1096] team0 (unregistering): Port device team_slave_0 removed
[  252.211790][ T5124] Bluetooth: hci0: command tx timeout
[  252.598919][T11664] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  252.629504][T11664] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  252.665368][T11664] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  252.713541][T11664] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  253.081700][T11664] 8021q: adding VLAN 0 to HW filter on device bond0
[  253.153275][T11664] 8021q: adding VLAN 0 to HW filter on device team0
[  253.195867][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[  253.203689][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[  253.252669][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[  253.260035][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[  253.283979][T11919] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  253.534468][T11932] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  253.640541][T11664] 8021q: adding VLAN 0 to HW filter on device batadv0
[  253.928057][T11664] veth0_vlan: entered promiscuous mode
[  253.996269][T11664] veth1_vlan: entered promiscuous mode
[  254.208371][T11956] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  254.276889][ T5124] Bluetooth: hci0: command 0x0419 tx timeout
[  254.892610][T11980] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  255.073904][T11987] EXT4-fs warning (device sda1): __ext4_ioctl:1258: Setting inode version is not supported with metadata_csum enabled.
[  255.145634][T11987] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  255.632102][T11997] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[  256.044850][ T1248] ieee802154 phy0 wpan0: encryption failed: -22
[  256.913643][T11980] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  256.914680][T11997] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[  257.062855][T11664] veth0_macvtap: entered promiscuous mode
[  257.119849][T11664] veth1_macvtap: entered promiscuous mode
[  257.229936][T11664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  257.260907][T11664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  257.288757][T11664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  257.314316][T11664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  257.336774][T11664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  257.362721][T11664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  257.389885][T11664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  257.423076][T11664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  257.441027][T11664] batman_adv: batadv0: Interface activated: batadv_slave_0
[  257.465012][T11664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  257.479513][T11664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  257.489877][T11664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  257.500542][T11664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  257.512178][T11664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  257.522750][T11664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  257.539291][T11664] batman_adv: batadv0: Interface activated: batadv_slave_1
[  257.556592][T12038] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[  257.572151][T11664] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  257.583078][T11664] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  257.596350][T11664] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  257.611283][T11664] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  257.651240][T12038] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  257.771239][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  257.789437][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  257.820571][ T1096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  257.841461][ T1096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  258.177798][T12052] syz_tun: refused to change device tx_queue_len
[  258.184271][T12052] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  258.214072][T12052] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.1'.
[  258.231715][T12052] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'.
[  258.302085][T12054] netlink: 328 bytes leftover after parsing attributes in process `syz-executor.2'.
[  258.908616][T12091] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  258.967900][T12081] ieee802154 phy0 wpan0: encryption failed: -22
[  259.233659][T12098] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[  259.883293][T12112] vlan2: entered promiscuous mode
[  259.899195][T12112] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  259.908913][T12112] vlan2: entered allmulticast mode
[  259.914093][T12112] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  260.152428][T12130] openvswitch: netlink: VXLAN extension message has 13 unknown bytes.
[  261.709621][T12176] __nla_validate_parse: 5 callbacks suppressed
[  261.709641][T12176] netlink: 209840 bytes leftover after parsing attributes in process `syz-executor.2'.
[  262.499671][T12210] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  262.539748][T12210] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  263.211431][T12225] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'.
[  264.665837][T12275] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  265.351484][T12282] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow
[  265.661928][T12294] netlink: 'syz-executor.3': attribute type 63 has an invalid length.
[  266.396414][T12325] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  266.791893][T12328] veth1_macvtap: left promiscuous mode
[  266.807163][T12328] macsec0: entered promiscuous mode
[  266.827651][T12328] macsec0: entered allmulticast mode
[  267.082422][T12331] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  267.292125][T12343] FAULT_INJECTION: forcing a failure.
[  267.292125][T12343] name failslab, interval 1, probability 0, space 0, times 1
[  267.349725][T12343] CPU: 1 PID: 12343 Comm: syz-executor.2 Not tainted 6.10.0-rc2-syzkaller-00443-g28f961f9d5b7 #0
[  267.360291][T12343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[  267.370461][T12343] Call Trace:
[  267.373739][T12343]  <TASK>
[  267.376668][T12343]  dump_stack_lvl+0x241/0x360
[  267.381357][T12343]  ? __pfx_dump_stack_lvl+0x10/0x10
[  267.386545][T12343]  ? __pfx__printk+0x10/0x10
[  267.391129][T12343]  ? __pfx___might_resched+0x10/0x10
[  267.396404][T12343]  ? trace_contention_end+0x3c/0x120
[  267.401693][T12343]  ? __mutex_lock+0x2ef/0xd70
[  267.406382][T12343]  should_fail_ex+0x3b0/0x4e0
[  267.411059][T12343]  ? genl_start+0x1cb/0x6d0
[  267.415612][T12343]  should_failslab+0x9/0x20
[  267.420129][T12343]  kmalloc_trace_noprof+0x6c/0x2c0
[  267.425290][T12343]  genl_start+0x1cb/0x6d0
[  267.429640][T12343]  __netlink_dump_start+0x45c/0x780
[  267.434880][T12343]  genl_rcv_msg+0x88c/0xec0
[  267.439470][T12343]  ? mark_lock+0x9a/0x350
[  267.443826][T12343]  ? __pfx_genl_rcv_msg+0x10/0x10
[  267.448856][T12343]  ? __pfx_genl_start+0x10/0x10
[  267.453703][T12343]  ? __pfx_genl_dumpit+0x10/0x10
[  267.458631][T12343]  ? __pfx_genl_done+0x10/0x10
[  267.463400][T12343]  ? __pfx_lock_acquire+0x10/0x10
[  267.468416][T12343]  ? __pfx_tipc_dump_start+0x10/0x10
[  267.473690][T12343]  ? __pfx_tipc_nl_sk_dump+0x10/0x10
[  267.478967][T12343]  ? __pfx_tipc_dump_done+0x10/0x10
[  267.484156][T12343]  ? __pfx___might_resched+0x10/0x10
[  267.489443][T12343]  netlink_rcv_skb+0x1e3/0x430
[  267.494202][T12343]  ? __pfx_genl_rcv_msg+0x10/0x10
[  267.499223][T12343]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  267.504514][T12343]  ? __netlink_deliver_tap+0x77e/0x7c0
[  267.509983][T12343]  genl_rcv+0x28/0x40
[  267.513965][T12343]  netlink_unicast+0x7ea/0x980
[  267.518729][T12343]  ? __pfx_netlink_unicast+0x10/0x10
[  267.524002][T12343]  ? __virt_addr_valid+0x183/0x520
[  267.529111][T12343]  ? __check_object_size+0x49c/0x900
[  267.534391][T12343]  ? bpf_lsm_netlink_send+0x9/0x10
[  267.539503][T12343]  netlink_sendmsg+0x8db/0xcb0
[  267.544271][T12343]  ? __pfx_netlink_sendmsg+0x10/0x10
[  267.549551][T12343]  ? __import_iovec+0x536/0x820
[  267.554396][T12343]  ? aa_sock_msg_perm+0x91/0x160
[  267.559416][T12343]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  267.564697][T12343]  ? security_socket_sendmsg+0x87/0xb0
[  267.570161][T12343]  ? __pfx_netlink_sendmsg+0x10/0x10
[  267.575435][T12343]  __sock_sendmsg+0x221/0x270
[  267.580111][T12343]  ____sys_sendmsg+0x525/0x7d0
[  267.584874][T12343]  ? __pfx_____sys_sendmsg+0x10/0x10
[  267.590254][T12343]  __sys_sendmsg+0x2b0/0x3a0
[  267.594924][T12343]  ? __pfx___sys_sendmsg+0x10/0x10
[  267.600027][T12343]  ? vfs_write+0x7c4/0xc90
[  267.604565][T12343]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  267.610894][T12343]  ? do_syscall_64+0x100/0x230
[  267.615654][T12343]  ? do_syscall_64+0xb6/0x230
[  267.620328][T12343]  do_syscall_64+0xf3/0x230
[  267.624829][T12343]  ? clear_bhb_loop+0x35/0x90
[  267.629530][T12343]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  267.635418][T12343] RIP: 0033:0x7f80d827cf69
[  267.639831][T12343] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  267.659439][T12343] RSP: 002b:00007f80d902d0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  267.667849][T12343] RAX: ffffffffffffffda RBX: 00007f80d83b3f80 RCX: 00007f80d827cf69
[  267.675814][T12343] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000003
[  267.683774][T12343] RBP: 00007f80d902d120 R08: 0000000000000000 R09: 0000000000000000
[  267.691735][T12343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  267.699703][T12343] R13: 000000000000000b R14: 00007f80d83b3f80 R15: 00007ffe364b93a8
[  267.707680][T12343]  </TASK>
[  268.331125][T12375] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  269.823441][T12404] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  269.922927][T12408] can: request_module (can-proto-0) failed.
[  271.267590][T12446] Bluetooth: MGMT ver 1.22
[  271.538901][T12457] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  271.749715][T12466] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  272.640843][T12485] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'.
[  272.651090][T12485] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  272.971987][T12504] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.3'.
[  273.029731][T12504] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.3'.
[  273.047852][T12504] 0ªX¹¦D: renamed from gretap0 (while UP)
[  273.061192][T12504] 0ªX¹¦D: entered allmulticast mode
[  273.072953][T12504] A link change request failed with some changes committed already. Interface 
50ªX¹¦D may have been left with an inconsistent configuration, please check.
[  273.115064][T12512] x_tables: ip_tables: ah match: only valid for protocol 51
[  273.310163][T12518] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  273.591495][T12526] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  274.010704][T12535] netlink: zone id is out of range
[  274.640690][T12562] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  274.710826][T12562] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  274.867323][T12567] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[  274.919348][T12567] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  275.589303][T12578] xt_time: invalid argument - start or stop time greater than 23:59:59
[  275.798867][T12586] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.1'.
[  275.830399][T12586] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[  277.710685][T12640] tipc: Started in network mode
[  277.747897][T12640] tipc: Node identity fe800000000000000000000000000032, cluster identity 4711
[  277.805882][T12640] tipc: Enabled bearer <udp:syz0>, priority 10
[  278.012438][T12670] __nla_validate_parse: 3 callbacks suppressed
[  278.012458][T12670] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[  278.124414][T12670] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  278.604529][ T5120] Bluetooth: hci4: command 0x0405 tx timeout
[  278.815820][T12691] 
: renamed from bond0 (while UP)
[  278.906999][ T5159] tipc: Node number set to 4269801522
[  279.471671][T12716] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[  279.533629][T12716] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  279.605284][T12723] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
[  279.698725][T12729] nbd: socks must be embedded in a SOCK_ITEM attr
[  279.753016][T12732] netlink: 'syz-executor.1': attribute type 2 has an invalid length.
[  279.884355][T12736] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'.
[  280.029268][T12744] netlink: 'syz-executor.4': attribute type 13 has an invalid length.
[  280.342532][T12760] syz-executor.3 (12760) used greatest stack depth: 16368 bytes left
[  280.679142][T12778] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  281.942810][T12818] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'.
[  282.144449][T12827] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  283.015300][T12853] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[  283.065135][T12853] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  283.085280][T12856] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'.
[  283.139867][T12858] team_slave_0: entered promiscuous mode
[  283.148460][T12858] team_slave_0: entered allmulticast mode
[  283.179407][T12858] team0: Port device team_slave_0 removed
[  283.393027][T12866] xt_ipcomp: unknown flags B
[  283.699810][T12886] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  283.736801][T12886] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.2'.
[  283.846601][T12888] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  283.938803][T12888] mac80211_hwsim hwsim17 ÿÿÿÿÿÿ: renamed from wlan1 (while UP)
[  283.961901][T12893] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'.
[  284.012739][T12893] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[  284.316302][T12900] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[  284.490571][T12907] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  284.643746][T12912] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[  284.844010][T12919] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'.
[  284.896355][T12926] netlink: 210620 bytes leftover after parsing attributes in process `syz-executor.2'.
[  284.915851][T12927] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  284.925823][T12926] openvswitch: netlink: ufid size 2296 bytes exceeds the range (1, 16)
[  285.011720][T12936] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
[  285.500455][   T29] audit: type=1800 audit(1718005327.424:29): pid=12957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1966 res=0 errno=0
[  285.603956][T12958] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
[  286.562210][T12987] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  287.026861][T13004] mac80211_hwsim hwsim6 ÿÿÿÿÿÿ: renamed from wlan1 (while UP)
[  287.707086][T13033] dccp_invalid_packet: P.Data Offset(4) too small
[  287.732976][   T29] audit: type=1800 audit(1718005329.654:30): pid=13033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1966 res=0 errno=0
[  287.804217][   T29] audit: type=1800 audit(1718005329.674:31): pid=13033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1966 res=0 errno=0
[  287.883595][T13046] IPVS: sed: TCP 172.20.20.170:0 - no destination available
[  288.910097][T13096] __nla_validate_parse: 6 callbacks suppressed
[  288.910116][T13096] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  289.732776][T13124] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
[  289.771856][T13124] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.4'.
[  289.858491][T13130] xt_CT: You must specify a L4 protocol and not use inversions on it
[  290.227945][T13144] xt_l2tp: v2 doesn't support IP mode
[  291.224510][T13183] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.4'.
[  291.478794][T13203] netlink: 'syz-executor.2': attribute type 3 has an invalid length.
[  291.497788][T13203] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'.
[  291.562547][T13208] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  291.620980][T13208] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  292.173457][T13234] team0: Device vlan2 is already an upper device of the team interface
[  292.564028][T13251] batadv0: entered promiscuous mode
[  292.724255][T13258] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'.
[  292.770701][T13258] bridge0: port 1(bridge_slave_0) entered disabled state
[  292.867392][T13258] bridge_slave_0 (unregistering): left allmulticast mode
[  292.875905][T13258] bridge_slave_0 (unregistering): left promiscuous mode
[  292.884959][T13258] bridge0: port 1(bridge_slave_0) entered disabled state
[  293.339065][T13272] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  293.653097][T13293] netlink: 'syz-executor.1': attribute type 11 has an invalid length.
[  293.677691][T13292] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  294.035301][T13303] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'.
[  294.062998][T13303] bridge0: port 1(bridge_slave_0) entered disabled state
[  294.151664][T13303] bridge_slave_0 (unregistering): left allmulticast mode
[  294.168235][T13303] bridge_slave_0 (unregistering): left promiscuous mode
[  294.183909][T13303] bridge0: port 1(bridge_slave_0) entered disabled state
[  294.330355][T13308] xt_CT: You must specify a L4 protocol and not use inversions on it
[  294.564514][T13317] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'.
[  295.016373][T13340] netlink: 'syz-executor.4': attribute type 5 has an invalid length.
[  295.179781][T13350] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'.
[  295.219477][T13350] bridge0: port 1(bridge_slave_0) entered disabled state
[  295.324087][T13350] bridge_slave_0 (unregistering): left allmulticast mode
[  295.335893][T13350] bridge_slave_0 (unregistering): left promiscuous mode
[  295.351623][T13350] bridge0: port 1(bridge_slave_0) entered disabled state
[  295.475400][T13358] mac80211_hwsim hwsim4 wlan0 (unregistering): left allmulticast mode
[  295.567859][T13358] macvlan3 (unregistering): left promiscuous mode
[  295.592752][T13358] team0: Port device macvlan3 removed
[  295.715088][T13372] xt_addrtype: ipv6 does not support BROADCAST matching
[  296.172552][T13387] Cannot find add_set index 0 as target
[  296.221644][T13390] sctp: [Deprecated]: syz-executor.1 (pid 13390) Use of struct sctp_assoc_value in delayed_ack socket option.
[  296.221644][T13390] Use struct sctp_sack_info instead
[  296.286872][T13390] mac80211_hwsim hwsim18 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  297.404140][T13431] pim6reg1: entered promiscuous mode
[  297.417009][T13431] pim6reg1: entered allmulticast mode
[  297.460815][T13431] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  297.524924][T13431] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
[  297.576542][   T29] audit: type=1804 audit(1718005339.494:32): pid=13433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir472244918/syzkaller.kb7ORm/281/cgroup.controllers" dev="sda1" ino=1949 res=1 errno=0
[  297.841213][T13444] tipc: Started in network mode
[  297.858759][T13444] tipc: Node identity 4, cluster identity 4711
[  297.873676][T13444] tipc: Node number set to 4
[  297.889124][T13444] tipc: Cannot configure node identity twice
[  297.907312][T13444] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'.
[  297.927530][T13444] netlink: 'syz-executor.1': attribute type 214 has an invalid length.
[  299.015024][T13470] netlink: zone id is out of range
[  299.115460][T13473] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  299.147237][T13473] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  299.230899][T13473] syzkaller0: entered allmulticast mode
[  299.326332][T13473] syzkaller0 (unregistering): left allmulticast mode
[  299.702796][   T29] audit: type=1800 audit(1718005341.624:33): pid=13511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1965 res=0 errno=0
[  299.768749][   T29] audit: type=1804 audit(1718005341.624:34): pid=13511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir472244918/syzkaller.kb7ORm/286/memory.events" dev="sda1" ino=1965 res=1 errno=0
[  299.854653][   T29] audit: type=1804 audit(1718005341.634:35): pid=13511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir472244918/syzkaller.kb7ORm/286/memory.events" dev="sda1" ino=1965 res=1 errno=0
[  299.891859][T13515] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  299.923426][   T29] audit: type=1804 audit(1718005341.724:36): pid=13513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir472244918/syzkaller.kb7ORm/286/memory.events" dev="sda1" ino=1965 res=1 errno=0
[  299.995836][T13515] team0: Port device bridge2 added
[  300.198122][ T2844] wlan0: Trigger new scan to find an IBSS to join
[  300.335518][T13531] IPVS: length: 8 != 2408550256
[  300.392693][T13535] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'.
[  300.658392][T13554] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[  300.757328][T13554] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  301.474971][   T29] audit: type=1800 audit(1718005343.394:37): pid=13592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1962 res=0 errno=0
[  301.540426][   T29] audit: type=1804 audit(1718005343.434:38): pid=13592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir212631073/syzkaller.tiTNXf/156/memory.events" dev="sda1" ino=1962 res=1 errno=0
[  301.575771][   T29] audit: type=1804 audit(1718005343.434:39): pid=13592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir212631073/syzkaller.tiTNXf/156/memory.events" dev="sda1" ino=1962 res=1 errno=0
[  301.609120][   T29] audit: type=1804 audit(1718005343.524:40): pid=13595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir212631073/syzkaller.tiTNXf/156/memory.events" dev="sda1" ino=1962 res=1 errno=0
[  301.654665][T13593] ebtables: ebtables: counters copy to user failed while replacing table
[  301.769933][T13597] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  301.998125][T13606] ebtables: ebtables: counters copy to user failed while replacing table
[  302.520944][T13634] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[  302.750563][T13638] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.2'.
[  302.778440][T13638] nbd: must specify at least one socket
[  303.157416][ T2844] wlan0: Trigger new scan to find an IBSS to join
[  303.533166][T13664] dccp_close: ABORT with 80 bytes unread
[  304.077825][T13699] ebtables: ebtables: counters copy to user failed while replacing table
[  304.092666][ T2844] wlan0: Creating new IBSS network, BSSID 5a:b0:97:c4:54:b6
[  304.174747][T13708] netlink: 'syz-executor.3': attribute type 21 has an invalid length.
[  304.198597][ T5124] Bluetooth: hci2: command 0x0405 tx timeout
[  304.458300][   T29] audit: type=1804 audit(1718005346.374:41): pid=13714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir212631073/syzkaller.tiTNXf/163/cgroup.controllers" dev="sda1" ino=1944 res=1 errno=0
[  304.861495][T13741] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[  304.893869][T13741] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  305.089264][T13750] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.4'.
[  305.123912][T13751] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.4'.
[  306.844261][T13806] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'.
[  306.901272][T13811] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'.
[  306.918608][T13816] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'.
[  308.483131][T13862] No such timeout policy "syz0"
[  308.557371][T13867] netlink: 'syz-executor.2': attribute type 6 has an invalid length.
[  308.575193][T13867] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'.
[  308.836850][ T5120] Bluetooth: hci0: command 0x0419 tx timeout
[  309.111559][T13891] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  309.178797][T13891] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  309.619024][T13899] IPv6: sit1: Disabled Multicast RS
[  310.724962][T13943] batadv_slave_0: mtu less than device minimum
[  310.777080][T13943] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.3'.
[  310.809673][T13947] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  310.890061][T13950] vlan3: entered promiscuous mode
[  310.903116][T13950] macvlan1: entered promiscuous mode
[  310.916983][ T5120] Bluetooth: hci0: command 0x0419 tx timeout
[  310.932512][T13950] vlan3: entered allmulticast mode
[  310.967238][T13952] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'.
[  310.969232][T13950] macvlan1: entered allmulticast mode
[  310.977214][T13952] netlink: 'syz-executor.2': attribute type 2 has an invalid length.
[  310.990759][T13952] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'.
[  310.997277][T13950] veth1_vlan: entered allmulticast mode
[  311.019860][T13950] macvlan1: left allmulticast mode
[  311.046932][T13950] veth1_vlan: left allmulticast mode
[  311.059838][T13950] macvlan1: left promiscuous mode
[  311.272566][T13961] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  311.310314][T13962] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[  311.327353][T13958] netlink: 'syz-executor.2': attribute type 10 has an invalid length.
[  311.394921][T13958] 
[  311.397295][T13958] ======================================================
[  311.404318][T13958] WARNING: possible circular locking dependency detected
[  311.411345][T13958] 6.10.0-rc2-syzkaller-00443-g28f961f9d5b7 #0 Not tainted
[  311.418457][T13958] ------------------------------------------------------
[  311.425479][T13958] syz-executor.2/13958 is trying to acquire lock:
[  311.431898][T13958] ffff88802cbc0768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_open+0xe7/0x200
[  311.441125][T13958] 
2024/06/10 07:42:33 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF
[  311.441125][T13958] but task is already holding lock:
[  311.448505][T13958] ffff888060310d20 (team->team_lock_key#3){+.+.}-{3:3}, at: team_add_slave+0xad/0x2750
[  311.458207][T13958] 
[  311.458207][T13958] which lock already depends on the new lock.
[  311.458207][T13958] 
[  311.468615][T13958] 
[  311.468615][T13958] the existing dependency chain (in reverse order) is:
[  311.477635][T13958] 
[  311.477635][T13958] -> #1 (team->team_lock_key#3){+.+.}-{3:3}:
[  311.485830][T13958]        lock_acquire+0x1ed/0x550
[  311.490868][T13958]        __mutex_lock+0x136/0xd70
[  311.495912][T13958]        team_port_change_check+0x51/0x1e0
[  311.501736][T13958]        team_device_event+0x161/0x5b0
[  311.507214][T13958]        notifier_call_chain+0x19f/0x3e0
[  311.512855][T13958]        dev_close_many+0x33c/0x4c0
[  311.518063][T13958]        unregister_netdevice_many_notify+0x544/0x16b0
[  311.524927][T13958]        macvlan_device_event+0x7e0/0x870
[  311.530660][T13958]        notifier_call_chain+0x19f/0x3e0
[  311.536306][T13958]        unregister_netdevice_many_notify+0xd75/0x16b0
[  311.543168][T13958]        unregister_netdevice_queue+0x303/0x370
[  311.549426][T13958]        _cfg80211_unregister_wdev+0x162/0x560
[  311.555594][T13958]        ieee80211_if_remove+0x25d/0x3a0
[  311.561238][T13958]        ieee80211_del_iface+0x19/0x30
[  311.566707][T13958]        cfg80211_remove_virtual_intf+0x23f/0x410
[  311.573130][T13958]        genl_rcv_msg+0xb14/0xec0
[  311.578164][T13958]        netlink_rcv_skb+0x1e3/0x430
[  311.583453][T13958]        genl_rcv+0x28/0x40
[  311.587967][T13958]        netlink_unicast+0x7ea/0x980
[  311.593257][T13958]        netlink_sendmsg+0x8db/0xcb0
[  311.598551][T13958]        __sock_sendmsg+0x221/0x270
[  311.603755][T13958]        ____sys_sendmsg+0x525/0x7d0
[  311.609048][T13958]        __sys_sendmsg+0x2b0/0x3a0
[  311.614169][T13958]        do_syscall_64+0xf3/0x230
[  311.619200][T13958]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  311.625625][T13958] 
[  311.625625][T13958] -> #0 (&rdev->wiphy.mtx){+.+.}-{3:3}:
[  311.633377][T13958]        validate_chain+0x18e0/0x5900
[  311.638775][T13958]        __lock_acquire+0x1346/0x1fd0
[  311.644157][T13958]        lock_acquire+0x1ed/0x550
[  311.649191][T13958]        __mutex_lock+0x136/0xd70
[  311.654233][T13958]        ieee80211_open+0xe7/0x200
[  311.659354][T13958]        __dev_open+0x2d3/0x450
[  311.664253][T13958]        dev_open+0xae/0x1b0
[  311.668864][T13958]        team_add_slave+0x9b3/0x2750
[  311.674150][T13958]        do_setlink+0xe70/0x41f0
[  311.679097][T13958]        rtnl_newlink+0x180b/0x20a0
[  311.684304][T13958]        rtnetlink_rcv_msg+0x89b/0x1180
[  311.689863][T13958]        netlink_rcv_skb+0x1e3/0x430
[  311.695165][T13958]        netlink_unicast+0x7ea/0x980
[  311.700457][T13958]        netlink_sendmsg+0x8db/0xcb0
[  311.705749][T13958]        __sock_sendmsg+0x221/0x270
[  311.710963][T13958]        ____sys_sendmsg+0x525/0x7d0
[  311.716260][T13958]        __sys_sendmsg+0x2b0/0x3a0
[  311.721385][T13958]        do_syscall_64+0xf3/0x230
[  311.726593][T13958]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  311.733115][T13958] 
[  311.733115][T13958] other info that might help us debug this:
[  311.733115][T13958] 
[  311.743386][T13958]  Possible unsafe locking scenario:
[  311.743386][T13958] 
[  311.750840][T13958]        CPU0                    CPU1
[  311.756302][T13958]        ----                    ----
[  311.761671][T13958]   lock(team->team_lock_key#3);
[  311.766714][T13958]                                lock(&rdev->wiphy.mtx);
[  311.773740][T13958]                                lock(team->team_lock_key#3);
[  311.781303][T13958]   lock(&rdev->wiphy.mtx);
[  311.785906][T13958] 
[  311.785906][T13958]  *** DEADLOCK ***
[  311.785906][T13958] 
[  311.794255][T13958] 2 locks held by syz-executor.2/13958:
[  311.799824][T13958]  #0: ffffffff8f5e7448 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x1180
[  311.809355][T13958]  #1: ffff888060310d20 (team->team_lock_key#3){+.+.}-{3:3}, at: team_add_slave+0xad/0x2750
[  311.819578][T13958] 
[  311.819578][T13958] stack backtrace:
[  311.825565][T13958] CPU: 0 PID: 13958 Comm: syz-executor.2 Not tainted 6.10.0-rc2-syzkaller-00443-g28f961f9d5b7 #0
[  311.836259][T13958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[  311.846347][T13958] Call Trace:
[  311.849642][T13958]  <TASK>
[  311.852592][T13958]  dump_stack_lvl+0x241/0x360
[  311.857462][T13958]  ? __pfx_dump_stack_lvl+0x10/0x10
[  311.862774][T13958]  ? print_circular_bug+0x130/0x1a0
[  311.868091][T13958]  check_noncircular+0x36a/0x4a0
[  311.873059][T13958]  ? __pfx_check_noncircular+0x10/0x10
[  311.878634][T13958]  ? lockdep_lock+0x123/0x2b0
[  311.883432][T13958]  ? validate_chain+0x11e/0x5900
[  311.888405][T13958]  ? mark_lock+0x9a/0x350
[  311.892754][T13958]  validate_chain+0x18e0/0x5900
[  311.897633][T13958]  ? __pfx_validate_chain+0x10/0x10
[  311.902853][T13958]  ? mark_lock+0x9a/0x350
[  311.907207][T13958]  ? __pfx_validate_chain+0x10/0x10
[  311.912435][T13958]  ? __pfx_validate_chain+0x10/0x10
[  311.917748][T13958]  ? mark_lock+0x9a/0x350
[  311.922115][T13958]  ? __lock_acquire+0x1346/0x1fd0
[  311.927158][T13958]  ? mark_lock+0x9a/0x350
[  311.931512][T13958]  __lock_acquire+0x1346/0x1fd0
[  311.936394][T13958]  lock_acquire+0x1ed/0x550
[  311.941103][T13958]  ? ieee80211_open+0xe7/0x200
[  311.945895][