last executing test programs:

831.736389ms ago: executing program 0 (id=562):
close(0x3)
r0 = socket(0x2, 0x80805, 0x0)
close(0x3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='0\x00\x00'], 0x30}], 0x1, 0x0)

761.360381ms ago: executing program 0 (id=564):
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)

710.534825ms ago: executing program 0 (id=566):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)

452.217721ms ago: executing program 1 (id=575):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x609, 0x8, 0x0, {0x0, 0x0, 0x0, 0x0, 0x23444, 0x10008}}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x20000040)
syz_open_procfs$namespace(0x0, 0x0)
socket$kcm(0x10, 0x9, 0x4)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket(0x5, 0x6, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
r3 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4)
sendmsg$nl_route_sched(r3, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x140d, 0x4, 0x70bd29, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x1)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x20}, 0x94)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="2800000011148d8a29bd7000fcdbdf2508004b001300000008000100000000000800030003000000320a55da2c5d5ef4f68f619cb083a5673149bc83e46a4831621f9acdb0cc90561b"], 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4004800)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r6 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r6, 0x29, 0x24, &(0x7f0000000080), 0x4)
sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x8, @mcast1, 0x3, 0xffffffff}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000780)="f4000900062b3325fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010dd010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000030900020073797a31000000000900010073797a300000000008001f4000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000100003800c000080080004"], 0xe0}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x880)

291.349985ms ago: executing program 2 (id=577):
r0 = socket$inet6(0xa, 0x3, 0x3c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback, 0x8}, 0x1c)
sendmmsg$inet(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001180)="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", 0x447}, {&(0x7f0000002180)="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", 0x135}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x4044040)

290.249695ms ago: executing program 0 (id=578):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newlink={0x50, 0x10, 0x403, 0x70bd25, 0x4, {0x0, 0x0, 0x0, 0x0, 0x500, 0x8000}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_PER_PORT={0x5, 0x2d, 0x1}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x1e, 0x2}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)

274.783565ms ago: executing program 1 (id=579):
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x915f}, 0x38)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0xe40, 0xfffffe6d, &(0x7f0000000100)="5c71f91b05c413550230b4c817a628", 0x0, 0x1, 0x0, 0x302, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x48)

202.393469ms ago: executing program 2 (id=580):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xc}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "c5"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x7c}, 0x1, 0x0, 0x0, 0x20004049}, 0x0)

202.15538ms ago: executing program 1 (id=581):
r0 = socket$inet6(0x10, 0x2, 0x6)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x14, 0xfc, 0x0, 0xfffffffc}, {0x6, 0x6, 0x7, 0x6}]}, 0x10)

147.384657ms ago: executing program 0 (id=582):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r0, 0x1000)

147.240217ms ago: executing program 1 (id=583):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x38, 0x301, 0x270bd26, 0x25dfdbfa, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x4)

147.000834ms ago: executing program 2 (id=584):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6)
setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0xf90d)

146.643872ms ago: executing program 0 (id=585):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365c0254a7c6fc7ea6155a71b613b02d1645aab67271075189c3540c4dd19ebfb3c4acf87f2eeb258e62cc6ae96db360d874500cb86b4185ee533bf708", 0xffffff8f}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62071e7ec69f658d5a52d7eb7ea31db43f8cf570f335a80860ac4cc240dc149d8468493db8aad089f590d62e0bcb9d1dcee636ee311ee51839b7201745baef82209b2ab741dc5ea481ae9dcebe39b1101a42a8c82de46107541c240ad0d9ee4a9340cffd72aaea692a60993637c81d23a0d0ebbae66f1eb2771df2482c043d8715ae788b56cc91eaa4d6bbdec82d8f91eb822d0b5f3ebd86", 0xa5}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdbcfb8a86a74f6799f98c36e23e210f053830ac8e978a0785884001a7099c4b9016f1a65a57390caf78c272cbf9711f94505dd525af1ff7d013438df5b844226f41b81e58eb73366", 0x4b}, {&(0x7f00000007c0)="f2e659a0b00d26c2ee15bbdf21c625bd1e67dee03c0d5862d425c076b8577bb0b50607802b1c3ab21a39c9eb5b6ca033319be5ed6e5d21f0f39fee6a8c98dc0bc39a76bf896971072aec737f00aee7ead58ba42e1f7efe0c445b1d1d5de272c3d774e063c4ade85dd1cf6c8c85472590721bb64c154d689cec735b3ac1b8f96dedff166668803830d4d526e16c68", 0xa}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1"}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd16e01d56b414499264923beda58d7da0313c1ccafe53965750f25bdaa6b56a87307ec23d48b6f35ce49a813a2bc3cb23fdf42826bdc16788ff466919594de5bf8a1fa5d825947271ade4a95efeb170c", 0x53}, {&(0x7f0000000580)="b8a2f681134502fe2f602543e7bf1919be9eb6378d8fc15ac1699c0c424dc215b3ec95771fb5a5fa942353cba2caf2acea06b89d8425f97404638b33f24a9b32ab61cd414aa8acaa07ba1b0ea45b2361f8442e6af44fa5e9f10de0aa6dc5d9a9a43a20771650db53f5432f5abd100417", 0x1}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)}, {&(0x7f0000000340)='\x00', 0x1}, {&(0x7f0000000880)="87141af223663a746046bdc339de81564cdbc76b336cf021dc7c2550b78b77295a37c903f475800f412569837c24ddf6b71979c1b606045926349dcd37c3077cb901d70a559c57ff65222c60c7bb8241d643c290505f23e07dc853"}, {&(0x7f0000000900)="11e08017bdf05fba2a819e173635d3d3e587f540a7622b34ab1069b87bf90bd82a92f94be0630ec07478c68309574d4fb0b1cb100d7d7a2461a1b6ec9df5e794356055d324ef4b72a433640925616bb2bd694ad8453d43bbbb91f97aa18dd52c9372c785e178180fe94fe7cac6ac486e131d1da39a4bab332c8a634ea393612b1be8d2b7d6dece01f6d5891bcf73f2d902c003facf086a1d84c11781cbb3ec57798068f71764c936cd63"}, {&(0x7f00000009c0)="c71924d7ea9bc5971a0c58640e8be19cab192cbcc2e315e72c441a5b0c0bb0fa1728e32d3bd7cd210bc2e5abeba55e9d8626bc0e11a884d140c83c4d40f46ea66a5bdab9888ffe03d639b5c19ae7243b451e6572bacf66051d51b9fb2f22ca8b69f8a53f890035bcb884820df6246909e21fda8c820c1a3a1b678ebfdf"}], 0x2}}], 0x4, 0x4000000)
setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4)
setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0x303}, "3a18c1652704ca8e", "72c995c3129ba7eb67ff6c1b5eea4e76b9dfb23040e085dab1fefc32e01f085b", "e0895faf", "5a23ffee519de42e"}, 0x38)

86.771197ms ago: executing program 2 (id=586):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4)
sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)

86.598391ms ago: executing program 1 (id=587):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000000)={0x3c, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40d5}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000844}, 0x4000)

86.205257ms ago: executing program 2 (id=588):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x6, 0x8, 0xad, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x48)

528.869µs ago: executing program 1 (id=589):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10)
unshare(0x400)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
pwritev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x8001, 0x80)
sendfile(r2, r1, 0x0, 0xf03a0005)

0s ago: executing program 2 (id=590):
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000100)={0x18, 0x2, {0x7fc, @loopback}}, 0x1e)
r1 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e)
connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0)
ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x1)
connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @loopback}}, 0x1e)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0)
ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000340)=0x1)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:57130' (ED25519) to the list of known hosts.
syzkaller login: [   48.372854][ T5784] cgroup: Unknown subsys name 'net'
[   48.477957][ T5784] cgroup: Unknown subsys name 'cpuset'
[   48.481779][ T5784] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.946915][ T5784] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   57.263308][ T5871] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   59.316808][ T5238] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   59.325055][ T5238] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   59.328754][ T5238] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   59.332472][ T5238] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   59.338515][ T5238] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   59.351231][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   59.356519][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   59.360146][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   59.375030][ T5238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   59.378780][ T5238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   59.457253][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   59.461161][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   59.464924][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   59.468958][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   59.472444][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   59.720491][ T5904] chnl_net:caif_netlink_parms(): no params data found
[   59.758529][ T5901] chnl_net:caif_netlink_parms(): no params data found
[   59.845907][ T5907] chnl_net:caif_netlink_parms(): no params data found
[   59.886134][ T5904] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.888736][ T5904] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.891715][ T5904] bridge_slave_0: entered allmulticast mode
[   59.896152][ T5904] bridge_slave_0: entered promiscuous mode
[   59.925998][ T5904] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.928495][ T5904] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.930790][ T5904] bridge_slave_1: entered allmulticast mode
[   59.933916][ T5904] bridge_slave_1: entered promiscuous mode
[   59.947499][ T5901] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.950031][ T5901] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.952633][ T5901] bridge_slave_0: entered allmulticast mode
[   59.955620][ T5901] bridge_slave_0: entered promiscuous mode
[   59.975998][ T5901] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.978817][ T5901] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.981435][ T5901] bridge_slave_1: entered allmulticast mode
[   59.987691][ T5901] bridge_slave_1: entered promiscuous mode
[   60.015872][ T5904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.021809][ T5904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.039996][ T5901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.062514][ T5901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.076626][ T5907] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.079066][ T5907] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.081353][ T5907] bridge_slave_0: entered allmulticast mode
[   60.083989][ T5907] bridge_slave_0: entered promiscuous mode
[   60.103457][ T5901] team0: Port device team_slave_0 added
[   60.105734][ T5907] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.107995][ T5907] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.110239][ T5907] bridge_slave_1: entered allmulticast mode
[   60.113368][ T5907] bridge_slave_1: entered promiscuous mode
[   60.119119][ T5904] team0: Port device team_slave_0 added
[   60.122779][ T5901] team0: Port device team_slave_1 added
[   60.160224][ T5904] team0: Port device team_slave_1 added
[   60.168896][ T5907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.200342][ T5907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.214229][ T5901] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.217652][ T5901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.226103][ T5901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.240217][ T5904] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.242878][ T5904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.252948][ T5904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.258080][ T5901] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.260925][ T5901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.271482][ T5901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.298118][ T5904] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.300997][ T5904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.313026][ T5904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.338760][ T5907] team0: Port device team_slave_0 added
[   60.346681][ T5901] hsr_slave_0: entered promiscuous mode
[   60.349948][ T5901] hsr_slave_1: entered promiscuous mode
[   60.355667][ T5907] team0: Port device team_slave_1 added
[   60.411983][ T5907] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.414927][ T5907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.425051][ T5907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.433585][ T5904] hsr_slave_0: entered promiscuous mode
[   60.437651][ T5904] hsr_slave_1: entered promiscuous mode
[   60.439966][ T5904] debugfs: 'hsr0' already exists in 'hsr'
[   60.441914][ T5904] Cannot create hsr debugfs directory
[   60.451231][ T5907] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.453512][ T5907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.461851][ T5907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.561208][ T5907] hsr_slave_0: entered promiscuous mode
[   60.563693][ T5907] hsr_slave_1: entered promiscuous mode
[   60.566071][ T5907] debugfs: 'hsr0' already exists in 'hsr'
[   60.567998][ T5907] Cannot create hsr debugfs directory
[   60.723972][ T5901] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   60.731636][ T5901] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   60.756136][ T5901] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   60.761794][ T5901] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   60.816946][ T5904] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   60.830622][ T5904] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   60.850892][ T5904] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   60.863900][ T5904] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   60.897405][ T5907] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   60.908640][ T5907] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   60.918917][ T5907] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   60.923539][ T5907] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   60.968583][ T5901] 8021q: adding VLAN 0 to HW filter on device bond0
[   60.988236][ T5901] 8021q: adding VLAN 0 to HW filter on device team0
[   60.996733][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.999133][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.016101][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.018605][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.041359][ T5904] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.077915][ T5904] 8021q: adding VLAN 0 to HW filter on device team0
[   61.090763][   T33] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.093636][   T33] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.108657][ T5907] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.113494][   T33] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.116668][   T33] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.131995][ T5907] 8021q: adding VLAN 0 to HW filter on device team0
[   61.149901][   T33] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.152292][   T33] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.173775][   T33] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.176766][   T33] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.193802][ T5904] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   61.229676][ T5901] 8021q: adding VLAN 0 to HW filter on device batadv0
[   61.319020][ T5901] veth0_vlan: entered promiscuous mode
[   61.331449][ T5901] veth1_vlan: entered promiscuous mode
[   61.392194][ T5901] veth0_macvtap: entered promiscuous mode
[   61.400320][ T5904] 8021q: adding VLAN 0 to HW filter on device batadv0
[   61.402826][ T5901] veth1_macvtap: entered promiscuous mode
[   61.415423][   T55] Bluetooth: hci1: command tx timeout
[   61.417522][   T55] Bluetooth: hci0: command tx timeout
[   61.420772][ T5907] 8021q: adding VLAN 0 to HW filter on device batadv0
[   61.430824][ T5901] batman_adv: batadv0: Interface activated: batadv_slave_0
[   61.443188][ T5901] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.463848][ T5747] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.468156][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.479230][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.495527][   T55] Bluetooth: hci2: command tx timeout
[   61.499532][ T5747] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.531685][ T5904] veth0_vlan: entered promiscuous mode
[   61.552697][ T5907] veth0_vlan: entered promiscuous mode
[   61.568669][ T5904] veth1_vlan: entered promiscuous mode
[   61.593743][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.601846][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.618550][ T5907] veth1_vlan: entered promiscuous mode
[   61.639790][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.643749][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.677747][ T5904] veth0_macvtap: entered promiscuous mode
[   61.688980][ T5904] veth1_macvtap: entered promiscuous mode
[   61.689471][ T5901] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   61.698804][ T5907] veth0_macvtap: entered promiscuous mode
[   61.706701][ T5907] veth1_macvtap: entered promiscuous mode
[   61.732535][ T5904] batman_adv: batadv0: Interface activated: batadv_slave_0
[   61.769049][ T5907] batman_adv: batadv0: Interface activated: batadv_slave_0
[   61.779155][ T5904] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.788015][ T5907] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.798493][ T5747] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.802163][ T5928] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.806262][ T5928] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.817416][ T5928] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.829141][ T5928] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.833490][ T5928] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.849978][ T5928] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.855452][ T5968] netlink: 'syz.1.39': attribute type 1 has an invalid length.
[   61.862658][ T5968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.39'.
[   61.871998][ T5968] netlink: 32 bytes leftover after parsing attributes in process `syz.1.39'.
[   61.880038][ T5928] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.899100][ T5968] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[   61.903958][ T5968] gretap1: entered promiscuous mode
[   61.913635][ T5968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.39'.
[   61.931920][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.943820][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.971114][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.974119][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.007470][ T5972] netlink: 'syz.1.40': attribute type 32 has an invalid length.
[   62.010030][ T5972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.40'.
[   62.020902][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.021546][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.024301][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.028148][ T5972] (unnamed net_device) (uninitialized): option coupled_control: invalid value (192)
[   62.034914][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.412054][ T5999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.52'.
[   62.747592][ T6024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.64'.
[   62.768447][ T6028] Bluetooth: MGMT ver 1.23
[   63.027949][ T6048] netlink: 'syz.0.74': attribute type 1 has an invalid length.
[   63.117711][ T6055] Zero length message leads to an empty skb
[   63.498121][   T55] Bluetooth: hci0: command tx timeout
[   63.498178][ T5238] Bluetooth: hci1: command tx timeout
[   63.574986][ T5238] Bluetooth: hci2: command tx timeout
[   63.732971][ T6089] bridge_slave_0: left allmulticast mode
[   63.741187][ T6089] bridge_slave_0: left promiscuous mode
[   63.744716][ T6089] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.760553][ T6089] bridge_slave_1: left allmulticast mode
[   63.763057][ T6089] bridge_slave_1: left promiscuous mode
[   63.765809][ T6089] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.777756][ T6089] bond0: (slave bond_slave_0): Releasing backup interface
[   63.789579][ T6089] bond0: (slave bond_slave_1): Releasing backup interface
[   63.815349][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   63.829689][ T6089] team0: Port device team_slave_0 removed
[   63.837423][ T6089] team0: Port device team_slave_1 removed
[   63.841877][ T6089] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   63.848863][ T6089] batman_adv: batadv0: Removing interface: batadv_slave_0
[   63.854685][ T6089] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   63.857334][ T6089] batman_adv: batadv0: Removing interface: batadv_slave_1
[   63.881541][ T6093] team0: Mode changed to "broadcast"
[   63.892855][ T6096] vlan0: entered promiscuous mode
[   63.923788][ T6096] team0: Port device vlan0 added
[   63.928368][ T6089] tipc: Started in network mode
[   63.930423][ T6089] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[   63.933737][ T6089] tipc: Enabled bearer <eth:team0>, priority 0
[   64.768427][ T6129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.110'.
[   64.861303][ T6131] Illegal XDP return value 4294967274 on prog  (id 20) dev N/A, expect packet loss!
[   64.937105][ T5315] tipc: Node number set to 11578026
[   65.482127][ T6182] netlink: 'syz.2.126': attribute type 13 has an invalid length.
[   65.500687][ T6182] netlink: 'syz.2.126': attribute type 17 has an invalid length.
[   65.577440][ T6192] netlink: 76 bytes leftover after parsing attributes in process `syz.0.134'.
[   65.578189][ T5238] Bluetooth: hci1: command tx timeout
[   65.580242][ T6192] netlink: 12 bytes leftover after parsing attributes in process `syz.0.134'.
[   65.585103][ T5238] Bluetooth: hci0: command tx timeout
[   65.598293][ T6192] netlink: 40 bytes leftover after parsing attributes in process `syz.0.134'.
[   65.603443][ T6182] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   65.611531][ T6176] xfrm0: entered promiscuous mode
[   65.613633][ T6176] xfrm0: entered allmulticast mode
[   65.656172][ T5238] Bluetooth: hci2: command tx timeout
[   65.713096][ T6173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   65.762048][ T6208] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[   66.008401][ T6230] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.011082][ T6230] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.016609][ T6230] netlink: 'syz.1.151': attribute type 2 has an invalid length.
[   66.019343][ T6230] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[   66.408884][ T6263] netlink: 'syz.2.167': attribute type 1 has an invalid length.
[   66.411497][ T6263] netlink: 'syz.2.167': attribute type 2 has an invalid length.
[   66.414840][ T6262] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   66.510173][ T6269] syz.2.169 uses obsolete (PF_INET,SOCK_PACKET)
[   66.515372][ T6269] syzkaller1: entered promiscuous mode
[   66.517845][ T6269] syzkaller1: entered allmulticast mode
[   66.686611][ T6283] tc_dump_action: action bad kind
[   66.829455][ T6294] tipc: Started in network mode
[   66.831623][ T6294] tipc: Node identity , cluster identity 4711
[   66.834220][ T6294] tipc: Failed to obtain node identity
[   66.839260][ T6294] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   66.843903][ T6294] syzkaller0: entered promiscuous mode
[   66.847444][ T6294] syzkaller0: entered allmulticast mode
[   67.256035][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   67.298752][ T6331] netlink: 'syz.2.198': attribute type 7 has an invalid length.
[   67.344289][ T6335] netlink: 'syz.0.200': attribute type 1 has an invalid length.
[   67.347777][ T6335] netlink: 'syz.0.200': attribute type 1 has an invalid length.
[   67.352203][ T6335] netlink: 'syz.0.200': attribute type 1 has an invalid length.
[   67.421480][ T6339] __nla_validate_parse: 7 callbacks suppressed
[   67.421495][ T6339] netlink: 596 bytes leftover after parsing attributes in process `syz.1.202'.
[   67.488495][ T6345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.205'.
[   67.597386][ T6355] netlink: 'syz.0.210': attribute type 1 has an invalid length.
[   67.614572][ T6355] netlink: 'syz.0.210': attribute type 4 has an invalid length.
[   67.655875][ T5238] Bluetooth: hci0: command tx timeout
[   67.659716][ T5238] Bluetooth: hci1: command tx timeout
[   67.735894][ T5238] Bluetooth: hci2: command tx timeout
[   68.655804][ T6430] netlink: 'syz.0.239': attribute type 3 has an invalid length.
[   69.108885][ T6465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.252'.
[   69.934212][ T6486] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   70.021453][ T6493] warning: `syz.1.266' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   70.212934][ T6512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.274'.
[   70.358675][ T6523] netlink: 224 bytes leftover after parsing attributes in process `syz.1.280'.
[   70.507537][ T6533] netlink: 284 bytes leftover after parsing attributes in process `syz.0.284'.
[   70.597679][ T6539] netlink: 4 bytes leftover after parsing attributes in process `syz.0.287'.
[   71.087866][ T6567] netlink: zone id is out of range
[   71.103351][ T6567] netlink: zone id is out of range
[   71.108818][ T6569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.302'.
[   71.112750][ T6569] tipc: Enabled bearer <eth:vlan0>, priority 18
[   71.116113][ T6567] netlink: zone id is out of range
[   71.149383][ T6570] netlink: del zone limit has 4 unknown bytes
[   71.169660][ T6567] netlink: set zone limit has 4 unknown bytes
[   71.179104][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.182083][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.510923][ T6592] netlink: 'syz.1.313': attribute type 15 has an invalid length.
[   72.029237][ T6624] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.190871][ T6624] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.296885][ T6624] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.413104][ T6624] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.733710][ T5747] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.798296][ T5747] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.801676][ T5747] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.804379][ T5747] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.923389][ T6657] syzkaller0: entered allmulticast mode
[   73.717221][ T6711] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.777395][ T6711] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.847904][ T6711] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.881399][ T6711] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.044614][ T6723] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[   74.045976][ T5969] IPVS: starting estimator thread 0...
[   74.144904][ T6725] IPVS: using max 44 ests per chain, 105600 per kthread
[   74.277914][ T6733] netlink: 'syz.2.363': attribute type 2 has an invalid length.
[   74.281275][ T6733] netlink: 244 bytes leftover after parsing attributes in process `syz.2.363'.
[   74.348478][ T6735] tipc: Started in network mode
[   74.350819][ T6735] tipc: Node identity b25badce7a15, cluster identity 4711
[   74.354195][ T6735] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   74.360676][ T6735] syzkaller0: entered promiscuous mode
[   74.363075][ T6735] syzkaller0: entered allmulticast mode
[   74.386447][ T6735] tipc: Resetting bearer <eth:syzkaller0>
[   74.391735][ T6734] tipc: Resetting bearer <eth:syzkaller0>
[   74.404043][ T6734] tipc: Disabling bearer <eth:syzkaller0>
[   75.638220][ T6770] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   75.641137][ T6770] syzkaller0: entered promiscuous mode
[   75.643054][ T6770] syzkaller0: entered allmulticast mode
[   75.683701][ T6770] tipc: Resetting bearer <eth:syzkaller0>
[   75.703193][ T6769] tipc: Resetting bearer <eth:syzkaller0>
[   75.742080][ T6769] tipc: Disabling bearer <eth:syzkaller0>
[   76.111524][ T6782] netlink: 277 bytes leftover after parsing attributes in process `syz.0.380'.
[   76.296449][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   76.655753][ T6793] netlink: 20 bytes leftover after parsing attributes in process `syz.0.385'.
[   77.163930][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.172956][ T5747] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.183667][ T5747] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.195999][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.256425][    C1] vxcan1: j1939_tp_rxtimer: 0xffff8881215bc800: rx timeout, send abort
[   77.261011][    C1] vxcan1: j1939_tp_rxtimer: 0xffff8881215bdc00: rx timeout, send abort
[   77.265353][    C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff8881215bc800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   77.272125][    C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff8881215bdc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   78.398910][ T6853] trusted_key: syz.0.406 sent an empty control message without MSG_MORE.
[   78.583953][ T6870] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[   79.032348][ T6913] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   80.121286][ T6954] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[   80.188144][ T6959] netlink: 84 bytes leftover after parsing attributes in process `syz.2.455'.
[   80.333079][ T6978] openvswitch: netlink: Flow key attr not present in new flow.
[   80.386648][ T6982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.466'.
[   80.392089][ T6984] netlink: 8 bytes leftover after parsing attributes in process `syz.2.467'.
[   81.015195][ T7028] netlink: 28 bytes leftover after parsing attributes in process `syz.2.486'.
[   81.076590][ T7031] netlink: 28 bytes leftover after parsing attributes in process `syz.1.489'.
[   81.082625][ T7031] netlink: 'syz.1.489': attribute type 7 has an invalid length.
[   81.091686][ T7031] netlink: 'syz.1.489': attribute type 8 has an invalid length.
[   81.096591][ T7033] netlink: 220 bytes leftover after parsing attributes in process `syz.2.488'.
[   81.099863][ T7031] netlink: 4 bytes leftover after parsing attributes in process `syz.1.489'.
[   81.101917][ T7033] netlink: 220 bytes leftover after parsing attributes in process `syz.2.488'.
[   81.109706][ T7033] netlink: 32 bytes leftover after parsing attributes in process `syz.2.488'.
[   81.367311][ T7057] xt_l2tp: unknown flags: 51
[   81.418420][   T10] cfg80211: failed to load regulatory.db
[   81.465314][ T7066] netlink: 40 bytes leftover after parsing attributes in process `syz.0.505'.
[   81.673193][ T7085] nbd: device at index 0 is going down
[   82.006721][ T7121] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   82.424224][ T7163] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) !
[   82.466510][ T7165] atomic_op ffff888111f44198 conn xmit_atomic 0000000000000000
[   82.555489][ T7171] netlink: 'syz.2.554': attribute type 2 has an invalid length.
[   83.138406][ T7216] lo speed is unknown, defaulting to 1000
[   83.140318][ T7216] lo speed is unknown, defaulting to 1000
[   83.143964][ T7216] lo speed is unknown, defaulting to 1000
[   83.152796][ T7216] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   83.160190][ T7216] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   83.190750][ T7216] lo speed is unknown, defaulting to 1000
[   83.194183][ T7216] lo speed is unknown, defaulting to 1000
[   83.205771][ T7216] lo speed is unknown, defaulting to 1000
[   83.224175][ T7220] netlink: 'syz.1.575': attribute type 4 has an invalid length.
[   84.133866][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.222873][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.305354][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.365374][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.530853][   T12] bridge_slave_1: left allmulticast mode
[   84.533545][   T12] bridge_slave_1: left promiscuous mode
[   84.538990][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.544331][   T12] bridge_slave_0: left allmulticast mode
[   84.546579][   T12] bridge_slave_0: left promiscuous mode
[   84.548996][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.824903][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   84.829650][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   84.833521][   T12] bond0 (unregistering): Released all slaves
[   84.897752][   T12] tipc: Left network mode
[   85.148077][   T12] hsr_slave_0: left promiscuous mode
[   85.151051][   T12] hsr_slave_1: left promiscuous mode
[   85.153923][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   85.162117][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   85.168080][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   85.171119][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   85.181892][   T12] veth1_macvtap: left promiscuous mode
[   85.184351][   T12] veth0_macvtap: left promiscuous mode
[   85.188442][   T12] veth1_vlan: left promiscuous mode
[   85.190845][   T12] veth0_vlan: left promiscuous mode
[   85.475766][   T12] team0 (unregistering): Port device team_slave_1 removed
[   85.495611][   T12] team0 (unregistering): Port device team_slave_0 removed
[   86.012322][   T12] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.062054][   T12] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.111340][   T12] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.179775][   T12] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.277202][   T12] bridge_slave_1: left allmulticast mode
[   86.279292][   T12] bridge_slave_1: left promiscuous mode
[   86.281443][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.287521][   T12] bridge_slave_0: left allmulticast mode
[   86.289924][   T12] bridge_slave_0: left promiscuous mode
[   86.292274][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.566041][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   86.572261][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   86.577127][   T12] bond0 (unregistering): Released all slaves
[   86.796056][   T12] hsr_slave_0: left promiscuous mode
[   86.798705][   T12] hsr_slave_1: left promiscuous mode
[   86.801385][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   86.807337][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   86.811196][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   86.814274][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   86.826111][   T12] veth1_macvtap: left promiscuous mode
[   86.828296][   T12] veth0_macvtap: left promiscuous mode
[   86.830337][   T12] veth1_vlan: left promiscuous mode
[   86.832423][   T12] veth0_vlan: left promiscuous mode
[   87.117381][   T12] team0 (unregistering): Port device team_slave_1 removed
[   87.139205][   T12] team0 (unregistering): Port device team_slave_0 removed
[   87.404908][ T5948] lo speed is unknown, defaulting to 1000
[   87.407229][ T5948] infiniband syz2: ib_query_port failed (-19)

VM DIAGNOSIS:
07:21:02  Registers:
info registers vcpu 0

CPU#0
RAX=6d103883ba16cf00 RBX=ffffffff819683f8 RCX=6d103883ba16cf00 RDX=0000000000000001
RSI=ffffffff8d9b9313 RDI=ffffffff8be33980 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa3a030 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7a23f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8615000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f7d408eb6c0 CR3=000000010acba000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000500000065 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=00000000ff000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00000000000000ff 00000000000000ff XMM05=0000000000000000 00000000306e196c
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffffff ffffffff00000000 XMM09=0000000000000041 00000000306e616c
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ff6a5ef6c8f76500 RBX=ffffffff819683f8 RCX=ff6a5ef6c8f76500 RDX=0000000000000001
RSI=ffffffff8d9b9313 RDI=ffffffff8be33980 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa3a030 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d2000
RIP=ffffffff8b7a23f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c15000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fffa46a0728 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000ff0000000000 000000000000ffff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000ff0000000000 00000000000000ff XMM05=0000000000000000 00000000306e196c
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffffff ffffffff00000000 XMM09=0000000000000041 00000000306e616c
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
