last executing test programs:

2.026863938s ago: executing program 2 (id=364):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18)
connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18)
sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00', <r3=>0x0})
r4 = gettid()
r5 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000304f9ffbffffedbdf2500007400", @ANYRES32=r3, @ANYBLOB, @ANYRES32=r4, @ANYBLOB="140003"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000f80), &(0x7f0000000fc0)=0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x3}, 0x94)
r6 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
socket$alg(0x26, 0x5, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
vmsplice(r6, 0x0, 0x0, 0xa)
r8 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, 0x0)
bind$can_raw(r8, &(0x7f0000000000), 0x10)
setsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, 0x0, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000180)={'vxcan1\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r11, {0x7, 0x1}, {0xffff}, {0x1}}}, 0x24}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
gettid()

1.478490334s ago: executing program 1 (id=370):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="7a0af8ff7525347cbfa100000000000007010000f9ffffffb702000005000000bf130000000000008500000072000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f81d9217fc560e2fc91f6993bad4fdc2eb1b5986fc4a3f611a7c8edd3aa5d6ee7ab10b1a297cf52866651ddd73f30f2382f6cda4bfdd45be583823c0f09621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000098045f785b1292fcb9c1d3079a00db453620ce72d75946c2b638f91dbef661935839c77edf2d34b12cd48a1b20fb7dd8432619f2c50d77bc0ea9b0af58e604f4942eb613eff28902010045ef76d7d864409ef2dc9518a09f4886afc26abba34635d0e8b598a51bc7421d33321d1ec72ed311740d435aa8b5208ff0df2db7619a12df6bee431a668135b8214afa5827b56a8074bf1e6cf5d84b35a3a3a4c66824fe12dbe20fcf50a194185b9e2d07815fedb0d982936156be34dda66fb977aef7c9cb92428ef25d9bf665bd60020500000000000000abe4cb8d826e1ec03cc492f5cad6227c94fea467aea7fa8b58abc3c9731c9a7bb3a4e67056433edf43fba5566a3e02200bae941d34ac81fd48f9b73126992529402a520ef67e246415a697a95ca3314ded0d8a24abd57e042888a9141ab4e6c6b939aaefc248791464970c43120211b9bc82a85cd2fc18f535c7986c2d52ba62f74f000000000480000000000000000000000074054d643c2b5692d8304a23eaf9153c457ae5bbe49b3c164461470a452bd357fa62341c759dc21b45a06ec414cadf9695d030012acad582e3fe75e61ae908347e4d6d089ba9b19dbe6431c7bf773634f4aac8c91aef83eaa0951d137f8f91a0a9d54f4347431fa96c0b54a503c39d4da796a0dc4a54cb6d9952feb6d282aa2557037b890dc0cf2ed230571ffafccdef2c2c32d3edbcb5ec2cb723149cbed2fbd5fe7452486401e65abb2966c85ec1fdb74b8a492f83e6dd9f2e2f4f75a18a2117b96217adc5dd29bf9192e4419594d1369c1f25e5965f9c601e47f70b0b35c4367102087b9f00c2651c1b5e3134d45a8c"], &(0x7f0000000100)='GPL\x00'}, 0x48)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r4, 0x4)
sendmsg$unix(r3, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0)

1.389060067s ago: executing program 1 (id=371):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x84, 0x5, [{{@in=@remote, 0x0, 0x6c}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @loopback}}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in=@remote, 0x0, 0x1}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x5593ee2f0bddd481}, 0x0)

1.314691115s ago: executing program 1 (id=372):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x0, 0xcb, 0x12d5c, 0x12d5c}}, 0x44)
socket(0x400000000010, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
r4 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000006000000080000000500000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00:\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\x00'/25], 0x48)
close(0x3)
unshare(0x6a040000)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001080)={{r5}, 0x0, 0x0}, 0x20)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_CONNECT(r6, 0x0, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x5bc}, 0x8)
bind$inet(r0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)

1.028004076s ago: executing program 2 (id=377):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
writev(r0, &(0x7f0000003500)=[{&(0x7f0000001440)="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", 0xfdc}, {&(0x7f0000000080)="4326cf937e13ee59da7470150a873243abfea809b88a998078b3084d08030a225b1b296225c17f4b09678041529c949acafe18e62a48271f7830c85579b4f780c17484b9f547f8b3bb6b73de8928444b7f35b7a4aa420778028e4cc363c69a9e95c33c9581447916400607df4eeb04d1903b1b7c00fc0696602cc79d7151b69b2f3b3fcd1128a6acdc48aba5193eb9d4fd11a65e0e1598011f4a7343b0e62b38022bb6ebe507b99dc69aebd5b0c1c9059c221b7a8bd04786b5a00bb5a0050597d9002d12bd74579c38948645232309c873809bc1aefc7d44a3d4b7ae796ead08a87acbb4c33d91446f9a89f6caad87a9b03a38cd4051b90ec1c6b17a14c190ead881b3a042ec0c1f15631a763fa7e7d35d4dad2ebcbec86544e0306f9b7910144196baa8d90f33617db2f8551135e25e50f51acedad250", 0x137}, {0x0}, {&(0x7f0000001240)="d35c99d267", 0x5}, {0x0}, {&(0x7f0000000300)}, {0x0}, {0x0}, {0x0}], 0x9)

950.01952ms ago: executing program 2 (id=379):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x18, 0x16, 0xa01, 0x0, 0x0, {0x2}, [@typed={0x4}]}, 0x18}}, 0x0)

860.901529ms ago: executing program 2 (id=380):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x1, 0x0, 0x0, 0x0, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3, 0x8000}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x4000000, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x724a969d}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0xe, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x3}, {0x0, 0x0, 0x0, 0x8510}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0x0, 0x200}, {}, {}, {0x5}, {}, {}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0xfffffffe}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x2, 0x0, 0x20000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1, 0x3c}, {}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x2004}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800}], [{}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x5}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x4}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0)

789.900653ms ago: executing program 2 (id=382):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="a408000000000000611065000000000006000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48)

719.173817ms ago: executing program 2 (id=383):
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x110, 0xffffffffffffffff, 0x100000000)
r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
accept4$netrom(0xffffffffffffffff, &(0x7f00000001c0)={{0x3, @bcast}, [@null, @remote, @bcast, @default, @default, @default, @null, @rose]}, 0x0, 0x80400)
epoll_create1(0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x0, 0xfffffffffffffffd, 0x2, 0x800}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x800, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
connect$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0xe, 0x29, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x10)
syz_init_net_socket$llc(0x1a, 0x801, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c00"], 0x50)

719.008067ms ago: executing program 0 (id=384):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000008000b40000000000900010073797a30000000004800048020000180070001007274000014000280080001400000000d080002400000000124000180090001006d6574610000000014000280080001400000001008000240"], 0xf8}}, 0x0)

658.528428ms ago: executing program 0 (id=385):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="4cf80c33db588500f6796f210c5c25a3c17f77eb7cd6135744495e689f0308505dc9dc7d504e269ad5b9028ece1daae10a67942da326a929904a1762df7f5b7c35", 0x41)

658.278485ms ago: executing program 0 (id=386):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x52001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_AF_SPEC={0x4}, @IFLA_MTU={0x8, 0x4, 0x3}]}, 0x44}}, 0x440088c4)

560.49129ms ago: executing program 0 (id=387):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x1, 0x0, 0xb2, 0xe9, 0x8, 0x7f}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0x11}, {0xffe6, 0xb}, {0x5, 0xb}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x58, 0x2, 0x3}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

421.735065ms ago: executing program 1 (id=388):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f00000008c0)='.', 0x1)
listen(r0, 0x6)

246.055436ms ago: executing program 0 (id=389):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x1001, 0x2}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f0000000180), &(0x7f00000009c0)=""/182}, 0x20)

139.337247ms ago: executing program 1 (id=390):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a0000000000c000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000004"], 0xfc}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x32}, 0x4}, [@migrate={0x50, 0x11, [{@in=@local, @in=@broadcast, @in=@multicast2, @in6=@local, 0x3c, 0x4, 0x0, 0x34ff, 0xa, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

192.272µs ago: executing program 1 (id=391):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000000080000000a"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000500000000000000000000850000007b00000095"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r0}, &(0x7f0000000600), &(0x7f0000000640)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r2}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x8, 0xf}, 0x50)

0s ago: executing program 0 (id=392):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000280)=0x5, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000640)={0x0, 0x0}, 0x10)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:43638' (ED25519) to the list of known hosts.
syzkaller login: [   64.394723][ T5840] cgroup: Unknown subsys name 'net'
[   64.513604][ T5840] cgroup: Unknown subsys name 'cpuset'
[   64.518946][ T5840] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   66.873553][ T5840] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   72.824912][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   72.831372][ T5235] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   72.835073][ T5855] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   72.839850][ T5855] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   72.843746][ T5855] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   72.847598][ T5855] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   72.853582][ T5856] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   72.858376][ T5856] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   72.862981][ T5856] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   72.867011][ T5856] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   72.966393][ T5235] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   72.970615][ T5235] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   72.974227][ T5235] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   72.977950][ T5235] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   72.981981][ T5235] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   73.385074][ T5852] chnl_net:caif_netlink_parms(): no params data found
[   73.405872][ T5848] chnl_net:caif_netlink_parms(): no params data found
[   73.467896][ T5858] chnl_net:caif_netlink_parms(): no params data found
[   73.611718][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.614492][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.617823][ T5852] bridge_slave_0: entered allmulticast mode
[   73.622164][ T5852] bridge_slave_0: entered promiscuous mode
[   73.634933][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.638123][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.641802][ T5848] bridge_slave_0: entered allmulticast mode
[   73.645746][ T5848] bridge_slave_0: entered promiscuous mode
[   73.652334][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.655394][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.658491][ T5852] bridge_slave_1: entered allmulticast mode
[   73.663177][ T5852] bridge_slave_1: entered promiscuous mode
[   73.680937][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.683472][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.686142][ T5848] bridge_slave_1: entered allmulticast mode
[   73.690001][ T5848] bridge_slave_1: entered promiscuous mode
[   73.762627][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   73.782430][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   73.787253][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.791677][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.794104][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.796382][ T5858] bridge_slave_0: entered allmulticast mode
[   73.799503][ T5858] bridge_slave_0: entered promiscuous mode
[   73.804876][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.807507][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.810086][ T5858] bridge_slave_1: entered allmulticast mode
[   73.813455][ T5858] bridge_slave_1: entered promiscuous mode
[   73.817541][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.906283][ T5852] team0: Port device team_slave_0 added
[   73.911721][ T5852] team0: Port device team_slave_1 added
[   73.917033][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   73.931418][ T5848] team0: Port device team_slave_0 added
[   73.951327][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.956118][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.958653][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.968476][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.975925][ T5848] team0: Port device team_slave_1 added
[   73.993684][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.996151][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.006071][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   74.045814][ T5858] team0: Port device team_slave_0 added
[   74.051525][ T5858] team0: Port device team_slave_1 added
[   74.068385][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   74.071438][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.081678][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   74.129382][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   74.132993][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.143156][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   74.164555][ T5852] hsr_slave_0: entered promiscuous mode
[   74.167258][ T5852] hsr_slave_1: entered promiscuous mode
[   74.176023][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0
[   74.179087][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.189816][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   74.196332][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1
[   74.199166][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.210285][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   74.274073][ T5848] hsr_slave_0: entered promiscuous mode
[   74.276472][ T5848] hsr_slave_1: entered promiscuous mode
[   74.278547][ T5848] debugfs: 'hsr0' already exists in 'hsr'
[   74.280881][ T5848] Cannot create hsr debugfs directory
[   74.322904][ T5858] hsr_slave_0: entered promiscuous mode
[   74.325222][ T5858] hsr_slave_1: entered promiscuous mode
[   74.327424][ T5858] debugfs: 'hsr0' already exists in 'hsr'
[   74.329227][ T5858] Cannot create hsr debugfs directory
[   74.649758][ T5852] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   74.666609][ T5852] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   74.676895][ T5852] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   74.696911][ T5852] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   74.765100][ T5848] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   74.778407][ T5848] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   74.791075][ T5848] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   74.815290][ T5848] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   74.857235][ T5858] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   74.865462][ T5858] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   74.874898][ T5858] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   74.898201][ T5858] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   74.923196][ T5849] Bluetooth: hci1: command tx timeout
[   74.925815][ T5235] Bluetooth: hci0: command tx timeout
[   75.001594][ T5235] Bluetooth: hci2: command tx timeout
[   75.058613][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.073045][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.116125][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   75.123300][ T5852] 8021q: adding VLAN 0 to HW filter on device team0
[   75.139221][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.146367][  T261] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.149393][  T261] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.165635][ T1233] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.168712][ T1233] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.196889][ T1233] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.199907][ T1233] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.207071][ T1233] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.209938][ T1233] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.231758][ T5858] 8021q: adding VLAN 0 to HW filter on device team0
[   75.253565][ T1233] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.256826][ T1233] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.289888][  T261] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.293159][  T261] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.596320][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.606288][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.666410][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.693387][ T5852] veth0_vlan: entered promiscuous mode
[   75.713825][ T5852] veth1_vlan: entered promiscuous mode
[   75.729104][ T5848] veth0_vlan: entered promiscuous mode
[   75.756352][ T5848] veth1_vlan: entered promiscuous mode
[   75.779006][ T5858] veth0_vlan: entered promiscuous mode
[   75.795578][ T5852] veth0_macvtap: entered promiscuous mode
[   75.806031][ T5858] veth1_vlan: entered promiscuous mode
[   75.812381][ T5852] veth1_macvtap: entered promiscuous mode
[   75.835386][ T5848] veth0_macvtap: entered promiscuous mode
[   75.844006][ T5848] veth1_macvtap: entered promiscuous mode
[   75.869325][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.889107][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.903895][ T5858] veth0_macvtap: entered promiscuous mode
[   75.917299][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.920064][ T5863] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.926113][ T5863] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.949670][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.954241][ T5863] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.959217][ T5858] veth1_macvtap: entered promiscuous mode
[   75.966763][ T5863] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.016629][ T5863] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.029230][ T5863] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.035613][ T5863] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.039665][ T5863] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.049481][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.086247][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.125730][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.139634][ T5880] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.144596][ T5880] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.169089][ T5880] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.186900][ T4983] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.189970][ T4983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.248679][ T4983] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.252983][ T4983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.281528][ T2274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.284855][ T2274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.348480][ T5852] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   76.356431][ T4983] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.361373][ T4983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.420663][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.423872][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.466918][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.486771][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.527477][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   76.534282][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   76.670163][ T5926] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5'.
[   76.753990][ T5929] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5'.
[   77.001239][ T5235] Bluetooth: hci0: command tx timeout
[   77.003259][ T5235] Bluetooth: hci1: command tx timeout
[   77.080644][ T5849] Bluetooth: hci2: command tx timeout
[   77.189126][ T5956] unknown channel width for channel at 909000KHz?
[   77.192415][ T5956] unknown channel width for channel at 909000KHz?
[   77.195223][ T5956] unknown channel width for channel at 909000KHz?
[   77.437176][ T5967] openvswitch: netlink: VXLAN extension message has 9 unknown bytes.
[   78.084622][ T5997] netlink: 'syz.0.36': attribute type 1 has an invalid length.
[   78.923639][ T6038] pim6reg1: entered promiscuous mode
[   78.925917][ T6038] pim6reg1: entered allmulticast mode
[   79.080881][ T5849] Bluetooth: hci1: command tx timeout
[   79.082826][ T5849] Bluetooth: hci0: command tx timeout
[   79.160695][ T5235] Bluetooth: hci2: command tx timeout
[   79.298488][   T33] audit: type=1800 audit(1754988609.030:2): pid=6047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.58" name="cgroup.controllers" dev="tmpfs" ino=114 res=0 errno=0
[   79.409891][ T6059] netlink: 12 bytes leftover after parsing attributes in process `syz.0.63'.
[   80.230706][ T6093] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[   80.395583][ T6103] netlink: 28 bytes leftover after parsing attributes in process `syz.2.84'.
[   80.548593][ T6116] netlink: 'syz.1.86': attribute type 21 has an invalid length.
[   80.562193][ T6116] netlink: 'syz.1.86': attribute type 6 has an invalid length.
[   80.565332][ T6116] netlink: 64 bytes leftover after parsing attributes in process `syz.1.86'.
[   80.573941][ T6116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.86'.
[   80.594455][ T6116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.86'.
[   80.916538][ T6142] tipc: Started in network mode
[   80.918471][ T6142] tipc: Node identity 56e7b8fb94d3, cluster identity 4711
[   80.925230][ T6142] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   80.928379][ T6142] syzkaller0: entered promiscuous mode
[   80.930641][ T6142] syzkaller0: entered allmulticast mode
[   80.948045][ T6142] tipc: Resetting bearer <eth:syzkaller0>
[   80.953839][ T6141] tipc: Resetting bearer <eth:syzkaller0>
[   80.962684][ T6141] tipc: Disabling bearer <eth:syzkaller0>
[   81.161991][ T5235] Bluetooth: hci0: command tx timeout
[   81.165567][ T5235] Bluetooth: hci1: command tx timeout
[   81.240479][ T5849] Bluetooth: hci2: command tx timeout
[   81.342139][ T6158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.108'.
[   81.468648][ T6166] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   81.563709][ T6171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.114'.
[   81.573684][ T6171] erspan0: entered promiscuous mode
[   81.578602][ T6171] erspan0: left promiscuous mode
[   81.686521][ T6176] warning: `syz.0.116' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   81.917337][ T6193] lo speed is unknown, defaulting to 1000
[   81.919809][ T6193] lo speed is unknown, defaulting to 1000
[   81.923820][ T6193] lo speed is unknown, defaulting to 1000
[   81.929849][ T6193] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   81.939424][ T6193] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   81.968959][ T6193] lo speed is unknown, defaulting to 1000
[   81.971594][ T6195] syz.1.122 uses obsolete (PF_INET,SOCK_PACKET)
[   81.973979][ T6193] lo speed is unknown, defaulting to 1000
[   81.978611][ T6193] lo speed is unknown, defaulting to 1000
[   82.478630][ T6217] netlink: 'syz.2.133': attribute type 1 has an invalid length.
[   82.484658][ T6217] netlink: 208 bytes leftover after parsing attributes in process `syz.2.133'.
[   83.540479][ T6245] netlink: 20 bytes leftover after parsing attributes in process `syz.1.145'.
[   84.312460][ T6273] Zero length message leads to an empty skb
[   84.928625][ T6290] netlink: 12 bytes leftover after parsing attributes in process `syz.1.165'.
[   84.941879][ T6290] tipc: Started in network mode
[   84.944091][ T6290] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[   84.949395][ T6290] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000
[   84.955568][ T6290] tipc: Enabled bearer <udp:syz1>, priority 10
[   85.093056][ T6307] netlink: 40 bytes leftover after parsing attributes in process `syz.2.173'.
[   85.101929][ T6307] block nbd0: not configured, cannot reconfigure
[   85.351479][ T6320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.181'.
[   85.676045][ T6340] netlink: 12 bytes leftover after parsing attributes in process `syz.1.188'.
[   86.081394][   T47] tipc: Node number set to 1
[   86.305923][ T6376] netlink: 28 bytes leftover after parsing attributes in process `syz.0.196'.
[   86.315713][ T6376] netlink: 28 bytes leftover after parsing attributes in process `syz.0.196'.
[   86.589070][ T6371] lo speed is unknown, defaulting to 1000
[   86.793327][    T9] cfg80211: failed to load regulatory.db
[   87.148584][ T6396] lo speed is unknown, defaulting to 1000
[   87.837703][ T6431] netlink: 20 bytes leftover after parsing attributes in process `syz.1.220'.
[   87.990751][ T6439] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   88.150951][ T6450] ieee802154 phy0 wpan0: encryption failed: -22
[   88.262822][ T6455] syzkaller1: entered promiscuous mode
[   88.265033][ T6455] syzkaller1: entered allmulticast mode
[   88.507032][ T6464] lo speed is unknown, defaulting to 1000
[   88.634409][ T6469] netlink: 'syz.2.236': attribute type 1 has an invalid length.
[   88.644295][ T6469] netlink: 112 bytes leftover after parsing attributes in process `syz.2.236'.
[   89.039584][ T6487] C: renamed from lo (while UP)
[   89.045967][ T6487] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   89.153293][ T6493] Bluetooth: MGMT ver 1.23
[   89.161372][ T6491] Bluetooth: hci0: Opcode 0x0c03 failed: -112
[   89.548860][ T6520] netlink: 'syz.0.256': attribute type 10 has an invalid length.
[   89.560552][ T6520] netlink: 40 bytes leftover after parsing attributes in process `syz.0.256'.
[   89.579616][ T6520] team0: Port device geneve0 added
[   89.720171][ T6528] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   89.733736][ T6528] batadv_slave_1: entered promiscuous mode
[   89.754654][ T6528] netlink: 72 bytes leftover after parsing attributes in process `syz.0.259'.
[   89.760370][ T6528] netlink: 4 bytes leftover after parsing attributes in process `syz.0.259'.
[   89.763956][ T6528] bridge_slave_1: left allmulticast mode
[   89.766228][ T6528] bridge_slave_1: left promiscuous mode
[   89.770104][ T6528] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.784947][ T6528] bridge_slave_0: left allmulticast mode
[   89.787234][ T6528] bridge_slave_0: left promiscuous mode
[   89.790765][ T6528] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.970684][ T6527] batadv_slave_1: left promiscuous mode
[   90.684239][ T6580] netlink: 'syz.2.276': attribute type 12 has an invalid length.
[   90.686872][ T6580] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.276'.
[   90.781181][ T6587] netlink: 16 bytes leftover after parsing attributes in process `syz.2.279'.
[   91.100023][ T6616] netlink: 'syz.1.290': attribute type 3 has an invalid length.
[   91.184939][ T6619] lo speed is unknown, defaulting to 1000
[   91.194074][ T6614] netlink: 32 bytes leftover after parsing attributes in process `syz.0.291'.
[   91.241185][ T5849] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   91.273917][ T6625] netlink: 12 bytes leftover after parsing attributes in process `syz.2.295'.
[   91.362872][ T6632] netlink: 'syz.2.298': attribute type 3 has an invalid length.
[   91.610487][ T6642] netlink: 44 bytes leftover after parsing attributes in process `syz.2.303'.
[   91.614474][ T6642] netlink: 'syz.2.303': attribute type 5 has an invalid length.
[   92.546594][ T6682] lo speed is unknown, defaulting to 1000
[   92.788101][ T6698] netlink: 'syz.1.322': attribute type 11 has an invalid length.
[   93.724827][ T6750] __nla_validate_parse: 5 callbacks suppressed
[   93.724847][ T6750] netlink: 20 bytes leftover after parsing attributes in process `syz.2.345'.
[   94.032821][ T6770] netlink: 87 bytes leftover after parsing attributes in process `syz.1.353'.
[   94.957537][ T6787] netlink: 36 bytes leftover after parsing attributes in process `syz.2.359'.
[   94.963939][ T6787] netlink: 36 bytes leftover after parsing attributes in process `syz.2.359'.
[   95.199562][ T6803] netlink: 28 bytes leftover after parsing attributes in process `syz.2.364'.
[   95.228981][ T6803] netlink: 4 bytes leftover after parsing attributes in process `syz.2.364'.
[   95.328831][ T6807] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.338973][ T6807] bond0: (slave rose0): Enslaving as an active interface with an up link
[   95.805621][ T5901] IPVS: starting estimator thread 0...
[   95.888761][ T6836] lo speed is unknown, defaulting to 1000
[   95.892100][ T6830] IPVS: using max 39 ests per chain, 93600 per kthread
[   96.577849][ T6873] tipc: Started in network mode
[   96.580674][ T6873] tipc: Node identity 869e07a0e51c, cluster identity 4711
[   96.584167][ T6873] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   96.589510][ T6873] syzkaller0: entered promiscuous mode
[   96.592183][ T6873] syzkaller0: entered allmulticast mode
[   96.606482][ T6873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.387'.
[   96.617462][ T6873] tipc: Resetting bearer <eth:syzkaller0>
[   96.624755][ T6872] tipc: Resetting bearer <eth:syzkaller0>
[   96.651161][ T6872] tipc: Disabling bearer <eth:syzkaller0>
[  137.991244][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  196.360426][ T5235] Bluetooth: hci1: command 0x0406 tx timeout
[  199.409788][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  216.860391][ T5235] Bluetooth: hci2: command 0x0406 tx timeout
[  260.861909][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  322.291313][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  383.735020][ T1364] ieee802154 phy0 wpan0: encryption failed: -22

VM DIAGNOSIS:
08:55:31  Registers:
info registers vcpu 0

CPU#0
RAX=00000000000a4007 RBX=0000000000000001 RCX=0000000000020007 RDX=0000000000000003
RSI=0000000000004000 RDI=ffff888024301cc0 RBP=0000000000000000 RSP=ffffc900000077e8
R8 =0000000000000000 R9 =ffffffff8172c195 R10=ffffc90000007a38 R11=ffffffff81ac3890
R12=0000000000000001 R13=0000000000000001 R14=ffff888024302828 R15=0000000000000003
RIP=ffffffff819d6327 RFL=00000083 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f04224b7800 ffffffff 00c00000
GS =0000 ffff8880b8621000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055e4f3420fa8 CR3=000000010d03c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000007 RBX=0000000000000003 RCX=0000000000000007 RDX=0000000000080000
RSI=0000000000004000 RDI=ffff88802089d640 RBP=0000000000000007 RSP=ffffc900001e07e8
R8 =0000000000000000 R9 =ffffffff8172c195 R10=ffffc900001e0a38 R11=ffffffff81ac3890
R12=0000000000024000 R13=0000000000000000 R14=ffff88802089e1a8 R15=ffff88802089e130
RIP=ffffffff819d625c RFL=00000003 [------C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055555aaed500 ffffffff 00c00000
GS =0000 ffff8881a3c21000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f537d498000 CR3=00000000299fe000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
