last executing test programs:

1m11.016640859s ago: executing program 3:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f00000000c0)=0x9, 0x4)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r5 = socket(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r5, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x990, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/2448]}, 0xa08)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r6, &(0x7f0000000200), 0xf000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
recvmmsg(r3, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x0, 0x401}}}]}, 0x78}}, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0x4, 0xa}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffefb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r11 = accept4$phonet_pipe(r8, &(0x7f0000000180), &(0x7f00000001c0)=0x10, 0x80000)
ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r11, 0xf505, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r10}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c250000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='scsi_dispatch_cmd_start\x00', r12}, 0x10)
ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000080))
r13 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r13, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000005c0)=@allocspi={0x118, 0x16, 0x301, 0x0, 0x0, {{{@in6=@mcast2, @in6=@mcast2}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in6=@remote}, 0x0, 0x90000}, [@srcaddr={0x14, 0xd, @in=@dev}, @sec_ctx={0xc, 0x8, {0x8}}]}, 0x118}}, 0x0)
write$cgroup_type(r9, &(0x7f0000000140), 0x9)

55.570231235s ago: executing program 3:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f00000000c0)=0x9, 0x4)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r5 = socket(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r5, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x990, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/2448]}, 0xa08)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r6, &(0x7f0000000200), 0xf000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
recvmmsg(r3, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x0, 0x401}}}]}, 0x78}}, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0x4, 0xa}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffefb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r11 = accept4$phonet_pipe(r8, &(0x7f0000000180), &(0x7f00000001c0)=0x10, 0x80000)
ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r11, 0xf505, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r10}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c250000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='scsi_dispatch_cmd_start\x00', r12}, 0x10)
ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000080))
r13 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r13, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000005c0)=@allocspi={0x118, 0x16, 0x301, 0x0, 0x0, {{{@in6=@mcast2, @in6=@mcast2}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in6=@remote}, 0x0, 0x90000}, [@srcaddr={0x14, 0xd, @in=@dev}, @sec_ctx={0xc, 0x8, {0x8}}]}, 0x118}}, 0x0)
write$cgroup_type(r9, &(0x7f0000000140), 0x9)

43.706478978s ago: executing program 3:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f00000000c0)=0x9, 0x4)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r5 = socket(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r5, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x990, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/2448]}, 0xa08)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r6, &(0x7f0000000200), 0xf000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
recvmmsg(r3, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x0, 0x401}}}]}, 0x78}}, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0x4, 0xa}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffefb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r11 = accept4$phonet_pipe(r8, &(0x7f0000000180), &(0x7f00000001c0)=0x10, 0x80000)
ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r11, 0xf505, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r10}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c250000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='scsi_dispatch_cmd_start\x00', r12}, 0x10)
ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000080))
r13 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r13, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000005c0)=@allocspi={0x118, 0x16, 0x301, 0x0, 0x0, {{{@in6=@mcast2, @in6=@mcast2}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in6=@remote}, 0x0, 0x90000}, [@srcaddr={0x14, 0xd, @in=@dev}, @sec_ctx={0xc, 0x8, {0x8}}]}, 0x118}}, 0x0)
write$cgroup_type(r9, &(0x7f0000000140), 0x9)

31.695003669s ago: executing program 3:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f00000000c0)=0x9, 0x4)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r5 = socket(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r5, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x990, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/2448]}, 0xa08)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r6, &(0x7f0000000200), 0xf000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
recvmmsg(r3, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x0, 0x401}}}]}, 0x78}}, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0x4, 0xa}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffefb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r11 = accept4$phonet_pipe(r8, &(0x7f0000000180), &(0x7f00000001c0)=0x10, 0x80000)
ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r11, 0xf505, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r10}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c250000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='scsi_dispatch_cmd_start\x00', r12}, 0x10)
ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000080))
r13 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r13, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000005c0)=@allocspi={0x118, 0x16, 0x301, 0x0, 0x0, {{{@in6=@mcast2, @in6=@mcast2}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in6=@remote}, 0x0, 0x90000}, [@srcaddr={0x14, 0xd, @in=@dev}, @sec_ctx={0xc, 0x8, {0x8}}]}, 0x118}}, 0x0)
write$cgroup_type(r9, &(0x7f0000000140), 0x9)

18.559043262s ago: executing program 3:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f00000000c0)=0x9, 0x4)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r5 = socket(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r5, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x990, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/2448]}, 0xa08)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r6, &(0x7f0000000200), 0xf000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
recvmmsg(r3, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x0, 0x401}}}]}, 0x78}}, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0x4, 0xa}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffefb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r11 = accept4$phonet_pipe(r8, &(0x7f0000000180), &(0x7f00000001c0)=0x10, 0x80000)
ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r11, 0xf505, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r10}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c250000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='scsi_dispatch_cmd_start\x00', r12}, 0x10)
ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000080))
r13 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r13, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000005c0)=@allocspi={0x118, 0x16, 0x301, 0x0, 0x0, {{{@in6=@mcast2, @in6=@mcast2}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in6=@remote}, 0x0, 0x90000}, [@srcaddr={0x14, 0xd, @in=@dev}, @sec_ctx={0xc, 0x8, {0x8}}]}, 0x118}}, 0x0)
write$cgroup_type(r9, &(0x7f0000000140), 0x9)

7.843914024s ago: executing program 3:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f00000000c0)=0x9, 0x4)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r5 = socket(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r5, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x990, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/2448]}, 0xa08)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r6, &(0x7f0000000200), 0xf000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
recvmmsg(r3, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x0, 0x401}}}]}, 0x78}}, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0x4, 0xa}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffefb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r11 = accept4$phonet_pipe(r8, &(0x7f0000000180), &(0x7f00000001c0)=0x10, 0x80000)
ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r11, 0xf505, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r10}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c250000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='scsi_dispatch_cmd_start\x00', r12}, 0x10)
ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000080))
r13 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r13, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000005c0)=@allocspi={0x118, 0x16, 0x301, 0x0, 0x0, {{{@in6=@mcast2, @in6=@mcast2}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in6=@remote}, 0x0, 0x90000}, [@srcaddr={0x14, 0xd, @in=@dev}, @sec_ctx={0xc, 0x8, {0x8}}]}, 0x118}}, 0x0)
write$cgroup_type(r9, &(0x7f0000000140), 0x9)

6.016448599s ago: executing program 0:
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0), 0x4)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000), 0x4)
socket$kcm(0x10, 0x0, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x50}}, 0x0)
close(0xffffffffffffffff)
socket$kcm(0x10, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000b80)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000020000000000000050000000800010000"], 0x28}}, 0x0)

5.484195577s ago: executing program 0:
r0 = socket$inet(0x2, 0x80000, 0x23)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000021c0)=@newchain={0xd24, 0x64, 0x400, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x8}, {0xffe0, 0xc}, {0xffe0, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x3a}}, @filter_kind_options=@f_u32={{0x8}, {0xca4, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x4}, @TCA_U32_FLAGS={0x8, 0xb, 0x10000}, @TCA_U32_DIVISOR={0x8, 0x4, 0x93}, @TCA_U32_CLASSID={0x8, 0x1, {0xb, 0xb}}, @TCA_U32_POLICE={0x414, 0x6, [@TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x1, 0x8000, 0x5, 0xffff9d60, 0x6, 0xfffffffa, 0x0, 0x2, 0x2, 0x7f, 0xffff, 0x3ff, 0xffff, 0x6, 0xe, 0x8, 0x0, 0xff2, 0x10001, 0x9, 0xaf9, 0x400, 0xffffffff, 0x8, 0x7fffffff, 0x679, 0x7, 0x0, 0xfc24, 0xfff, 0xb9, 0x0, 0x7, 0x7, 0x20, 0x7, 0x6, 0x6, 0x3, 0x6, 0x0, 0x4, 0x40, 0x6, 0xfff, 0xa1fa, 0x99, 0x0, 0x1, 0x5, 0x68, 0x4, 0x7ff, 0x4, 0x7, 0x1, 0x1, 0x1, 0x1, 0x4, 0xffff8000, 0x7, 0x28000002, 0xffff, 0x7, 0xf32d, 0x747, 0xe9, 0x6, 0xf0, 0x7fffffff, 0x6, 0x10000, 0x5, 0x80, 0x7, 0x0, 0x3000000, 0x423, 0x3, 0x7, 0x0, 0x3e8b4000, 0x8, 0x4, 0x4, 0x20, 0x1, 0x5, 0x0, 0x0, 0x8, 0x18, 0x6, 0x81, 0x8000, 0x0, 0x200, 0x3, 0x9, 0x0, 0x1f, 0xffffffff, 0x3f3, 0x8, 0x6, 0x43ae, 0x0, 0x2, 0x3, 0x9, 0x4, 0x20, 0x2, 0x79, 0x6, 0x6, 0xffffffff, 0xf2e, 0x0, 0x6, 0xfff, 0x7, 0x9, 0xfffffffe, 0x5, 0x4, 0x4, 0x9, 0x4075, 0x0, 0x80, 0x80000001, 0x101, 0x6, 0x63, 0x5, 0x400, 0x100, 0xab, 0x9, 0x3, 0x8001, 0x7fffffff, 0x6, 0x401, 0x4, 0x100, 0x80000001, 0x8, 0xff, 0x73fd, 0x0, 0xfffffdd8, 0x5, 0x0, 0x0, 0x8597, 0xd5d, 0x0, 0x7d9, 0x4, 0x4, 0x6, 0x2, 0x10000, 0x0, 0x0, 0x0, 0x800, 0xfff, 0x0, 0x4, 0x2, 0x1, 0x0, 0x5, 0x7ff, 0xff, 0x3, 0x1ff, 0x4, 0xfffffff9, 0x9, 0xfff, 0xffffa433, 0x57a5, 0x7fff, 0xb9, 0x4, 0x1f, 0x4, 0x0, 0x7, 0x1, 0xffffffff, 0x3f, 0x8, 0x4, 0x8, 0x46, 0xb9, 0x6, 0x0, 0x2, 0x2, 0x8, 0xc86, 0x0, 0x5, 0x0, 0xd1, 0x3, 0x3ff, 0x9, 0xfffffff8, 0x101, 0x8001, 0x7902, 0xfffffff7, 0x3ff, 0x6, 0x2, 0x100, 0x9, 0x9, 0x9, 0xbbbe, 0x81, 0x7ff, 0xfffffff9, 0x8000, 0x8, 0x2, 0xffffff80, 0x3d, 0x7, 0x6cd, 0x10001, 0x9, 0xfffffe01, 0x8000, 0x6754, 0x4, 0x6, 0x3, 0x9, 0x5, 0x7, 0x1, 0x0, 0xff, 0x6, 0x9, 0x2]}]}, @TCA_U32_FLAGS={0x8, 0xb, 0x2}, @TCA_U32_MARK={0x10, 0xa, {0x100, 0x3}}, @TCA_U32_POLICE={0x84c, 0x6, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x2, 0x2, 0x3, 0x80000001, 0x401, 0x9, 0x570d, 0x4, 0x1, 0x56, 0xffffffff, 0x6, 0x7, 0x3, 0x9, 0x1, 0x7, 0xdea5, 0x4, 0x9, 0x6, 0x7, 0x6, 0x7193, 0x2, 0x9, 0x9, 0x9, 0x0, 0x1f, 0xb18e, 0x4ec5, 0x8, 0x800, 0x0, 0x1, 0x7f, 0x5, 0x8000, 0x65c7, 0x5, 0xfffffff8, 0x3, 0x1, 0xb9, 0x7, 0x9a, 0x4, 0xfffffff7, 0x14c3, 0x7f, 0x2, 0x0, 0xa6, 0x1, 0x81, 0x5, 0x1ff, 0x6, 0x100, 0xfff, 0x5, 0x1, 0x0, 0x9, 0xfffff84b, 0x0, 0x5, 0x3ff, 0x6, 0x1, 0x4, 0x4, 0x7ff, 0x9, 0x1, 0x6, 0x2f8, 0xffffffff, 0xa517, 0xbf7d, 0x7, 0xb31a, 0x8, 0x100, 0x6, 0x1ff, 0x8, 0x0, 0x2, 0x3ff, 0x9, 0x800, 0x1000, 0x401, 0x401, 0x1, 0x3, 0x9, 0x4, 0x2, 0x80, 0xf56d, 0xae9, 0x689, 0x8000, 0xffff, 0x2, 0xffff, 0x8, 0x91, 0x10001, 0xcd4dd3e, 0x5, 0x6, 0x0, 0x80, 0x4, 0x401, 0x8, 0x0, 0x6, 0x4, 0x5, 0x6, 0x3, 0x10000, 0x0, 0xfffffffa, 0x4c2f6e88, 0x400, 0x763e, 0x8, 0x2, 0x4, 0x5, 0x1, 0x81, 0x8001, 0x80, 0x7fff, 0x92c0, 0x1f, 0x2, 0x8000, 0x80000000, 0x8, 0x10001, 0x3, 0x3, 0x9, 0x5, 0xfffffffc, 0x5, 0x6, 0x7, 0x1, 0x0, 0x4, 0x0, 0x3f, 0x401, 0x80, 0x3, 0x6d2, 0xf7, 0x81, 0x6, 0x77f, 0x2, 0xfffffffe, 0x8, 0x3, 0x4, 0x3f, 0xffff, 0x3, 0x7fffffff, 0xd4, 0x1, 0x401, 0x0, 0x1f, 0x6, 0x892, 0x9, 0xa22b, 0x7ab0, 0x100, 0xffffffff, 0x6, 0x7, 0x1, 0x5, 0x9, 0x401, 0xc4, 0x1b99, 0x1, 0x1ff, 0x9, 0x1, 0x70, 0x1, 0x3, 0x6, 0x80, 0x4, 0x1, 0x0, 0x2, 0x1, 0x9, 0x0, 0x5, 0x0, 0x7fffffff, 0x4, 0xcba, 0x3, 0x6, 0x1, 0x7ff, 0x6, 0x3, 0x81, 0xe61, 0x8, 0x1, 0x2, 0x4, 0x80000000, 0x1000, 0x3, 0x1000, 0x3, 0x2, 0x9, 0x0, 0x3f, 0x2612eaa7, 0x2, 0x1, 0x3, 0x3, 0x6, 0x1, 0x4, 0xc4f, 0x2, 0x3, 0xfffffff8, 0x5, 0x1, 0x80000000]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xa6}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7fffffff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x80}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x20}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x0, 0x6d, 0x5, 0x7, 0x2, 0x0, 0x10000, 0x9, 0xbb9, 0x71e, 0xffffffff, 0x2f, 0x4, 0x6, 0xfffffff7, 0x80000001, 0x5, 0x5, 0x1, 0x0, 0x2, 0x7f, 0x5, 0x7, 0x100, 0x80000001, 0x9, 0x3, 0x9, 0x2, 0x60, 0x3, 0x51f5, 0x4, 0x5, 0x720f00, 0x0, 0x0, 0x5970, 0x101, 0x98, 0x8, 0x9, 0x4, 0x0, 0x0, 0x5, 0x40, 0xfff, 0x1ff, 0x37, 0x0, 0x258, 0x0, 0x7, 0x80, 0xf2, 0x2, 0x4, 0x7, 0x55b, 0xaa0d, 0x0, 0x1, 0x8000, 0x1bb6, 0x101, 0x5, 0x7fff, 0x7, 0x9, 0x7, 0x157, 0x80, 0x4, 0x5d, 0xffff, 0x21, 0x8000, 0x9, 0x1, 0x1, 0x3, 0x3f, 0x8000, 0x8, 0x2, 0x2, 0x10001, 0x7, 0x1000, 0x1, 0x101, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x4, 0x20, 0x8, 0xfffffffd, 0x3, 0x1, 0x10001, 0x9, 0x7, 0x800, 0x800, 0x1, 0xfffffffe, 0xffffffff, 0x3, 0x654, 0x1, 0x0, 0xffffffff, 0x4, 0xfffffeff, 0x80000001, 0x8001, 0x1, 0x20, 0x2, 0x3, 0x2, 0x0, 0x8000, 0x3, 0x4, 0x4, 0x80, 0x6, 0x1000, 0x100, 0x4, 0x5, 0x800, 0x1, 0x5, 0x2, 0x2800000, 0x800, 0x94cb, 0x2, 0x8, 0x6, 0x7e, 0x8000, 0x6, 0x9ac9, 0xd9, 0x4, 0x4, 0x80000001, 0xfffffffe, 0x80, 0xfff, 0x100000, 0x77d6, 0xae11, 0x0, 0x0, 0x6, 0x8001, 0x81, 0x40, 0xfffffffb, 0xff, 0x4f, 0x8000, 0x5, 0x7, 0x7, 0x1, 0xffff, 0x4, 0x5, 0x1f, 0x7fffffff, 0x9, 0x1, 0x7fffffff, 0x6, 0x3f, 0xfffffff8, 0x1f, 0x8, 0x5, 0x1f, 0x0, 0xffffffff, 0xffffff15, 0x6, 0x2, 0x2, 0x90, 0x4, 0x1, 0x36, 0x2, 0x20, 0x4, 0x5, 0x3, 0x5996f0be, 0x307c, 0x10000, 0x0, 0xfffffff8, 0x3, 0x9, 0x9, 0x121, 0x4, 0x10000, 0x8, 0x574f, 0x973, 0x80, 0x16, 0x21e6a426, 0x101, 0x80, 0x91d2, 0x66c3, 0x40, 0xfffffffa, 0x400, 0x5, 0x9, 0x6, 0x4, 0x6bb8c96f, 0x401, 0x1, 0x7, 0x2, 0x4, 0x2, 0x4, 0x80000000, 0xa3000000, 0x5, 0x7, 0x80, 0xfffff800, 0x7, 0x4, 0x94e, 0x6, 0x8]}]}, @TCA_U32_HASH={0x8, 0x2, 0x7}]}}, @filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xab}, @TCA_U32_HASH={0x8, 0x2, 0x401}]}}, @TCA_RATE={0x6, 0x5, {0xbe, 0x8c}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_CHAIN={0x8, 0xb, 0xffffffff}, @filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xe, 0xb}}]}}]}, 0xd24}, 0x1, 0x0, 0x0, 0x20001008}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r3, &(0x7f0000000200), 0xf000)
sendfile(r3, r2, 0x0, 0xf03a0005)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
write$binfmt_misc(r1, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], 0x1004)
r4 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)
recvmsg$kcm(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/41, 0x29}, 0x0)
write$bt_hci(r2, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x6)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000b030000000000000000f9060000000900010073797a300000000014000000020a0104000000000000000000000000200000001e0a05010000000000000000070000000900010073797a3000000000140000001000010000000000000000000084000a9c0e6a06450ff45486673d792ade04ceea8dab42ea1a20b3816ca4661f5b5671ed3659d38e4e9e4abac563f5d2e52ca42187658f7d899a63c19179f0c4f90492e2a65da4f2"], 0x7c}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_merged\x00', 0x275a, 0x0)

5.137600996s ago: executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
unshare(0x62040200)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000870a0000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x4, 0x100b, &(0x7f0000001e40)=""/4107}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000240)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @private1}], 0x1c)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0xfc}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000b80)={@cgroup, 0xffffffffffffffff, 0x24, 0x0, 0x0, @prog_id}, 0x20)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_newvlan={0x18, 0x76, 0x709, 0x0, 0x0, {0x7, 0x2, 0x2}}, 0x18}, 0x1, 0x5502000000000000}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b", @ANYBLOB], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000090}, 0x0)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001940)=ANY=[@ANYBLOB="14d8ba7414955915d6000004b1650000000000030100800c000000000000000000000014000000ff02000000000000000000000000000150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"], 0x114}], 0x1}, 0x0)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet(r4, &(0x7f0000003640)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @private}, 0x10, 0x0, 0x0, &(0x7f00000013c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x18}}], 0x1, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000200002085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000580)=ANY=[@ANYBLOB="9febf1a7d6ae0000000000000c0000000c00000002000000000000000000000a000000000000"], 0x0, 0x26}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0x1, <r6=>0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r5}, 0x20)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r6, 0x58, &(0x7f0000000180)}, 0x6c)
ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000500)=@get={0x1, &(0x7f0000000400)=""/202, 0x7ff})
socket$l2tp6(0xa, 0x2, 0x73)

3.006379776s ago: executing program 4:
socket(0x10, 0x3, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000d40)={'macvlan1\x00'})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newtaction={0x70, 0x30, 0x10b, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ife={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @random="d8c4efb8a5ce"}, @TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_procs(r4, &(0x7f0000000140)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9)
getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f00000001c0), 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000800)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000804}, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$packet(0x11, 0x2, 0x300)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, <r8=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000a00)={r8}, 0x4)
syz_emit_ethernet(0x5e, &(0x7f0000000300)=ANY=[@ANYBLOB="614b0100a01bbbbbbbbbbbbb86dd60081f2000283a00fe8000000000000000000000000000bbff0200000900000000000000000000018902907800000000fe880000000000000000000000000001000000000000000000000000000000010450b76ce64b3a87316b26667ad0af3b0d5e1189cd47104364"], 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x6, 0x10, 0xffffffffffffffff, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
socket$inet(0x2, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

2.735120071s ago: executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000200000bb4a612b1c7858fb00000000fd"], &(0x7f0000000540)='syzkaller\x00', 0x2}, 0x90)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0xf3bc, <r2=>0x0}, 0x8)
r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0x0, 0xceaa, 0x10}, 0xc)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_aout(r4, &(0x7f0000000d00)=ANY=[@ANYRESOCT, @ANYRES8, @ANYRESOCT=0x0, @ANYRESOCT, @ANYRES16, @ANYBLOB="4dced7826eeda5ee16664c4c7c825aa281265d44e2ac624fbe850a8519132f3ac66de85e05278d1d3fe425d4809103e61ae31e2a289fe1fbbabccd326ae96ebcbb9ee51914d6993332795e6081b1f08a15e2b04bc70b076f7e931885351608925477df52efffd1b6fe96e4661f720eb2be92839054564490fb"], 0xc1)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r4, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{0x1, <r5=>0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)='%pi6   \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x2, &(0x7f0000000000)=@raw=[@jmp={0x5, 0x0, 0xd, 0x2, 0x3, 0xffffffffffffffff, 0x10}, @exit], &(0x7f0000000080)='syzkaller\x00', 0x9, 0x3a, &(0x7f00000000c0)=""/58, 0x41000, 0x4, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000140)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x5, 0x8, 0x3}, 0x10, r2, r0, 0x1, &(0x7f0000000300)=[r3, r4, 0x1, r5], &(0x7f0000000340)=[{0x3, 0x1, 0x5, 0xb}], 0x10, 0xa}, 0x90)

2.651956593s ago: executing program 0:
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x0, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000280)={0x0, 0xffffffffffffff16, &(0x7f0000000140)={&(0x7f0000000180)={0x38, 0x1403, 0x13, 0x70bd27, 0x600, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bond\x00'}}]}, 0x38}}, 0x20044010)

2.650097117s ago: executing program 4:
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='ext4_ext_remove_space_done\x00', r1}, 0x10)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100), 0x1001)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x8}})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
clock_gettime(0xffffffff, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000e80)=ANY=[@ANYBLOB="240000000214010009020000000000000900020073797a31000004000800010000000000"], 0x24}}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r3 = socket(0xa, 0x6, 0x0)
setsockopt$sock_int(r3, 0x1, 0x2d, &(0x7f0000000040)=0x3, 0x4)
r4 = epoll_create1(0x0)
listen(r3, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000100))
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0x138, 0x10, 0x0, 0x0, 0x0, {{@in=@loopback, @in=@multicast1}, {@in=@broadcast, 0x0, 0x33}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'xcbc(aes)\x00'}}}]}, 0x138}}, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f00000005c0)={0x8212})
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000001440)={'bridge0\x00', 0x0})
epoll_wait(r4, &(0x7f0000001e40)=[{}], 0x1, 0x0)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xe, 0x4, 0x3a0, 0xffffffff, 0x100, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@ipv6={@local, @mcast1, [0xffffff00, 0xff000000, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {}, 0x2e, 0x7f, 0x4, 0x4}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@srh={{0x30}, {0xe, 0x2, 0x8, 0x0, 0x4, 0x1144, 0xb02}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ipv6={@empty, @remote, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], [0xffffff00, 0xffffff00, 0xffffffff, 0xffffffff], 'nicvf0\x00', 'pimreg1\x00', {}, {}, 0x2e, 0x6}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@srh={{0x30}, {0x0, 0x0, 0xfe, 0x0, 0x7f, 0x2000, 0x1888}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x2}}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, [0x0, 0xff000000, 0xff000000, 0xff000000], [0xffffff00, 0xffffff00, 0x0, 0xffffff00], 'veth1_macvtap\x00', 'veth0_macvtap\x00', {}, {}, 0x34, 0x3, 0x4}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400)
r7 = openat$cgroup_devices(r6, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r7, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\twmw'], 0xa)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r3)
sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f00000016c0)={0x0, 0x1000000, &(0x7f0000001680)={&(0x7f0000001800)=ANY=[@ANYBLOB="2400000007060103000000000000000003000003050001000700000005000100870000009d"], 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0x0)

2.539765801s ago: executing program 4:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002a80)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000480)=[{&(0x7f00000000c0)='W', 0x1}], 0x1}}], 0x1, 0x0)
r1 = socket$inet6(0x10, 0x2, 0x6)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x16}]}, 0x10)
sendto$inet6(r1, &(0x7f0000000000)="1c0000002800050f0c1000000049b23e9b200a000835b3c000000001", 0x1c, 0x0, 0x0, 0x0)
syz_emit_ethernet(0xd6, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0xa0, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x18, 0x1, "00d414ce8ad4"}, {0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "005ff92900ddab4992020900"}, {0x18, 0x5, "aace49d3309292c341ace5b1886d5602c075176b808ba538f4172998fc01f94be1886976a3e7"}]}}}}}}, 0x0)
sendto$inet6(r0, &(0x7f0000000040)="b9", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, 0x1c)
listen(r0, 0x100101)
accept4(r0, 0x0, 0x0, 0x0)

2.355026051s ago: executing program 0:
getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x20000000)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1e, 0xe, &(0x7f00000003c0)=ANY=[@ANYRES32], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x90)
socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
splice(r0, 0x0, r2, 0x0, 0x8000f28, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f", 0x13}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x24, 0x0, 0x0, 0x10, 0x40}, 0x90)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f00000016c0), 0x3af4701e)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYRESOCT=r4], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001740)={0x44, r7, 0x1, 0x0, 0x0, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x1f4, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc8864968781", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0xb, 0x19, &(0x7f0000000a80)=ANY=[@ANYBLOB="950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000086000000184900000500000000005a0000040000008520000005000000b7080000000000007b8af8ff00000000b7080000009000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000085e99a3dd59c0d9aef6e921fea24466000000182300f13fab18cbcd6a539ddb59deeddbbc88ae5001315657b98640d2589da433c9eeb59236fd2b385f144b74d057810c318ad629ada8948d74b0fa93ebc106cd915c70a20dae6dc21ac30a4e622665c71cc2f216bda174b8539bf83a0e7cddfa14d9cffe4e0700000000000000229b8bd4de033a6b35f8115904a49425134133c2dda6a2", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000018160000", @ANYRES32=r2, @ANYBLOB="000000000000000018000000000000000000000001000000"], &(0x7f0000000440)='syzkaller\x00', 0x80000001, 0x5f, &(0x7f0000000540)=""/95, 0x40f00, 0x40, '\x00', 0x0, 0x6, r1, 0x8, &(0x7f00000005c0)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000780)=[r4, r4], &(0x7f0000000800)=[{0x0, 0x5, 0xf, 0x8}, {0x0, 0x1, 0x1, 0x7}, {0x3, 0x2, 0xc, 0xb}, {0x1, 0x3, 0x10, 0x4}], 0x10, 0xffff}, 0x90)
sendmsg$IPVS_CMD_NEW_DAEMON(r3, 0x0, 0x0)
vmsplice(r2, &(0x7f0000000940)=[{&(0x7f0000000cc0)="13", 0x1}, {&(0x7f00000007c0)="b4", 0x1}, {&(0x7f0000000300)="b8", 0x1}, {&(0x7f00000008c0)="ff", 0x1}, {0x0}], 0x5, 0x0)
ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000000000))
socket$kcm(0x29, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000850000004100000085000000400000009500005009f51f185e0000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
r8 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r8, &(0x7f00000001c0)={&(0x7f0000000280)=@l2tp6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x80, 0x0}, 0x240528b8)

2.089062481s ago: executing program 1:
r0 = socket$packet(0x11, 0x2, 0x300)
getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000040), &(0x7f00000000c0)=0x40)
r1 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000400)={0x0, <r2=>0x0}, &(0x7f0000000440)=0xc)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x4e, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=r2}]}, 0x1c}}, 0x0)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140), 0x4)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
recvmmsg(r3, &(0x7f0000001640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0)
r4 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xa9}, 0x1c)
setsockopt$inet6_int(r4, 0x29, 0x4c, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x20044881)
ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000180)=0x6)
r5 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet_opts(r5, 0x0, 0xd, &(0x7f00000008c0)=';', 0x1)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4)
sendmmsg$inet6(r5, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0)
recvmmsg(r5, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0xd6c6, 0x6, 0x52, 0x2320, r7, 0x7cec, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x0, 0xd}, 0x48)
r8 = openat$cgroup_ro(r7, 0x0, 0x0, 0x0)
ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000800)={'bond_slave_1\x00', <r9=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r9], 0x20}}, 0x0)
connect$rds(r8, 0x0, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)

1.672172285s ago: executing program 1:
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/262, 0x101d0}], 0x1}, 0x0)
close(r0)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x6000000, 0x3}, 0x0)

1.608686526s ago: executing program 4:
r0 = socket(0x200000100000011, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="4e84e5679f60"}, 0x14)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4)
sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="0201140088dc19000e000002ad000114000000840600ac141420e0010001808a8972bd0b72e410820c520f0688097dea4c3511f6567f7219891727af628d6d00621adfe968fad5d78d003c981e9878a79858ce656361d7bf8cdace98667294195b5063"], 0xdd12}], 0x1}, 0x0)

1.508093529s ago: executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x1000, 0x30}, 0xc)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000140)=@assoc_value={<r3=>0x0}, &(0x7f0000000500)=0x8)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000400)={r3, @in={{0x2, 0x0, @empty}}}, &(0x7f00000004c0)=0x90)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r4, &(0x7f0000000200), 0x18000)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000022c0)='`', 0x1}], 0x1}}], 0x1, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008070000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='ext4_mb_release_inode_pa\x00', r7}, 0x10)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r8, 0x0, 0x32600)
sendmmsg$sock(r5, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0)
r9 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r9, 0x11b, 0x2, 0x0, 0x0)
nanosleep(&(0x7f0000000000), 0x0)
sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@loopback, @in6=@private1}}, {{@in=@multicast1}, 0x0, @in=@private}}, &(0x7f00000003c0)=0xe8)
clock_gettime(0x0, &(0x7f00000000c0)={<r10=>0x0, <r11=>0x0})
ppoll(&(0x7f0000000080)=[{r0, 0x8000}, {r1, 0x1011}, {r2, 0x450}], 0x3, &(0x7f00000001c0)={r10, r11+60000000}, &(0x7f0000000280)={[0x9]}, 0x8)
socket$netlink(0x10, 0x3, 0x4)

1.022042964s ago: executing program 2:
syz_emit_ethernet(0x310, &(0x7f0000000840)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4a45d", 0x2da, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "518359", 0x0, 0x0, 0x0, @remote, @mcast2, [@hopopts, @dstopts={0x84, 0x18, '\x00', [@generic={0x2, 0x82, "380091ef80b65e31e54331ed8ecdc634bba2ef36bf9ef174a94e5d6aa8662ef82fecc146ad227174369fcc38df6b8c12e00ad4ec1cc216db827922792b987a91426be35f5e173166b1a14064d58fee90081f0425578c8fbf09ab6f69773c3030e5afd4dae9bdc4afc410eb45af807d2be42438f1f6a40e4452c19823b5cfe0e39225"}, @hao={0xc9, 0x10, @mcast2}, @calipso={0x7, 0x28, {0x1, 0x8, 0xc8, 0x6, [0x7, 0x0, 0x0, 0x4]}}, @pad1]}, @hopopts={0x11, 0x1b, '\x00', [@calipso={0x7, 0x38, {0x1, 0xc, 0x3, 0x0, [0x2, 0x0, 0x7, 0x3b8, 0x1, 0x7]}}, @calipso={0x7, 0x8, {0x1, 0x0, 0x40, 0x20}}, @generic={0x0, 0x8e, "b2c2c71a7b8146c30f235bb08544f70d97c756809a9d0ada940c6542c01a15e6f8a8ca767c1f994d296329c791761d4969aa5bd2ad11e7476da39c0d058b5b4352274fa897c091b8a9a1289fd559da474122c2beda6d694f4d8766a9324b685af7d94e36ad344dee0d5fbeda968d9e06caed1f0851855202ac5ab704752884f53285c2c68c701f08a626c382d3de"}, @ra]}, @dstopts={0x0, 0x1c, '\x00', [@generic={0x3, 0x28, "e5829426665380083949bb94d83ea5924a7a9ee5120b2ea406f4504c0a78049060250b36711154dd"}, @calipso={0x7, 0x10, {0x1, 0x2, 0x20, 0x6, [0xffff]}}, @jumbo={0xc2, 0x4, 0x116}, @generic={0x7, 0x94, "054fe668fb86d790d9d71ff7a5e1da58c234a797fe6794f4108bbebbf76962ca4b4ac1d6fd0dd4928e43d49b07e6f8b7c2157beec10e449e0345f8c037b4071057a12f9b5e2f9dbbfcfaca37ed74b1fe8bb1be84bbe07fd1defb8a7bf550cb3a55f393a86f652c5829916da6a2abb178e06134c37a37524ea710dd7a8a7c9a73489aff8cd40214fbe31450e968e5d7b36c6aa1c7"}, @jumbo={0xc2, 0x4, 0xff}, @ra={0x5, 0x2, 0x3}, @enc_lim={0x4, 0x1, 0x2}]}], "3c15"}}}}}}}, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x0, 0x9}, 0x48)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001540)=""/155}, 0x20)
connect$can_bcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
r3 = socket$inet(0x2, 0x6, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB], 0x0}, 0x90)
shutdown(r3, 0x0)
recvmmsg(r3, &(0x7f00000066c0), 0xa0d, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x10, 0xffffffffffffffff, 0x0)
r4 = socket$inet(0x2, 0x1, 0x0)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0)
shutdown(r4, 0x0)

859.757378ms ago: executing program 2:
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x100000001)
r1 = accept4(r0, 0x0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xe)
recvmmsg(r1, &(0x7f0000004300), 0x3a4, 0x2000000, 0x0)

741.717427ms ago: executing program 1:
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000200)={'caif0\x00', 0x400})
socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
write$cgroup_devices(0xffffffffffffffff, 0x0, 0x3)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
sendmmsg$sock(r4, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x10040)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000002600)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x5c, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}]}]}]}], {0x14, 0x10}}, 0xe4}}, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000200)={'caif0\x00', 0x400})
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)

739.028184ms ago: executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000a80)={'batadv0\x00', <r2=>0x0})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r4 = socket$inet6(0xa, 0x2, 0x0)
socket$rxrpc(0x21, 0x2, 0xa)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
socket$unix(0x1, 0x5, 0x0)
r6 = socket(0x2, 0x0, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
listen(0xffffffffffffffff, 0x0)
accept(0xffffffffffffffff, &(0x7f0000000200)=@isdn, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r6)
socket$packet(0x11, 0x3, 0x300)
sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x50483}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_TTL={0x5}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x77365}]}}}]}, 0x4c}}, 0x0)
sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty}}}], 0x20}}], 0x1, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r9}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x31}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x300}, 0x48)
sendmmsg$inet6(r0, &(0x7f0000000180)=[{{&(0x7f0000002b00)={0xa, 0x0, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000004000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002\x00'/32, @ANYRES32=r2], 0x28}}], 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000018010000206d6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095000000000000000000000000ff174351c55582c1cb124527973e4e53b00f211fcd6e8ae25334bdadae60378b826bcd6e112c775d96d9f44df99a24a7a7f2cce35b5b540a2a5adf3148ae01825f514aa98f8bf442ee520e7aaddc9a025ea974ed408ead02ed565e17"], &(0x7f0000000180)='syzkaller\x00'}, 0x90)

584.680976ms ago: executing program 4:
r0 = socket$packet(0x11, 0x2, 0x300)
recvfrom$netrom(r0, 0x0, 0x0, 0x10120, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendto$inet6(r2, &(0x7f0000000100)="ea", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000340)={0x0, 0x5}, 0x8)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r5, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)={0x14, r4, 0xfaac4106a1b87a7, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x38, r8, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}}, 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
writev(r3, &(0x7f0000001400)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47380c988ca", 0xfdef}], 0x1)
write$binfmt_script(r1, &(0x7f0000000080), 0x208e24b)

437.424395ms ago: executing program 2:
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c)
socket$kcm(0x10, 0x0, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010001040000000000010000000900010073797a300000000064000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0800034000000004"], 0xac}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x4)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x80, @loopback={0xff00000000000000}}, 0x1c)
r4 = socket$netlink(0x10, 0x3, 0x4)
writev(r4, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c5602117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000000224e0000", 0x58}], 0x1)
sendmsg$key(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x2, 0x7, 0x9, 0x0, 0x2c, 0x0, 0x70bd2b, 0x25dfdbfb, [@sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e21, @rand_addr=0x64010102}, @in6={0xa, 0x4e23, 0xdfb0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfff}}, @sadb_x_nat_t_type={0x1, 0x14, 0x5}, @sadb_key={0x1b, 0x9, 0x680, 0x0, "5c75e3a3e276474cd8a0dd5530ea8d95e038894e4433577716764e98774dbf168e78dab6d8a49d67c84523b13b1a63dfce3ab524a30e9eb5eb7a09eec3e7053145682a842933abbfdd311578c11d9cf6ac7d6bb099ffdae413042918c14c0cc4ee45353b0a499515bf9c808da1cc3ea9fc97de7b572428a77d047afbcc115663ab4377390baf2c2ff53af4b4ad16c56f57feb3ae26f08ec587be93fa2366fc5a171c581b042bd3f76daace5db02498942db7a7c4392c237aca27936d7dd021899a4b2a40a60b523dccf79c591eb6e3d8"}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e24, 0x8, @private2, 0x32}}]}, 0x160}}, 0x40880)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
r5 = socket(0x3, 0x80000, 0x7fffffff)
accept$inet(r5, &(0x7f0000000080)={0x2, 0x0, @initdev}, &(0x7f00000000c0)=0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000001000000010000000f9ffffff060000000000000e000000000000000000000000002e00"], 0x0, 0x2f}, 0x20)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000c086d28c54ef6dc4860018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000008000006020000f8ffffffb703000008000010b7"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r7}, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, 0x0, 0x0)
socket$inet(0x2, 0xa, 0x1)
socket(0x0, 0x80805, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DAEMON(r9, 0x0, 0x0)

329.19435ms ago: executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000006b00)={&(0x7f0000006980)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@enum={0x1}]}, {0x0, [0x61, 0x61, 0x61, 0x1e]}}, 0x0, 0x2a}, 0x20)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x2, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv4_newrule={0x2c, 0x20, 0x200, 0x0, 0x0, {0x2, 0x10, 0x14}, [@FRA_DST={0x8, 0x1, @rand_addr=0x64010100}, @FRA_FLOW={0x8, 0xb, 0x80000000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x6001c3acef2f3210}, 0x0)

235.617646ms ago: executing program 2:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @printk={@x={0x18, 0x0}, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x5, 0x1, 0xb, 0x1, 0x5}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x19}}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2f94}, 0x90)
splice(r0, &(0x7f0000000040)=0x81, r1, &(0x7f00000001c0)=0x80, 0x6, 0xf)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xfd}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x50}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x7f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000050}, 0x4044001)

181.482637ms ago: executing program 1:
getgid()
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x25, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x4}]}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x70}}, 0x0)

142.966088ms ago: executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000200)={'caif0\x00', 0x400})
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600093582c137153e370c0c188002ac0f000300", 0x33fe0}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xab}]}, &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_emit_ethernet(0x8a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x54, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x2, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}, @timestamp={0x8, 0xa}, @md5sig={0x13, 0x12, "d082e275205e556149a021cc13c33d89"}, @window={0x3, 0x3}, @window={0x3, 0x3}, @sack_perm={0x4, 0x2}, @sack_perm={0x4, 0x2}, @md5sig={0x13, 0x12, "27406263e43d5959a166a23bd1116edc"}]}}}}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
write$cgroup_devices(0xffffffffffffffff, 0x0, 0x3)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
sendmmsg$sock(r4, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x10040)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000002600)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x5c, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}]}]}]}], {0x14, 0x10}}, 0xe4}}, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000200)={'caif0\x00', 0x400})
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)

0s ago: executing program 1:
syz_emit_ethernet(0x308, &(0x7f0000000840)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4a45d", 0x2d2, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "518359", 0x0, 0x0, 0x0, @remote, @mcast2, [@hopopts, @dstopts={0x84, 0x17, '\x00', [@generic={0x2, 0x82, "380091ef80b65e31e54331ed8ecdc634bba2ef36bf9ef174a94e5d6aa8662ef82fecc146ad227174369fcc38df6b8c12e00ad4ec1cc216db827922792b987a91426be35f5e173166b1a14064d58fee90081f0425578c8fbf09ab6f69773c3030e5afd4dae9bdc4afc410eb45af807d2be42438f1f6a40e4452c19823b5cfe0e39225"}, @calipso={0x7, 0x30, {0x1, 0xa, 0xc8, 0x6, [0x7, 0x0, 0x0, 0x4, 0x0]}}, @pad1]}, @hopopts={0x11, 0x1b, '\x00', [@calipso={0x7, 0x38, {0x1, 0xc, 0x3, 0x0, [0x2, 0x0, 0x7, 0x3b8, 0x1, 0x7]}}, @calipso={0x7, 0x8, {0x1, 0x0, 0x40, 0x20}}, @generic={0x0, 0x8e, "b2c2c71a7b8146c30f235bb08544f70d97c756809a9d0ada940c6542c01a15e6f8a8ca767c1f994d296329c791761d4969aa5bd2ad11e7476da39c0d058b5b4352274fa897c091b8a9a1289fd559da474122c2beda6d694f4d8766a9324b685af7d94e36ad344dee0d5fbeda968d9e06caed1f0851855202ac5ab704752884f53285c2c68c701f08a626c382d3de"}, @ra]}, @dstopts={0x0, 0x1c, '\x00', [@generic={0x3, 0x28, "e5829426665380083949bb94d83ea5924a7a9ee5120b2ea406f4504c0a78049060250b36711154dd"}, @calipso={0x7, 0x10, {0x1, 0x2, 0x20, 0x6, [0xffff]}}, @jumbo={0xc2, 0x4, 0x116}, @generic={0x7, 0x94, "054fe668fb86d790d9d71ff7a5e1da58c234a797fe6794f4108bbebbf76962ca4b4ac1d6fd0dd4928e43d49b07e6f8b7c2157beec10e449e0345f8c037b4071057a12f9b5e2f9dbbfcfaca37ed74b1fe8bb1be84bbe07fd1defb8a7bf550cb3a55f393a86f652c5829916da6a2abb178e06134c37a37524ea710dd7a8a7c9a73489aff8cd40214fbe31450e968e5d7b36c6aa1c7"}, @jumbo={0xc2, 0x4, 0xff}, @ra={0x5, 0x2, 0x3}, @enc_lim={0x4, 0x1, 0x2}]}], "3c15"}}}}}}}, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x0, 0x9}, 0x48)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001540)=""/155}, 0x20)
connect$can_bcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
r3 = socket$inet(0x2, 0x6, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB], 0x0}, 0x90)
shutdown(r3, 0x0)
recvmmsg(r3, &(0x7f00000066c0), 0xa0d, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='global_dirty_state\x00', r4}, 0x10)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x10, 0xffffffffffffffff, 0x0)
r5 = socket$inet(0x2, 0x1, 0x0)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0)
shutdown(r5, 0x0)

kernel console output (not intermixed with test programs):

batadv_slave_0
[  125.221448][ T7289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.247495][ T7289] batman_adv: batadv0: Interface activated: batadv_slave_0
[  125.273003][ T7289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  125.306624][ T7289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.333693][ T7289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  125.351044][ T7289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.372444][ T7289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  125.378253][ T7519] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  125.384560][ T7289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.404181][ T7289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  125.417717][ T7289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.422450][ T7519] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[  125.429691][ T7289] batman_adv: batadv0: Interface activated: batadv_slave_1
[  125.486601][ T7519] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[  125.509711][ T7289] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  125.541813][ T7289] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  125.551788][ T7289] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  125.560679][ T7289] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  125.650180][ T7528] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
[  125.829899][ T1083] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.954549][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  125.995674][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.095531][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.130783][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.279163][ T7556] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[  126.367165][ T7559] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'.
[  126.547846][ T7568] netlink: 'syz-executor.1': attribute type 12 has an invalid length.
[  126.754767][ T4490] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  126.768420][ T4490] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  126.790207][ T4490] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  126.809034][ T4490] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  126.818192][ T1083] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.830879][ T4490] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  126.839002][ T4490] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  127.042722][ T1083] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.196474][ T1083] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.209669][ T7607] netlink: 191416 bytes leftover after parsing attributes in process `syz-executor.1'.
[  127.597647][ T1083] bridge_slave_1: left allmulticast mode
[  127.603354][ T1083] bridge_slave_1: left promiscuous mode
[  127.620411][ T1083] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.641667][ T1083] bridge_slave_0: left allmulticast mode
[  127.659386][ T1083] bridge_slave_0: left promiscuous mode
[  127.669698][ T1083] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.857916][ T7642] nbd: must specify at least one socket
[  128.183223][ T1083] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  128.196702][ T1083] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  128.208251][ T1083] bond0 (unregistering): Released all slaves
[  128.234547][ T7653] netlink: 'syz-executor.4': attribute type 8 has an invalid length.
[  128.549613][ T7578] chnl_net:caif_netlink_parms(): no params data found
[  128.649823][ T1083] hsr_slave_0: left promiscuous mode
[  128.691520][ T1083] hsr_slave_1: left promiscuous mode
[  128.745028][ T1083] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  128.752672][ T1083] batman_adv: batadv0: Removing interface: batadv_slave_0
[  128.786235][ T1083] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  128.795548][ T1083] batman_adv: batadv0: Removing interface: batadv_slave_1
[  128.829389][ T1083] veth1_macvtap: left promiscuous mode
[  128.837326][ T1083] veth0_macvtap: left promiscuous mode
[  128.843266][ T1083] veth1_vlan: left promiscuous mode
[  128.858903][ T1083] veth0_vlan: left promiscuous mode
[  128.963828][ T4490] Bluetooth: hci4: command tx timeout
[  129.084638][ T7687] sctp: [Deprecated]: syz-executor.4 (pid 7687) Use of struct sctp_assoc_value in delayed_ack socket option.
[  129.084638][ T7687] Use struct sctp_sack_info instead
[  129.390695][ T1083] team0 (unregistering): Port device team_slave_1 removed
[  129.431561][ T1083] team0 (unregistering): Port device team_slave_0 removed
[  129.893674][ T7683] netlink: 'syz-executor.2': attribute type 4 has an invalid length.
[  130.114757][ T7578] bridge0: port 1(bridge_slave_0) entered blocking state
[  130.122637][ T7578] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.150172][ T7578] bridge_slave_0: entered allmulticast mode
[  130.174415][ T7712] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de
[  130.182328][ T7578] bridge_slave_0: entered promiscuous mode
[  130.219012][ T7578] bridge0: port 2(bridge_slave_1) entered blocking state
[  130.279153][ T7578] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.293771][ T7578] bridge_slave_1: entered allmulticast mode
[  130.301091][ T7578] bridge_slave_1: entered promiscuous mode
[  130.411644][ T7578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  130.446645][ T7578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  130.602308][ T7578] team0: Port device team_slave_0 added
[  130.657144][ T7732] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  130.674868][ T7578] team0: Port device team_slave_1 added
[  130.765818][ T7578] batman_adv: batadv0: Adding interface: batadv_slave_0
[  130.772803][ T7578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  130.828435][ T7578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  130.841899][ T7578] batman_adv: batadv0: Adding interface: batadv_slave_1
[  130.857418][ T7578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  130.886801][ T7578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  131.008751][ T7578] hsr_slave_0: entered promiscuous mode
[  131.034198][ T7578] hsr_slave_1: entered promiscuous mode
[  131.035345][ T4490] Bluetooth: hci4: command tx timeout
[  131.045913][ T7578] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  131.053567][ T7578] Cannot create hsr debugfs directory
[  131.311707][ T7760] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'.
[  131.335934][ T7760] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  131.378890][ T7762] openvswitch: netlink: Message has 4 unknown bytes.
[  131.465241][ T7766] netlink: 'syz-executor.1': attribute type 25 has an invalid length.
[  131.500179][ T7766] netlink: 'syz-executor.1': attribute type 7 has an invalid length.
[  131.922191][ T7578] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  131.940946][ T7578] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  131.971467][ T7578] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  131.994366][ T7578] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  132.283194][ T7792] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  132.337407][ T7578] 8021q: adding VLAN 0 to HW filter on device bond0
[  132.390414][ T7578] 8021q: adding VLAN 0 to HW filter on device team0
[  132.481990][ T5165] bridge0: port 1(bridge_slave_0) entered blocking state
[  132.489172][ T5165] bridge0: port 1(bridge_slave_0) entered forwarding state
[  132.609584][  T784] bridge0: port 2(bridge_slave_1) entered blocking state
[  132.616805][  T784] bridge0: port 2(bridge_slave_1) entered forwarding state
[  133.113881][ T4490] Bluetooth: hci4: command tx timeout
[  133.200924][ T1249] ieee802154 phy0 wpan0: encryption failed: -22
[  133.207481][ T1249] ieee802154 phy1 wpan1: encryption failed: -22
[  134.021368][ T7804] net veth1_virt_wifi 
: renamed from virt_wifi0
[  134.035175][ T7813] veth0_vlan: entered allmulticast mode
[  134.149572][ T7578] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  134.166657][ T7817] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  134.176898][ T7578] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  134.640731][ T7578] 8021q: adding VLAN 0 to HW filter on device batadv0
[  134.657862][ T7843] xt_CT: You must specify a L4 protocol and not use inversions on it
[  134.711699][ T7844] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'.
[  134.732267][ T7844] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'.
[  134.842345][ T7578] veth0_vlan: entered promiscuous mode
[  134.868880][ T7578] veth1_vlan: entered promiscuous mode
[  134.888652][ T7852] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'.
[  134.934613][ T7857] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  134.992615][ T7578] veth0_macvtap: entered promiscuous mode
[  135.021405][ T7578] veth1_macvtap: entered promiscuous mode
[  135.075628][ T7578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  135.087986][ T7578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.100193][ T7578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  135.110730][ T7578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.126667][ T7578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  135.139534][ T7578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.150412][ T7578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  135.161882][ T7578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.174568][ T7578] batman_adv: batadv0: Interface activated: batadv_slave_0
[  135.191175][ T7578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  135.202795][ T4490] Bluetooth: hci4: command tx timeout
[  135.209719][ T7578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.221860][ T7578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  135.232856][ T7578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.244239][ T7578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  135.254976][ T7578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.265945][ T7578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  135.277216][ T7578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.289067][ T7578] batman_adv: batadv0: Interface activated: batadv_slave_1
[  135.301414][ T7578] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  135.310709][ T7578] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  135.320684][ T7578] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  135.331102][ T7578] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  135.363774][ T1105] tipc: Subscription rejected, illegal request
[  135.598150][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  135.612391][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  135.685996][   T29] audit: type=1804 audit(1719077017.648:7): pid=7878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1772331506/syzkaller.dIIvfm/35/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0
[  135.713701][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  135.744356][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  135.812358][ T7889] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'.
[  135.850288][ T7889] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
[  136.047885][ T7903] vlan2: entered promiscuous mode
[  136.053409][ T7903] veth0: entered promiscuous mode
[  136.069059][ T7903] team0: Port device vlan2 added
[  136.370365][   T12] tipc: Subscription rejected, illegal request
[  136.566550][ T7917] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  136.710139][ T7921] hsr_slave_0: left promiscuous mode
[  136.721008][ T7921] hsr_slave_1: left promiscuous mode
[  136.938031][ T7931] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  137.070805][   T35] tipc: Subscription rejected, illegal request
[  137.231272][ T1083] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.703616][   T29] audit: type=1804 audit(1719077019.648:8): pid=7974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1772331506/syzkaller.dIIvfm/46/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0
[  137.920026][   T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  137.928941][   T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  137.937342][   T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  137.945553][   T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  137.955107][   T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  137.962445][   T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  138.265329][ T8006] xt_CT: You must specify a L4 protocol and not use inversions on it
[  138.545487][ T1083] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.602316][ T7984] chnl_net:caif_netlink_parms(): no params data found
[  138.629778][ T8020] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.4'.
[  138.663254][ T8020] 0�X��D��: renamed from gretap0 (while UP)
[  138.678779][ T8024] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[  138.690988][ T8027] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'.
[  138.708316][ T8020] 0�X��D��: entered allmulticast mode
[  138.781171][ T8029] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x6
[  138.826413][ T1083] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.897328][ T8024] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[  139.086939][ T1083] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.136846][ T8032] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[  139.174051][ T8035] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[  139.237532][ T8059] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  139.398434][   T29] audit: type=1804 audit(1719077021.338:9): pid=8059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2769254272/syzkaller.8Q6tjs/108/cgroup.controllers" dev="sda1" ino=1945 res=1 errno=0
[  139.471309][ T8048] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  139.497012][ T7984] bridge0: port 1(bridge_slave_0) entered blocking state
[  139.513742][ T7984] bridge0: port 1(bridge_slave_0) entered disabled state
[  139.522668][ T7984] bridge_slave_0: entered allmulticast mode
[  139.559262][ T7984] bridge_slave_0: entered promiscuous mode
[  139.626592][ T7984] bridge0: port 2(bridge_slave_1) entered blocking state
[  139.657760][ T7984] bridge0: port 2(bridge_slave_1) entered disabled state
[  139.671962][ T7984] bridge_slave_1: entered allmulticast mode
[  139.685894][ T7984] bridge_slave_1: entered promiscuous mode
[  139.698406][ T8074] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.1'.
[  139.709929][ T8074] 0�X��D��: renamed from gretap0 (while UP)
[  139.727947][ T8074] 0�X��D��: entered allmulticast mode
[  139.801648][ T1083] bridge_slave_1: left allmulticast mode
[  139.821310][ T1083] bridge_slave_1: left promiscuous mode
[  139.837896][ T8083] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'.
[  139.843552][ T1083] bridge0: port 2(bridge_slave_1) entered disabled state
[  139.878559][ T1083] bridge_slave_0: left allmulticast mode
[  139.891188][ T1083] bridge_slave_0: left promiscuous mode
[  139.898294][ T1083] bridge0: port 1(bridge_slave_0) entered disabled state
[  139.995134][   T53] Bluetooth: hci4: command tx timeout
[  140.474330][ T8111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  140.503280][ T8107] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  140.582465][ T1083] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  140.597493][ T1083] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  140.610544][ T1083] bond0 (unregistering): Released all slaves
[  140.659703][ T8094] dummy0: entered promiscuous mode
[  140.676395][ T8094] batman_adv: batadv0: Adding interface: macsec1
[  140.702661][ T8094] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  140.732170][ T8094] batman_adv: batadv0: Interface activated: macsec1
[  140.798451][ T7984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  140.819907][ T7984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  140.872024][ T8123] netlink: 'syz-executor.1': attribute type 19 has an invalid length.
[  140.941930][ T8120] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  141.031537][ T7984] team0: Port device team_slave_0 added
[  141.136293][ T7984] team0: Port device team_slave_1 added
[  141.198938][ T8139] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[  141.210373][ T1083] hsr_slave_0: left promiscuous mode
[  141.231802][ T1083] hsr_slave_1: left promiscuous mode
[  141.254306][ T1083] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  141.283725][ T1083] batman_adv: batadv0: Removing interface: batadv_slave_0
[  141.301858][ T1083] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  141.319814][ T1083] batman_adv: batadv0: Removing interface: batadv_slave_1
[  141.350934][ T1083] veth1_macvtap: left promiscuous mode
[  141.357690][ T1083] veth0_macvtap: left promiscuous mode
[  141.367385][ T1083] veth1_vlan: left promiscuous mode
[  141.372879][ T1083] veth0_vlan: left promiscuous mode
[  141.909116][ T1083] team0 (unregistering): Port device team_slave_1 removed
[  141.927929][ T8162] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  142.010945][ T1083] team0 (unregistering): Port device team_slave_0 removed
[  142.076669][ T4490] Bluetooth: hci4: command tx timeout
[  142.338141][ T8182] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[  142.673978][ T7984] batman_adv: batadv0: Adding interface: batadv_slave_0
[  142.680961][ T7984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  142.747277][ T7984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  142.824019][ T7984] batman_adv: batadv0: Adding interface: batadv_slave_1
[  142.851545][ T7984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  142.912095][ T7984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  143.074976][ T7984] hsr_slave_0: entered promiscuous mode
[  143.110380][ T7984] hsr_slave_1: entered promiscuous mode
[  143.144428][ T7984] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  143.165453][ T7984] Cannot create hsr debugfs directory
[  143.296347][ T8222] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'.
[  143.685350][ T8237] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  144.153903][ T4490] Bluetooth: hci4: command 0x040f tx timeout
[  144.202447][ T7984] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  144.256170][ T7984] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  144.288496][ T7984] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  144.308334][ T7984] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  144.325930][ T8271] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'.
[  144.602795][ T7984] 8021q: adding VLAN 0 to HW filter on device bond0
[  144.652214][ T7984] 8021q: adding VLAN 0 to HW filter on device team0
[  144.683382][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state
[  144.690603][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state
[  144.708415][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state
[  144.715682][ T5163] bridge0: port 2(bridge_slave_1) entered forwarding state
[  145.039930][ T8305] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
[  145.168769][ T7984] 8021q: adding VLAN 0 to HW filter on device batadv0
[  145.297343][ T7984] veth0_vlan: entered promiscuous mode
[  145.316545][ T7984] veth1_vlan: entered promiscuous mode
[  145.422762][ T7984] veth0_macvtap: entered promiscuous mode
[  145.450053][ T7984] veth1_macvtap: entered promiscuous mode
[  145.505278][ T7984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  145.537797][ T7984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  145.560755][ T7984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  145.588741][ T7984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  145.605369][ T8327] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[  145.614925][ T7984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  145.636774][ T8331] xt_CT: You must specify a L4 protocol and not use inversions on it
[  145.649557][ T7984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  145.662177][ T7984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  145.675118][ T7984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  145.699134][ T7984] batman_adv: batadv0: Interface activated: batadv_slave_0
[  145.713431][ T8335] xt_hashlimit: overflow, try lower: 1125899906842624/8
[  145.764968][ T8336] wireguard0: entered promiscuous mode
[  145.783930][ T8336] wireguard0: entered allmulticast mode
[  145.828899][ T7984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  145.862618][ T7984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  145.876001][ T7984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  145.887675][ T7984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  145.898370][ T7984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  145.909239][ T7984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  145.922339][ T7984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  145.933767][ T7984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  145.946681][ T7984] batman_adv: batadv0: Interface activated: batadv_slave_1
[  145.969214][ T8343] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  145.997356][   T29] audit: type=1804 audit(1719077027.958:10): pid=8346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2170608058/syzkaller.zVtnrV/68/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0
[  146.127849][ T7984] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  146.136759][ T7984] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  146.145602][ T7984] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  146.166220][ T7984] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  146.237868][   T53] Bluetooth: hci4: command 0x040f tx timeout
[  146.268356][ T8359] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  146.367449][   T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  146.406583][   T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  146.432202][ T8366] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  146.457744][ T8368] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  146.507763][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  146.525150][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  146.560553][ T8376] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  146.895030][ T8394] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  146.911095][ T8393] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  146.922656][ T8394] netlink: 'syz-executor.1': attribute type 53 has an invalid length.
[  146.938917][ T8393] netlink: 'syz-executor.1': attribute type 53 has an invalid length.
[  146.970026][ T8393] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[  146.983865][ T8393] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'.
[  147.066906][ T8403] netlink: 'syz-executor.4': attribute type 15 has an invalid length.
[  147.104314][ T8407] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[  147.121853][ T8405] netlink: 209840 bytes leftover after parsing attributes in process `syz-executor.1'.
[  147.218042][ T8413] xt_CT: You must specify a L4 protocol and not use inversions on it
[  147.315196][ T8415] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  147.764892][ T8437] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  147.907106][ T8443] xt_l2tp: wrong L2TP version: 0
[  148.101362][    C0] vxcan0: j1939_tp_txtimer: 0xffff88802cd41800: tx aborted with unknown reason: -2
[  148.110447][ T8447] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  148.111676][    C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88802cd43c00: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250)
[  148.138694][    C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88802cd41800: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250)
[  148.255364][ T8449] netlink: 'syz-executor.2': attribute type 10 has an invalid length.
[  148.360890][ T8456] netlink: 'syz-executor.1': attribute type 3 has an invalid length.
[  148.520889][   T29] audit: type=1800 audit(1719077030.478:11): pid=8465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="cgroup.controllers" dev="sda1" ino=1959 res=0 errno=0
[  148.926944][ T8489] netlink: 'syz-executor.1': attribute type 10 has an invalid length.
[  149.330058][   T62] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.530280][ T8519] xt_CT: You must specify a L4 protocol and not use inversions on it
[  150.175936][ T4490] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  150.190867][ T4490] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  150.202751][ T4490] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  150.222799][ T4490] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  150.240527][ T4490] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  150.248080][ T4490] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  150.509519][ T8554] chnl_net:caif_netlink_parms(): no params data found
[  150.691294][ T8554] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.702031][ T8554] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.710930][ T8554] bridge_slave_0: entered allmulticast mode
[  150.723315][ T8554] bridge_slave_0: entered promiscuous mode
[  150.738276][ T8554] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.746706][ T8554] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.754537][ T8554] bridge_slave_1: entered allmulticast mode
[  150.763361][ T8554] bridge_slave_1: entered promiscuous mode
[  150.821034][ T8554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  150.839173][ T8554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  150.985954][ T8554] team0: Port device team_slave_0 added
[  151.047278][   T62] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.066771][ T8554] team0: Port device team_slave_1 added
[  151.080762][ T8592] vlan2: entered promiscuous mode
[  151.088530][ T8592] bridge0: entered promiscuous mode
[  151.097224][ T8592] vlan2: entered allmulticast mode
[  151.102531][ T8592] bridge0: entered allmulticast mode
[  151.124205][ T8592] bridge0: left allmulticast mode
[  151.132283][ T8592] bridge0: left promiscuous mode
[  151.232845][   T62] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.331474][ T8554] batman_adv: batadv0: Adding interface: batadv_slave_0
[  151.342074][ T8554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  151.378427][ T8554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  151.458262][   T62] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.495667][ T8554] batman_adv: batadv0: Adding interface: batadv_slave_1
[  151.510801][ T8554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  151.541411][ T8613] __nla_validate_parse: 10 callbacks suppressed
[  151.541430][ T8613] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  151.543040][ T8554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  151.682079][ T8618] xt_CT: You must specify a L4 protocol and not use inversions on it
[  151.726421][ T8620] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  151.748896][ T8554] hsr_slave_0: entered promiscuous mode
[  151.772876][ T8554] hsr_slave_1: entered promiscuous mode
[  151.790819][ T8554] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  151.810557][ T8554] Cannot create hsr debugfs directory
[  151.898065][   T29] audit: type=1804 audit(1719077033.858:12): pid=8628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1186571155/syzkaller.i8nZ0q/296/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0
[  151.969434][ T8626] netlink: 'syz-executor.1': attribute type 10 has an invalid length.
[  151.998911][ T8626] batman_adv: batadv0: Adding interface: team0
[  152.007070][ T8632] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
[  152.022767][ T8626] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  152.063735][ T8626] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  152.098098][ T8629] netlink: 'syz-executor.1': attribute type 10 has an invalid length.
[  152.117602][ T8629] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'.
[  152.144867][ T8629] team0: entered promiscuous mode
[  152.149948][ T8629] team_slave_0: entered promiscuous mode
[  152.173887][ T8629] team_slave_1: entered promiscuous mode
[  152.187003][ T8629] 8021q: adding VLAN 0 to HW filter on device team0
[  152.200038][ T8629] batman_adv: batadv0: Interface activated: team0
[  152.206890][ T8638] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  152.208632][ T8629] batman_adv: batadv0: Interface deactivated: team0
[  152.233377][ T8629] batman_adv: batadv0: Removing interface: team0
[  152.242285][ T8629] bridge0: port 3(team0) entered blocking state
[  152.263107][ T8629] bridge0: port 3(team0) entered disabled state
[  152.281363][ T8629] team0: entered allmulticast mode
[  152.292505][ T8629] team_slave_0: entered allmulticast mode
[  152.298429][ T8629] team_slave_1: entered allmulticast mode
[  152.304754][ T8629] vlan2: entered allmulticast mode
[  152.309891][ T8629] veth0: entered allmulticast mode
[  152.314542][   T53] Bluetooth: hci4: command tx timeout
[  152.327460][ T8629] bridge0: port 3(team0) entered blocking state
[  152.334263][ T8629] bridge0: port 3(team0) entered forwarding state
[  152.407306][ T8641] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.416193][ T8648] hsr_slave_0: left promiscuous mode
[  152.453920][ T8648] hsr_slave_1: left promiscuous mode
[  152.564528][   T62] bridge_slave_1: left allmulticast mode
[  152.579311][   T62] bridge_slave_1: left promiscuous mode
[  152.588974][   T62] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.602103][   T62] bridge_slave_0: left allmulticast mode
[  152.610621][   T62] bridge_slave_0: left promiscuous mode
[  152.620297][   T62] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.071807][ T8670] netlink: 144316 bytes leftover after parsing attributes in process `syz-executor.1'.
[  153.082573][   T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  153.100965][   T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  153.112811][   T62] bond0 (unregistering): Released all slaves
[  153.134859][ T8657] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  153.146320][ T8659] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[  153.219024][ T8668] ɶƣ0GCTw
�: entered promiscuous mode
[  153.279219][ T8669] ɶƣ0GC�: entered promiscuous mode
[  153.905186][ T8692] netlink: 'syz-executor.1': attribute type 10 has an invalid length.
[  153.915947][ T4490] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  153.927322][ T4490] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  153.938516][ T4490] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  153.950748][ T4490] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  153.961938][ T4490] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  153.974727][ T4490] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  154.003936][ T8692] bridge0: port 3(team0) entered disabled state
[  154.059365][ T8692] team0: left allmulticast mode
[  154.083979][ T8692] team_slave_0: left allmulticast mode
[  154.114680][ T8692] team_slave_1: left allmulticast mode
[  154.123668][ T8692] vlan2: left allmulticast mode
[  154.133797][ T8692] veth0: left allmulticast mode
[  154.143703][ T8692] team0: left promiscuous mode
[  154.151507][ T8692] team_slave_0: left promiscuous mode
[  154.159931][ T8692] team_slave_1: left promiscuous mode
[  154.178699][ T8692] bridge0: port 3(team0) entered disabled state
[  154.215960][ T8692] batman_adv: batadv0: Adding interface: team0
[  154.222192][ T8692] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  154.248187][ T8692] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  154.268619][ T8695] netlink: 'syz-executor.1': attribute type 10 has an invalid length.
[  154.280320][ T8695] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'.
[  154.290054][ T8695] team0: entered promiscuous mode
[  154.295404][ T8695] team_slave_0: entered promiscuous mode
[  154.299647][ T8692] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  154.301199][ T8695] team_slave_1: entered promiscuous mode
[  154.321861][ T8695] 8021q: adding VLAN 0 to HW filter on device team0
[  154.328919][ T8695] batman_adv: batadv0: Interface activated: team0
[  154.336165][ T8695] batman_adv: batadv0: Interface deactivated: team0
[  154.342806][ T8695] batman_adv: batadv0: Removing interface: team0
[  154.350248][ T8695] bridge0: port 3(team0) entered blocking state
[  154.356877][ T8695] bridge0: port 3(team0) entered disabled state
[  154.364290][ T8695] team0: entered allmulticast mode
[  154.372725][ T8695] team_slave_0: entered allmulticast mode
[  154.378666][ T8695] team_slave_1: entered allmulticast mode
[  154.386728][ T8695] vlan2: entered allmulticast mode
[  154.391857][ T8695] veth0: entered allmulticast mode
[  154.397822][ T4490] Bluetooth: hci4: command tx timeout
[  154.410259][ T8695] bridge0: port 3(team0) entered blocking state
[  154.416701][ T8695] bridge0: port 3(team0) entered forwarding state
[  154.464629][ T8699] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  154.480665][ T8699] macvtap1: entered allmulticast mode
[  154.491289][ T8699] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  154.501819][ T8699] netdevsim netdevsim2 netdevsim0: left allmulticast mode
[  154.509087][ T8699] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  154.556022][   T62] hsr_slave_0: left promiscuous mode
[  154.569780][   T62] hsr_slave_1: left promiscuous mode
[  154.602370][   T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  154.613771][   T62] batman_adv: batadv0: Removing interface: batadv_slave_0
[  154.644938][   T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  154.652405][   T62] batman_adv: batadv0: Removing interface: batadv_slave_1
[  154.711162][   T62] veth1_macvtap: left promiscuous mode
[  154.733762][   T62] veth0_macvtap: left promiscuous mode
[  154.744369][   T62] veth1_vlan: left promiscuous mode
[  154.767091][   T62] veth0_vlan: left promiscuous mode
[  155.051472][ T8733] ebt_among: dst integrity fail: 200
[  155.136322][   T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  155.146221][   T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  155.158989][   T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  155.171787][   T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  155.183330][   T53] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  155.192585][   T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  155.650357][   T62] team0 (unregistering): Port device team_slave_1 removed
[  155.692519][   T62] team0 (unregistering): Port device team_slave_0 removed
[  156.102487][ T8747] netlink: 'syz-executor.4': attribute type 6 has an invalid length.
[  156.473813][   T53] Bluetooth: hci4: command tx timeout
[  156.603393][ T8770] batadv_slave_1: entered promiscuous mode
[  156.655211][ T8554] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  156.676016][ T8770] __nla_validate_parse: 1 callbacks suppressed
[  156.676036][ T8770] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'.
[  156.693647][ T8770] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  156.728152][ T8776] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  156.752834][ T8554] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  156.769560][ T8769] batadv_slave_1: left promiscuous mode
[  156.778997][ T8776] team1: Mode changed to "activebackup"
[  156.785930][ T8554] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  156.807997][ T8734] chnl_net:caif_netlink_parms(): no params data found
[  156.842886][ T8554] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  156.962211][   T62] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.084412][   T62] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.185908][ T8788] netlink: 209840 bytes leftover after parsing attributes in process `syz-executor.2'.
[  157.207987][   T62] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.274253][   T53] Bluetooth: hci1: command tx timeout
[  157.360516][   T62] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.390115][ T8734] bridge0: port 1(bridge_slave_0) entered blocking state
[  157.400575][ T8734] bridge0: port 1(bridge_slave_0) entered disabled state
[  157.413008][ T8734] bridge_slave_0: entered allmulticast mode
[  157.420639][ T8734] bridge_slave_0: entered promiscuous mode
[  157.457035][ T8734] bridge0: port 2(bridge_slave_1) entered blocking state
[  157.464559][ T8734] bridge0: port 2(bridge_slave_1) entered disabled state
[  157.471968][ T8734] bridge_slave_1: entered allmulticast mode
[  157.489467][ T8734] bridge_slave_1: entered promiscuous mode
[  157.604808][ T8734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  157.629755][ T8734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  157.720069][ T8734] team0: Port device team_slave_0 added
[  157.732750][ T8734] team0: Port device team_slave_1 added
[  157.751085][ T8554] 8021q: adding VLAN 0 to HW filter on device bond0
[  157.781313][ T8807] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  157.939266][ T8734] batman_adv: batadv0: Adding interface: batadv_slave_0
[  157.957212][ T8734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  157.992132][ T8734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  158.021888][ T8734] batman_adv: batadv0: Adding interface: batadv_slave_1
[  158.037722][ T8734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  158.088653][ T8734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  158.105702][   T62] bridge_slave_1: left allmulticast mode
[  158.111356][   T62] bridge_slave_1: left promiscuous mode
[  158.118146][   T62] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.129873][   T62] bridge_slave_0: left allmulticast mode
[  158.136095][   T62] bridge_slave_0: left promiscuous mode
[  158.141780][   T62] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.554024][   T53] Bluetooth: hci4: command tx timeout
[  158.672269][   T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  158.689550][   T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  158.700604][   T62] bond0 (unregistering): Released all slaves
[  158.716115][   T62] bond1 (unregistering): Released all slaves
[  158.811731][ T8835] No such timeout policy "syz0"
[  158.890466][ T8835] No such timeout policy "syz0"
[  158.895591][ T8554] 8021q: adding VLAN 0 to HW filter on device team0
[  158.956511][  T785] bridge0: port 1(bridge_slave_0) entered blocking state
[  158.963728][  T785] bridge0: port 1(bridge_slave_0) entered forwarding state
[  159.083908][ T8734] hsr_slave_0: entered promiscuous mode
[  159.090319][ T8734] hsr_slave_1: entered promiscuous mode
[  159.096902][ T8734] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  159.106119][ T8734] Cannot create hsr debugfs directory
[  159.111153][ T8855] netlink: 209840 bytes leftover after parsing attributes in process `syz-executor.1'.
[  159.118786][ T8846] bridge0: port 3(gretap0) entered blocking state
[  159.129048][ T8846] bridge0: port 3(gretap0) entered disabled state
[  159.137484][ T8846] gretap0: entered allmulticast mode
[  159.145757][ T8846] gretap0: entered promiscuous mode
[  159.152982][ T8846] bridge0: port 3(gretap0) entered blocking state
[  159.160585][ T8846] bridge0: port 3(gretap0) entered forwarding state
[  159.189528][  T785] bridge0: port 2(bridge_slave_1) entered blocking state
[  159.196738][  T785] bridge0: port 2(bridge_slave_1) entered forwarding state
[  159.353635][   T53] Bluetooth: hci1: command tx timeout
[  159.441856][   T62] hsr_slave_0: left promiscuous mode
[  159.450517][   T62] hsr_slave_1: left promiscuous mode
[  159.461049][   T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  159.490677][   T62] batman_adv: batadv0: Removing interface: batadv_slave_0
[  159.521998][   T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  159.537177][   T62] batman_adv: batadv0: Removing interface: batadv_slave_1
[  159.587412][   T62] veth1_macvtap: left promiscuous mode
[  159.612646][   T62] veth0_macvtap: left promiscuous mode
[  159.622187][   T62] veth1_vlan: left promiscuous mode
[  159.641216][   T62] veth0_vlan: left promiscuous mode
[  159.702641][   T29] audit: type=1800 audit(1719077041.658:13): pid=8883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1953 res=0 errno=0
[  159.765106][   T29] audit: type=1804 audit(1719077041.728:14): pid=8883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1186571155/syzkaller.i8nZ0q/325/memory.events" dev="sda1" ino=1953 res=1 errno=0
[  159.808322][   T29] audit: type=1804 audit(1719077041.748:15): pid=8883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1186571155/syzkaller.i8nZ0q/325/memory.events" dev="sda1" ino=1953 res=1 errno=0
[  160.358906][   T62] team0 (unregistering): Port device team_slave_1 removed
[  160.405678][   T62] team0 (unregistering): Port device team_slave_0 removed
[  160.814079][ T8862] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  161.273020][ T8907] netlink: 209840 bytes leftover after parsing attributes in process `syz-executor.2'.
[  161.443615][   T53] Bluetooth: hci1: command tx timeout
[  161.605325][ T8554] 8021q: adding VLAN 0 to HW filter on device batadv0
[  161.728989][ T8554] veth0_vlan: entered promiscuous mode
[  161.896317][ T8554] veth1_vlan: entered promiscuous mode
[  161.915344][ T8734] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  161.940020][ T8935] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'.
[  161.964555][ T8734] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  161.993403][ T8734] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  162.035767][ T8734] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  162.107211][ T8554] veth0_macvtap: entered promiscuous mode
[  162.130165][ T8554] veth1_macvtap: entered promiscuous mode
[  162.216437][ T8554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  162.237734][ T8950] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'.
[  162.263371][ T8554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.301051][ T8554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  162.328039][ T8554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.342152][ T8554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  162.382773][ T8554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.404775][ T8554] batman_adv: batadv0: Interface activated: batadv_slave_0
[  162.422493][ T8554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  162.475745][ T8554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.491600][ T8554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  162.514502][ T8554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.525524][ T8554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  162.536382][ T8554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.555404][ T8554] batman_adv: batadv0: Interface activated: batadv_slave_1
[  162.655655][ T8554] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  162.676464][ T8554] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  162.685624][ T8554] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  162.697194][ T8554] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  162.711795][ T8957] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'.
[  163.040299][ T8734] 8021q: adding VLAN 0 to HW filter on device bond0
[  163.051859][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  163.080894][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  163.182358][   T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  163.202725][ T8734] 8021q: adding VLAN 0 to HW filter on device team0
[  163.211372][   T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  163.237623][  T785] bridge0: port 1(bridge_slave_0) entered blocking state
[  163.244830][  T785] bridge0: port 1(bridge_slave_0) entered forwarding state
[  163.292155][  T785] bridge0: port 2(bridge_slave_1) entered blocking state
[  163.299385][  T785] bridge0: port 2(bridge_slave_1) entered forwarding state
[  163.430638][ T8980] pimreg: entered allmulticast mode
[  163.442428][ T8986] pimreg: left allmulticast mode
[  163.472386][ T8979] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'.
[  163.524179][   T53] Bluetooth: hci1: command tx timeout
[  163.928703][ T8734] 8021q: adding VLAN 0 to HW filter on device batadv0
[  164.040949][ T8734] veth0_vlan: entered promiscuous mode
[  164.075431][ T8734] veth1_vlan: entered promiscuous mode
[  164.148890][ T8734] veth0_macvtap: entered promiscuous mode
[  164.170632][ T8734] veth1_macvtap: entered promiscuous mode
[  164.222048][ T8734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  164.254825][ T8734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.274139][ T8734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  164.285339][ T8734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.295535][ T8734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  164.307333][ T8734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.319888][ T8734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  164.330617][ T8734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.365399][ T8734] batman_adv: batadv0: Interface activated: batadv_slave_0
[  164.399378][ T8734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  164.420163][ T8734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.430383][ T8734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  164.447712][ T8734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.461974][ T8734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  164.472744][ T8734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.489220][ T8734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  164.500065][ T8734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.521791][ T8734] batman_adv: batadv0: Interface activated: batadv_slave_1
[  164.546048][ T8734] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  164.566662][ T8734] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  164.581059][ T8734] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  164.603575][ T8734] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  164.627963][ T9030] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  164.785621][ T1105] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.998512][ T9037] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  165.097253][ T9037] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  165.143704][ T1083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  165.163307][ T1083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  165.260174][ T1105] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.406380][ T1105] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.461832][ T9042] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'.
[  165.492164][   T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  165.524170][   T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  165.586802][ T1105] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.768134][ T4490] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  165.778099][ T4490] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  165.786224][ T4490] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  165.795652][ T4490] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  165.803548][ T4490] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  165.810935][ T4490] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  166.060349][ T1105] bridge_slave_1: left allmulticast mode
[  166.079295][ T1105] bridge_slave_1: left promiscuous mode
[  166.095953][ T1105] bridge0: port 2(bridge_slave_1) entered disabled state
[  166.136526][ T1105] bridge_slave_0: left allmulticast mode
[  166.142235][ T1105] bridge_slave_0: left promiscuous mode
[  166.179450][ T1105] bridge0: port 1(bridge_slave_0) entered disabled state
[  166.403204][ T9094] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  166.748775][ T1105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  166.766141][ T1105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  166.778331][ T1105] bond0 (unregistering): Released all slaves
[  166.951547][ T9100] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  166.980635][ T9101] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  167.674065][ T1105] hsr_slave_0: left promiscuous mode
[  167.700061][ T1105] hsr_slave_1: left promiscuous mode
[  167.721380][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  167.744769][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_0
[  167.765600][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  167.773049][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_1
[  167.860602][ T1105] veth1_macvtap: left promiscuous mode
[  167.868679][ T1105] veth0_macvtap: left promiscuous mode
[  167.881424][ T1105] veth1_vlan: left promiscuous mode
[  167.889757][ T1105] veth0_vlan: left promiscuous mode
[  167.913827][   T53] Bluetooth: hci4: command tx timeout
[  168.600666][ T1105] team0 (unregistering): Port device team_slave_1 removed
[  168.642741][ T1105] team0 (unregistering): Port device team_slave_0 removed
[  169.006958][ T9159] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  169.024273][ T9165] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[  169.073400][ T9184] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'.
[  169.240935][ T9054] chnl_net:caif_netlink_parms(): no params data found
[  169.794399][ T9054] bridge0: port 1(bridge_slave_0) entered blocking state
[  169.807782][ T9054] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.846965][ T9054] bridge_slave_0: entered allmulticast mode
[  169.871112][ T9054] bridge_slave_0: entered promiscuous mode
[  169.897866][ T9054] bridge0: port 2(bridge_slave_1) entered blocking state
[  169.910566][ T9054] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.937721][ T9054] bridge_slave_1: entered allmulticast mode
[  169.966105][ T9054] bridge_slave_1: entered promiscuous mode
[  169.994730][   T53] Bluetooth: hci4: command tx timeout
[  170.034882][ T9236] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
[  170.056436][ T9236] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
[  170.066074][   T29] audit: type=1804 audit(1719077052.018:16): pid=9241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1772331506/syzkaller.dIIvfm/161/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0
[  170.137658][ T9236] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  170.197234][ T9054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  170.216960][ T9054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  170.301090][ T9054] team0: Port device team_slave_0 added
[  170.338079][ T9054] team0: Port device team_slave_1 added
[  170.409273][ T9251] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[  170.425204][ T9054] batman_adv: batadv0: Adding interface: batadv_slave_0
[  170.442643][ T9054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  170.470122][ T9054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  170.519116][ T9054] batman_adv: batadv0: Adding interface: batadv_slave_1
[  170.538794][ T9054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  170.581730][ T9054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  170.603216][ T9262] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  170.611926][ T9261] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[  170.634264][ T9262] Bluetooth: hci3: invalid length 0, exp 2 for type 20
[  170.705970][ T9054] hsr_slave_0: entered promiscuous mode
[  170.750520][ T9054] hsr_slave_1: entered promiscuous mode
[  170.763426][ T9054] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  170.782251][ T9054] Cannot create hsr debugfs directory
[  171.119234][ T9287] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  171.314794][ T9298] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
[  171.331035][ T9295] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check.
[  171.348374][ T9298] Bluetooth: hci3: invalid length 0, exp 2 for type 20
[  171.645370][ T9314] netlink: 'syz-executor.2': attribute type 6 has an invalid length.
[  171.707291][ T9054] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  171.719684][ T9054] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  171.746130][ T9054] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  171.806313][ T9054] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  172.073708][   T53] Bluetooth: hci4: command tx timeout
[  172.096281][ T9054] 8021q: adding VLAN 0 to HW filter on device bond0
[  172.106007][ T9339] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  172.119305][ T9054] 8021q: adding VLAN 0 to HW filter on device team0
[  172.146189][  T784] bridge0: port 1(bridge_slave_0) entered blocking state
[  172.153339][  T784] bridge0: port 1(bridge_slave_0) entered forwarding state
[  172.155960][ T9339] Bluetooth: hci3: invalid length 0, exp 2 for type 20
[  172.191888][ T5160] bridge0: port 2(bridge_slave_1) entered blocking state
[  172.199079][ T5160] bridge0: port 2(bridge_slave_1) entered forwarding state
[  172.222798][ T9344] __nla_validate_parse: 5 callbacks suppressed
[  172.222817][ T9344] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  172.313776][ T9344] netlink: 'syz-executor.4': attribute type 6 has an invalid length.
[  172.341041][ T9344] netlink: 'syz-executor.4': attribute type 5 has an invalid length.
[  172.418771][ T9344] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  172.428681][ T9344] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  172.437736][ T9344] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  172.446586][ T9344] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  172.458906][ T9344] vxlan0: entered promiscuous mode
[  172.474976][ T9348] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'.
[  172.669926][ T9367] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[  172.772426][ T9371] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  172.907076][ T9379] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'.
[  172.944994][ T9054] 8021q: adding VLAN 0 to HW filter on device batadv0
[  173.020968][ T9386] netlink: 18 bytes leftover after parsing attributes in process `syz-executor.4'.
[  173.047904][ T9386] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'.
[  173.085090][ T9387] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[  173.127213][ T9054] veth0_vlan: entered promiscuous mode
[  173.159295][ T9054] veth1_vlan: entered promiscuous mode
[  173.229450][ T9393] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'.
[  173.296103][ T9054] veth0_macvtap: entered promiscuous mode
[  173.348470][ T9054] veth1_macvtap: entered promiscuous mode
[  173.402056][ T9409] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'.
[  173.405204][ T9054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  173.451236][ T9054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.465363][ T9054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  173.476188][ T9054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.486135][ T9054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  173.489070][ T9407] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  173.502358][ T9054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.527725][ T9054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  173.538849][ T9054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.553097][ T9054] batman_adv: batadv0: Interface activated: batadv_slave_0
[  173.584674][ T9054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  173.617096][ T9054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.639017][ T9054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  173.659745][ T9054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.669768][ T9054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  173.680664][ T9054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.697825][ T9054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  173.716441][ T9054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.731152][ T9054] batman_adv: batadv0: Interface activated: batadv_slave_1
[  173.771510][ T9054] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  173.805169][ T9054] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  173.833702][ T9054] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  173.853533][ T9054] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  174.087668][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  174.106623][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  174.166970][   T53] Bluetooth: hci4: command tx timeout
[  174.191649][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  174.213499][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  174.909931][ T9483] netlink: 'syz-executor.2': attribute type 28 has an invalid length.
[  175.232233][ T9505] sctp: [Deprecated]: syz-executor.4 (pid 9505) Use of int in maxseg socket option.
[  175.232233][ T9505] Use struct sctp_assoc_value instead
[  175.964113][ T9555] netlink: 'syz-executor.1': attribute type 4 has an invalid length.
[  176.085455][ T9562] netlink: 'syz-executor.1': attribute type 4 has an invalid length.
[  176.982258][ T1083] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.438318][   T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  177.449947][   T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  177.460829][   T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  177.471344][   T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  177.482326][   T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  177.490445][   T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  177.692365][ T1083] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.838528][ T1083] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.970282][ T1083] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.993533][ T9647] __nla_validate_parse: 17 callbacks suppressed
[  177.993553][ T9647] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  178.095634][ T9657] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'.
[  178.176644][ T9620] chnl_net:caif_netlink_parms(): no params data found
[  178.222088][ T1083] bridge_slave_1: left allmulticast mode
[  178.260207][ T1083] bridge_slave_1: left promiscuous mode
[  178.273343][ T1083] bridge0: port 2(bridge_slave_1) entered disabled state
[  178.306322][ T1083] bridge_slave_0: left allmulticast mode
[  178.317057][ T1083] bridge_slave_0: left promiscuous mode
[  178.322864][ T1083] bridge0: port 1(bridge_slave_0) entered disabled state
[  178.940731][ T1083] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  178.959581][ T1083] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  178.971647][ T1083] bond0 (unregistering): Released all slaves
[  179.001658][ T9683] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  179.008979][ T9683] IPv6: NLM_F_CREATE should be set when creating new route
[  179.156272][ T9698] netlink: 209840 bytes leftover after parsing attributes in process `syz-executor.4'.
[  179.408758][ T9715] netlink: 209840 bytes leftover after parsing attributes in process `syz-executor.2'.
[  179.517419][ T4490] Bluetooth: hci4: command tx timeout
[  179.612840][ T9721] macvlan1: entered promiscuous mode
[  179.694337][ T1083] hsr_slave_0: left promiscuous mode
[  179.711285][ T1083] hsr_slave_1: left promiscuous mode
[  179.720507][ T1083] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  179.738111][ T1083] batman_adv: batadv0: Removing interface: batadv_slave_0
[  179.756248][ T1083] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  179.778326][ T1083] batman_adv: batadv0: Removing interface: batadv_slave_1
[  179.881605][ T1083] veth1_macvtap: left promiscuous mode
[  179.916580][ T1083] veth0_macvtap: left promiscuous mode
[  179.939592][ T1083] veth1_vlan: left promiscuous mode
[  179.949019][ T1083] veth0_vlan: left promiscuous mode
[  180.606253][ T1083] team0 (unregistering): Port device team_slave_1 removed
[  180.647591][ T1083] team0 (unregistering): Port device team_slave_0 removed
[  180.876128][ T9757] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  181.188329][ T9740] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  181.274344][ T9620] bridge0: port 1(bridge_slave_0) entered blocking state
[  181.281502][ T9620] bridge0: port 1(bridge_slave_0) entered disabled state
[  181.296811][ T9620] bridge_slave_0: entered allmulticast mode
[  181.308108][ T9620] bridge_slave_0: entered promiscuous mode
[  181.344488][ T9769] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  181.387116][ T9620] bridge0: port 2(bridge_slave_1) entered blocking state
[  181.395269][ T9620] bridge0: port 2(bridge_slave_1) entered disabled state
[  181.406109][ T9620] bridge_slave_1: entered allmulticast mode
[  181.424174][ T9620] bridge_slave_1: entered promiscuous mode
[  181.593686][ T4490] Bluetooth: hci4: command tx timeout
[  181.647972][ T9620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  181.662066][ T9620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  181.796917][ T9620] team0: Port device team_slave_0 added
[  181.834395][ T9792] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  181.879526][ T9620] team0: Port device team_slave_1 added
[  181.901449][ T9797] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  182.007539][ T9805] sctp: [Deprecated]: syz-executor.4 (pid 9805) Use of int in max_burst socket option.
[  182.007539][ T9805] Use struct sctp_assoc_value instead
[  182.070061][ T9620] batman_adv: batadv0: Adding interface: batadv_slave_0
[  182.088409][ T9620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  182.133572][ T9620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  182.156698][ T9620] batman_adv: batadv0: Adding interface: batadv_slave_1
[  182.171858][ T9620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  182.198824][ T9620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  182.255427][ T9815] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  182.272183][ T9812] netlink: 209840 bytes leftover after parsing attributes in process `syz-executor.0'.
[  182.413087][ T9620] hsr_slave_0: entered promiscuous mode
[  182.432444][ T9620] hsr_slave_1: entered promiscuous mode
[  182.447706][ T9620] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  182.459462][ T9620] Cannot create hsr debugfs directory
[  182.934432][   T29] audit: type=1804 audit(1719077064.898:17): pid=9810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2170608058/syzkaller.zVtnrV/178/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0
[  183.249592][ T9848] __nla_validate_parse: 1 callbacks suppressed
[  183.249613][ T9848] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.0'.
[  183.323555][ T9848] openvswitch: netlink: Flow key attr not present in new flow.
[  183.403056][ T9620] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  183.428865][ T9620] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  183.447213][ T9620] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  183.500093][ T9855] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  183.527172][ T9620] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  183.673605][ T4490] Bluetooth: hci4: command tx timeout
[  183.730586][ T9860] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'.
[  183.893139][ T9620] 8021q: adding VLAN 0 to HW filter on device bond0
[  183.943270][ T9871] sctp: [Deprecated]: syz-executor.1 (pid 9871) Use of int in max_burst socket option.
[  183.943270][ T9871] Use struct sctp_assoc_value instead
[  183.990542][ T9620] 8021q: adding VLAN 0 to HW filter on device team0
[  184.023341][ T9875] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  184.081508][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[  184.088738][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[  184.135517][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[  184.142680][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[  184.522580][ T9887] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  184.553695][ T9887] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  184.565893][ T9887] netlink: 9328 bytes leftover after parsing attributes in process `syz-executor.2'.
[  184.589668][ T9887] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  184.956333][ T9620] 8021q: adding VLAN 0 to HW filter on device batadv0
[  185.062323][ T9915] xt_CT: You must specify a L4 protocol and not use inversions on it
[  185.092862][ T9620] veth0_vlan: entered promiscuous mode
[  185.146470][ T9620] veth1_vlan: entered promiscuous mode
[  185.241906][ T9620] veth0_macvtap: entered promiscuous mode
[  185.295276][ T9620] veth1_macvtap: entered promiscuous mode
[  185.374133][ T9620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  185.404900][ T9620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  185.424685][ T9620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  185.473571][ T9620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  185.485476][ T9620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  185.507974][ T9620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  185.526968][ T9620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  185.549085][ T9620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  185.578793][ T9620] batman_adv: batadv0: Interface activated: batadv_slave_0
[  185.624378][ T9930] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  185.700736][ T9620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  185.753946][ T4490] Bluetooth: hci4: command tx timeout
[  185.756020][ T9940] Bluetooth: hci3: invalid length 0, exp 2 for type 0
[  185.767830][ T9620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  185.818200][ T9620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  185.875900][ T9620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  185.945111][ T9620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  185.962564][ T9952] sctp: [Deprecated]: syz-executor.2 (pid 9952) Use of int in max_burst socket option.
[  185.962564][ T9952] Use struct sctp_assoc_value instead
[  185.987697][ T9620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  186.001898][ T9620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  186.014305][ T9620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  186.040933][ T9620] batman_adv: batadv0: Interface activated: batadv_slave_1
[  186.067870][ T9620] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  186.092078][ T9620] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  186.145058][ T9958] xt_CT: You must specify a L4 protocol and not use inversions on it
[  186.153306][ T9620] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  186.176263][ T9620] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  186.488607][ T2793] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  186.521964][ T2793] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  186.660832][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  186.690253][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  186.779668][ T9984] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  187.016317][ T9990] vxcan2: entered allmulticast mode
[  187.090499][T10000] xt_CT: You must specify a L4 protocol and not use inversions on it
[  187.232008][T10004] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'.
[  187.565926][T10035] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  188.131428][T10065] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'.
[  188.661103][   T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  188.671626][   T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  188.682168][   T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  188.703816][   T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  188.715443][   T53] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  188.722921][   T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.734009][   T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  189.331339][T10123] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'.
[  189.397769][T10088] chnl_net:caif_netlink_parms(): no params data found
[  189.608251][   T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.651447][T10129] bridge0: entered promiscuous mode
[  189.685113][T10129] bridge0: left promiscuous mode
[  189.730771][T10133] netlink: 'syz-executor.2': attribute type 40 has an invalid length.
[  189.783115][   T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  189.817020][   T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.837899][   T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  189.854675][   T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  189.868010][   T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  189.876609][   T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  189.890391][   T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  190.020341][   T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.060855][T10088] bridge0: port 1(bridge_slave_0) entered blocking state
[  190.104258][T10088] bridge0: port 1(bridge_slave_0) entered disabled state
[  190.119501][T10088] bridge_slave_0: entered allmulticast mode
[  190.135566][T10088] bridge_slave_0: entered promiscuous mode
[  190.187656][T10088] bridge0: port 2(bridge_slave_1) entered blocking state
[  190.211847][T10088] bridge0: port 2(bridge_slave_1) entered disabled state
[  190.235465][T10088] bridge_slave_1: entered allmulticast mode
[  190.250537][T10088] bridge_slave_1: entered promiscuous mode
[  190.384143][T10088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  190.481604][T10088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  190.545935][T10170] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'.
[  190.616558][T10179] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  190.695942][   T12] bridge_slave_1: left allmulticast mode
[  190.710655][   T12] bridge_slave_1: left promiscuous mode
[  190.728322][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  190.787384][   T12] bridge_slave_0: left allmulticast mode
[  190.793082][   T12] bridge_slave_0: left promiscuous mode
[  190.802748][   T53] Bluetooth: hci1: command tx timeout
[  190.844461][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  191.324941][T10215] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.1'.
[  191.357168][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  191.371444][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  191.383220][   T12] bond0 (unregistering): Released all slaves
[  191.400604][T10088] team0: Port device team_slave_0 added
[  191.507393][T10088] team0: Port device team_slave_1 added
[  191.664211][T10088] batman_adv: batadv0: Adding interface: batadv_slave_0
[  191.676650][T10088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  191.704390][T10088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  191.787432][T10088] batman_adv: batadv0: Adding interface: batadv_slave_1
[  191.805806][T10088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  191.852291][T10088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  191.946696][T10261] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  191.994048][   T53] Bluetooth: hci4: command tx timeout
[  192.106907][   T29] audit: type=1800 audit(1719077074.068:18): pid=10272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1943 res=0 errno=0
[  192.141548][   T29] audit: type=1804 audit(1719077074.098:19): pid=10274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir1772331506/syzkaller.dIIvfm/222/memory.events" dev="sda1" ino=1943 res=1 errno=0
[  192.189788][   T29] audit: type=1804 audit(1719077074.148:20): pid=10272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir1772331506/syzkaller.dIIvfm/222/memory.events" dev="sda1" ino=1943 res=1 errno=0
[  192.286345][T10088] hsr_slave_0: entered promiscuous mode
[  192.294326][T10088] hsr_slave_1: entered promiscuous mode
[  192.305092][T10088] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  192.313299][T10088] Cannot create hsr debugfs directory
[  192.399015][   T12] hsr_slave_0: left promiscuous mode
[  192.413109][   T12] hsr_slave_1: left promiscuous mode
[  192.421096][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  192.436096][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  192.448086][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  192.457527][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  192.501824][   T12] veth1_macvtap: left promiscuous mode
[  192.509084][   T12] veth0_macvtap: left promiscuous mode
[  192.516980][   T12] veth1_vlan: left promiscuous mode
[  192.522484][   T12] veth0_vlan: left promiscuous mode
[  192.874277][   T53] Bluetooth: hci1: command tx timeout
[  192.996930][   T12] team0 (unregistering): Port device team_slave_1 removed
[  193.051152][   T12] team0 (unregistering): Port device team_slave_0 removed
[  193.512972][T10286] tipc: Started in network mode
[  193.518979][T10286] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711
[  193.533349][T10286] tipc: Enabled bearer <udp:s>, priority 10
[  193.710516][T10141] chnl_net:caif_netlink_parms(): no params data found
[  194.007059][T10088] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.073754][   T53] Bluetooth: hci4: command tx timeout
[  194.089286][T10319] netlink: 209840 bytes leftover after parsing attributes in process `syz-executor.2'.
[  194.166722][T10088] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.258993][T10325] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  194.342296][T10088] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.454899][T10141] bridge0: port 1(bridge_slave_0) entered blocking state
[  194.462062][T10141] bridge0: port 1(bridge_slave_0) entered disabled state
[  194.495156][T10141] bridge_slave_0: entered allmulticast mode
[  194.502824][T10141] bridge_slave_0: entered promiscuous mode
[  194.539001][T10141] bridge0: port 2(bridge_slave_1) entered blocking state
[  194.557624][T10141] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.566398][T10141] bridge_slave_1: entered allmulticast mode
[  194.580368][T10141] bridge_slave_1: entered promiscuous mode
[  194.639285][T10088] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.646481][ T5120] tipc: Node number set to 4269801488
[  194.662829][ T1249] ieee802154 phy0 wpan0: encryption failed: -22
[  194.669473][ T1249] ieee802154 phy1 wpan1: encryption failed: -22
[  194.742562][T10341] batadv0: entered promiscuous mode
[  194.760629][T10341] batadv0: left promiscuous mode
[  194.858370][T10141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  194.884524][T10141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  194.954449][   T53] Bluetooth: hci1: command tx timeout
[  194.982946][T10141] team0: Port device team_slave_0 added
[  195.002855][T10141] team0: Port device team_slave_1 added
[  195.119208][T10141] batman_adv: batadv0: Adding interface: batadv_slave_0
[  195.140902][T10141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  195.193837][T10141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  195.228252][T10141] batman_adv: batadv0: Adding interface: batadv_slave_1
[  195.239576][T10141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  195.266646][T10141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  195.354038][T10351] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  195.440571][T10088] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  195.456201][T10360] netlink: 209840 bytes leftover after parsing attributes in process `syz-executor.4'.
[  195.494951][T10141] hsr_slave_0: entered promiscuous mode
[  195.514541][T10141] hsr_slave_1: entered promiscuous mode
[  195.524941][T10141] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  195.534895][T10141] Cannot create hsr debugfs directory
[  195.540506][T10088] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  195.557943][T10088] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  195.595171][T10362] netlink: 209840 bytes leftover after parsing attributes in process `syz-executor.1'.
[  195.605226][T10088] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  196.038137][T10088] 8021q: adding VLAN 0 to HW filter on device bond0
[  196.119976][T10088] 8021q: adding VLAN 0 to HW filter on device team0
[  196.155350][   T53] Bluetooth: hci4: command tx timeout
[  196.179731][ T5160] bridge0: port 1(bridge_slave_0) entered blocking state
[  196.186974][ T5160] bridge0: port 1(bridge_slave_0) entered forwarding state
[  196.200851][T10376] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  196.259659][ T5253] bridge0: port 2(bridge_slave_1) entered blocking state
[  196.266852][ T5253] bridge0: port 2(bridge_slave_1) entered forwarding state
[  196.513136][T10088] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  196.534083][   T29] audit: type=1800 audit(1719077078.488:21): pid=10387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1937 res=0 errno=0
[  196.619179][   T29] audit: type=1804 audit(1719077078.538:22): pid=10387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir2170608058/syzkaller.zVtnrV/219/memory.events" dev="sda1" ino=1937 res=1 errno=0
[  196.681113][T10141] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  196.738572][T10141] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  196.746130][   T29] audit: type=1804 audit(1719077078.558:23): pid=10387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir2170608058/syzkaller.zVtnrV/219/memory.events" dev="sda1" ino=1937 res=1 errno=0
[  196.800190][T10405] netlink: 209840 bytes leftover after parsing attributes in process `syz-executor.4'.
[  196.807206][T10141] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  196.847229][   T29] audit: type=1804 audit(1719077078.728:24): pid=10403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir2170608058/syzkaller.zVtnrV/219/memory.events" dev="sda1" ino=1937 res=1 errno=0
[  196.898422][T10141] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  197.033593][   T53] Bluetooth: hci1: command tx timeout
[  197.052002][   T29] audit: type=1804 audit(1719077078.748:25): pid=10387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir2170608058/syzkaller.zVtnrV/219/memory.events" dev="sda1" ino=1937 res=1 errno=0
[  197.128579][T10088] 8021q: adding VLAN 0 to HW filter on device batadv0
[  197.298017][T10088] veth0_vlan: entered promiscuous mode
[  197.324121][T10421] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  197.376254][T10088] veth1_vlan: entered promiscuous mode
[  197.469245][T10430] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  197.510495][T10141] 8021q: adding VLAN 0 to HW filter on device bond0
[  197.586305][T10088] veth0_macvtap: entered promiscuous mode
[  197.615749][T10141] 8021q: adding VLAN 0 to HW filter on device team0
[  197.648098][T10088] veth1_macvtap: entered promiscuous mode
[  197.699270][ T5253] bridge0: port 1(bridge_slave_0) entered blocking state
[  197.706482][ T5253] bridge0: port 1(bridge_slave_0) entered forwarding state
[  197.754641][ T5253] bridge0: port 2(bridge_slave_1) entered blocking state
[  197.761786][ T5253] bridge0: port 2(bridge_slave_1) entered forwarding state
[  197.812747][T10088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  197.828668][T10088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.845336][T10088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  197.856434][T10088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.866550][T10088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  197.877028][T10088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.887028][T10088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  197.899147][T10088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.911835][T10088] batman_adv: batadv0: Interface activated: batadv_slave_0
[  197.941024][T10088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  197.952898][T10088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.962867][T10088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  197.973863][T10088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.988645][T10088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  198.002305][T10088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.012533][T10088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  198.027168][T10088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.039724][T10088] batman_adv: batadv0: Interface activated: batadv_slave_1
[  198.051260][T10448] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  198.072662][T10088] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  198.083135][T10088] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  198.092286][T10088] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  198.102825][T10088] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  198.126224][T10448] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'.
[  198.149907][T10141] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  198.233871][   T53] Bluetooth: hci4: command tx timeout
[  198.346171][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  198.373852][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  198.433791][   T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  198.448913][   T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  198.492036][T10141] 8021q: adding VLAN 0 to HW filter on device batadv0
[  198.638643][T10141] veth0_vlan: entered promiscuous mode
[  198.670897][T10141] veth1_vlan: entered promiscuous mode
[  198.733072][T10141] veth0_macvtap: entered promiscuous mode
[  198.758149][T10141] veth1_macvtap: entered promiscuous mode
[  198.793277][T10141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  198.822533][T10141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.838065][T10141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  198.855170][T10141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.868872][T10141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  198.882034][T10141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.899572][T10141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  198.911447][T10141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.930786][T10141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  198.943227][T10141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.959871][T10141] batman_adv: batadv0: Interface activated: batadv_slave_0
[  199.003858][T10141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  199.034396][T10141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  199.046445][T10141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  199.061869][T10141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  199.071809][T10141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  199.083255][T10141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  199.093377][T10141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  199.103902][T10141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  199.133562][T10141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  199.150379][T10141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  199.165283][T10141] batman_adv: batadv0: Interface activated: batadv_slave_1
[  199.178796][T10141] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  199.201671][T10141] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  199.211183][T10141] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  199.227975][T10141] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  199.470373][T10241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  199.503154][T10241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  199.637234][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  199.655885][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  200.250166][T10530] bridge0: port 4(
00�X��D��) entered blocking state
[  200.294017][T10530] bridge0: port 4(
00�X��D��) entered disabled state
[  200.326963][T10530] 0�X��D��: entered promiscuous mode
[  200.363675][T10530] bridge0: port 4(
00�X��D��) entered blocking state
[  200.370540][T10530] bridge0: port 4(
00�X��D��) entered forwarding state
[  200.472875][T10539] netlink: 209840 bytes leftover after parsing attributes in process `syz-executor.0'.
[  200.603048][T10541] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  201.095592][T10558] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'.
[  201.114448][T10560] tipc: Can't bind to reserved service type 0
[  201.142305][T10559] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'.
[  201.407674][T10569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: macsec1
[  201.425680][T10569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  201.759709][   T62] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.106682][T10592] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  202.758781][ T5114] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  202.769240][ T5114] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  202.778463][ T5114] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  202.789531][ T5114] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  202.797800][ T5114] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  202.809686][ T5114] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  202.988083][   T62] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.075764][   T62] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.176832][   T62] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.229442][T10621] chnl_net:caif_netlink_parms(): no params data found
[  203.400211][T10621] bridge0: port 1(bridge_slave_0) entered blocking state
[  203.417922][T10621] bridge0: port 1(bridge_slave_0) entered disabled state
[  203.428381][T10621] bridge_slave_0: entered allmulticast mode
[  203.439298][T10621] bridge_slave_0: entered promiscuous mode
[  203.485742][T10621] bridge0: port 2(bridge_slave_1) entered blocking state
[  203.497607][T10621] bridge0: port 2(bridge_slave_1) entered disabled state
[  203.506299][T10621] bridge_slave_1: entered allmulticast mode
[  203.533948][T10621] bridge_slave_1: entered promiscuous mode
[  203.649323][T10621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  203.683100][T10621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  203.699365][   T62] bridge_slave_1: left allmulticast mode
[  203.705907][   T62] bridge_slave_1: left promiscuous mode
[  203.712211][   T62] bridge0: port 2(bridge_slave_1) entered disabled state
[  203.732345][T10653] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  203.747738][   T62] bridge_slave_0: left allmulticast mode
[  203.754860][   T62] bridge_slave_0: left promiscuous mode
[  203.776021][   T62] bridge0: port 1(bridge_slave_0) entered disabled state
[  204.280251][   T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  204.296415][   T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  204.310547][   T62] bond0 (unregistering): Released all slaves
[  204.370401][T10654] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'.
[  204.476235][T10621] team0: Port device team_slave_0 added
[  204.556796][T10621] team0: Port device team_slave_1 added
[  204.593870][T10621] batman_adv: batadv0: Adding interface: batadv_slave_0
[  204.602224][T10621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  204.632073][T10621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  204.680641][T10621] batman_adv: batadv0: Adding interface: batadv_slave_1
[  204.688520][T10621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  204.716482][T10621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  204.804508][   T62] hsr_slave_0: left promiscuous mode
[  204.811687][   T62] hsr_slave_1: left promiscuous mode
[  204.820509][   T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  204.829258][   T62] batman_adv: batadv0: Removing interface: batadv_slave_0
[  204.839646][   T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  204.847365][   T62] batman_adv: batadv0: Removing interface: batadv_slave_1
[  204.892203][ T4490] Bluetooth: hci4: command tx timeout
[  204.895679][   T62] veth1_macvtap: left promiscuous mode
[  204.904508][   T62] veth0_macvtap: left promiscuous mode
[  204.910909][   T62] veth1_vlan: left promiscuous mode
[  204.916826][   T62] veth0_vlan: left promiscuous mode
[  205.615320][T10697] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[  205.845350][   T62] team0 (unregistering): Port device team_slave_1 removed
[  205.903213][   T62] team0 (unregistering): Port device team_slave_0 removed
[  206.320975][T10621] hsr_slave_0: entered promiscuous mode
[  206.327752][T10621] hsr_slave_1: entered promiscuous mode
[  206.334778][T10621] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  206.342360][T10621] Cannot create hsr debugfs directory
[  206.710725][T10708] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'.
[  206.854902][T10725] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[  206.937572][T10725] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  206.953715][   T53] Bluetooth: hci4: command tx timeout
[  207.032258][T10733] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  207.097688][T10739] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'.
[  207.539818][T10621] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  207.562716][T10621] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  207.597096][T10621] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  207.636810][T10621] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  207.743310][T10762] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'.
[  208.043216][T10621] 8021q: adding VLAN 0 to HW filter on device bond0
[  208.081281][T10621] 8021q: adding VLAN 0 to HW filter on device team0
[  208.146887][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state
[  208.154124][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state
[  208.229841][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[  208.237034][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[  208.312466][T10798] netlink: 'syz-executor.2': attribute type 3 has an invalid length.
[  208.340633][T10621] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  208.362152][T10621] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  208.424207][T10799] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  208.718385][T10808] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.765661][T10817] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'.
[  208.903000][T10808] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.967855][T10621] 8021q: adding VLAN 0 to HW filter on device batadv0
[  209.018508][T10808] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.045532][   T53] Bluetooth: hci4: command tx timeout
[  209.132379][T10808] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.171520][T10621] veth0_vlan: entered promiscuous mode
[  209.187065][T10621] veth1_vlan: entered promiscuous mode
[  209.221465][T10845] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'.
[  209.288502][T10808] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  209.307733][T10808] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  209.331445][T10808] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  209.362572][T10808] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  209.385808][T10621] veth0_macvtap: entered promiscuous mode
[  209.404026][T10621] veth1_macvtap: entered promiscuous mode
[  209.433322][T10621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  209.463536][T10621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.485070][T10621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  209.503656][T10621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.528895][T10621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  209.539783][T10621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.549643][T10621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  209.560279][T10621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.577966][T10621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  209.603248][T10621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.636233][T10621] batman_adv: batadv0: Interface activated: batadv_slave_0
[  209.660260][T10621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  209.679946][T10621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.712467][T10621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  209.733333][T10621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.746954][T10621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  209.762527][T10621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.773946][T10621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  209.815302][T10621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.843720][T10621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  209.861307][T10621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.902329][T10621] batman_adv: batadv0: Interface activated: batadv_slave_1
[  209.952036][T10621] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  209.966958][T10621] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  209.985505][T10621] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  210.015416][T10621] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  210.229031][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  210.265712][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  210.325496][   T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  210.335073][   T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  210.623165][T10907] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  210.632702][T10909] __nla_validate_parse: 3 callbacks suppressed
[  210.632719][T10909] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'.
[  210.734027][T10906] ieee802154 phy0 wpan0: encryption failed: -22
[  210.765145][T10913] netlink: 404 bytes leftover after parsing attributes in process `syz-executor.0'.
[  210.789602][T10913] batadv_slave_0: entered allmulticast mode
[  210.839795][T10913] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'.
[  210.864750][T10913] pim6reg: entered allmulticast mode
[  210.876405][T10913] batadv_slave_0: left allmulticast mode
[  210.944733][T10912] pim6reg: left allmulticast mode
[  211.191199][T10936] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  211.312879][T10940] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[  211.352793][T10946] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  211.535040][   T29] audit: type=1800 audit(1719077093.498:26): pid=10951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1945 res=0 errno=0
[  211.582373][   T29] audit: type=1804 audit(1719077093.538:27): pid=10951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir2170608058/syzkaller.zVtnrV/254/memory.events" dev="sda1" ino=1945 res=1 errno=0
[  211.614415][T10958] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  211.627079][T10959] netlink: 209840 bytes leftover after parsing attributes in process `syz-executor.4'.
[  211.671020][T10961] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[  212.562878][   T51] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.731181][T11027] netlink: 209840 bytes leftover after parsing attributes in process `syz-executor.0'.
[  213.304780][   T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  213.315743][   T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  213.326152][   T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  213.338110][   T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  213.350457][   T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  213.360251][   T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  213.397986][T11068] bond_slave_1: mtu less than device minimum
[  213.575516][   T51] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  213.732905][   T51] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  213.822245][   T51] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.085629][T11058] chnl_net:caif_netlink_parms(): no params data found
[  214.109310][   T51] bridge_slave_1: left allmulticast mode
[  214.117284][   T51] bridge_slave_1: left promiscuous mode
[  214.123371][   T51] bridge0: port 2(bridge_slave_1) entered disabled state
[  214.141010][   T51] bridge_slave_0: left allmulticast mode
[  214.147359][   T51] bridge_slave_0: left promiscuous mode
[  214.153270][   T51] bridge0: port 1(bridge_slave_0) entered disabled state
[  214.338918][T11111] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[  214.348646][T11111] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
[  214.642284][   T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  214.654691][   T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  214.670979][   T51] bond0 (unregistering): Released all slaves
[  214.927354][T11058] bridge0: port 1(bridge_slave_0) entered blocking state
[  214.935104][T11058] bridge0: port 1(bridge_slave_0) entered disabled state
[  214.942370][T11058] bridge_slave_0: entered allmulticast mode
[  214.949323][T11058] bridge_slave_0: entered promiscuous mode
[  214.992890][T11058] bridge0: port 2(bridge_slave_1) entered blocking state
[  215.002380][T11058] bridge0: port 2(bridge_slave_1) entered disabled state
[  215.010202][T11058] bridge_slave_1: entered allmulticast mode
[  215.019822][T11058] bridge_slave_1: entered promiscuous mode
[  215.196334][T11058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  215.248109][T11058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  215.301910][   T51] hsr_slave_0: left promiscuous mode
[  215.339929][   T51] hsr_slave_1: left promiscuous mode
[  215.358250][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  215.375202][   T51] batman_adv: batadv0: Removing interface: batadv_slave_0
[  215.397507][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  215.419945][   T51] batman_adv: batadv0: Removing interface: batadv_slave_1
[  215.433989][   T53] Bluetooth: hci4: command tx timeout
[  215.499547][   T51] veth1_macvtap: left promiscuous mode
[  215.534888][   T51] veth0_macvtap: left promiscuous mode
[  215.551083][   T51] veth1_vlan: left promiscuous mode
[  215.557345][   T51] veth0_vlan: left promiscuous mode
[  216.142523][   T51] team0 (unregistering): Port device team_slave_1 removed
[  216.180891][   T51] team0 (unregistering): Port device team_slave_0 removed
[  216.592708][T11155] team0: entered promiscuous mode
[  216.601292][T11155] team_slave_0: entered promiscuous mode
[  216.608086][T11155] team_slave_1: entered promiscuous mode
[  216.695637][T11156] team0: left promiscuous mode
[  216.704194][T11156] team_slave_0: left promiscuous mode
[  216.714520][T11156] team_slave_1: left promiscuous mode
[  216.768088][T11058] team0: Port device team_slave_0 added
[  216.805075][T11169] bond0: entered promiscuous mode
[  216.810343][T11169] bond_slave_0: entered promiscuous mode
[  216.816997][T11169] bond_slave_1: entered promiscuous mode
[  216.843161][T11058] team0: Port device team_slave_1 added
[  217.060942][T11058] batman_adv: batadv0: Adding interface: batadv_slave_0
[  217.079303][T11058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  217.133227][T11058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  217.156674][T11058] batman_adv: batadv0: Adding interface: batadv_slave_1
[  217.172669][T11058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  217.208074][T11058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  217.319659][T11058] hsr_slave_0: entered promiscuous mode
[  217.333387][T11058] hsr_slave_1: entered promiscuous mode
[  217.348183][T11058] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  217.363531][T11058] Cannot create hsr debugfs directory
[  217.514710][   T53] Bluetooth: hci4: command tx timeout
[  217.715182][T11198] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  217.760081][T11198] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  217.799686][T11205] __nla_validate_parse: 4 callbacks suppressed
[  217.799706][T11205] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  218.076896][T11219] dccp_invalid_packet: pskb_may_pull failed
[  218.193963][T11058] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  218.220464][T11058] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  218.245845][T11226] netlink: 134788 bytes leftover after parsing attributes in process `syz-executor.2'.
[  218.246864][T11058] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  218.276579][T11058] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  218.384743][T11225] bond0: (slave bond_slave_1): Releasing backup interface
[  218.661342][T11058] 8021q: adding VLAN 0 to HW filter on device bond0
[  218.723102][T11058] 8021q: adding VLAN 0 to HW filter on device team0
[  218.764694][  T784] bridge0: port 1(bridge_slave_0) entered blocking state
[  218.771900][  T784] bridge0: port 1(bridge_slave_0) entered forwarding state
[  218.830159][  T784] bridge0: port 2(bridge_slave_1) entered blocking state
[  218.837360][  T784] bridge0: port 2(bridge_slave_1) entered forwarding state
[  218.900279][T11242] netlink: 209840 bytes leftover after parsing attributes in process `syz-executor.2'.
[  219.124174][T11058] 8021q: adding VLAN 0 to HW filter on device batadv0
[  219.187767][T11058] veth0_vlan: entered promiscuous mode
[  219.218331][T11058] veth1_vlan: entered promiscuous mode
[  219.258066][T11058] veth0_macvtap: entered promiscuous mode
[  219.270144][T11058] veth1_macvtap: entered promiscuous mode
[  219.294237][T11058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  219.304794][T11058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  219.317593][T11058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  219.328452][T11058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  219.338393][T11058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  219.359375][T11058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  219.370080][T11058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  219.380672][T11058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  219.391681][T11058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  219.404755][T11058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  219.422387][T11058] batman_adv: batadv0: Interface activated: batadv_slave_0
[  219.450742][T11058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  219.474015][T11058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  219.486396][T11058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  219.500366][T11058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  219.510804][T11058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  219.531767][T11058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  219.552183][T11058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  219.583333][T11058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  219.594329][ T4490] Bluetooth: hci4: command tx timeout
[  219.612089][T11058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  219.633053][T11058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  219.646891][T11058] batman_adv: batadv0: Interface activated: batadv_slave_1
[  219.693169][T11058] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  219.712390][T11058] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  219.731259][T11058] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  219.740572][T11058] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  219.956123][   T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  219.973355][   T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  220.049521][T11263] tipc: Started in network mode
[  220.055376][T11263] tipc: Node identity 2a6b6c0d1936, cluster identity 4711
[  220.062791][T11263] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  220.145798][T11263] tipc: Resetting bearer <eth:syzkaller0>
[  220.156954][T11072] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  220.170474][T11279] netem: incorrect ge model size
[  220.176454][T11072] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  220.187090][T11279] netem: change failed
[  220.226580][T11280] netlink: 209840 bytes leftover after parsing attributes in process `syz-executor.2'.
[  220.292397][T11281] ------------[ cut here ]------------
[  220.299077][T11281] WARNING: CPU: 0 PID: 11281 at kernel/workqueue.c:2281 __queue_work+0xc5e/0xee0
[  220.308241][T11281] Modules linked in:
[  220.312177][T11281] CPU: 0 PID: 11281 Comm: syz-executor.2 Not tainted 6.10.0-rc4-syzkaller-00869-g185d72112b95 #0
[  220.322700][T11281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  220.332792][T11281] RIP: 0010:__queue_work+0xc5e/0xee0
[  220.338154][T11281] Code: ff e8 86 81 36 00 90 0f 0b 90 e9 20 fd ff ff e8 78 81 36 00 eb 13 e8 71 81 36 00 eb 0c e8 6a 81 36 00 eb 05 e8 63 81 36 00 90 <0f> 0b 90 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc
[  220.357777][T11281] RSP: 0018:ffffc90002e2f4b0 EFLAGS: 00010083
[  220.364126][T11281] RAX: ffffffff815fa3cf RBX: ffff88807ed61e00 RCX: 0000000000040000
[  220.372104][T11281] RDX: ffffc900113ce000 RSI: 0000000000008cde RDI: 0000000000008cdf
[  220.380086][T11281] RBP: 0000000000000000 R08: ffffffff815f98a3 R09: 0000000000000000
[  220.388077][T11281] R10: ffffc90002e2f580 R11: fffff520005c5eb1 R12: ffff88802473a9c0
[  220.396066][T11281] R13: dffffc0000000000 R14: ffff88802473a800 R15: 0000000000000008
[  220.404055][T11281] FS:  00007fba2c6b36c0(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000
[  220.413013][T11281] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  220.419613][T11281] CR2: 000000002028b000 CR3: 0000000044bb4000 CR4: 00000000003506f0
[  220.427594][T11281] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  220.435568][T11281] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  220.443544][T11281] Call Trace:
[  220.446817][T11281]  <TASK>
[  220.449746][T11281]  ? __warn+0x163/0x4e0
[  220.453905][T11281]  ? __queue_work+0xc5e/0xee0
[  220.458586][T11281]  ? report_bug+0x2b3/0x500
[  220.463093][T11281]  ? __queue_work+0xc5e/0xee0
[  220.467770][T11281]  ? handle_bug+0x3e/0x70
[  220.472099][T11281]  ? exc_invalid_op+0x1a/0x50
[  220.476776][T11281]  ? asm_exc_invalid_op+0x1a/0x20
[  220.481822][T11281]  ? __queue_work+0x123/0xee0
[  220.486509][T11281]  ? __queue_work+0xc4f/0xee0
[  220.491194][T11281]  ? __queue_work+0xc5e/0xee0
[  220.495891][T11281]  ? lockdep_hardirqs_on+0x99/0x150
[  220.501122][T11281]  queue_work_on+0x1c2/0x380
[  220.505804][T11281]  ? __pfx_queue_work_on+0x10/0x10
[  220.510944][T11281]  ? l2cap_do_send+0x155/0x2c0
[  220.515809][T11281]  l2cap_chan_send+0x3d6/0x2690
[  220.520675][T11281]  ? trace_contention_end+0x3c/0x120
[  220.525978][T11281]  ? __mutex_lock+0x2ef/0xd70
[  220.530668][T11281]  ? __pfx_l2cap_chan_send+0x10/0x10
[  220.535964][T11281]  ? do_raw_spin_unlock+0x13c/0x8b0
[  220.541174][T11281]  l2cap_sock_sendmsg+0x1b4/0x2c0
[  220.546208][T11281]  ? __pfx_l2cap_sock_sendmsg+0x10/0x10
[  220.551755][T11281]  __sock_sendmsg+0x221/0x270
[  220.556443][T11281]  ____sys_sendmsg+0x525/0x7d0
[  220.561220][T11281]  ? __pfx_____sys_sendmsg+0x10/0x10
[  220.566511][T11281]  ? __might_fault+0xaa/0x120
[  220.571187][T11281]  __sys_sendmmsg+0x3b2/0x740
[  220.575872][T11281]  ? __pfx___sys_sendmmsg+0x10/0x10
[  220.581150][T11281]  ? __pfx___might_resched+0x10/0x10
[  220.586457][T11281]  ? __might_fault+0xaa/0x120
[  220.591129][T11281]  ? __pfx_lock_release+0x10/0x10
[  220.596152][T11281]  ? do_futex+0x33b/0x560
[  220.600569][T11281]  ? __rseq_handle_notify_resume+0x353/0x14e0
[  220.606641][T11281]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  220.612615][T11281]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  220.618943][T11281]  ? do_syscall_64+0x100/0x230
[  220.623723][T11281]  __x64_sys_sendmmsg+0xa0/0xb0
[  220.628598][T11281]  do_syscall_64+0xf3/0x230
[  220.633100][T11281]  ? clear_bhb_loop+0x35/0x90
[  220.637865][T11281]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  220.643772][T11281] RIP: 0033:0x7fba2b87d0a9
[  220.648196][T11281] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  220.667899][T11281] RSP: 002b:00007fba2c6b30c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  220.676342][T11281] RAX: ffffffffffffffda RBX: 00007fba2b9b4050 RCX: 00007fba2b87d0a9
[  220.684328][T11281] RDX: 00000000ffffff80 RSI: 0000000020004100 RDI: 0000000000000008
[  220.692332][T11281] RBP: 00007fba2b8ec074 R08: 0000000000000000 R09: 0000000000000000
[  220.700412][T11281] R10: 0000000000010040 R11: 0000000000000246 R12: 0000000000000000
[  220.708402][T11281] R13: 000000000000006e R14: 00007fba2b9b4050 R15: 00007ffdacc3af98
[  220.716401][T11281]  </TASK>
[  220.719419][T11281] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  220.726700][T11281] CPU: 0 PID: 11281 Comm: syz-executor.2 Not tainted 6.10.0-rc4-syzkaller-00869-g185d72112b95 #0
[  220.737384][T11281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  220.747436][T11281] Call Trace:
[  220.750718][T11281]  <TASK>
[  220.753734][T11281]  dump_stack_lvl+0x241/0x360
[  220.758417][T11281]  ? __pfx_dump_stack_lvl+0x10/0x10
[  220.763617][T11281]  ? __pfx__printk+0x10/0x10
[  220.768208][T11281]  ? _printk+0xd5/0x120
[  220.772364][T11281]  ? vscnprintf+0x5d/0x90
[  220.776690][T11281]  panic+0x349/0x860
[  220.780699][T11281]  ? __warn+0x172/0x4e0
[  220.784850][T11281]  ? __pfx_panic+0x10/0x10
[  220.789258][T11281]  ? show_trace_log_lvl+0x4e6/0x520
[  220.794560][T11281]  __warn+0x346/0x4e0
[  220.798538][T11281]  ? __queue_work+0xc5e/0xee0
[  220.803211][T11281]  report_bug+0x2b3/0x500
[  220.807533][T11281]  ? __queue_work+0xc5e/0xee0
[  220.812207][T11281]  handle_bug+0x3e/0x70
[  220.816357][T11281]  exc_invalid_op+0x1a/0x50
[  220.820856][T11281]  asm_exc_invalid_op+0x1a/0x20
[  220.825702][T11281] RIP: 0010:__queue_work+0xc5e/0xee0
[  220.830983][T11281] Code: ff e8 86 81 36 00 90 0f 0b 90 e9 20 fd ff ff e8 78 81 36 00 eb 13 e8 71 81 36 00 eb 0c e8 6a 81 36 00 eb 05 e8 63 81 36 00 90 <0f> 0b 90 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc
[  220.850587][T11281] RSP: 0018:ffffc90002e2f4b0 EFLAGS: 00010083
[  220.856655][T11281] RAX: ffffffff815fa3cf RBX: ffff88807ed61e00 RCX: 0000000000040000
[  220.864618][T11281] RDX: ffffc900113ce000 RSI: 0000000000008cde RDI: 0000000000008cdf
[  220.872577][T11281] RBP: 0000000000000000 R08: ffffffff815f98a3 R09: 0000000000000000
[  220.880538][T11281] R10: ffffc90002e2f580 R11: fffff520005c5eb1 R12: ffff88802473a9c0
[  220.888503][T11281] R13: dffffc0000000000 R14: ffff88802473a800 R15: 0000000000000008
[  220.896469][T11281]  ? __queue_work+0x123/0xee0
[  220.901140][T11281]  ? __queue_work+0xc4f/0xee0
[  220.905812][T11281]  ? lockdep_hardirqs_on+0x99/0x150
[  220.911009][T11281]  queue_work_on+0x1c2/0x380
[  220.915592][T11281]  ? __pfx_queue_work_on+0x10/0x10
[  220.920701][T11281]  ? l2cap_do_send+0x155/0x2c0
[  220.925463][T11281]  l2cap_chan_send+0x3d6/0x2690
[  220.930318][T11281]  ? trace_contention_end+0x3c/0x120
[  220.935606][T11281]  ? __mutex_lock+0x2ef/0xd70
[  220.940281][T11281]  ? __pfx_l2cap_chan_send+0x10/0x10
[  220.945568][T11281]  ? do_raw_spin_unlock+0x13c/0x8b0
[  220.950785][T11281]  l2cap_sock_sendmsg+0x1b4/0x2c0
[  220.955813][T11281]  ? __pfx_l2cap_sock_sendmsg+0x10/0x10
[  220.961349][T11281]  __sock_sendmsg+0x221/0x270
[  220.966022][T11281]  ____sys_sendmsg+0x525/0x7d0
[  220.970798][T11281]  ? __pfx_____sys_sendmsg+0x10/0x10
[  220.976090][T11281]  ? __might_fault+0xaa/0x120
[  220.980762][T11281]  __sys_sendmmsg+0x3b2/0x740
[  220.985441][T11281]  ? __pfx___sys_sendmmsg+0x10/0x10
[  220.990683][T11281]  ? __pfx___might_resched+0x10/0x10
[  220.995962][T11281]  ? __might_fault+0xaa/0x120
[  221.000661][T11281]  ? __pfx_lock_release+0x10/0x10
[  221.005678][T11281]  ? do_futex+0x33b/0x560
[  221.010003][T11281]  ? __rseq_handle_notify_resume+0x353/0x14e0
[  221.016076][T11281]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  221.022051][T11281]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  221.028374][T11281]  ? do_syscall_64+0x100/0x230
[  221.033138][T11281]  __x64_sys_sendmmsg+0xa0/0xb0
[  221.037998][T11281]  do_syscall_64+0xf3/0x230
[  221.042506][T11281]  ? clear_bhb_loop+0x35/0x90
[  221.047189][T11281]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  221.053082][T11281] RIP: 0033:0x7fba2b87d0a9
[  221.057494][T11281] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  221.077101][T11281] RSP: 002b:00007fba2c6b30c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  221.085511][T11281] RAX: ffffffffffffffda RBX: 00007fba2b9b4050 RCX: 00007fba2b87d0a9
[  221.093479][T11281] RDX: 00000000ffffff80 RSI: 0000000020004100 RDI: 0000000000000008
[  221.101447][T11281] RBP: 00007fba2b8ec074 R08: 0000000000000000 R09: 0000000000000000
[  221.109496][T11281] R10: 0000000000010040 R11: 0000000000000246 R12: 0000000000000000
[  221.117458][T11281] R13: 000000000000006e R14: 00007fba2b9b4050 R15: 00007ffdacc3af98
[  221.125435][T11281]  </TASK>
[  221.128547][T11281] Kernel Offset: disabled
[  221.132924][T11281] Rebooting in 86400 seconds..