last executing test programs:

30.261457817s ago: executing program 0 (id=129):
r0 = socket$phonet(0x23, 0x2, 0x1)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x4, 0x4) (async)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) (async)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000080)={'sit0\x00', <r3=>0x0, 0x7800, 0x40, 0x5, 0x3, {{0x40, 0x4, 0x2, 0x18, 0x100, 0x65, 0x0, 0x26, 0x29, 0x0, @loopback, @private=0xa010100, {[@end, @timestamp_addr={0x44, 0x24, 0x44, 0x1, 0x9, [{@loopback, 0x3bc}, {@remote, 0x40}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x2}, {@local, 0xee5}]}, @timestamp={0x44, 0x14, 0x44, 0x0, 0xb, [0x5, 0x4, 0x10001, 0x4]}, @generic={0x86, 0x6, "b278cf35"}, @ssrr={0x89, 0x27, 0xf5, [@local, @loopback, @empty, @loopback, @empty, @remote, @multicast1, @multicast1, @dev={0xac, 0x14, 0x14, 0xe}]}, @ssrr={0x89, 0x23, 0x81, [@empty, @broadcast, @rand_addr=0x64010101, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x26}, @dev={0xac, 0x14, 0x14, 0x3c}, @multicast2]}, @timestamp_addr={0x44, 0x44, 0x62, 0x1, 0x3, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xff}, {@private=0xa010100, 0xa481}, {@private=0xa010100, 0x5}, {@broadcast, 0x200}, {@broadcast, 0x1}, {@local, 0xffffffff}, {@rand_addr=0x64010101, 0x6}, {@broadcast, 0x4}]}, @timestamp_addr={0x44, 0x1c, 0xac, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@empty, 0xffffffff}, {@loopback, 0xfffffffd}]}]}}}}})
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000200)={r3, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) (async)
connect$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x2711, @hyper}, 0x10) (async)
recvmsg(r2, &(0x7f0000000540)={&(0x7f0000000300)=@vsock, 0x80, &(0x7f0000000480)=[{&(0x7f0000000380)=""/153, 0x99}, {&(0x7f0000000440)=""/6, 0x6}], 0x2, &(0x7f00000004c0)=""/122, 0x7a}, 0x142)
socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x40900, 0x0)
write$tun(r4, &(0x7f00000005c0)={@void, @val={0x2, 0x0, 0x0, 0x7, 0xe, 0x1000}, @arp=@generic={0x200, 0x88f7, 0x6, 0x2, 0xe9068148ab6cdf9e, @link_local, "d020", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, "b8c76c1ccd8d7c84b3e233360b6c6061"}}, 0x30)
setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000600)=0xfffffffe, 0x4)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000640)={<r5=>0x0, 0xd}, &(0x7f0000000680)=0x8)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f00000006c0)={<r6=>r5, 0x8, 0x30, 0x6, 0x7fffffff}, &(0x7f0000000700)=0x18) (async)
getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000740), &(0x7f0000000780)=0x40)
connect$can_bcm(r1, &(0x7f00000007c0), 0x10) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000800)={'ipvlan1\x00'}) (async)
getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000840)={<r7=>r5, 0xffffffff}, &(0x7f0000000880)=0x8) (async)
r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(r8, 0x0, 0x487, &(0x7f00000008c0), &(0x7f0000000900)=0x30)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='mem_connect\x00', r2, 0x0, 0x4}, 0x18)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000009c0)={0xd, 0x2, 0x8, 0x7, r6}, 0x10) (async)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000a00)={r7, 0xffff}, 0x8)
r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
getsockopt$IP_VS_SO_GET_VERSION(r9, 0x0, 0x480, &(0x7f0000000a40), &(0x7f0000000a80)=0x40) (async)
ioctl$SIOCGSTAMP(r8, 0x8906, &(0x7f0000000ac0))
setsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000b00), 0x4)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r9, 0x8983, &(0x7f0000000b40)={0x7, '\x00', {0x4}})
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000019, 0x11, 0xffffffffffffffff, 0xed6ae000)

30.199909628s ago: executing program 0 (id=130):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_DST={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x30}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8c0}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x4, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="911087000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r4, 0x701, 0x0, 0x0, {0x16}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0)
r5 = accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000001c0)=0x14, 0x800)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', <r6=>0x0})
setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000002c0)={r6, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x10)
clock_gettime(0x0, &(0x7f0000000400)={<r7=>0x0, <r8=>0x0})
pselect6(0x40, &(0x7f0000000300)={0x5b4c, 0x8, 0x7, 0x3, 0x7, 0x8, 0x9, 0x3}, &(0x7f0000000340)={0x9, 0xffffffffffff360e, 0x3, 0x5, 0x6, 0x100000000, 0x3, 0x300}, &(0x7f0000000380)={0x9, 0x2, 0xf36b, 0x400, 0x5, 0x5b21, 0xa, 0x4}, &(0x7f0000000500)={r7, r8+10000000}, &(0x7f0000000580)={&(0x7f0000000540)={[0x3]}, 0x8})
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
recvfrom$inet(r10, &(0x7f0000000640)=""/134, 0x86, 0x20, &(0x7f00000005c0)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYRES32=r9, @ANYBLOB="02"], 0x10)
r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@fallback=r11, 0x12, 0x0, 0x101, &(0x7f0000000180)=[0x0, 0x0], 0x2, 0x0, 0x0, 0x0, 0x0}, 0x40)

30.199636155s ago: executing program 0 (id=131):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x401, 0x70bd29, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x3}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xf3941}, @IFLA_GRE_TTL={0x5, 0x8, 0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xbb77f}]}}}]}, 0x54}}, 0x0)

29.866013663s ago: executing program 0 (id=137):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="380000006c000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000018003480140035"], 0x38}, 0x1, 0x0, 0x0, 0x4084}, 0x0)
sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000003c0)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000000)="7f", 0x1}], 0x1}}], 0x1, 0x0)
listen(r0, 0xfff)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000100010000", @ANYRES32=0x0, @ANYBLOB="0100008000"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r3 = socket$kcm(0x11, 0x3, 0x0)
r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4)
setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000)=r4, 0x4)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x1c}}, 0x24004044)
sendmsg$kcm(r3, &(0x7f0000000b00)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x6}, 0x80, &(0x7f0000000100), 0x79}, 0x0)
r5 = accept(r0, 0xfffffffffffffffd, &(0x7f0000000680))
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000200)={0x0, 0x91a}, 0x8)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r8 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r10, &(0x7f0000000100)={0x4})
socket$inet6_icmp(0xa, 0x2, 0x3a)
close(r9)
getsockopt$sock_buf(r9, 0x1, 0x3b, &(0x7f0000000140)=""/73, &(0x7f0000000040)=0x49)
bind$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0xe4, @fixed, 0x0, 0x1}, 0xe)
sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1}, 0x40004)

24.556156049s ago: executing program 0 (id=137):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="380000006c000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000018003480140035"], 0x38}, 0x1, 0x0, 0x0, 0x4084}, 0x0)
sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000003c0)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000000)="7f", 0x1}], 0x1}}], 0x1, 0x0)
listen(r0, 0xfff)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000100010000", @ANYRES32=0x0, @ANYBLOB="0100008000"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r3 = socket$kcm(0x11, 0x3, 0x0)
r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4)
setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000)=r4, 0x4)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x1c}}, 0x24004044)
sendmsg$kcm(r3, &(0x7f0000000b00)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x6}, 0x80, &(0x7f0000000100), 0x79}, 0x0)
r5 = accept(r0, 0xfffffffffffffffd, &(0x7f0000000680))
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000200)={0x0, 0x91a}, 0x8)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r8 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r10, &(0x7f0000000100)={0x4})
socket$inet6_icmp(0xa, 0x2, 0x3a)
close(r9)
getsockopt$sock_buf(r9, 0x1, 0x3b, &(0x7f0000000140)=""/73, &(0x7f0000000040)=0x49)
bind$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0xe4, @fixed, 0x0, 0x1}, 0xe)
sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1}, 0x40004)

19.201086111s ago: executing program 0 (id=137):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="380000006c000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000018003480140035"], 0x38}, 0x1, 0x0, 0x0, 0x4084}, 0x0)
sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000003c0)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000000)="7f", 0x1}], 0x1}}], 0x1, 0x0)
listen(r0, 0xfff)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000100010000", @ANYRES32=0x0, @ANYBLOB="0100008000"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r3 = socket$kcm(0x11, 0x3, 0x0)
r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4)
setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000)=r4, 0x4)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x1c}}, 0x24004044)
sendmsg$kcm(r3, &(0x7f0000000b00)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x6}, 0x80, &(0x7f0000000100), 0x79}, 0x0)
r5 = accept(r0, 0xfffffffffffffffd, &(0x7f0000000680))
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000200)={0x0, 0x91a}, 0x8)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r8 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r10, &(0x7f0000000100)={0x4})
socket$inet6_icmp(0xa, 0x2, 0x3a)
close(r9)
getsockopt$sock_buf(r9, 0x1, 0x3b, &(0x7f0000000140)=""/73, &(0x7f0000000040)=0x49)
bind$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0xe4, @fixed, 0x0, 0x1}, 0xe)
sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1}, 0x40004)

16.52997808s ago: executing program 2 (id=308):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbff, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x7, 0x7, 0x6}, 0x4, r1}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000e804)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x4884)

16.189830812s ago: executing program 2 (id=311):
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x1}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, {}, {}, {}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x0, 0x80000008, 0x40000000}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0)
r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4)
listen(r2, 0x8)
setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000001940)=@rose={'rose', 0x0}, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x0)
syz_emit_ethernet(0x13e, &(0x7f00000003c0)=ANY=[@ANYBLOB="e33110495bfd"], 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000001}, 0x40000)
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0xd, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000ba00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc85}, 0x94)

16.189340444s ago: executing program 2 (id=312):
r0 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$sock_int(r0, 0x1, 0x27, &(0x7f00000006c0)=0x8, 0x4)
sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x69, @remote, 0x8c}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000040)="a6eb863802ca4bfb864f286d350f32ba2228f7e7900b0c1131b28e67db6e", 0x1e}, {&(0x7f0000000140)="4d47ff15c5e2d71af90a6b0d04910bb67e92a94e46c6f38d41353618b0abd3ba54ba3812391328949da9b48b9c638a015ac7662207d779707789e6f5a3336ed4ed50277a3c4318633996443c645527d206736eba2a023f4a9d7670d39ac0b36479624d54d6ed91b8691d52c984fe13321e37c2bdfba4305ad585dfb1c45228e7e43c4ed0f2cc5b7f10e745a99d0e52e1c49cbf2b6166bedd4ef9117b0ea625143226396a9a54c79d3de56ab1f9863cc35e5160b9f9a16e39bcfef6", 0xbb}], 0x2, &(0x7f0000000200)=[@hopopts={{0x20, 0x29, 0x36, {0x8, 0x0, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x10001}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x8000000}}, @rthdr={{0x38, 0x29, 0x39, {0x2f, 0x4, 0x1, 0x4a, 0x0, [@remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x5}}, @rthdr_2292={{0x88, 0x29, 0x39, {0x0, 0xe, 0x0, 0x2, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x21}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xcb5a}}, @hoplimit={{0x14, 0x29, 0x34, 0x2}}], 0x158}}, {{&(0x7f00000000c0)={0xa, 0x4e22, 0xcb, @mcast1, 0x2}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000380)="66ff69dd3b164790e1b7118bc1da02068b302e60fdbdfda71cee143a829e8a30dc89b26b328b769e337eb3ae76894a39a837c4cf875d500d6bc9a4b7b40fc6763f1321381fda", 0x46}, {&(0x7f0000000400)="c9d29c81de99e28078d03cc6ae03b7b43701616e2e187d86d0970a4f201f25cd5ccba1b0e95846ed8d1fff750d70123ef1e585e6c3dab2c0435eab26dbb0efc2abb260e54962325b04cafe03aacf822bd451f35f41afa3a1e0e511734a2ca98fb68eb97ba458065d30138f4319db", 0x6e}, {&(0x7f0000000480)="077d75ae2ff6e2d4339df052494a23", 0xf}, {&(0x7f00000004c0)="81ec25c2767f165aa42f6a7574a19b26fda1d349043c65570200c30ca43964de0c3233beaaf92d44098a540e2cf7d7fe8fc7a2f476aaed2954e9c17779b4232ac176f3d8f23ababe97742881a3094cae3476659e691632882863e0057e965e8bc368942e644b5d9fbb5905b2e14be2ed44bbc6ae8ed00acb43f5187a0faa14422d24e26136f3779a9a6d2fd650ff813cbad3a71ee193abee74886cfe5ce592d6e74edfdcd0aeb87c479df111f128dcdc88f592f554406ee49b3439d179fccf347ff73fe958e55891d25f454a438a49ef464ffa5cb898c729506364c824990d0ef156c1f148e5", 0xe6}, {&(0x7f00000005c0)="5afb133c8d774f63c4818ef6696c2cbe42611d0c116ae06ffb0eeb72657310e4ef7bb7d52b1d6454737a7483abd5de2bd1b5ebef3827c9c0f21938fd3f89631f7bd1b46d082b33174c14d48066ebd55837ac61b6b758578e6326d6e16c7f171740b4d3a2d62743fd8a2f54486058b026439ecf9679de804c6e48e8e199214cbc29fc0838aa1429", 0x87}, {&(0x7f0000000680)="18a05a0de8de04a4256fe6d0", 0xc}, {&(0x7f00000007c0)="a065e53a924a3e73a8d910f836531d566b4960a0d0b3b1e2fe108d628a4316bcda334eca1be6a4f67a5c37e701b8720ff4a9ac712f89ec501f1475727ebb6682", 0x40}, {&(0x7f0000000700)="bd3b2490a5d653", 0x7}], 0x8, &(0x7f0000000880)=[@hopopts={{0x20, 0x29, 0x36, {0x1, 0x0, '\x00', [@pad1]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x80000001}}, @dstopts_2292={{0x138, 0x29, 0x4, {0x3a, 0x24, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @enc_lim={0x4, 0x1, 0xe}, @generic={0x9, 0x3c, "0ad348c2dff0490fa780c870072e2738bc0a6e1b1669e13a2e549f0ef29651a44aaecf2fd01099eb95df3e63878b02adb7a5d5794eaad889fb53e1bf"}, @generic={0x0, 0xba, "18e251fcae4b25606afcc1a6d77053720494f62fef33880171bd34ce05be5a08ab15097069618bd7cdbfbca830224ca6d45fbafde090b81371329fdb2220b84c2547f1244d7f36a1419d88215c16d1b612ce9e17723312d01c46e5600524291710d363e634ffea218e3323f7ca102e5d841a5f6827da63a11ada10bfba7b5a444981981c0c8c77ad1f4bfce37c09a0e307c322d5430d701d6f72921b0e2b81be0b38e452eb5a67504eb060e2a826a7a4737314b8e69aa813b395"}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @empty}, @jumbo={0xc2, 0x4, 0x189}]}}}], 0x170}}], 0x2, 0x0)
recvmmsg(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40010000, 0x0)
r1 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0)
setsockopt$inet6_udp_int(r1, 0x11, 0xb, &(0x7f0000001800)=0xfffffffe, 0x4)
syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000a00)=[@in6={0xa, 0x4e20, 0xffff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}], 0x1c)
ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000100))

16.099948062s ago: executing program 1 (id=315):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x4, &(0x7f00000002c0)={@local={0xac, 0x2, 0x44, 0xa}, @private=0x5000000}, 0xc)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000001800ffff00000000000000000a000000fe00fd0900000000"], 0x1c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="8c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800b000100697036677265000030000280140007002001000000000000000000000000000014000600fc"], 0x8c}}, 0x4000004)

15.529137199s ago: executing program 1 (id=316):
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)={0x48, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x1c, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x29de}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}, {0x4}]}]}, 0x48}}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x89e1, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8)
sendto$inet6(0xffffffffffffffff, &(0x7f00000004c0)='W', 0x1, 0x4, &(0x7f0000000100)={0xa, 0x0, 0x3, @loopback, 0x8}, 0x1c)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x4aa4)
r5 = socket$pppoe(0x18, 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000140)={<r6=>0x0, 0x452b}, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000240)={r6, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e22, 0xf6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8cd}]}, &(0x7f00000002c0)=0x10)
r7 = socket$qrtr(0x2a, 0x2, 0x0)
bind$qrtr(r7, &(0x7f0000000040)={0x2a, 0x0, 0x4001}, 0xc)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
unshare(0x26020480)
bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0)
r8 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r8, &(0x7f0000000040)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x4}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x408dc}, 0x4000080)
connect$pppoe(r5, &(0x7f0000000040)={0x18, 0x0, {0x4, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e)
sendmmsg(r5, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)

15.3252916s ago: executing program 1 (id=317):
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)={0x454, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x25}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfff}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @NL80211_ATTR_FRAME={0x3e5, 0x33, @reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1}, {0x5}, @device_b, @device_a, @initial, {0x5, 0x2}}, 0x8100, 0x25, @random=0x56e, @val, @void, [{0xdd, 0xf6, "39e3f7e6a7079443f2b96e1e1b1029c194da234a0dbdc8e78c2b4c359037b2e9da7e60f258bbd73d287945e2173c997a8c11d83bcb6bb7d1327eed984247a4dd314c2f36df4c0c0373bf752977e0ce9c1d8ac92fada4bddc34e623b8c42db034a2bcc6ca5c5cae4d8bc52337cbc85c5af9b9b4a9a4adffb685872143ab26bb6890677a5716d96fc6a6c8df847f84c754543eb1c14b5e9053048f6053701126c21ae0dfd4b4231547b775f682e1921122807b9e7bb67fe9bcae046e39a7a6a298afb60e3f5bbc1023b5c0ca262bded8aa507d0daa4a3025adfb1164cf3bf42d42a4d8d8ce9de31c3afc6894fd17070fbadafb29afa9d2"}, {0xdd, 0xea, "cb880e0fbe660a8c9d6da9d7fac69fe56e49f780087d77515797270c3c3f9cafd5aae134d3e27e613e59920a20d3c21ee544479027736ac75c9c4c55ad084d943342cb1720c913484a0431eeda68d96f5666cbfe9b92061afe42286028002f8481d2dd63e84822579e7545e78fd7ad84b4934827462712fa09b1ca6a5977d70de7da646e92592446aa8d6e55cc632b3da6f3d691efad629fa77bedb483779a01cbcf7a3f1321996531039cf708b8b275d80a85f28392d6d3d550987d3523259c786705c6bfb875e038aae81796fccd469c05be43ed4aaa363d2401a3d78f7f9cab6aa8710bf6c0600029"}, {0xdd, 0x4f, "8cc9e80c339a0801f67320377297237ea912828d18c0f509bab3718d1682d3a4a9b063fa892c92a2465ca54f08e16db8241258c0664efd3f290342c8a96208ba78eca046ed9d9aa6cfe301a2b7951e"}, {0xdd, 0x8c, "1a9746755f9f686992d2477af8d1874d272c41e5d74994d90eafb92fab6b92b8d116d6b75c0a64cce912e4ea2ff46cf3e8f29fedee8caaddfc7be88303b07763d9d0ea2380d93001915afc09864296a05153c9f1a1080de5361fe558da0d9e95a92b3f361e35ccdeaecede5a39c186eb5977f4465b0eb03e232f60b040b5e5ec999890cfb2a2b7349299a0ad"}, {0xdd, 0xf4, "afebc0b033ce2219b22f95e14e96164d815567e0b1e4ff55db11b0943adb129d36477b2fea2c395f4bff11c175f2542991584860a3ab2ec31153ff0c27bb38c660877910fa53072b3a2e0f09cd02bc6057b4d13330d3343af513b38e639e7ddbd9d322e7912cd6ea7a804f72f3922e6773fe05152892c8e974bbd97055793a0bcaecaf955d7c6e594364bb82f04d7e41d218b03a50a33d5320767b58902a720a77261b0d56c0da81b523813af0276e911bc893d4d4c0d10b0c1b560df3a3d77395491e187a4bf343f85e2da752b78e902bd3931fe1126a1c55303a50d43343e60deb0ff63dd1b03ce7ddf0f63f8339f00a6d2c55"}, {0xdd, 0x6, "3107dc997548"}]}}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}]]}, 0x454}, 0x1, 0x0, 0x0, 0x4008010}, 0x85)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x558}, 0x1, 0x0, 0x0, 0xa6975b0d20b3dc1e}, 0x40)

15.323204825s ago: executing program 2 (id=318):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000101401002cbd7000fedbdf25080003000100000008002f"], 0x30}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async)
epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0xfffeffff) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r4=>0x0}) (async)
bind$can_raw(r3, &(0x7f00000005c0), 0x10) (async)
read(r3, &(0x7f00000027c0)=""/4073, 0xfe9)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) (async)
sendmsg$can_raw(r3, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r4}, 0x10, &(0x7f0000000200)={&(0x7f00000007c0)=@can={{0x2, 0x0, 0x1, 0x1}, 0x1, 0x2, 0x0, 0x0, "f97003b8750e5566"}, 0x10}}, 0x0) (async)
socket$unix(0x1, 0x5, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="8cc5cb8b778d"})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000031300048008000240000000120800014000000000140003006e657464657673696d30"], 0xac}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[], 0x128}}, 0x0)
ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000100)) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000252d010034001280090001007866726d0000000024000280080001000000000008000200030000e408000100010000000800010001000000080003"], 0x5c}, 0x1, 0x0, 0x0, 0x85}, 0x4000000) (async)
r8 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r8, &(0x7f00000000c0), 0x492492492492627, 0x0) (async)
write(r2, &(0x7f0000000040)="212056943b9df5006309d5343f15375e000b890ac4c3bca7f592df7100"/38, 0x26)

15.241381403s ago: executing program 1 (id=319):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
r3 = socket(0x1d, 0x2, 0x6)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="8500000008000000760000000000000027000000000000009500000000000000d9e029f8c1652bc575bc1dc3a9fa16094393337a693d6504978ceb558b41537525a394249a1506da9ac69561c187afa3ba7ebc3af563e1e94ceec996695d1d26bbfb2feebab62478775a18852a3359fb20d4d020daf585b85d18b24cf00e3ac10552a5c9acddcb10eae4445de245fe9c7bf90262293683e504b59ef6d4568f30efe6465b5e0aeb3c6f9f5c6ad0a0891670e48b75f800"/192], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1}, 0x37)
close(r4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xf, &(0x7f00000016c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014100000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001440)='GPL\x00'}, 0x90)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r5, @ANYRES32=r8, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r5}, &(0x7f0000000100), &(0x7f0000000140)=r4}, 0x20)
sendmsg(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001400)='H', 0x20001401}], 0x1}, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=@deltfilter={0x34, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfff3, 0x8}, {0xffff, 0xffff}, {0x0, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20044000)

15.240756601s ago: executing program 2 (id=320):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48)
r1 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$sock_SIOCINQ(r1, 0x541b, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010e7010000000000000000000000000a20000000000a03000000000000000000070000000c00044000000000000000021c000000090a010400000000000000000700000008000a4000000003"], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xfffffffffffffe47, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x40d, 0x70bd25, 0x25ffdbfc, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x6}, @IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x84}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x2}, [@cb_func={0x18, 0x8}, @call={0x85, 0x0, 0x0, 0xc0}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x73}, 0x94)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000040)={0x18, 0x24, 0x1, 0x70bd26, 0x25dfdbfc, {0x44}, [@nested={0x4, 0xe}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a33120800", 0x0, 0xbffffffe, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50)

15.049951446s ago: executing program 1 (id=321):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x8, &(0x7f0000000180)=@raw=[@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000080)={0x0, 0x1}, 0xff72}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x50, 0x10, 0x100, 0x70bd26, 0x3d, {0x0, 0x0, 0x0, r2, 0x88adfda5}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}, @IFLA_GRE_IKEY={0x8, 0x4, 0x101}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x50}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r3 = socket$netlink(0x10, 0x3, 0x4)
writev(r3, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c100000000000224e0000", 0x58}], 0x1)
syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r3)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
clock_gettime(0x0, &(0x7f0000000380)={<r6=>0x0, <r7=>0x0})
sendmsg$can_bcm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x5, 0x80, 0x3, {0x0, 0x2710}, {r6, r7/1000+60000}, {0x3, 0x0, 0x1}, 0x1, @canfd={{0x3, 0x1, 0x0, 0x1}, 0x21, 0x0, 0x0, 0x0, "fbccfc0a14f3a42de878020c3b0a1ad707e0a18c490ec8d2f0ca599ccd56d4f3ac10cdb54581153bb76321f69cca76a7b3f2269c552351ecac226ebb86fec206"}}, 0x80}, 0x1, 0x0, 0x0, 0x8001}, 0x40000)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x150, 0x1403, 0x200, 0x70bd28, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'pimreg\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0xfeb9, 0x41, 'rxe\x00'}, {0x14}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vlan1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_hsr\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg2\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_bond\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_bridge\x00'}}]}, 0x150}, 0x1, 0x0, 0x0, 0x10}, 0x40c0)
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40000)
r9 = socket$inet6(0xa, 0x3, 0x87)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, 0x0, 0x2, 0x4e21, 0x0, 0xa}, {0x0, 0x0, 0x8000000}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x2000000, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x3, 0x3}}, 0xe8)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r10, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc)
connect$inet6(r9, &(0x7f00000000c0), 0x1c)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r8, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x58, 0x140d, 0x400, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000040}, 0x4c081)
socket$nl_route(0x10, 0x3, 0x0)

15.049614953s ago: executing program 2 (id=322):
r0 = socket(0x1e, 0x4, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$pppoe(0x18, 0x1, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
r1 = socket$pppoe(0x18, 0x1, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x8100, 0x0)
connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'veth0_virt_wifi\x00'}}, 0x1e)
socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x3c, 0x0, 0x201, 0x70fd26, 0x25dfdbfd, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}}, @GTPA_PEER_ADDR6={0x14, 0xb, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4048041)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00001100000000005c001280110001006272696467655f736c61766500000000440005800500050000000000050020a10100000005000800000000000600", @ANYRES8=r2], 0x7c}}, 0x0)

15.046713919s ago: executing program 1 (id=323):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time\x00', 0x26e1, 0x0)
close(r1)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740))
ioctl$SIOCSIFHWADDR(r1, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="bcff03400200"})
sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000540)='O', 0x1}], 0x1}}], 0x1, 0x0)
shutdown(r0, 0x1)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000380)={r3, @in={{0x2, 0x4e22, @empty}}, 0x0, 0xb7cf}, &(0x7f0000000340)=0x90)
r4 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r7 = openat$cgroup_devices(r6, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB='c 75:', @ANYRESDEC], 0x10)
r8 = socket(0x10, 0x3, 0x0)
syz_emit_ethernet(0x30, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaa9606030681000606264052f2dc1b1e0180c200010204229a332858a23abe7a92a84845ed5027c5c6076b07000000fc2bd7ab554c16cc9eec777bcca6c7f7a362cf3c786c00"/89], 0x0)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x348, 0x0, 0xc8, 0x8, 0x1b0, 0x5803, 0x278, 0x2e8, 0x2e8, 0x278, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x4}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@mcast2, @empty, [], [], 'nicvf0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8)
r10 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x2, 0xa}, {0xffff, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x80000001, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xd, 0x8, 0x101, 0x14}}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x2, 0x1, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000000)=0xffffffff, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001000004000000000000000071122b000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {0x7ff7}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x20000000, 0x1, 0xfffffffe, 0xfff, {0x5, 0x0, 0x9c, 0xf9e, 0x4, 0x7}, {0xf8, 0x2, 0x0, 0x4, 0x6fb, 0x4}, 0x6, 0x3}}]}]}}]}, 0x74}}, 0x4000)
r12 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r12, &(0x7f00000002c0), 0x40000000000009f, 0x0)

0s ago: executing program 32 (id=323):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time\x00', 0x26e1, 0x0)
close(r1)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740))
ioctl$SIOCSIFHWADDR(r1, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="bcff03400200"})
sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000540)='O', 0x1}], 0x1}}], 0x1, 0x0)
shutdown(r0, 0x1)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000380)={r3, @in={{0x2, 0x4e22, @empty}}, 0x0, 0xb7cf}, &(0x7f0000000340)=0x90)
r4 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r7 = openat$cgroup_devices(r6, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB='c 75:', @ANYRESDEC], 0x10)
r8 = socket(0x10, 0x3, 0x0)
syz_emit_ethernet(0x30, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaa9606030681000606264052f2dc1b1e0180c200010204229a332858a23abe7a92a84845ed5027c5c6076b07000000fc2bd7ab554c16cc9eec777bcca6c7f7a362cf3c786c00"/89], 0x0)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x348, 0x0, 0xc8, 0x8, 0x1b0, 0x5803, 0x278, 0x2e8, 0x2e8, 0x278, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x4}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@mcast2, @empty, [], [], 'nicvf0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8)
r10 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x2, 0xa}, {0xffff, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x80000001, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xd, 0x8, 0x101, 0x14}}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x2, 0x1, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000000)=0xffffffff, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001000004000000000000000071122b000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {0x7ff7}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x20000000, 0x1, 0xfffffffe, 0xfff, {0x5, 0x0, 0x9c, 0xf9e, 0x4, 0x7}, {0xf8, 0x2, 0x0, 0x4, 0x6fb, 0x4}, 0x6, 0x3}}]}]}}]}, 0x74}}, 0x4000)
r12 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r12, &(0x7f00000002c0), 0x40000000000009f, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:12422' (ED25519) to the list of known hosts.
syzkaller login: [   47.571935][ T5777] cgroup: Unknown subsys name 'net'
[   47.673686][ T5777] cgroup: Unknown subsys name 'cpuset'
[   47.677971][ T5777] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.088747][ T5777] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   52.567971][ T5201] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   52.571156][ T5201] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   52.573757][ T5201] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   52.576997][ T5201] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   52.580622][ T5201] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   52.614365][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   52.631046][ T5813] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   52.634242][ T5813] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   52.637093][ T5813] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   52.640131][ T5813] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   52.663280][ T5819] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   52.675529][ T5819] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   52.679627][ T5819] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   52.683624][ T5819] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   52.687278][ T5819] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   52.852713][ T5810] chnl_net:caif_netlink_parms(): no params data found
[   52.873505][ T5814] chnl_net:caif_netlink_parms(): no params data found
[   52.951152][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.954397][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.956837][ T5810] bridge_slave_0: entered allmulticast mode
[   52.960390][ T5810] bridge_slave_0: entered promiscuous mode
[   52.964464][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.966859][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.969908][ T5810] bridge_slave_1: entered allmulticast mode
[   52.972620][ T5810] bridge_slave_1: entered promiscuous mode
[   53.023963][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.026345][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.028565][ T5814] bridge_slave_0: entered allmulticast mode
[   53.031405][ T5814] bridge_slave_0: entered promiscuous mode
[   53.034498][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.036762][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.039128][ T5814] bridge_slave_1: entered allmulticast mode
[   53.042034][ T5814] bridge_slave_1: entered promiscuous mode
[   53.073402][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.093539][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.105034][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.135644][ T5816] chnl_net:caif_netlink_parms(): no params data found
[   53.144860][ T5810] team0: Port device team_slave_0 added
[   53.148046][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.158092][ T5810] team0: Port device team_slave_1 added
[   53.230149][ T5814] team0: Port device team_slave_0 added
[   53.237129][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.241378][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.252491][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.259645][ T5814] team0: Port device team_slave_1 added
[   53.262376][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.265303][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.276477][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.313662][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.316030][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.326528][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.357791][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.361587][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.371190][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.387434][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.392429][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.395722][ T5816] bridge_slave_0: entered allmulticast mode
[   53.400841][ T5816] bridge_slave_0: entered promiscuous mode
[   53.422700][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.425886][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.429019][ T5816] bridge_slave_1: entered allmulticast mode
[   53.433298][ T5816] bridge_slave_1: entered promiscuous mode
[   53.462544][ T5814] hsr_slave_0: entered promiscuous mode
[   53.464899][ T5814] hsr_slave_1: entered promiscuous mode
[   53.470423][ T5810] hsr_slave_0: entered promiscuous mode
[   53.472685][ T5810] hsr_slave_1: entered promiscuous mode
[   53.474754][ T5810] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   53.477175][ T5810] Cannot create hsr debugfs directory
[   53.482146][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.488602][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.545732][ T5816] team0: Port device team_slave_0 added
[   53.550642][ T5816] team0: Port device team_slave_1 added
[   53.596907][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.599202][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.608458][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.630889][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.633111][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.641855][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.710903][ T5816] hsr_slave_0: entered promiscuous mode
[   53.713229][ T5816] hsr_slave_1: entered promiscuous mode
[   53.715389][ T5816] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   53.717845][ T5816] Cannot create hsr debugfs directory
[   53.832929][ T5814] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   53.839005][ T5814] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   53.851406][ T5814] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   53.864279][ T5814] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   53.896490][ T5810] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   53.901908][ T5810] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   53.918093][ T5810] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   53.922617][ T5810] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   53.948184][ T5816] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   53.957115][ T5816] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   53.963336][ T5816] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   53.968059][ T5816] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   54.051310][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.074761][ T5814] 8021q: adding VLAN 0 to HW filter on device team0
[   54.085287][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.087932][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.105470][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.109724][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.112188][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.123244][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.144275][ T5816] 8021q: adding VLAN 0 to HW filter on device team0
[   54.151769][ T5810] 8021q: adding VLAN 0 to HW filter on device team0
[   54.168763][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.171199][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.176196][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.178527][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.190187][   T85] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.192761][   T85] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.196229][   T85] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.198736][   T85] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.337973][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.366651][ T5814] veth0_vlan: entered promiscuous mode
[   54.373775][ T5814] veth1_vlan: entered promiscuous mode
[   54.394164][ T5814] veth0_macvtap: entered promiscuous mode
[   54.398078][ T5814] veth1_macvtap: entered promiscuous mode
[   54.413264][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.428635][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0
[   54.436064][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1
[   54.442275][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.449148][ T5814] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   54.452857][ T5814] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   54.455691][ T5814] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   54.458728][ T5814] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   54.530336][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.530629][ T5816] veth0_vlan: entered promiscuous mode
[   54.532893][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.542421][ T5810] veth0_vlan: entered promiscuous mode
[   54.551576][ T5816] veth1_vlan: entered promiscuous mode
[   54.572348][ T5810] veth1_vlan: entered promiscuous mode
[   54.576427][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.579041][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.591862][ T5816] veth0_macvtap: entered promiscuous mode
[   54.597761][ T5816] veth1_macvtap: entered promiscuous mode
[   54.615363][ T5810] veth0_macvtap: entered promiscuous mode
[   54.620398][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0
[   54.627206][ T5814] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   54.628641][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1
[   54.636729][ T5810] veth1_macvtap: entered promiscuous mode
[   54.644144][ T5816] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   54.647369][ T5816] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   54.652059][ T5819] Bluetooth: hci0: command tx timeout
[   54.654148][   T54] Bluetooth: hci1: command tx timeout
[   54.655812][ T5816] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   54.659172][ T5816] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   54.697552][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0
[   54.712237][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1
[   54.721215][ T5810] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   54.725412][ T5810] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   54.729951][   T54] Bluetooth: hci2: command tx timeout
[   54.732324][ T5810] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   54.732909][ T5876] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'.
[   54.735963][ T5810] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   54.738681][ T5876] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'.
[   54.818675][  T744] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.821610][  T744] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.859981][ T5868] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.862536][ T5868] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.892688][ T5868] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.895260][ T5868] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.931211][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.933668][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.996023][ T5886] netlink: 'syz.2.5': attribute type 2 has an invalid length.
[   55.035151][ T5886] syz.2.5 (5886) used greatest stack depth: 19688 bytes left
[   55.053021][ T5893] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   55.071576][ T5891] batman_adv: batadv0: Adding interface: ipvlan2
[   55.073626][ T5891] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.082594][ T5891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   55.085781][ T5891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   55.088814][ T5891] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active
[   55.148548][ T5895] netlink: 'syz.2.7': attribute type 10 has an invalid length.
[   55.152812][ T5895] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7'.
[   55.158782][ T5895] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.221659][ T5907] netlink: 64 bytes leftover after parsing attributes in process `syz.2.12'.
[   55.224736][ T5907] netlink: 64 bytes leftover after parsing attributes in process `syz.2.12'.
[   55.249116][ T5903] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9'.
[   55.251786][ T5907] warning: `syz.2.12' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   55.455301][ T5933] netlink: 'syz.0.18': attribute type 10 has an invalid length.
[   55.457898][ T5933] netlink: 32 bytes leftover after parsing attributes in process `syz.0.18'.
[   55.469433][ T5933] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.515390][ T5940] netlink: 56 bytes leftover after parsing attributes in process `syz.2.22'.
[   55.662411][ T5949] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   56.086600][ T5992] netlink: 4436 bytes leftover after parsing attributes in process `syz.1.36'.
[   56.097569][ T5992] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[   56.126483][ T5996] ieee802154 phy0 wpan0: encryption failed: -22
[   56.128020][ T5998] Zero length message leads to an empty skb
[   56.171040][ T6001] xt_hashlimit: size too large, truncated to 1048576
[   56.230776][ T6004] netlink: 28 bytes leftover after parsing attributes in process `syz.0.43'.
[   56.234858][ T6007] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   56.422291][ T6022] xt_CT: You must specify a L4 protocol and not use inversions on it
[   56.543236][ T6035] syz.2.55 (6035) used greatest stack depth: 19576 bytes left
[   56.559038][ T6037] tipc: Started in network mode
[   56.562213][ T6037] tipc: Node identity ba8d9f612446, cluster identity 4711
[   56.573923][ T6037] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   56.581623][ T6037] syzkaller0: entered promiscuous mode
[   56.583459][ T6037] syzkaller0: entered allmulticast mode
[   56.604149][ T6037] tipc: Resetting bearer <eth:syzkaller0>
[   56.618409][ T6036] tipc: Resetting bearer <eth:syzkaller0>
[   56.632047][ T6036] tipc: Disabling bearer <eth:syzkaller0>
[   56.733096][   T54] Bluetooth: hci1: command tx timeout
[   56.810945][   T54] Bluetooth: hci2: command tx timeout
[   56.881158][ T6060] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   57.032651][ T6082] syzkaller1: entered promiscuous mode
[   57.034573][ T6082] syzkaller1: entered allmulticast mode
[   57.334438][ T6103] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[   57.337680][ T6103] macsec1: entered allmulticast mode
[   57.339870][ T6103] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[   57.344378][ T6103] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[   57.346780][ T6103] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[   57.427223][ T6107] delete_channel: no stack
[   57.457075][ T6107] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.460169][ T6107] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.723784][ T6119] xt_HMARK: spi-set and port-set can't be combined
[   57.755475][ T6117] syzkaller0: entered promiscuous mode
[   57.757381][ T6117] syzkaller0: entered allmulticast mode
[   58.055299][ T6146] netlink: 'syz.1.94': attribute type 1 has an invalid length.
[   58.057780][ T6146] netlink: 'syz.1.94': attribute type 2 has an invalid length.
[   58.325166][ T6167] Cannot find set identified by id 0 to match
[   58.462384][ T6169] netlink: 'syz.2.102': attribute type 4 has an invalid length.
[   58.480599][ T6169] syz.2.102 uses obsolete (PF_INET,SOCK_PACKET)
[   58.809590][   T54] Bluetooth: hci1: command tx timeout
[   58.889398][   T54] Bluetooth: hci2: command tx timeout
[   59.487481][ T6242] bridge_slave_0: default FDB implementation only supports local addresses
[   59.550676][ T6244] netlink: 'syz.0.122': attribute type 1 has an invalid length.
[   59.719172][ T6251] netlink: 'syz.0.124': attribute type 1 has an invalid length.
[   59.722581][    T9] IPVS: starting estimator thread 0...
[   59.809560][ T6252] IPVS: using max 79 ests per chain, 189600 per kthread
[   59.840343][ T6259] netlink: 'syz.0.127': attribute type 1 has an invalid length.
[   59.845970][ T6261] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   59.874584][ T6259] 8021q: adding VLAN 0 to HW filter on device bond1
[   59.885136][ T6261] _Z`Ԁ@: entered promiscuous mode
[   59.894769][ T6259] bond1: (slave ip6erspan0): making interface the new active one
[   59.900985][ T6259] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link
[   59.933283][ T6264] __nla_validate_parse: 22 callbacks suppressed
[   59.933292][ T6264] netlink: 104 bytes leftover after parsing attributes in process `syz.2.128'.
[   59.994621][ T6264] netlink: 9 bytes leftover after parsing attributes in process `syz.2.128'.
[   60.003088][ T6264] gretap0: entered promiscuous mode
[   60.197863][ T6276] netlink: 'syz.2.133': attribute type 1 has an invalid length.
[   60.211018][ T6276] netlink: 5624 bytes leftover after parsing attributes in process `syz.2.133'.
[   60.221897][ T6284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.135'.
[   60.224906][ T6284] netlink: 4 bytes leftover after parsing attributes in process `syz.1.135'.
[   60.227965][ T6284] netlink: 'syz.1.135': attribute type 1 has an invalid length.
[   60.231297][ T6284] netlink: 10 bytes leftover after parsing attributes in process `syz.1.135'.
[   60.261550][   T56] block nbd0: Receive control failed (result -107)
[   60.374506][ T5673] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.484267][ T5673] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.489115][ T6306] xt_hashlimit: size too large, truncated to 1048576
[   60.512426][ T6303] netlink: 'syz.2.140': attribute type 10 has an invalid length.
[   60.515517][ T6303] netlink: 32 bytes leftover after parsing attributes in process `syz.2.140'.
[   60.547869][ T6310] netlink: 28 bytes leftover after parsing attributes in process `syz.1.139'.
[   60.612059][ T5673] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.620076][ T6310] netlink: 4 bytes leftover after parsing attributes in process `syz.1.139'.
[   60.726545][ T5673] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.764685][ T5819] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   60.768001][ T5819] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   60.774751][ T5819] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   60.781705][ T5819] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   60.793955][ T5819] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   60.889634][ T5819] Bluetooth: hci1: command tx timeout
[   60.965225][ T5673] bridge_slave_1: left allmulticast mode
[   60.968168][ T5673] bridge_slave_1: left promiscuous mode
[   60.972892][ T6335] netlink: 27 bytes leftover after parsing attributes in process `syz.1.145'.
[   60.973130][ T5673] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.982350][ T5673] bridge_slave_0: left allmulticast mode
[   60.984273][ T5673] bridge_slave_0: left promiscuous mode
[   60.986326][ T5673] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.052622][ T5673] bond1 (unregistering): (slave ip6erspan0): Releasing active interface
[   61.252466][ T6348] netlink: 'syz.2.148': attribute type 9 has an invalid length.
[   61.277443][ T5673] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   61.281707][ T5673] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   61.285270][ T5673] bond0 (unregistering): Released all slaves
[   61.331737][ T5673] bond1 (unregistering): Released all slaves
[   61.585893][ T6322] chnl_net:caif_netlink_parms(): no params data found
[   61.668549][ T6369] netlink: 'syz.1.154': attribute type 10 has an invalid length.
[   61.811929][ T5673] hsr_slave_0: left promiscuous mode
[   61.814126][ T5673] hsr_slave_1: left promiscuous mode
[   61.816122][ T5673] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   61.818470][ T5673] batman_adv: batadv0: Removing interface: batadv_slave_0
[   61.832044][ T5673] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   61.834461][ T5673] batman_adv: batadv0: Removing interface: batadv_slave_1
[   61.846104][ T5673] batman_adv: batadv0: Removing interface: ipvlan2
[   61.857457][ T5673] veth1_macvtap: left promiscuous mode
[   61.860576][ T5673] veth0_macvtap: left promiscuous mode
[   61.862808][ T5673] veth1_vlan: left promiscuous mode
[   61.864735][ T5673] veth0_vlan: left promiscuous mode
[   62.134068][ T5673] team0 (unregistering): Port device team_slave_1 removed
[   62.151950][ T5673] team0 (unregistering): Port device team_slave_0 removed
[   62.332567][ T6322] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.341842][ T6322] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.348562][ T6322] bridge_slave_0: entered allmulticast mode
[   62.359157][ T6322] bridge_slave_0: entered promiscuous mode
[   62.398016][ T6322] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.403545][ T6322] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.417853][ T6322] bridge_slave_1: entered allmulticast mode
[   62.429041][ T6322] bridge_slave_1: entered promiscuous mode
[   62.500715][ T6322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.508712][ T6322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.570782][ T6322] team0: Port device team_slave_0 added
[   62.584451][ T6404] netlink: 'syz.2.161': attribute type 10 has an invalid length.
[   62.602378][ T6322] team0: Port device team_slave_1 added
[   62.654598][ T6322] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.656892][ T6322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.680681][ T6322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.695900][ T6322] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.698280][ T6322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.719839][ T6322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.747931][ T6322] hsr_slave_0: entered promiscuous mode
[   62.753769][ T6322] hsr_slave_1: entered promiscuous mode
[   62.756043][ T6322] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   62.761573][ T6322] Cannot create hsr debugfs directory
[   62.793291][ T5673] IPVS: stop unused estimator thread 0...
[   62.892102][ T5819] Bluetooth: hci2: command tx timeout
[   63.313405][ T6322] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   63.321291][ T6322] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   63.326103][ T6322] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   63.333780][ T6322] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   63.417132][ T6322] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.441413][ T6322] 8021q: adding VLAN 0 to HW filter on device team0
[   63.451104][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.453640][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.475641][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.478507][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.538607][ T6488] netlink: 'syz.1.172': attribute type 10 has an invalid length.
[   63.721582][ T6322] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.748240][ T6322] veth0_vlan: entered promiscuous mode
[   63.753382][ T6322] veth1_vlan: entered promiscuous mode
[   63.770515][ T6322] veth0_macvtap: entered promiscuous mode
[   63.774187][ T6322] veth1_macvtap: entered promiscuous mode
[   63.785484][ T6322] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.794769][ T6322] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.800379][ T6322] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.803198][ T6322] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.806423][ T6322] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.810633][ T6322] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.860511][ T6518] @: renamed from vlan0 (while UP)
[   63.901330][  T744] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.910210][  T744] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.936290][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.938990][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.998601][ T6528] xt_CT: No such helper "syz0"
[   64.319074][ T6536] syzkaller0: entered promiscuous mode
[   64.321712][ T6536] syzkaller0: entered allmulticast mode
[   64.584340][ T6543] xt_hashlimit: size too large, truncated to 1048576
[   65.092383][ T6554] netlink: 'syz.1.186': attribute type 10 has an invalid length.
[   65.095786][ T6554] __nla_validate_parse: 16 callbacks suppressed
[   65.095796][ T6554] netlink: 40 bytes leftover after parsing attributes in process `syz.1.186'.
[   65.122430][ T6554] team0: Port device geneve0 added
[   65.170541][ T6560] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[   65.173306][ T6560] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[   65.187528][ T6560] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[   65.218655][ T6563] netlink: 72 bytes leftover after parsing attributes in process `syz.1.190'.
[   65.223682][ T6561] netlink: 'syz.2.189': attribute type 7 has an invalid length.
[   65.581890][ T6572] netlink: 'syz.1.192': attribute type 10 has an invalid length.
[   65.585143][ T6572] netlink: 32 bytes leftover after parsing attributes in process `syz.1.192'.
[   65.682128][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.927570][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   65.932513][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   65.935372][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   65.938438][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   65.942595][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   66.064511][ T6584] chnl_net:caif_netlink_parms(): no params data found
[   66.122318][ T6600] netlink: 'syz.2.201': attribute type 10 has an invalid length.
[   66.125438][ T6600] netlink: 32 bytes leftover after parsing attributes in process `syz.2.201'.
[   66.165312][ T6584] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.168358][ T6584] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.175011][ T6584] bridge_slave_0: entered allmulticast mode
[   66.177637][ T6584] bridge_slave_0: entered promiscuous mode
[   66.184050][ T6608] netlink: 148 bytes leftover after parsing attributes in process `syz.1.202'.
[   66.187120][ T6608] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   66.192679][ T6584] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.195090][ T6584] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.197431][ T6584] bridge_slave_1: entered allmulticast mode
[   66.201331][ T6584] bridge_slave_1: entered promiscuous mode
[   66.233185][ T6584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.247688][ T6584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.302627][ T6584] team0: Port device team_slave_0 added
[   66.308489][ T6584] team0: Port device team_slave_1 added
[   66.346022][ T6584] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.349042][ T6584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.368621][ T6584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.373561][ T6584] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.376964][ T6584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.386198][ T6584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.436229][ T6584] hsr_slave_0: entered promiscuous mode
[   66.438597][ T6584] hsr_slave_1: entered promiscuous mode
[   66.442252][ T6584] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   66.444792][ T6584] Cannot create hsr debugfs directory
[   66.758445][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.203918][ T6628] netlink: 'syz.2.210': attribute type 10 has an invalid length.
[   67.207277][ T6628] netlink: 32 bytes leftover after parsing attributes in process `syz.2.210'.
[   67.285780][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.335849][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.424210][   T12] bridge_slave_1: left allmulticast mode
[   67.427127][   T12] bridge_slave_1: left promiscuous mode
[   67.429748][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.433580][   T12] bridge_slave_0: left allmulticast mode
[   67.435465][   T12] bridge_slave_0: left promiscuous mode
[   67.437735][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.606482][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   67.612417][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   67.616150][   T12] bond0 (unregistering): Released all slaves
[   67.729526][ T6658] netlink: 20 bytes leftover after parsing attributes in process `syz.2.219'.
[   67.738795][ T6658] netlink: 'syz.2.219': attribute type 39 has an invalid length.
[   67.958760][   T12] hsr_slave_0: left promiscuous mode
[   67.972261][   T12] hsr_slave_1: left promiscuous mode
[   67.975134][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   67.978215][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   67.988600][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   67.993950][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   68.009598][ T5819] Bluetooth: hci2: command tx timeout
[   68.038173][   T12] veth1_macvtap: left promiscuous mode
[   68.046170][   T12] veth0_macvtap: left promiscuous mode
[   68.048147][   T12] veth1_vlan: left promiscuous mode
[   68.051471][   T12] veth0_vlan: left promiscuous mode
[   68.212055][ T6681] netlink: 164 bytes leftover after parsing attributes in process `syz.1.222'.
[   68.305128][   T12] team0 (unregistering): Port device team_slave_1 removed
[   68.322406][   T12] team0 (unregistering): Port device team_slave_0 removed
[   68.436460][ T6685] rdma_op ffff88803b5249f0 conn xmit_rdma 0000000000000000
[   68.440961][ T6685] netlink: 112 bytes leftover after parsing attributes in process `syz.1.222'.
[   68.501696][ T6683] netlink: 1060 bytes leftover after parsing attributes in process `syz.1.222'.
[   68.597587][ T6584] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   68.606361][ T6584] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   68.617996][ T6584] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   68.631924][ T6584] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   68.711479][ T6701] netlink: 'syz.2.223': attribute type 1 has an invalid length.
[   68.756156][ T6584] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.772662][ T6584] 8021q: adding VLAN 0 to HW filter on device team0
[   68.777330][   T85] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.779811][   T85] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.792610][   T85] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.795022][   T85] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.828730][ T6584] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   68.880959][ T6707] netlink: 'syz.2.227': attribute type 10 has an invalid length.
[   68.984430][ T6584] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.035029][ T6584] veth0_vlan: entered promiscuous mode
[   69.040942][ T6584] veth1_vlan: entered promiscuous mode
[   69.069147][ T6584] veth0_macvtap: entered promiscuous mode
[   69.092905][ T6584] veth1_macvtap: entered promiscuous mode
[   69.102654][ T6584] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.111254][ T6584] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.114490][ T6734] netlink: 'syz.2.234': attribute type 10 has an invalid length.
[   69.122035][ T6734] batman_adv: batadv0: Adding interface: virt_wifi0
[   69.124169][ T6734] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.133483][ T6734] batman_adv: batadv0: Interface activated: virt_wifi0
[   69.137532][ T6584] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.149997][ T6584] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.154044][ T6584] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.157915][ T6584] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.256329][   T85] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.260578][   T85] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.277455][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.282445][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.740944][ T6741] netlink: 'syz.2.237': attribute type 10 has an invalid length.
[   69.966681][ T6766] netlink: 'syz.1.245': attribute type 10 has an invalid length.
[   70.355222][ T6796] validate_nla: 3 callbacks suppressed
[   70.355237][ T6796] netlink: 'syz.1.255': attribute type 10 has an invalid length.
[   70.361635][ T6796] __nla_validate_parse: 10 callbacks suppressed
[   70.361647][ T6796] netlink: 32 bytes leftover after parsing attributes in process `syz.1.255'.
[   70.397970][ T6799] IPv6: NLM_F_REPLACE set, but no existing node found!
[   70.682476][ T6802] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   70.771485][ T6807] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[   70.778751][ T6807] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   70.942602][ T6825] netlink: 104 bytes leftover after parsing attributes in process `syz.2.267'.
[   70.948078][ T6825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.267'.
[   70.971696][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   70.988712][ T6825] netlink: 9 bytes leftover after parsing attributes in process `syz.2.267'.
[   71.002783][ T5837] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.168079][ T6834] syzkaller0: entered promiscuous mode
[   71.170425][ T6834] syzkaller0: entered allmulticast mode
[   71.324467][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   71.331446][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   71.335877][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   71.342560][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   71.349550][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   71.974863][ T6852] netlink: 44 bytes leftover after parsing attributes in process `syz.1.276'.
[   72.112729][ T6867] netlink: 12 bytes leftover after parsing attributes in process `syz.2.281'.
[   72.113536][ T6845] chnl_net:caif_netlink_parms(): no params data found
[   72.119544][ T6866] netlink: 12 bytes leftover after parsing attributes in process `syz.2.281'.
[   72.171077][ T6866] netlink: 16 bytes leftover after parsing attributes in process `syz.2.281'.
[   72.204718][ T6845] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.207335][ T6845] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.212630][ T6845] bridge_slave_0: entered allmulticast mode
[   72.216118][ T6845] bridge_slave_0: entered promiscuous mode
[   72.227761][ T6845] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.230583][ T6845] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.233430][ T6845] bridge_slave_1: entered allmulticast mode
[   72.235774][ T6878] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   72.236145][ T6845] bridge_slave_1: entered promiscuous mode
[   72.238138][ T6878] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   72.243324][ T6876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.284'.
[   72.246645][ T6876] netlink: 'syz.1.284': attribute type 5 has an invalid length.
[   72.264315][ T6845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.271218][ T6845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.307305][ T6845] team0: Port device team_slave_0 added
[   72.313841][ T6845] team0: Port device team_slave_1 added
[   72.314574][ T6885] netlink: 8 bytes leftover after parsing attributes in process `syz.2.287'.
[   72.336751][ T6883] syzkaller0: entered promiscuous mode
[   72.338937][ T6883] syzkaller0: entered allmulticast mode
[   72.362979][ T6845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.365355][ T6845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.375529][ T6845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.382631][ T6845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.385248][ T6845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.405478][ T6845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.434339][ T5837] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.589422][ T6900] netlink: 'syz.2.293': attribute type 33 has an invalid length.
[   73.158906][ T5837] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.189959][ T6845] hsr_slave_0: entered promiscuous mode
[   73.194269][ T6903] Bluetooth: MGMT ver 1.23
[   73.195649][ T6845] hsr_slave_1: entered promiscuous mode
[   73.198074][ T6845] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   73.203255][ T6845] Cannot create hsr debugfs directory
[   73.249998][ T5837] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.370947][ T5819] Bluetooth: hci2: command tx timeout
[   73.514400][ T5837] bridge_slave_1: left allmulticast mode
[   73.516231][ T5837] bridge_slave_1: left promiscuous mode
[   73.518552][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.526988][ T5837] bridge_slave_0: left allmulticast mode
[   73.528745][ T5837] bridge_slave_0: left promiscuous mode
[   73.534801][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.754799][ T5837] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   73.760402][ T5837] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   73.765523][ T5837] bond0 (unregistering): Released all slaves
[   73.898044][ T6943] team0 (unregistering): Port device team_slave_0 removed
[   73.904686][ T6943] team0 (unregistering): Port device team_slave_1 removed
[   74.118047][ T5837] hsr_slave_0: left promiscuous mode
[   74.121995][ T5837] hsr_slave_1: left promiscuous mode
[   74.124212][ T5837] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   74.126836][ T5837] batman_adv: batadv0: Removing interface: batadv_slave_0
[   74.133277][ T5837] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   74.135836][ T5837] batman_adv: batadv0: Removing interface: batadv_slave_1
[   74.144138][ T5837] veth1_macvtap: left promiscuous mode
[   74.146180][ T5837] veth0_macvtap: left promiscuous mode
[   74.148352][ T5837] veth1_vlan: left promiscuous mode
[   74.150518][ T5837] veth0_vlan: left promiscuous mode
[   74.374508][ T5837] team0 (unregistering): Port device team_slave_1 removed
[   74.394259][ T5837] team0 (unregistering): Port device team_slave_0 removed
[   74.638970][ T6845] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   74.644960][ T6845] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   74.661805][ T6845] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   74.666752][ T6845] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   74.676862][ T6975] bridge_slave_0: left allmulticast mode
[   74.678720][ T6975] bridge_slave_0: left promiscuous mode
[   74.683101][ T6975] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.695191][ T6975] bridge_slave_1: left allmulticast mode
[   74.697212][ T6975] bridge_slave_1: left promiscuous mode
[   74.699226][ T6975] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.705210][ T6975] bond0: (slave bond_slave_0): Releasing backup interface
[   74.710265][ T6975] bond0: (slave bond_slave_1): Releasing backup interface
[   74.718708][ T6975] team0: Port device team_slave_0 removed
[   74.727298][ T6975] team0: Port device team_slave_1 removed
[   74.731204][ T6975] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   74.733747][ T6975] batman_adv: batadv0: Removing interface: batadv_slave_0
[   74.736960][ T6975] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   74.742956][ T6975] batman_adv: batadv0: Removing interface: batadv_slave_1
[   74.753228][ T6975] team0: Port device geneve0 removed
[   74.858740][ T6845] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.876436][ T6845] 8021q: adding VLAN 0 to HW filter on device team0
[   74.883553][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.886035][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.913048][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.915679][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.995570][ T7000] netlink: 'syz.2.320': attribute type 30 has an invalid length.
[   75.002305][ T7000] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   75.005968][ T7000] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   75.008798][ T7000] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   75.011883][ T7000] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   75.022521][ T7000] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   75.026295][ T7000] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   75.030512][ T7000] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   75.034861][ T7000] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   75.116489][ T6845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.142907][ T6845] veth0_vlan: entered promiscuous mode
[   75.152046][ T6845] veth1_vlan: entered promiscuous mode
[   75.182529][ T6845] veth0_macvtap: entered promiscuous mode
[   75.189169][ T6845] veth1_macvtap: entered promiscuous mode
[   75.450773][ T5819] Bluetooth: hci2: command tx timeout
[   77.529775][ T5819] Bluetooth: hci2: command tx timeout
[   79.609653][ T5819] Bluetooth: hci2: command tx timeout
[   81.222596][  T970] cfg80211: failed to load regulatory.db
[   90.551363][   T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   90.554676][   T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   90.557442][   T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   90.562449][   T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   90.565269][   T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   90.657405][ T5819] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   90.661943][ T5819] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   90.664692][ T5819] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   90.667353][ T5819] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   90.670375][ T5819] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   92.649704][   T54] Bluetooth: hci3: command tx timeout
[   92.731729][   T54] Bluetooth: hci4: command tx timeout
[   94.729999][   T54] Bluetooth: hci3: command tx timeout
[   94.809540][   T54] Bluetooth: hci4: command tx timeout
[   96.809739][   T54] Bluetooth: hci3: command tx timeout
[   96.889743][   T54] Bluetooth: hci4: command tx timeout
[   98.889577][   T54] Bluetooth: hci3: command tx timeout
[   98.969606][   T54] Bluetooth: hci4: command tx timeout
[  132.099494][ T5819] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  132.103502][ T5819] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  132.106471][ T5819] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  132.110309][ T5819] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  132.113200][ T5819] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  134.169930][ T5819] Bluetooth: hci5: command tx timeout
[  136.251006][ T5819] Bluetooth: hci5: command tx timeout
[  138.329771][ T5819] Bluetooth: hci5: command tx timeout
[  140.409633][ T5819] Bluetooth: hci5: command tx timeout
[  151.204000][   T54] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  151.207231][   T54] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  151.210687][   T54] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  151.217269][   T54] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  151.221593][   T54] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  151.249770][   T54] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  151.253211][   T54] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  151.255796][   T54] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  151.258457][   T54] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  151.262165][   T54] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  153.290227][   T54] Bluetooth: hci6: command tx timeout
[  153.292981][ T5819] Bluetooth: hci7: command tx timeout
[  155.369727][ T5819] Bluetooth: hci7: command tx timeout
[  155.371593][ T5819] Bluetooth: hci6: command tx timeout
[  157.449861][   T54] Bluetooth: hci6: command tx timeout
[  157.452141][   T54] Bluetooth: hci7: command tx timeout
[  159.529699][ T5819] Bluetooth: hci7: command tx timeout
[  159.531492][ T5819] Bluetooth: hci6: command tx timeout
[  180.229292][    C1] rcu: INFO: rcu_preempt self-detected stall on CPU
[  180.231564][    C1] rcu: 	1-....: (1 GPs behind) idle=bf14/1/0x4000000000000000 softirq=21642/21643 fqs=5249
[  180.236033][    C1] rcu: 	         hardirqs   softirqs   csw/system
[  180.238496][    C1] rcu: 	 number:     5288          0            0
[  180.241096][    C1] rcu: 	cputime:      214          0        52275   ==> 52500(ms)
[  180.244108][    C1] rcu: 	(t=10502 jiffies g=11425 q=3590 ncpus=2)
[  180.246650][    C1] CPU: 1 UID: 0 PID: 7010 Comm: syz.1.323 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  180.246664][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  180.246672][    C1] RIP: 0010:rcu_is_watching+0x5a/0xb0
[  180.246694][    C1] Code: f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 cc be 7c 00 48 c7 c3 58 2f 9e 92 49 03 1e 48 89 d8 48 c1 e8 03 42 0f b6 04 38 <84> c0 75 34 8b 03 65 ff 0d a9 ec f5 10 74 11 83 e0 04 c1 e8 02 5b
[  180.246702][    C1] RSP: 0018:ffffc90002c7ef40 EFLAGS: 00000a06
[  180.246714][    C1] RAX: 0000000000000000 RBX: ffff888136632f58 RCX: eaa286b479f61b00
[  180.246721][    C1] RDX: ffff88801e66b980 RSI: ffffffff8be28d20 RDI: ffffffff8be28ce0
[  180.246728][    C1] RBP: 0000000000000001 R08: ffff88801e66b980 R09: 0000000000000002
[  180.246735][    C1] R10: 00000000ffffffff R11: 0000000000000002 R12: 00000000fffffff1
[  180.246742][    C1] R13: dffffc0000000000 R14: ffffffff8dba7c68 R15: dffffc0000000000
[  180.246749][    C1] FS:  00007f14df5686c0(0000) GS:ffff8881a3c50000(0000) knlGS:0000000000000000
[  180.246758][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  180.246765][    C1] CR2: 00007fd0e35f5fc8 CR3: 00000001110e4000 CR4: 00000000000006f0
[  180.246798][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  180.246805][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  180.246850][    C1] Call Trace:
[  180.246856][    C1]  <TASK>
[  180.246863][    C1]  rcu_read_lock_held+0x15/0x50
[  180.246875][    C1]  qdisc_lookup_rcu+0x68/0x6d0
[  180.246894][    C1]  qdisc_tree_reduce_backlog+0x1b2/0x480
[  180.246911][    C1]  ? qdisc_tree_reduce_backlog+0x3c/0x480
[  180.246927][    C1]  fq_codel_change+0xa96/0xef0
[  180.246951][    C1]  ? __pfx_fq_codel_change+0x10/0x10
[  180.246961][    C1]  ? __sock_sendmsg+0x21c/0x270
[  180.246986][    C1]  fq_codel_init+0x355/0x960
[  180.246993][    C1]  ? lockdep_rtnl_is_held+0x26/0x40
[  180.247003][    C1]  ? __pfx_fq_codel_init+0x10/0x10
[  180.247010][    C1]  qdisc_create+0x7ac/0xea0
[  180.247022][    C1]  tc_modify_qdisc+0x1426/0x2010
[  180.247036][    C1]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  180.247054][    C1]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  180.247063][    C1]  rtnetlink_rcv_msg+0x77c/0xb70
[  180.247071][    C1]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  180.247077][    C1]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  180.247082][    C1]  ? ref_tracker_free+0x63a/0x7d0
[  180.247091][    C1]  ? __copy_skb_header+0xa7/0x550
[  180.247100][    C1]  ? __pfx_ref_tracker_free+0x10/0x10
[  180.247111][    C1]  netlink_rcv_skb+0x208/0x470
[  180.247119][    C1]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  180.247126][    C1]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  180.247137][    C1]  ? netlink_deliver_tap+0x2e/0x1b0
[  180.247143][    C1]  ? netlink_deliver_tap+0x2e/0x1b0
[  180.247152][    C1]  netlink_unicast+0x75b/0x8d0
[  180.247161][    C1]  netlink_sendmsg+0x805/0xb30
[  180.247171][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  180.247180][    C1]  ? aa_sock_msg_perm+0x94/0x160
[  180.247189][    C1]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  180.247197][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  180.247204][    C1]  __sock_sendmsg+0x21c/0x270
[  180.247215][    C1]  ____sys_sendmsg+0x52d/0x830
[  180.247225][    C1]  ? __pfx_____sys_sendmsg+0x10/0x10
[  180.247235][    C1]  ? import_iovec+0x74/0xa0
[  180.247243][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  180.247252][    C1]  ? __pfx____sys_sendmsg+0x10/0x10
[  180.247271][    C1]  ? __fget_files+0x2a/0x420
[  180.247278][    C1]  ? __fget_files+0x3a0/0x420
[  180.247288][    C1]  __sys_sendmmsg+0x227/0x430
[  180.247297][    C1]  ? __pfx___sys_sendmmsg+0x10/0x10
[  180.247304][    C1]  ? do_futex+0x333/0x420
[  180.247320][    C1]  ? __pfx___se_sys_futex+0x10/0x10
[  180.247327][    C1]  ? fd_install+0x30d/0x540
[  180.247336][    C1]  __x64_sys_sendmmsg+0xa0/0xc0
[  180.247344][    C1]  do_syscall_64+0xfa/0x3b0
[  180.247351][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  180.247360][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  180.247366][    C1]  ? exc_page_fault+0x9f/0xf0
[  180.247376][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  180.247382][    C1] RIP: 0033:0x7f14de78e929
[  180.247389][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  180.247394][    C1] RSP: 002b:00007f14df568038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  180.247401][    C1] RAX: ffffffffffffffda RBX: 00007f14de9b5fa0 RCX: 00007f14de78e929
[  180.247406][    C1] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 000000000000000d
[  180.247410][    C1] RBP: 00007f14de810b39 R08: 0000000000000000 R09: 0000000000000000
[  180.247414][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  180.247417][    C1] R13: 0000000000000000 R14: 00007f14de9b5fa0 R15: 00007fff7df7f4a8
[  180.247427][    C1]  </TASK>

VM DIAGNOSIS:
09:29:01  Registers:
info registers vcpu 0

CPU#0
RAX=95615ffc6d16e900 RBX=ffffffff81974d58 RCX=95615ffc6d16e900 RDX=0000000000000001
RSI=ffffffff8d9822d0 RDI=ffffffff8be28d40 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa10cf0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b66b4a3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8650000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000557cffa4a028 CR3=000000010fa54000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00007f4542384d00
XMM02=d800080000000025 100006d000000000 XMM03=0009800300100006 8004010800060167
XMM04=0000000000000000 000000000000000e XMM05=0000000000000000 000000000001df8a
XMM06=080009e003001000 09d0030000000027 XMM07=0302100000000000 8010001003010000
XMM08=0008061980031980 0400030000000026 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001e03f0
R8 =ffff888107de8237 R9 =1ffff11020fbd046 R10=dffffc0000000000 R11=ffffffff85474610
R12=dffffc0000000000 R13=ffffffff99ac4910 R14=ffffffff99dc9760 R15=0000000000000000
RIP=ffffffff8547468c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f14df5686c0 ffffffff 00c00000
GS =0000 ffff8881a3c50000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fd0e35f5fc8 CR3=00000001110e4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f14de984478 00007f14de984450 XMM03=00007f14de984488 00007f14de984480
XMM04=00007f14df4ed100 00007f14de984440 XMM05=00007f14de984458 00007f14de9844a0
XMM06=00007f14de984498 00007f14de984490 XMM07=00007f14de984488 00007f14de984480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f14de811c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
