last executing test programs:

1m27.696976233s ago: executing program 0 (id=179):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
unshare(0x68040200)
r1 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000500)=0x5, 0x4)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b00)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=@newtfilter={0x4c, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {}, {0x8, 0xe}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xf1, 0x4, 0x4}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4c8d0}, 0x14)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfe, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x40000000c000000}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3300000}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x5d}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xb, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r5, 0x0, 0xd}, 0x18)
mmap(&(0x7f0000feb000/0x14000)=nil, 0x14000, 0x3000004, 0x40010, r6, 0x3f38e000)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x40, 0x5d, 0x2, 0x190b87f7}, {0x6, 0x0, 0x6, 0x1}]}, 0x10)
bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r7, &(0x7f0000000140)="24000000010006", 0x7)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r3)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x1c, r9, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000}, 0x0)
connect$bt_l2cap(r8, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmmsg$sock(r8, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0)
shutdown(r8, 0x1)

1m27.46080559s ago: executing program 0 (id=182):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'vxcan1\x00', <r0=>0x0})
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x9, 0x5}, {0x1}, {0xd, 0x2}]}]}, {0x0, [0x61, 0x61]}}, &(0x7f0000000380)=""/76, 0x40, 0x4c, 0x0, 0xc8e5, 0x10000}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={&(0x7f0000000640)=""/70, 0x46, <r2=>0x0, &(0x7f00000006c0)=""/8, 0x8}}, 0x10)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000780)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x4}, 0x50)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x13, 0x10, 0x8, 0x0, 0x0, 0x1, 0x3}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001800)=@base={0x10, 0x4, 0x4, 0x2}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000100), &(0x7f0000000140), 0x3}, 0x20)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r7, 0x0}, 0x20)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x16, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000015090100000000009500000000000000de9a00000000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000008c0)={0xffffffffffffffff, 0xe, 0x8}, 0xc)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_lsm={0x1d, 0x0, &(0x7f0000000080), &(0x7f0000000180)='GPL\x00', 0x0, 0x2f, &(0x7f0000000200)=""/47, 0x40f00, 0x24, '\x00', r0, 0x1b, r1, 0x8, &(0x7f0000000580)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x0, 0xb, 0x8, 0x7fffffff}, 0x10, r2, 0x0, 0x3, &(0x7f0000000900)=[r3, r4, r5, r6, r7, r8, 0xffffffffffffffff, r9], &(0x7f0000000940)=[{0x2, 0x5, 0xf}, {0x0, 0x2, 0x6, 0x6}, {0xfeb, 0x4, 0xf, 0xc}], 0x10, 0x3}, 0x94)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r10, <r11=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r11], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r12, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50)

1m27.458546869s ago: executing program 0 (id=184):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000140)={&(0x7f00000000c0)=""/103, 0x67})
getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000240), &(0x7f0000000200)=0x8)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES8=r0, @ANYRES8=0x0], 0x30}}, 0x40040)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x44}}, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x9804)
bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58)
r5 = accept4(r3, 0x0, 0x0, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
r7 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000480)={0x1, [<r8=>0x0]}, &(0x7f0000000380)=0x8)
getsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000080)={r8, 0x5, 0xe0, 0x4}, &(0x7f00000000c0)=0x10)
sendmsg$NL80211_CMD_ASSOCIATE(r7, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000005}, 0x44886)
r9 = socket$inet6_sctp(0xa, 0x801, 0x84)
r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
ioctl$PPPIOCSFLAGS1(r10, 0x40047459, &(0x7f00000000c0)=0x41)
ioctl$SIOCGETSGCNT_IN6(0xffffffffffffffff, 0x89e1, 0x0)
sendmmsg$inet6(r9, &(0x7f0000000b80), 0x0, 0x0)
setsockopt(r9, 0x84, 0x82, &(0x7f00000002c0)="1af3050000f20800", 0x8)
recvmmsg$unix(r5, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="526aad2f3e000701fefffffffcffffff017c000008fa0108000c00018006000600800a00001000028109000c000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000c000}, 0x4851)
socket$packet(0x11, 0x2, 0x300)

1m27.262058078s ago: executing program 0 (id=188):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = accept$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @null}, [@null, @bcast, @null, @netrom, @default, @null, @default, @netrom]}, &(0x7f0000000080)=0x48)
bind$ax25(r1, &(0x7f00000000c0)={{0x3, @default, 0x7}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e21, 0xfb, @mcast2, 0x7ff}, 0x1c) (async)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000008, 0x20010, r0, 0x4a990000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x81, 0x3b}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80000000}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ff}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1450}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x15}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x101}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x8080}, 0x4020) (async)
r3 = socket$netlink(0x10, 0x3, 0x19) (async)
setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f00000002c0)=@bpq0, 0x10) (async)
ioctl$sock_netdev_private(r1, 0x89fd, &(0x7f0000000300)="f9ba583722ee29ef6b65ba26c4ebc69001f62043723209469bed167dd9a64fa19b7f0323c56a67eaeecb3aff84a1daa23f8fa56d22b744fb44c997b8fdc4a363efa471f420e6d1a2c9de9f0a378224a72cd99e86ba586add26839b8edc8d357ca41303f505f0464ae5ab3f61508b74791f16ba3432008c3d63a68bd3587366484519ef16db6803b35a2a22df41a4fe4eac7274a3b2b99264dac31979a230bff7949d9333ba47cca82e7a032de7191e1befbf0c3ea1bf1081158ba0aa0f91a9cdb0e8980dd108fc8a4c6138b5143d567039190fcee35fbc0bfe9d574dcdda89290b7212a8903ad779823dc82395a743921ba46d01ecdf7906e3a5")
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, &(0x7f0000000400)={'filter\x00', 0x4}, 0x68) (async)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000004c0)) (async)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), r3)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r6, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x9}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x24000861}, 0x80) (async)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000640)={<r8=>0x0, 0x200, 0xff, 0x8}, &(0x7f0000000680)=0x10)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r7, 0x84, 0x1b, &(0x7f00000006c0)={r8}, &(0x7f0000000700)=0x8) (async)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r10 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r10, 0x84, 0x6b, &(0x7f0000000740)=[@in6={0xa, 0x4e23, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3ff}, @in6={0xa, 0x4e23, 0x7fff, @private1, 0x2}, @in6={0xa, 0x4e20, 0x1ff, @private2, 0x5}], 0x54)
ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000017c0)={'vcan0\x00', <r11=>0x0})
sendto$packet(r5, &(0x7f00000007c0)="947673009ebfb701d65e5f99ae96fe28a523f8a70359af647bfdedb0948a113220a5514cdbba1835a4f404a88ffd08ac0d134265af840d30db1ede8d21888ffe5b7e4e70ba8436f7c55dadf917ecb00a468f738020acecc72cd07e9f02848edd68e2db6caed540c5b02c386a04cd817ddb0709852fa8aff03deb46803cc7baa017ab996db8181d2a0313e6d66e17187d7ce98a9abd4ae8cb78c2b72f9f8396bfbcdb4bac69650c7745b2affe70067ee903de0df3945f83a57a647ed9175b7c2220cc4425821c16ccb44084b83902cf5487ad4e64aaf6e5b0b3787cf7cffc761c6a94bae38991b0dfe598df43adb1d164ef792a599a69cdbf73e65a3d3072599b3ff6db6fcaa4d5a72be3e0caffb15ddae1f855c301f5f28a26bec27dcf4aed760b99c4899acb6af6d6bf123ace209efb84ac09f0425e5a0dc93e0898332a622eac13c7b030c77220b3cd4a66983fc4ce506cf41ebc56a06e927345b3f648718f90bb89879497116ddb36156714b5a110684957ac96183f3446b6e093332136279d8a72924e95ed15d105696b2096b145cda1957bdad13e70a179072b5aa0bf2137a49f585f01db2a6e8a8fbf1a69e882943843d60783d5d65f24420360d72852c08880783fdf119b93873bfe4f9d8312e02581a9e782fd4b70e7b14d25450a152c68d83372b2552ec5b25708f9f1251eaece3077c186d335a7caeacad3d6a871d023fd08c7b443872fbb55e8096afa180f5d7c6d3934206016a6c6726039293b45e6e63faa14511d39430596e879a2d9a0b44bdcb73be8e03f722931f08ea21638fdce6cda5c96472499b191b398ed722d5ad7d8dfd3135b062b0e31e99e185944c36c92de745877ccf20df34af57016b389628ce143fc8d6ac9e6a9f126e8c1b5ba963367ae4ee3294a5f70903bce443ae0f021165bc6c833b0928af3b0950cc41b114fff11c903ce4f731e170aaa05b1aa24c0044cc808faed299243a846506570a5f2ab47488602988e47d1e1540459ca0daf21efd04e87d90877c5093e9abd7a923ac205ad005e57be20643dc286feb602957d5a7ecdf17de2f78b90b0e2faf97b99dccefe18e856c85bd052bfab4fdd1692684a5abeebae956c43868d1be55483ff895001d5a19a5f0075308db1e9934a903590c40496b53ad5935f950c6e5a98d46e671bcd791eb6d6e3c1f39190635768d6a71c092e7fd7e1040d342d6808c9a27cb47a3e3fe6f50de34779fa5199876e87d1ff7e368f6fdd3e386b7cb07712fc574b39d24c7d03b4c990216d6ebeaad991c1bc172232e3929af3697b58029120e8897b79967d162bcab87ee579b83acea5a07f5c7613036967889a3bc03a32b95816b9a43e0f543e48e4b8af9abc1c3b0aea7c8e3de32bc1680809f28ecb5c5b450e04a254f045290e764f0b3c52f56d0b00754f7a668218c0245ff92a9e0f62965984ec58813cfc607412451a3dd0821db2a55d3c2b5a2832f8a48033d056557179e6ed4526ace40ac6986e4166fd6b81869b71bd52e884458046ba19c1c6bd428abe8ab7edbe34c7b87e43db9fd25a5b419dc39764e889ad8b33c3b48d6b1e1d1a2f4bc58367e14cff25438ae57503d69d1591e5055956470c83bfe037d93283d8ee38c13b255856e0120b31fb54c9383f2c794576aff3436ba75a6b3c2b85352708e1b1d3c3962b886597d52fda70f3fbe582a5a5ae00cae311c3a9e64a1842fe174b4e84074d5ed89f4dc423c713fc54a4246d25b8466430a66e6930ef83ea59cda6d99c53bcfd374c43d37eed73b60cd73852e67b38d9a38313274ea2f57ed503439eed8499236b2910a44f5f14af5f617fd981137fa5a7c477b5bf2f7bca6538a7f5cb722c0a87fcfe4a4080774541c86dc74e9e71ee486156e8d3a1c0702f86fac97b724cc1080644701c564418c058b0079ae44ac4779b783d5638ae28595a851960bfb9dc6d3682a1ca1fd36877d81af95bf0ab68d91a0b980de4ff53d873b62c4406cf87d5bd6c522bc80ec248dd84eefc11b8b8eced8066cacfc231530da698fb4c92b536fd37bdc2a5022c5231376089b5c8a45fb5cea09fd157256e3a24689bb3924843de625d3155d1e9427c4ddbbd614586ca544fc4d71f1e5f3527f0a171da82d7859e152c14098145a670efd8bc2eeeaf66b2a446649fd5fc31866eb5691146f05889fccb611c4895fd317a57a156eb21bda6ea4bd608b72a6803a08f2ec05b645e565f33d2fb3a6647f3758b218ddb34137a8bcaa69bc58649e31c5e0c78ade83d549ea9dd40acc0e57e01604b933271210231e3807fed9d9dadb031439745bed7bdb5b60ed95661ceb797b17488f1b281ed6a52f720914d4f651e41a640fb7200475b7296796685ee4a300914c84b4fcd8fd72d19e80a9981d29472ac31d8713630c91f38242b04cf16a50a8185fa1ee8fab1c428e0c21c5b9ef7bbc86a01c7c9a340b316a2a8f43aff1f29c2f2fb9ecb03be9a3663d8aad87a3e890116b82698d5864a18a1575e8baf6c6750641dee7edf095158993fa84e8822c39b535a7615fd88d420d493d1e1b32b13646adc2a011c32e315795f46ac4980fe5eefb5c3c10b6b0d12ea040cce8d70c54775248c0accc0902356e69334edcd11dedd8a1281574d09b71a52d15d813602d94552506c517bec4bd3be82c4291deee4e4b79d9a31a78042942e4cfe1c873245c33cec834f7375e689a3bb9975ad6323a19379af7f37aad26f65d315bc2d6ce0172f44d357302f1356e9960ce813ab7c618a54561200f3845d00cbf132da2f57f6f6500caf6e1f58e74d845f553005ca3b6267556b9b7ce4fc493af5769853ab74d2dbe2d53c4e9815f68067f12c6430927ad05c3755ea62452620875c693b9bb9cea513193c511adbd3ab6c314768b3e31a54ebb59dccf75ac692da85e8ab7964f7ba2ce39e27a678fa010c051cc7c7f6b22008647a6338e763a1c3fa243e60a476801810cf422d31493a34bf2fe19fca4daa2a1ff9d499a49b8c0424c58940cd8df1c5269db1a98d168457cb379f142035aada681cdd099368bcb43e81bf45d0067444857d7e89fabf974f9fabb6f2a0279b43e283457121efeaaf0f01cef0ffd6a6f33a49de4698f5afb7321a39e48d006d9872000d70c017cf150d495e3fafd2ac5787f6807271fa9d78a2631ec69cb5cd0dc2667cf9ae481b3bf606a58ebcede355bfbe939d764a98a013b83e93a6e6d3233e47d2c7ff9ae4ca98fa402d7ce1486033646ed36ddea8f31ccf166c732b05d6dc39757545e0a2c2113cc8eeae01034f9c7ac6acb9772230d240b1157b2bc15d6c97b4ca4e6d34012c2fdfbac2957d23c6ffb1c710913b1c0284255419ca0f569f5be8e48490d4eaa0267f46bdb8cb8a3471516ed94de91426e761dd9a43a2ef4dfabe863c5ff83883df9b09f04a37c70c4b315668da1405343ce0affb94c77faf9290688e078d24c064f32c172d32670372a69b57b424d77c21dfac7a1258fe404400f8986a5230ed35f47f36de6cbe145e4ce02e42dbf832fb2e43f64d6dddfe083915a1bef9ba00d4a8e10389381c80374c069c6ae291e8592a4722359d628d69910202496055cd809856c3eaba2a536d5a28b095a7cdde4477a1b8d0385a6027e8cbd438cfdacd4b260d62c438b445fc915cc3ca3ff8f21706035016576eea195fc2f6f46c99c825ec25e8560e9699ba2fc9c0cfd4262d905f713492f1b478b161f6ee311898863d1fdf22bfde2892f075c4b730fc063109da636012a381270068ac346b286efdd261c5d45470858d75a036803e6bfe544ba692bb10529c41708418ba0a9d0f29729d84257badd84ff2bfc1b1c83b4d54a204bd79c1585260d80c4b36e4b9489d0662ad396bd77e9bf2ee8d0f1cc21e688c4915b5e1b8d5daf167df49eaf7197af141fe496b91f25b7c9133d4380e9866b6c749099ecc1ba0c5a96df68719f192b749291dc828d8ab6baf29f8b10092700765265630832c2b61dd1a3f7faab4163c8326736427bf51e19a5ac672b1723eeb12c3c230d1fa1ac2f540a5df0636fe98a6c3f1336b162c7eb6d50c8e947f5107b9920bbb7a4cde6c822f64a59a6d216ebedb537cf32519e684ced4962535679ca9930b2795bb610866bba45af20e42faf78965646140fcedad2223569cfaafafe8dcf196b2dc1d413fefa3b540982e340568273833199bf23895aaf6269f934fc6b64f34d14d3338d7445286b3dc74d4e9c275444c8cc3b246e6981ff9e02ffee3fdf1dc5a24795a782bed075446fd03963a5feda8c5210c48d0ba5df02b565aa03c9311eb4184ebe41f3b625dcffd59e2df773b05d08e466100221a5f96127263c43b75c7691dac6448944ae2eec765869c04c3ef978a77420c5d1a78ddb0447f7a73e14226c78af63b19c02cb146e7cd154cfa4c523267c892aa8770ef8f28dfc8f88f95f87fbd81b91e6ce361ffea5d7c7dc5e6cdba389432c50b7278b1980f76ac8bd7544c02b25807a471f2808ea90c5743dcdbb8f3642986e352e52549fe479fbcd24c595bb0a3168fef651f9bd4d032ff2c4c974c0a00bf78db6e298da539fb19edaccafde826c6c28eadddb32fe9762d5c643da9fc8f754e8ce5e54e374ad419c6738d2c5e7b52c08ef6b290c4b8526162e79a1991f9695806a991a396514bb289e936a52503da576d1a9ef3dec6b741e93a3444ad96e876afb17101165ba1cf8e66a99b9197e4dc62fc9c751f9d3012f4635b0b3a736457694a7b117a3b7dbc98c989f2578bf75434f2cff143c9e604d39da359bdca73275892680e31d6b31916ed17dbd5bf19c47903a6d952fd91216741642fe7796b1fff54696410b4ad00f2112e9853d4b26fc089b535be83dad44b2835e65c79cab916afde92516b3c293df79dae340a088c19517dcc0df07b0bd2ffca1030bc32ab0f416cd82ee08cad4c0bb9197c6fa559e6fcdce769f9b5ee3e06934fcbbdbdecf7f64987463b110ce9be6ca465a1e9675ccfdfddd79cae3659c2613a4e81d2eeba3ea69b6db54e043e7f29d90935aeaaf134dd960bbe8a7fcb24dc6e3acff901f7006a65aa2dfa888e1d720b89001c9c5323855ac48ca0ed5c5218f0812ab7ddbc92fa7f72107a8a376dbdd436277bb89d664e114cda282681bad6d2c211e9e7808a4c6f2dd7dad14658898879f92cd1f656ec4aeda812b9e9a43379dbf7d9795a8c750a9e8d73588b84edc9777bc44e0ec6b9ef0014779c987c8871a4b1ef2a4d70ce34af31641cfa13b22c217539f76a5d96aba89e66897b705e6640df91797ca97a5d95067f100352bd4bc94f29160d0e2bca55aba6727a06434e4c417a18d29795ec5e16858c428a0845a8d3612ede7884f3939e7eeee7a1b1d1ceeb843c4c8219de2477588083b31d11de6511c154dada7a6b9fb57b51d6cc33dac8ae8a181ac283d007d7772b9621c495019187aed4b4994e205b57ecccc66f9afe4ea8813872bca499a56660ea7e766bd4ea46d46f23be37c472dc72d1874fcda08082622e09e563978cb210b85ffbd59c6956011e7d2b36e419c40b7b9c371e626fdc82685802a68e78a11f933fc510c0d33c75f60195a8cea067bce790273ddcd22d9889d8332b7ed11066216fe0fc9c06231d1c6211fd963638ba9d6c70f7959d928ad36cc7825cb77d76934b33255aa30a7c2383cc5a2627e6526882a4c5356f286a76733b7e02ab9883a99e9722feb13ba187cc536f38ead0b4787165bf728c78ddbd0bd65fcfc7bce5844fe6dbd7779e8eca4e26ce9f822b804ec34e", 0x1000, 0x2000c800, &(0x7f0000001800)={0x11, 0x19, r11, 0x1, 0x7, 0x6, @broadcast}, 0x14)
ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x40309439, &(0x7f0000001840)={0x0, 0x0, 0xa}) (async)
r12 = syz_genetlink_get_family_id$ethtool(&(0x7f00000018c0), r3)
sendmsg$ETHTOOL_MSG_FEATURES_GET(r3, &(0x7f00000019c0)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x9400}, 0xc, &(0x7f0000001980)={&(0x7f0000001900)={0x74, r12, 0x2c38d86726f7bd79, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x4000801)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r13 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r13, &(0x7f0000001a00)={0x1d, r11, 0x0, {0x1, 0x1, 0x3}, 0xfd}, 0x18)

1m27.190990597s ago: executing program 0 (id=189):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000084000000060a010400000000000000000100000008000b40000000005c000480340001800b0001006578746864720000241c0280080001400000000b080003400000000008000440000000300500020007000000240001800a000100726564697200000014000280080001410000001208000340000000120900010073797a30"], 0xf8}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=@ipv6_newroute={0x34, 0x18, 0x111, 0x1, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_PRIORITY={0x8, 0x6, 0x4}, @RTA_EXPIRES={0x8, 0x17, 0xffffffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x4805}, 0x4)
sendmsg$nl_netfilter(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x24, 0x13, 0x6, 0x301, 0x70bd2b, 0x25dfdbfc, {0x2, 0x0, 0x1}, [@typed={0x8, 0x87, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x149, 0x0, 0x0, @str='%%/\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9}, 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000030000000003"], 0x0, 0x5a}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4eaa000000000000711075000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94)

1m27.138995862s ago: executing program 0 (id=192):
socket(0x2a, 0x2, 0x0) (async)
r0 = socket(0x2a, 0x2, 0x0)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)='cpuset.mem_hardwall\x00', 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x68}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r4=>0x0})
bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async)
setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmmsg$inet(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000740)="f909bcce97ecd6286c5ce402c468dc6d4a3922e68f6543e418f3957ffc7738621a6c40f69a857f252458f77e71781032de8a5366705b7bf7ebb845fb1066d3e988385a5c", 0x44}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x8004)
sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4048081) (async)
sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4048081)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r4, {0xffe0, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x854)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz1\x00', 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz1\x00', 0x1ff)
r5 = socket(0x2, 0x3, 0xff)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000f000000000000000000000095000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='contention_begin\x00', r6, 0x0, 0x5}, 0x18)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r7, 0x8937, &(0x7f0000000000)={'dummy0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r5, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg$inet(r5, &(0x7f0000004640)=[{{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f00000008c0)="7ca96e1548a71479959840a77cbef04000000037", 0x14}], 0x1}}], 0x1, 0x20008814)
socket$kcm(0x2, 0x3, 0x2) (async)
socket$kcm(0x2, 0x3, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, 0x0, 0x0, 0x4}, 0x94) (async)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0x4, 0x0, &(0x7f0000000000)="e0b90977", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x70bd2d, 0x25dfdbfe}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x70bd2d, 0x25dfdbfe}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x9}}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK={0x6}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}]}}]}, 0x44}}, 0x24000041) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK={0x6}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}]}}]}, 0x44}}, 0x24000041)

1m10.541127148s ago: executing program 32 (id=192):
socket(0x2a, 0x2, 0x0) (async)
r0 = socket(0x2a, 0x2, 0x0)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)='cpuset.mem_hardwall\x00', 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x68}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r4=>0x0})
bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async)
setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmmsg$inet(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000740)="f909bcce97ecd6286c5ce402c468dc6d4a3922e68f6543e418f3957ffc7738621a6c40f69a857f252458f77e71781032de8a5366705b7bf7ebb845fb1066d3e988385a5c", 0x44}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x8004)
sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4048081) (async)
sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4048081)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r4, {0xffe0, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x854)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz1\x00', 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz1\x00', 0x1ff)
r5 = socket(0x2, 0x3, 0xff)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000f000000000000000000000095000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='contention_begin\x00', r6, 0x0, 0x5}, 0x18)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r7, 0x8937, &(0x7f0000000000)={'dummy0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r5, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg$inet(r5, &(0x7f0000004640)=[{{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f00000008c0)="7ca96e1548a71479959840a77cbef04000000037", 0x14}], 0x1}}], 0x1, 0x20008814)
socket$kcm(0x2, 0x3, 0x2) (async)
socket$kcm(0x2, 0x3, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, 0x0, 0x0, 0x4}, 0x94) (async)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0x4, 0x0, &(0x7f0000000000)="e0b90977", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x70bd2d, 0x25dfdbfe}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x70bd2d, 0x25dfdbfe}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x9}}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK={0x6}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}]}}]}, 0x44}}, 0x24000041) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK={0x6}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}]}}]}, 0x44}}, 0x24000041)

42.471123792s ago: executing program 2 (id=707):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000380)={0x1f, 0xffff, 0x4}, 0x6)
write(r0, &(0x7f0000000000)='\\\x00\x00\x00', 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x400)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000180)='syzkaller\x00', 0x1}, 0x94)
sendmsg$nl_route_sched(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0xb, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x10}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x70}}, 0x0)

42.40987139s ago: executing program 2 (id=710):
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x50)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
accept$alg(r0, 0x0, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x50) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async)
write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) (async)
accept$alg(r0, 0x0, 0x0) (async)

42.406546132s ago: executing program 2 (id=711):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x22, 0xa, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000700)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0xc}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0)

42.341062408s ago: executing program 2 (id=712):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300016e994fde440113e90005"], 0x14}], 0x1}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) (async)
sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x6c, 0x8, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x11}, 0x20000080) (async)
r2 = socket$igmp(0x2, 0x3, 0x2)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r3, r4, 0x2}, 0x10)
socket$inet6(0xa, 0x400000000001, 0x100) (async)
setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) (async)
setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, 0x0, 0x0)
setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f00000003c0)=0xd, 0x4) (async)
r5 = socket$inet(0x2, 0x80001, 0x84)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x0, 0x7, 0x3, 0x2, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x64, 0x4, 0x80, 0x29, 0x0, @rand_addr=0x64010101, @rand_addr=0x80000}}}}) (async)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)

42.289585042s ago: executing program 2 (id=715):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a09040000000000000000020000003c000480380001800e000100696d6d6564696174650000002400028018000280feff0180080003400000000308000180fffffffc08000140000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000100000a"], 0x90}}, 0x0)

42.110336181s ago: executing program 2 (id=719):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540000000206030000000000000000000000000010000300686173683a69702c6d6163000900020073797a3200000000050004000067b7a4b79ef81c7200000005000100060000000c0007800800080000000000"], 0x54}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f30000000000800014000000001"], 0xd4}}, 0x0)

5.957241724s ago: executing program 3 (id=1202):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000080)=0x3, 0x4)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x34, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x8, 0x142, 0x0, 0x1, [@typed={0x4, 0x8}]}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0xf, 0x6, 0x0, 0x0, @str='\x80,8c\x8d\x9b\xac\xa4\x83(\n'}]}, @nested={0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000)

5.956682716s ago: executing program 3 (id=1203):
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x48)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0xc000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$cgroup_type(r2, 0x0, 0x2, 0x0)
r3 = openat$cgroup_type(r2, &(0x7f0000000300), 0x2, 0x0)
write$cgroup_type(r3, &(0x7f0000000280), 0x9)
r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000380)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_GET_INTERFACE(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r6, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20048805}, 0x4008014)
write$cgroup_pid(r4, &(0x7f0000000c40), 0x12)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
unshare(0x22020400)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000240)={'syztnl2\x00', 0x0})
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r9 = openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r9, &(0x7f0000000200)=0x1, 0x12)
r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r5)
sendmsg$DEVLINK_CMD_RELOAD(r9, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000540)={0x8c, r10, 0x8, 0x70bd28, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x20008010)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r12 = openat$cgroup_procs(r11, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r12, &(0x7f0000000380), 0x12)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x40000000}}, [], {{}, {}, {0x85, 0x0, 0x0, 0x95}}}, &(0x7f0000000200)='syzkaller\x00', 0x9, 0xffc, &(0x7f0000000880)=""/4092, 0x40f00}, 0x94)

5.061015055s ago: executing program 3 (id=1218):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@dellink={0x28, 0x11, 0x1, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b, 0x1}]}, 0x28}}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r4=>0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000007380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x1c, r3, 0xe096044a3fc9e6f1, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x2c, r0, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x2c}}, 0x0)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b70300001b0000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b9af8ff00000000b5090500000000007baaf0ff00000000bda804000000000007080000f8ffffffbfa4000000000000070000000800ffffb70200000800000018220000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000046020100760000006d00ffff00000000bf91000000000000b6080000000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

4.990531392s ago: executing program 3 (id=1220):
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x3d, &(0x7f0000000000)='cgroup\x00\x8d\f\xf3\xcd\xc6X$\x01n-Hg\x144-.\xe2\x053\xe2\xf4\xbf[\xe9\xdddU\x91\x9d,\t\x8d\xc3@\x86,\x7f\xe2Z\xe8L\x80\xdbe~c\xbc\x9b\xcf\x9b\x1cH\x95\xf3'}, 0x30)
close(0xffffffffffffffff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r1, r2, 0x2, 0x2}, 0x10)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)={@cgroup=r3, 0xffffffffffffffff, 0x2, 0x0, 0x4000}, 0x20)
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@getstat={0xe0, 0x15, 0x0, 0x70bd29, 0x0, {{'drbg_pr_hmac_sha384\x00'}, '\x00', '\x00', 0x0, 0x2400}}, 0xe0}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00fa40", @ANYRES16=0x0, @ANYBLOB="000000000000000000004c0000000c00a6000000000000000000080001"], 0x3c}}, 0x0)
sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000280)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300090c0000000000040000000000030005000000000002000000e00000020000000000000000030006000000000002000000ac141400000000000000000002000100000000000000000000000000020013"], 0x60}, 0x1, 0x7}, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x8, &(0x7f0000000200), 0x4)
r7 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r7, 0x8)
r8 = accept4(r7, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x84, &(0x7f0000000540)={0x0, @in={{0x2, 0x4e1f, @empty}}, 0xfffd}, 0x90)
sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc0000001900010000000000000000002001000000ffffffffffffffeb000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c"], 0xfc}}, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000e40)={{0x14}, [@NFT_MSG_DELSETELEM={0x204, 0xe, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1e0, 0x3, 0x0, 0x1, [{0x1c0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x68, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x8, 0x1, 'gG\n@'}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_DATA={0x140, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x3f, 0x1, "2c8f94a9ecd73942700d86ec4a7490b9df4068baf81eb72ebc7637321058443ecdc688528eb27ac29e6196417349747216e9ffebd4df1c3614d088"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @byteorder={{0xe}, @void}}]}, {0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}]}]}, {0x4}]}]}], {0x14}}, 0x22c}}, 0x0)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=@migrate={0xbc, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0xff}}, [@migrate={0x50, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private2, @in=@rand_addr=0x64010102, @in6=@private1, 0x3c, 0x0, 0x0, 0x0, 0x8, 0x2}]}, @encap={0x1c, 0x4, {0xffffffffffffffff, 0x4e24, 0x1, @in=@private=0xa010101}}]}, 0xbc}}, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
socket$key(0xf, 0x3, 0x2)
syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x14, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xceeacd057d2705da}}}}}}}, 0x0)

4.928906752s ago: executing program 3 (id=1221):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x10000}]}, 0x3c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x13, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180200002020702500000000002020207b0af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000004b00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x403, 0x6101, 0x0, {0x0, 0x0, 0x0, 0x0, 0x56760003ded1ddd3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xc0000200}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x10)

4.858049607s ago: executing program 3 (id=1224):
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)=[0x0], ""/16, <r0=>0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x0, 0x52, &(0x7f0000000200)=[{}], 0x8, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x6e, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000000711061000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0}, 0x94)
unshare(0x18010300)
unshare(0x68040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000ddffffffffffffff000002"], 0x48)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = accept$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000080))
r4 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_MMAP_OFFSETS(r4, 0x11b, 0x1, 0xfffffffffffffffd, &(0x7f0000000040)=0x60)
setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f00000000c0)=@rose={'rose', 0x0}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="000000fa30b37a2b6147429175b5f4740000000053b61875be5b55023500000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r7, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r7, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r7, &(0x7f0000000600)='V63', 0x0}, 0x20)
sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={0x6c, r6, 0xd01, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x9004, @mcast1}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x851}, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002a00)=ANY=[@ANYBLOB="4c0000003c0007017c00001000fc800c06000600800a000008000280c4139b7814000700"/61], 0x4c}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)

520.185875ms ago: executing program 1 (id=1241):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x30, 0x1e, 0x1, 0x70bd2a, 0x0, {0x7}, [@NDA_LLADDR={0xa}, @NDA_MASTER={0x8, 0x9, 0xfa}]}, 0x30}}, 0x4100)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000020000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r1, @ANYBLOB="08001f0005"], 0x70}}, 0x0)

420.575502ms ago: executing program 1 (id=1242):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, [@RTA_IP_PROTO={0x5, 0x1b, 0x1}, @RTA_SPORT={0x6}]}, 0x2c}}, 0x24008800)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf37, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f00000002c0)=[{0x5, 0x3, 0xa, 0xa}], 0x10, 0x7ff}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f00000002c0)=[{0x5, 0x3, 0xa, 0xa}], 0x10, 0x7ff}, 0x94)
socket$netlink(0x10, 0x3, 0x0) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r3, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r3, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0)
sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x60000000, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, 0x5}, 0x50)
r4 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) (async)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4)
setsockopt$inet6_int(r4, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x0)
sendmmsg$inet6(r4, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0)
recvmmsg(r4, &(0x7f0000000800), 0x62, 0x12141, 0x0)
epoll_create1(0x0) (async)
r5 = epoll_create1(0x0)
ioctl$FS_IOC_SETFLAGS(r5, 0x40088a01, &(0x7f0000000000)=0x100)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) (async)
write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0)
r7 = socket(0x10, 0x803, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f0000000240)={0xe0000002})
syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), r7)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r2, @ANYRES32, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4800)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800dbdf250900020073797a3000000033007369743000000200"/45], 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x40000c1) (async)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800dbdf250900020073797a3000000033007369743000000200"/45], 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x40000c1)

419.934197ms ago: executing program 1 (id=1243):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = accept(r0, 0x0, &(0x7f0000000200))
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl(r3, 0x8b2c, &(0x7f0000000040))
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r2, 0x20, 0x70bd27, 0x5, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4)
r4 = socket$inet6_icmp(0xa, 0x2, 0x3a)
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00', 0xffffff00}, 0x1c)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
close(0x3)
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)}], 0x1, &(0x7f0000000640)=[{0x10, 0x84, 0x8}, {0x18, 0x84, 0x0, 'b'}], 0x28}, 0x41)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[], 0x1ec}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="141a00001000010000000002000000000000000a4c000000060a0b04000000000000000002000000200004801c0001800b00010072656a65637400000c00028008000140000000010900010073797a30000000000900020073797a3200000000140000001160697117000000000000000000000a11a5867574815f4decfedd9828b8055c3a99bffa60047528500397f26c96b4dd226553a47fe4c67b63208b59483bf25084695c92c04b14a8198e48d4e4e345b7d35ffcaf780bce49d7ad2e52c6cbcd5669784ed24713bd5237e2f9335068df87eefdfeadd513d1972a42f8bac6fc1eb819685b27025fcff7bf4badd40fb43141ba93648d6c86c267"], 0x74}}, 0x0)
unshare(0x6a040000)
mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$IPT_SO_GET_ENTRIES(r7, 0x0, 0x41, &(0x7f0000000700)={'nat\x00', 0x4, "dea50c52"}, &(0x7f0000001740)=0x2c)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan0\x00'})
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r9)
ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000680)={'wpan0\x00', <r11=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEV(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r11, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040)

60.966654ms ago: executing program 1 (id=1244):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)={0x67, 0xc, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x13}}, @calipso={0x7, 0x38, {0x2, 0xc, 0x7, 0x0, [0x86, 0x100000000, 0x7, 0x5, 0x2df4, 0x9]}}, @jumbo={0xc2, 0x4, 0x5}, @calipso={0x7, 0x8, {0x0, 0x0, 0x2}}, @ra={0x5, 0x2, 0xec67}]}, 0x68)
r1 = socket(0x23, 0x5, 0x400)
bind$rds(r1, &(0x7f0000000080)={0x2, 0x4e22, @multicast2}, 0x10)
listen(r1, 0x9)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x2}, 0x50)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r2, &(0x7f0000000140)="9328f2a2ecbd72cde1a3da109aa90d77b63662a08095bf6e51624a0419552f73fcce3bc32debcbbee25a73a737308a9fcde60ccb1e92e0e9efd6dd89e763fbb4d5e9d6", &(0x7f00000001c0)=@udp=r3}, 0x20)
getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000240)={<r4=>0x0, @loopback, @multicast2}, &(0x7f0000000280)=0xc)
setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f00000002c0)={0x1, 0x0, 0x1, r4, 0x4}, 0xc)
ppoll(&(0x7f0000000300)=[{r0, 0xc20a}], 0x1, &(0x7f0000000340)={0x77359400}, &(0x7f0000000380)={[0x2]}, 0x8)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000003c0)={0x11, 0x2f, '\x00', [@pad1, @generic={0xc7, 0xee, "33c5af4b36af6067cb25d3c97ff58407119bcd91d461da9e89f32584630f6a8191cd889b9a9bd593094214d660163c533570c2e5aeec8603d6f8c19ce4650a3f884bcfaa83c87fcae5b6047a5e30540a31775555c8507f4bb8000313374565a37f2f69d2039d1ad0163ebeeee08f239adc5c0823c89b0cee9d70ecc205c0bd273f540f19f15d3bb09db454d2fef47f9c66aa20d6f6aaf03c54210f599f21efaca894dda1ee17e3ee76632d19cd137876a54d340563df1665d0fa50854250cc06a5e65d896331c4fd94ae9333640259c14bfb64cb30bbfa9361ea0624003ed89512014b13d4ec68c8a2c49ece2217"}, @padn={0x1, 0x2, [0x0, 0x0]}, @ra={0x5, 0x2, 0x3}, @calipso={0x7, 0x10, {0x1, 0x2, 0x40, 0x0, [0x10]}}, @generic={0x0, 0x68, "ecaabbde02edf1352c106e5ef072167b66613f1db479894261215f70a9a7b4db9bf5c42fcc6ceaedcc48f0c301d27ad27e3f8e294d81a86e6a72749c2af14f18f01232b34b102b9a1ee73d31c0edbc04623f6d68e82886051e4217043a81ebe60ec2902ddb9fca3c"}, @ra={0x5, 0x2, 0x8}, @pad1]}, 0x188)
setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000580)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10)
r5 = socket$kcm(0x29, 0x5, 0x0)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x8, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9c, 0x0, 0x0, 0x0, 0xb64f}, [@btf_id={0x18, 0xf, 0x3, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000600)='syzkaller\x00', 0x100, 0x6f, &(0x7f0000000640)=""/111, 0x40f00, 0x2b, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000700)={0x4, 0xc, 0x40, 0x9}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000740)=[r2, r2], &(0x7f0000000780)=[{0x5, 0x1, 0x0, 0x1}, {0x4, 0x2, 0xc, 0xa}, {0x5, 0x2, 0x7, 0xb}], 0x10, 0x6}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r6, 0x0, 0x62, 0x7e, &(0x7f0000000880)="35f9d781b6fb2c392a10906bb17e99ecaf64bf1141f5019bd034d7faf8ca2f9be238762de2dd6a9bad03a556da4f108367d552db63d7c30746c7f234fd7cbd41598acf5754602f54130f8d4e2412cb884825abd93b3d299b03ee3172729bce239241", &(0x7f0000000900)=""/126, 0x7f, 0x0, 0x66, 0x1000, &(0x7f0000000980)="ca056c7f6da6253845edec92d32579b2ec74891a2185fe43a1c8321f5957144fc9de643bd5854b4734b731919b5ad36b0d4a76e0efae137f14b0c30f2f8247b3dd92d7b24bf4578d45097e75886fa6100588725cb659d721af17e2ce857b1eaf2bc99e554049", &(0x7f0000000a00)="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", 0x3}, 0x50)
setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000001a80), 0x4)
r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001b00)=@generic={&(0x7f0000001ac0)='./file0\x00', 0x0, 0x4}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001bc0)={{0xffffffffffffffff, <r8=>0xffffffffffffffff}, &(0x7f0000001b40), &(0x7f0000001b80)=r6}, 0x20)
r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002dc0)=0xffffffffffffffff, 0x4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002f00)=@bpf_tracing={0x1a, 0x2c, &(0x7f0000001c00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xb0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @ldst={0x1, 0x3, 0x4, 0x6, 0x8, 0x50, 0xfffffffffffffffc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7000000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x101}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001d80)='syzkaller\x00', 0x1ff, 0x1000, &(0x7f0000001dc0)=""/4096, 0x41000, 0x0, '\x00', r4, 0x1c, r9, 0x8, &(0x7f0000002e00)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000002e40)={0x3, 0x6, 0xb3b, 0xe}, 0x10, 0x2b8b7, r6, 0x2, &(0x7f0000002e80)=[r2, r2, 0x1], &(0x7f0000002ec0)=[{0x1, 0x2, 0x10, 0x1}, {0x4, 0x2, 0xf, 0x5}], 0x10, 0x6}, 0x94)
r10 = gettid()
pipe(&(0x7f0000002fc0)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003040)={r10, r12, 0x0, 0x1, &(0x7f0000003000)='\x00'}, 0x30)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r12, 0x6, 0x23, &(0x7f0000004180)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000003080)=""/249, 0xf9, 0x1, &(0x7f0000003180)=""/4096, 0x1000}, &(0x7f00000041c0)=0x40)
r13 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r12, 0x6, 0x21, &(0x7f0000004200)="bfc52a0b71c5193b38990227199b8290", 0x10)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(r14, &(0x7f0000004480)={&(0x7f0000004240)=@proc={0x10, 0x0, 0x25dfdbfe, 0x800}, 0xc, &(0x7f0000004400)=[{&(0x7f0000004280)={0x15c, 0x15, 0x20, 0x70bd27, 0x25dfdbfd, "", [@generic="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", @generic="8a1dedecb5b160d01219ae5d64f610a98b1176378dd777f250b7005655867f1529da419e73048eced07ebe28688865a6038df6bb0e20c3bcd479dd54c500bccacb26d2064583969db4dd9cbe8e"]}, 0x15c}], 0x1, &(0x7f0000004440)=[@rights={{0x24, 0x1, 0x1, [r13, r2, r5, r11, r13]}}], 0x28, 0x4000}, 0x20000004)

1.049295ms ago: executing program 1 (id=1245):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fedbdf255100000008000300", @ANYRES32=r1, @ANYBLOB="0c009900030000006d0006000802110000010000"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x4c000)
socket$netlink(0x10, 0x3, 0x0)

0s ago: executing program 1 (id=1246):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f00000003c0)=0x5, 0x4)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f00000002c0)="23000000010006", 0x7)
r1 = socket$inet6(0xa, 0x4, 0x7)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0x2, @loopback, 0x5}, @in={0x2, 0x4e23, @rand_addr=0x64010101}, @in6={0xa, 0x4e20, 0x2, @mcast1, 0xf}], 0x74)
bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x7fff, @loopback}, 0x1c)
r3 = socket$netlink(0x10, 0x3, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x3c, r9, 0xd01, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x851}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x30, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x30}}, 0x0)
r11 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
sendfile(r0, r11, 0x0, 0x1)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_SNOOPING={0x5}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x81}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES8=0x0, @ANYRES32], &(0x7f0000000880)='GPL\x00', 0x5, 0xb2, &(0x7f000000cf3d)=""/178, 0x41100, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3}, 0x8}, 0x94)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:12155' (ED25519) to the list of known hosts.
syzkaller login: [   49.370815][ T5761] cgroup: Unknown subsys name 'net'
[   49.437368][ T5761] cgroup: Unknown subsys name 'cpuset'
[   49.441595][ T5761] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.280429][ T5761] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.037914][ T5203] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.046849][ T5203] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.061894][ T5812] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.065493][ T5816] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.072652][ T5816] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.096914][ T5815] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.107735][ T5815] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.111224][ T5815] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.114913][ T5815] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.118556][ T5815] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.122595][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.126609][ T5203] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.130360][ T5203] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.134681][ T5203] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.139063][ T5203] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.351670][ T5809] chnl_net:caif_netlink_parms(): no params data found
[   55.444842][ T5813] chnl_net:caif_netlink_parms(): no params data found
[   55.458805][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.461675][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.465705][ T5809] bridge_slave_0: entered allmulticast mode
[   55.468430][ T5809] bridge_slave_0: entered promiscuous mode
[   55.475576][ T5818] chnl_net:caif_netlink_parms(): no params data found
[   55.484907][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.487305][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.489803][ T5809] bridge_slave_1: entered allmulticast mode
[   55.493394][ T5809] bridge_slave_1: entered promiscuous mode
[   55.528541][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.543907][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.580403][ T5809] team0: Port device team_slave_0 added
[   55.598422][ T5809] team0: Port device team_slave_1 added
[   55.644802][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.647086][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.649425][ T5813] bridge_slave_0: entered allmulticast mode
[   55.653459][ T5813] bridge_slave_0: entered promiscuous mode
[   55.656266][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.658791][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.661170][ T5818] bridge_slave_0: entered allmulticast mode
[   55.664625][ T5818] bridge_slave_0: entered promiscuous mode
[   55.667898][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.670279][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.678923][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.683839][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.686340][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.696195][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.700367][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.703007][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.705314][ T5813] bridge_slave_1: entered allmulticast mode
[   55.707979][ T5813] bridge_slave_1: entered promiscuous mode
[   55.717923][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.720226][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.722875][ T5818] bridge_slave_1: entered allmulticast mode
[   55.725673][ T5818] bridge_slave_1: entered promiscuous mode
[   55.754906][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.759077][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.763897][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.780657][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.799400][ T5818] team0: Port device team_slave_0 added
[   55.803237][ T5818] team0: Port device team_slave_1 added
[   55.824334][ T5809] hsr_slave_0: entered promiscuous mode
[   55.827044][ T5809] hsr_slave_1: entered promiscuous mode
[   55.838627][ T5813] team0: Port device team_slave_0 added
[   55.842399][ T5813] team0: Port device team_slave_1 added
[   55.866183][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.868594][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.877074][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.900935][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.903584][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.911582][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.927570][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.929811][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.938698][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.957632][ T5818] hsr_slave_0: entered promiscuous mode
[   55.960103][ T5818] hsr_slave_1: entered promiscuous mode
[   55.962692][ T5818] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.965357][ T5818] Cannot create hsr debugfs directory
[   55.967485][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.969897][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.979161][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.069291][ T5813] hsr_slave_0: entered promiscuous mode
[   56.071655][ T5813] hsr_slave_1: entered promiscuous mode
[   56.075806][ T5813] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.078264][ T5813] Cannot create hsr debugfs directory
[   56.238864][ T5809] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.255035][ T5809] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.261735][ T5809] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.268981][ T5809] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.309750][ T5818] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.323640][ T5818] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.328991][ T5818] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.339181][ T5818] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.355963][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.358481][ T5809] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.361345][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.363717][ T5809] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.389947][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.397401][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.433259][ T5813] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.444898][ T5813] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.451908][ T5813] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.463756][ T5813] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.519123][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.553639][ T5809] 8021q: adding VLAN 0 to HW filter on device team0
[   56.558500][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.567352][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.569681][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.579337][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.581706][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.592730][ T5818] 8021q: adding VLAN 0 to HW filter on device team0
[   56.626710][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.629676][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.638014][   T89] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.640668][   T89] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.664716][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.708618][ T5813] 8021q: adding VLAN 0 to HW filter on device team0
[   56.713910][ T5818] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.736501][   T89] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.739368][   T89] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.746722][   T89] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.749580][   T89] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.838876][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.879675][ T5809] veth0_vlan: entered promiscuous mode
[   56.889561][ T5809] veth1_vlan: entered promiscuous mode
[   56.900236][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.925055][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.930283][ T5809] veth0_macvtap: entered promiscuous mode
[   56.939765][ T5809] veth1_macvtap: entered promiscuous mode
[   56.969780][ T5818] veth0_vlan: entered promiscuous mode
[   56.976431][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.989321][ T5818] veth1_vlan: entered promiscuous mode
[   56.995753][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.012216][ T5813] veth0_vlan: entered promiscuous mode
[   57.019329][ T5818] veth0_macvtap: entered promiscuous mode
[   57.028160][ T5809] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.031782][ T5809] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.037874][ T5809] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.041404][ T5809] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.050144][ T5813] veth1_vlan: entered promiscuous mode
[   57.055234][ T5818] veth1_macvtap: entered promiscuous mode
[   57.082597][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.102429][ T5203] Bluetooth: hci0: command tx timeout
[   57.108056][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.129456][ T5813] veth0_macvtap: entered promiscuous mode
[   57.144749][ T5818] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.148212][ T5818] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.151558][ T5818] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.156044][ T5818] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.163631][ T5813] veth1_macvtap: entered promiscuous mode
[   57.169117][ T1227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.181430][ T1227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.185613][ T5203] Bluetooth: hci1: command tx timeout
[   57.185625][   T54] Bluetooth: hci2: command tx timeout
[   57.201015][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.218345][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.235196][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.237232][ T5813] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.238464][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.241218][ T5813] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.248052][ T5813] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.251005][ T5813] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.309671][ T5809] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.311746][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.321210][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.349715][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.364399][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.385442][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.388030][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.393284][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.399744][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.403271][ T5877] af_packet: tpacket_rcv: packet too big, clamped from 5 to 4294967272. macoff=96
[   57.424929][ T5877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'.
[   57.425168][   T33] audit: type=1800 audit(1751895207.173:2): pid=5877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2" name="blkio.bfq.time_recursive" dev="tmpfs" ino=18 res=0 errno=0
[   57.428648][ T5877] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'.
[   57.428776][ T5877] netlink: 'syz.1.2': attribute type 18 has an invalid length.
[   57.466400][   T33] audit: type=1800 audit(1751895207.173:3): pid=5877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2" name="blkio.bfq.time_recursive" dev="tmpfs" ino=18 res=0 errno=0
[   57.606836][ T5886] netlink: 'syz.1.4': attribute type 21 has an invalid length.
[   57.632805][ T5886] netlink: 'syz.1.4': attribute type 6 has an invalid length.
[   57.636240][ T5886] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4'.
[   57.933060][ T5900] netlink: 'syz.0.8': attribute type 1 has an invalid length.
[   57.937469][ T5900] netlink: 'syz.0.8': attribute type 1 has an invalid length.
[   58.027880][ T5908] netlink: 'syz.2.10': attribute type 4 has an invalid length.
[   58.030235][ T5910] netlink: 9 bytes leftover after parsing attributes in process `syz.1.11'.
[   58.030875][ T5908] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10'.
[   58.036184][ T5910] 0: renamed from hsr0 (while UP)
[   58.052591][ T5910] 0: entered allmulticast mode
[   58.054380][ T5910] hsr_slave_0: entered allmulticast mode
[   58.056326][ T5910] hsr_slave_1: entered allmulticast mode
[   58.058736][ T5910] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[   58.136236][ T5916] syz.1.11 uses obsolete (PF_INET,SOCK_PACKET)
[   58.260575][ T5924] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15'.
[   58.394789][ T5930] Bluetooth: MGMT ver 1.23
[   58.398376][ T5930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18'.
[   58.403058][ T5928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17'.
[   58.986121][ T5973] netlink: 'syz.1.28': attribute type 21 has an invalid length.
[   58.991025][ T5973] netlink: 132 bytes leftover after parsing attributes in process `syz.1.28'.
[   59.078254][ T5979] netlink: 12 bytes leftover after parsing attributes in process `syz.0.31'.
[   59.145429][ T5981] netlink: 'syz.1.32': attribute type 11 has an invalid length.
[   59.188167][ T5203] Bluetooth: hci0: command tx timeout
[   59.264623][ T5203] Bluetooth: hci1: command tx timeout
[   59.266953][ T5203] Bluetooth: hci2: command tx timeout
[   59.304863][ T5928] syz.2.17 (5928) used greatest stack depth: 20760 bytes left
[   59.390458][ T6002] netlink: 'syz.2.40': attribute type 32 has an invalid length.
[   59.441019][ T6006] Zero length message leads to an empty skb
[   59.457421][ T6008] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[   59.466514][ T6008] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   59.564455][ T6017] warning: `syz.0.45' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   59.585507][ T6017] bridge_slave_0: left allmulticast mode
[   59.587391][ T6017] bridge_slave_0: left promiscuous mode
[   59.589443][ T6017] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.597596][ T6017] bridge_slave_1: left allmulticast mode
[   59.599438][ T6017] bridge_slave_1: left promiscuous mode
[   59.601443][ T6017] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.608191][ T6017] bond0: (slave bond_slave_0): Releasing backup interface
[   59.618567][ T6017] bond0: (slave bond_slave_1): Releasing backup interface
[   59.638494][ T6017] team0: Port device team_slave_0 removed
[   59.641810][ T6022] netlink: 'syz.0.45': attribute type 10 has an invalid length.
[   59.650470][ T6017] team0: Port device team_slave_1 removed
[   59.655187][ T6017] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   59.658502][ T6017] batman_adv: batadv0: Removing interface: batadv_slave_0
[   59.664100][ T6017] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   59.667162][ T6017] batman_adv: batadv0: Removing interface: batadv_slave_1
[   59.697022][ T6022] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   59.769361][ T6026] netlink: 'syz.1.49': attribute type 5 has an invalid length.
[   59.877696][ T6033] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[   60.370406][ T6078] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   60.386976][ T6082] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[   60.403667][ T6078] xt_CT: No such helper "syz1"
[   60.439138][ T6079] xt_CT: No such helper "syz1"
[   60.588500][ T6096] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.763514][ T6096] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.890689][ T6096] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.918015][ T6119] syz_tun: entered promiscuous mode
[   60.919978][ T6119] macsec2: entered promiscuous mode
[   60.921781][ T6119] macsec2: entered allmulticast mode
[   60.934137][ T6119] syz_tun: entered allmulticast mode
[   60.960880][ T6119] syz_tun: left allmulticast mode
[   60.964500][ T6119] syz_tun: left promiscuous mode
[   61.023124][ T6096] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.039051][ T6125] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[   61.048478][ T6125] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   61.159308][ T6096] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.170990][ T6096] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.185047][ T6096] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.193598][ T6132] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   61.203751][ T6096] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.262226][ T5203] Bluetooth: hci0: command tx timeout
[   61.342477][ T5203] Bluetooth: hci2: command tx timeout
[   61.346048][ T5203] Bluetooth: hci1: command tx timeout
[   61.549262][ T6155] batman_adv: batadv0: Adding interface: dummy0
[   61.551843][ T6155] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.563450][ T6155] batman_adv: batadv0: Interface activated: dummy0
[   61.799386][ T6175] bond0: entered promiscuous mode
[   61.801732][ T6175] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[   61.809282][ T6175] bond_slave_0: entered promiscuous mode
[   61.813867][ T6175] hsr1: Slave B (bond_slave_0) is not up; please bring it up to get a fully working HSR network
[   61.818968][ T6175] hsr1: entered promiscuous mode
[   62.111093][ T6196] syz_tun: entered promiscuous mode
[   62.210662][ T6208] Bluetooth: MGMT ver 1.23
[   62.217510][ T6208] macsec2: entered promiscuous mode
[   62.219485][ T6208] macsec2: entered allmulticast mode
[   62.221247][ T6208] syz_tun: entered allmulticast mode
[   62.238966][ T6208] syz_tun: left allmulticast mode
[   62.278165][ T6212] `: entered promiscuous mode
[   62.330088][ T6218] syzkaller0 speed is unknown, defaulting to 1000
[   62.339211][ T6218] syzkaller0 speed is unknown, defaulting to 1000
[   62.349049][ T6218] syzkaller0 speed is unknown, defaulting to 1000
[   62.361488][ T6218] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   62.376642][ T6218] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   62.421084][ T6218] syzkaller0 speed is unknown, defaulting to 1000
[   62.430760][ T6218] syzkaller0 speed is unknown, defaulting to 1000
[   62.439257][ T6218] syzkaller0 speed is unknown, defaulting to 1000
[   62.583748][ T6237] sctp: failed to load transform for md5: -2
[   62.786201][ T6258] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[   62.792717][ T6258] __nla_validate_parse: 24 callbacks suppressed
[   62.792730][ T6258] netlink: 128 bytes leftover after parsing attributes in process `syz.0.109'.
[   63.047825][ T6262] netlink: 16 bytes leftover after parsing attributes in process `syz.1.111'.
[   63.051656][ T6263] netlink: 16 bytes leftover after parsing attributes in process `syz.1.111'.
[   63.115741][ T6265] validate_nla: 4 callbacks suppressed
[   63.115753][ T6265] netlink: 'syz.1.112': attribute type 39 has an invalid length.
[   63.343306][ T5203] Bluetooth: hci0: command tx timeout
[   63.415119][ T6273] netlink: 12 bytes leftover after parsing attributes in process `syz.1.114'.
[   63.422167][ T5203] Bluetooth: hci1: command tx timeout
[   63.422894][   T54] Bluetooth: hci2: command tx timeout
[   63.524218][ T6280] bond0: entered promiscuous mode
[   63.526467][ T6280] bond_slave_0: entered promiscuous mode
[   63.529035][ T6280] bond_slave_1: entered promiscuous mode
[   63.534785][ T6280] bond0: left promiscuous mode
[   63.536884][ T6280] bond_slave_0: left promiscuous mode
[   63.539196][ T6280] bond_slave_1: left promiscuous mode
[   63.563792][ T6257] Bluetooth: hci0: Opcode 0x0401 failed: -4
[   63.620050][ T6286] netlink: 12 bytes leftover after parsing attributes in process `syz.0.119'.
[   63.645204][ T6286] netlink: 64 bytes leftover after parsing attributes in process `syz.0.119'.
[   63.651321][ T6286] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   63.660780][ T6286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.119'.
[   63.667567][ T6286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.119'.
[   63.735067][ T6284] netlink: 24 bytes leftover after parsing attributes in process `syz.2.118'.
[   63.780243][ T6292] netlink: 'syz.2.120': attribute type 1 has an invalid length.
[   63.788262][ T6292] netlink: 12 bytes leftover after parsing attributes in process `syz.2.120'.
[   63.862995][ T6297] batman_adv: batadv0: Interface deactivated: dummy0
[   63.865342][ T6297] batman_adv: batadv0: Removing interface: dummy0
[   63.869386][ T6297] bridge_slave_0: left allmulticast mode
[   63.871245][ T6297] bridge_slave_0: left promiscuous mode
[   63.873675][ T6297] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.879725][ T6297] bridge_slave_1: left allmulticast mode
[   63.885575][ T6297] bridge_slave_1: left promiscuous mode
[   63.888093][ T6297] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.896211][ T6297] bond0: (slave bond_slave_0): Releasing backup interface
[   63.900262][ T6297] bond0: (slave bond_slave_1): Releasing backup interface
[   63.910337][ T6297] team0: Port device team_slave_0 removed
[   63.916943][ T6297] team0: Port device team_slave_1 removed
[   63.919655][ T6297] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   63.923416][ T6297] batman_adv: batadv0: Removing interface: batadv_slave_0
[   63.926797][ T6297] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   63.929268][ T6297] batman_adv: batadv0: Removing interface: batadv_slave_1
[   63.968034][ T6297] team0: Mode changed to "broadcast"
[   64.169599][ T6307] openvswitch: netlink: Missing key (keys=40, expected=100)
[   64.200970][ T6307] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   64.403714][ T6316] netlink: 'syz.1.129': attribute type 29 has an invalid length.
[   64.408599][ T6316] netlink: 'syz.1.129': attribute type 29 has an invalid length.
[   64.411354][ T6316] netlink: 'syz.1.129': attribute type 29 has an invalid length.
[   64.414818][ T6316] netlink: 'syz.1.129': attribute type 29 has an invalid length.
[   64.418067][ T6316] netlink: 'syz.1.129': attribute type 29 has an invalid length.
[   64.451606][ T6286] Bluetooth: hci0: Opcode 0x0401 failed: -4
[   64.473109][ T6320] netlink: 'syz.1.131': attribute type 5 has an invalid length.
[   65.422903][   T54] Bluetooth: hci0: command 0x0401 tx timeout
[   65.592883][ T6372] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0
[   65.599042][ T6370] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[   65.744247][ T6386] veth0_to_bridge: entered promiscuous mode
[   65.747461][  T789] hid-generic 0005:0B57:0007.0001: collection stack underflow
[   65.754157][ T6385] veth0_to_bridge: left promiscuous mode
[   65.757738][  T789] hid-generic 0005:0B57:0007.0001: item 0 0 0 12 parsing failed
[   65.761392][  T789] hid-generic 0005:0B57:0007.0001: probe with driver hid-generic failed with error -22
[   65.797362][ T6382] netlink: 'syz.2.150': attribute type 8 has an invalid length.
[   65.808197][ T6379] syz.1.149 (6379) used greatest stack depth: 20568 bytes left
[   65.874956][ T6392] x9: renamed from bridge_slave_0 (while UP)
[   66.047474][ T6402] syz.1.158 uses old SIOCAX25GETINFO
[   66.278550][ T6421] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   66.345224][ T6430] nbd: must specify an index to disconnect
[   66.544164][ T6441] ipt_rpfilter: unknown options
[   66.561068][ T6441] netlink: 'syz.0.169': attribute type 1 has an invalid length.
[   67.122259][ T6477] syzkaller0 speed is unknown, defaulting to 1000
[   67.454953][ T6504] openvswitch: netlink: Invalid MD length 0 for MD type 0
[   67.457404][ T6504] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   67.502766][   T54] Bluetooth: hci0: command 0x0401 tx timeout
[   67.516289][ T6511] IPv6: NLM_F_REPLACE set, but no existing node found!
[   67.527883][ T6512] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   67.904040][ T6538] 8021q: adding VLAN 0 to HW filter on device bond3
[   67.923687][ T6538] veth3: entered promiscuous mode
[   67.929714][ T6538] bond3: (slave veth3): Enslaving as an active interface with a down link
[   67.935315][ T6538] erspan0: entered allmulticast mode
[   67.941135][ T6538] bond3: (slave erspan0): making interface the new active one
[   67.946269][ T6538] erspan0: entered promiscuous mode
[   67.949179][ T6538] bond3: (slave erspan0): Enslaving as an active interface with an up link
[   68.030897][ T6541] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   68.071696][ T6545] __nla_validate_parse: 58 callbacks suppressed
[   68.071714][ T6545] netlink: 4 bytes leftover after parsing attributes in process `syz.1.200'.
[   68.109337][ T6548] netlink: 228 bytes leftover after parsing attributes in process `syz.1.201'.
[   68.159409][ T6550] netlink: 4 bytes leftover after parsing attributes in process `syz.1.202'.
[   68.710495][ T6562] xt_ecn: cannot match TCP bits for non-tcp packets
[   68.778583][ T6567] netlink: 232 bytes leftover after parsing attributes in process `syz.2.209'.
[   68.958510][ T6574] netlink: 76 bytes leftover after parsing attributes in process `syz.2.212'.
[   69.406896][ T6595] validate_nla: 8 callbacks suppressed
[   69.406908][ T6595] netlink: 'syz.1.218': attribute type 83 has an invalid length.
[   69.499110][ T6601] netlink: 'syz.2.220': attribute type 2 has an invalid length.
[   69.713337][ T6616] nbd: socks must be embedded in a SOCK_ITEM attr
[   69.717219][ T6616] block nbd0: shutting down sockets
[   69.811304][ T6631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.228'.
[   69.856047][ T6633] sctp: [Deprecated]: syz.2.229 (pid 6633) Use of int in max_burst socket option.
[   69.856047][ T6633] Use struct sctp_assoc_value instead
[   69.900053][ T6639] syzkaller1: entered promiscuous mode
[   69.902551][ T6639] syzkaller1: entered allmulticast mode
[   69.930864][ T6635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.230'.
[   69.998981][ T6643] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[   70.008414][ T6643] netlink: 4 bytes leftover after parsing attributes in process `syz.2.232'.
[   70.311930][ T6659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   70.370505][ T6659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   70.426632][ T6659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   70.431187][ T6659] netlink: 36 bytes leftover after parsing attributes in process `syz.2.237'.
[   70.434506][ T6659] netlink: 12 bytes leftover after parsing attributes in process `syz.2.237'.
[   71.039327][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.043325][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.053943][ T6664] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[   71.057110][ T6664] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[   71.326040][ T6683] openvswitch: netlink: nsh attribute has 2338 unknown bytes.
[   71.329179][ T6683] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   71.413508][ T6690] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[   71.422397][ T5203] Bluetooth: hci2: command 0x0405 tx timeout
[   71.541826][ T6706] Cannot find add_set index 2 as target
[   71.626965][ T6710] syzkaller1: entered promiscuous mode
[   71.629451][ T6710] syzkaller1: entered allmulticast mode
[   73.118187][ T6754] __nla_validate_parse: 10 callbacks suppressed
[   73.118200][ T6754] netlink: 104 bytes leftover after parsing attributes in process `syz.2.268'.
[   73.127495][ T6754] netlink: 8 bytes leftover after parsing attributes in process `syz.2.268'.
[   73.130441][ T6754] netlink: 'syz.2.268': attribute type 5 has an invalid length.
[   73.134853][ T6754] netlink: 12 bytes leftover after parsing attributes in process `syz.2.268'.
[   73.170885][ T6758] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   73.209723][ T6763] netlink: 32 bytes leftover after parsing attributes in process `syz.2.270'.
[   73.373061][ T6772] xt_hashlimit: size too large, truncated to 1048576
[   79.172742][ T5841] erspan0: left promiscuous mode
[   80.977508][ T6780] x9: left allmulticast mode
[   80.979240][ T6780] x9: left promiscuous mode
[   80.981025][ T6780] bridge0: port 1(1x9) entered disabled state
[   81.185615][ T6780] bridge_slave_1: left allmulticast mode
[   81.188031][ T6780] bridge_slave_1: left promiscuous mode
[   81.190584][ T6780] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.273048][    T9] cfg80211: failed to load regulatory.db
[   81.403270][ T6780] bond0: (slave bond_slave_0): Releasing backup interface
[   81.502858][ T6780] bond0: (slave bond_slave_1): Releasing backup interface
[   81.695992][ T6780] team0: Port device team_slave_0 removed
[   81.772933][ T6780] team0: Port device team_slave_1 removed
[   81.775411][ T6780] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   81.777856][ T6780] batman_adv: batadv0: Removing interface: batadv_slave_0
[   81.943180][ T6780] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   81.945803][ T6780] batman_adv: batadv0: Removing interface: batadv_slave_1
[   84.263565][ T6787] netlink: 48 bytes leftover after parsing attributes in process `syz.1.277'.
[   84.266761][ T6787] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   84.269278][ T6787] IPv6: NLM_F_CREATE should be set when creating new route
[   84.360589][ T6790] netlink: 16 bytes leftover after parsing attributes in process `syz.1.278'.
[   84.398686][   T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   84.405175][   T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   84.408750][   T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   84.412896][   T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   84.416688][   T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   84.461293][ T6802] netlink: 'syz.2.281': attribute type 7 has an invalid length.
[   84.479026][ T6795] syzkaller0 speed is unknown, defaulting to 1000
[   84.574550][ T6812] netlink: 12 bytes leftover after parsing attributes in process `syz.1.285'.
[   84.603747][ T6795] chnl_net:caif_netlink_parms(): no params data found
[   84.661388][ T6823] netlink: 148 bytes leftover after parsing attributes in process `syz.1.287'.
[   84.667053][ T6825] openvswitch: netlink: Flow key attr not present in new flow.
[   84.667054][ T6795] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.669833][ T6795] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.672182][ T6823] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[   84.672307][ T6823] netlink: 148 bytes leftover after parsing attributes in process `syz.1.287'.
[   84.672315][ T6823] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[   84.672393][ T6823] netlink: 148 bytes leftover after parsing attributes in process `syz.1.287'.
[   84.677090][ T6795] bridge_slave_0: entered allmulticast mode
[   84.686966][ T6823] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[   84.688984][ T6795] bridge_slave_0: entered promiscuous mode
[   84.694556][ T6823] netlink: 148 bytes leftover after parsing attributes in process `syz.1.287'.
[   84.698373][ T6823] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[   84.701672][ T6823] netlink: 148 bytes leftover after parsing attributes in process `syz.1.287'.
[   84.707400][ T6795] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.709931][ T6823] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[   84.709945][ T6795] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.714334][ T6823] netlink: 148 bytes leftover after parsing attributes in process `syz.1.287'.
[   84.716477][ T6795] bridge_slave_1: entered allmulticast mode
[   84.719939][ T6823] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[   84.723295][ T6795] bridge_slave_1: entered promiscuous mode
[   84.728893][ T6823] netlink: 148 bytes leftover after parsing attributes in process `syz.1.287'.
[   84.738197][ T6823] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[   84.742657][ T6823] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[   84.747623][ T6823] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[   84.757344][ T6795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   84.764650][ T6795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   84.789875][ T6795] team0: Port device team_slave_0 added
[   84.795772][ T6795] team0: Port device team_slave_1 added
[   84.847640][ T6795] batman_adv: batadv0: Adding interface: batadv_slave_0
[   84.849926][ T6795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.874792][ T6795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   84.903494][ T6795] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.906598][ T6795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.939866][ T6795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   85.029988][ T6795] hsr_slave_0: entered promiscuous mode
[   85.033028][ T6795] hsr_slave_1: entered promiscuous mode
[   85.349348][ T6855] netlink: 'syz.1.298': attribute type 58 has an invalid length.
[   85.367507][ T6795] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   85.376756][ T6795] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   85.385129][ T6795] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   85.392791][ T6795] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   85.474147][ T6795] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.477326][ T6795] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.480060][ T6795] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.482630][ T6795] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.498668][ T6866] syzkaller0 speed is unknown, defaulting to 1000
[   85.561010][ T6874] netlink: 'syz.2.301': attribute type 282 has an invalid length.
[   85.601041][   T89] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.605283][   T89] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.617430][ T6795] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.655029][ T6877] syzkaller0 speed is unknown, defaulting to 1000
[   85.659104][ T6795] 8021q: adding VLAN 0 to HW filter on device team0
[   85.677687][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.680737][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.701991][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.704807][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.875826][ T6886] 8021q: adding VLAN 0 to HW filter on device bond4
[   85.888857][ T6886] 8021q: adding VLAN 0 to HW filter on device bond4
[   85.891387][ T6886] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address
[   85.896706][ T6886] bond4: (slave vxcan3): Error -95 calling set_mac_address
[   85.956996][ T6795] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.017648][ T6795] veth0_vlan: entered promiscuous mode
[   86.053288][ T6795] veth1_vlan: entered promiscuous mode
[   86.079154][ T6795] veth0_macvtap: entered promiscuous mode
[   86.098805][ T6795] veth1_macvtap: entered promiscuous mode
[   86.128872][ T6795] batman_adv: batadv0: Interface activated: batadv_slave_0
[   86.140481][ T6795] batman_adv: batadv0: Interface activated: batadv_slave_1
[   86.155805][ T6795] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.158712][ T6795] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.162630][ T6795] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.172342][ T6795] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.222192][ T6901] vlan0: entered allmulticast mode
[   86.224699][ T6901] bridge_slave_0: entered allmulticast mode
[   86.277759][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.280667][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.368569][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.378601][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.462312][   T54] Bluetooth: hci3: command tx timeout
[   86.771094][ T6934] netlink: 'syz.2.312': attribute type 7 has an invalid length.
[   86.775658][ T6934] netlink: 'syz.2.312': attribute type 8 has an invalid length.
[   86.781166][ T6934] ieee802154 phy0 wpan0: encryption failed: -22
[   86.804262][ T6937] Bluetooth: hci0: Opcode 0x0401 failed: -4
[   87.116336][ T6959] syzkaller0 speed is unknown, defaulting to 1000
[   87.239408][ T6965] netlink: 'syz.1.324': attribute type 58 has an invalid length.
[   87.511240][ T6978] netlink: 'syz.1.328': attribute type 1 has an invalid length.
[   87.754006][ T6996] x_tables: duplicate underflow at hook 1
[   87.839223][ T7011] 8021q: adding VLAN 0 to HW filter on device bond1
[   88.119795][ T7025] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   88.124002][ T7025] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   88.127902][ T7025] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   88.131218][ T7025] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   88.161689][ T7024] sch_fq: defrate 0 ignored.
[   88.214248][ T7035] syzkaller0 speed is unknown, defaulting to 1000
[   88.255348][ T7042] netlink: 'syz.2.347': attribute type 1 has an invalid length.
[   88.314920][ T7042] 8021q: adding VLAN 0 to HW filter on device bond5
[   88.373731][ T7042] bond5: (slave veth7): Enslaving as an active interface with a down link
[   88.435007][ T7050] netlink: 'syz.1.349': attribute type 32 has an invalid length.
[   88.546550][   T54] Bluetooth: hci3: command tx timeout
[   88.864565][   T54] Bluetooth: hci0: command 0x0401 tx timeout
[   89.630577][ T7081] __nla_validate_parse: 77 callbacks suppressed
[   89.630590][ T7081] netlink: 240 bytes leftover after parsing attributes in process `syz.1.355'.
[   89.882171][ T7106] tipc: Started in network mode
[   89.884391][ T7106] tipc: Node identity 080211000001, cluster identity 4711
[   89.887094][ T7106] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   89.900821][ T7106] tipc: Resetting bearer <eth:syzkaller0>
[   90.007293][ T7114] IPVS: length: 167 != 8
[   90.045002][ T7114] bridge1: entered promiscuous mode
[   90.048468][ T7114] bridge1: entered allmulticast mode
[   90.078276][ T7118] netlink: 'syz.3.366': attribute type 1 has an invalid length.
[   90.168202][ T7127] xt_CT: You must specify a L4 protocol and not use inversions on it
[   90.176439][ T7127] netlink: 132 bytes leftover after parsing attributes in process `syz.3.367'.
[   90.215267][ T7132] netlink: 300 bytes leftover after parsing attributes in process `syz.1.371'.
[   90.232511][ T7132] syzkaller0 speed is unknown, defaulting to 1000
[   90.240872][ T7134] Cannot find add_set index 0 as target
[   90.250906][ T7134] net_ratelimit: 57 callbacks suppressed
[   90.250916][ T7134] openvswitch: netlink: Missing key (keys=40, expected=200000)
[   90.309089][ T7139] netlink: 76 bytes leftover after parsing attributes in process `syz.3.372'.
[   90.314880][ T7132] netlink: 12 bytes leftover after parsing attributes in process `syz.1.371'.
[   90.464149][ T7151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.376'.
[   90.622285][   T54] Bluetooth: hci3: command tx timeout
[   90.807609][ T7165] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   90.810399][ T7165] IPv6: NLM_F_CREATE should be set when creating new route
[   90.812973][ T7165] IPv6: NLM_F_CREATE should be set when creating new route
[   90.903899][ T5820] tipc: Node number set to 134418688
[   91.470619][ T7174] veth0: entered promiscuous mode
[   91.535766][ T7173] veth0: left promiscuous mode
[   91.576680][ T7178] openvswitch: netlink: Missing key (keys=40, expected=2000)
[   91.632327][ T7182] netlink: 12 bytes leftover after parsing attributes in process `syz.2.389'.
[   91.646045][ T5820] IPVS: starting estimator thread 0...
[   91.729379][ T7181] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   91.733404][ T5820] IPVS: starting estimator thread 0...
[   91.746148][ T7185] IPVS: using max 79 ests per chain, 189600 per kthread
[   91.832138][ T7191] IPVS: using max 80 ests per chain, 192000 per kthread
[   91.949478][ T7205] netlink: 28 bytes leftover after parsing attributes in process `syz.2.394'.
[   91.954118][ T7205] netlink: 28 bytes leftover after parsing attributes in process `syz.2.394'.
[   91.964754][ T7209] netlink: 4388 bytes leftover after parsing attributes in process `syz.1.396'.
[   92.027325][ T7212] netlink: 'syz.2.394': attribute type 10 has an invalid length.
[   92.099389][ T7216] 8021q: adding VLAN 0 to HW filter on device bond2
[   92.188848][ T7221] syzkaller0: entered promiscuous mode
[   92.191307][ T7221] syzkaller0: entered allmulticast mode
[   92.704212][   T54] Bluetooth: hci3: command tx timeout
[   93.459075][ T7241] trusted_key: syz.3.406 sent an empty control message without MSG_MORE.
[   93.643291][ T7260] netlink: 'syz.3.410': attribute type 18 has an invalid length.
[   93.673088][ T7260] xt_bpf: check failed: parse error
[   94.002416][ T7286] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 101
[   94.008074][ T7286] netlink: 'syz.1.418': attribute type 6 has an invalid length.
[   94.015656][ T7286] netlink: 'syz.1.418': attribute type 2 has an invalid length.
[   94.019836][ T7286] netlink: 'syz.1.418': attribute type 1 has an invalid length.
[   94.207476][ T7291] netlink: 'syz.1.420': attribute type 1 has an invalid length.
[   94.246581][ T7291] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[   94.520754][ T7303] netlink: 'syz.1.423': attribute type 1 has an invalid length.
[   94.552757][ T7303] bond1: (slave bridge2): making interface the new active one
[   94.556585][ T7303] bond1: (slave bridge2): Enslaving as an active interface with an up link
[   94.668735][ T7312] netlink: 'syz.1.424': attribute type 3 has an invalid length.
[   94.725834][ T7314] netlink: 'syz.1.425': attribute type 1 has an invalid length.
[   94.735807][ T7314] __nla_validate_parse: 11 callbacks suppressed
[   94.735826][ T7314] netlink: 4 bytes leftover after parsing attributes in process `syz.1.425'.
[   94.825271][ T7320] netlink: 16 bytes leftover after parsing attributes in process `syz.2.427'.
[   95.016431][ T7336] netlink: 16 bytes leftover after parsing attributes in process `syz.2.431'.
[   95.060701][ T7336] IPVS: persistence engine module ip_vs_pe_ not found
[   95.075505][ T7336] xt_TCPMSS: Only works on TCP SYN packets
[   95.171421][ T7348] netlink: 116 bytes leftover after parsing attributes in process `syz.3.436'.
[   95.224068][ T7357] netlink: 'syz.3.438': attribute type 16 has an invalid length.
[   95.268512][ T7362] x_tables: duplicate underflow at hook 1
[   95.273884][ T7362] x_tables: duplicate underflow at hook 1
[   95.296056][ T7365] netlink: 40 bytes leftover after parsing attributes in process `syz.2.441'.
[   95.339020][ T7363] syzkaller0 speed is unknown, defaulting to 1000
[   95.543022][ T7373] netlink: 12 bytes leftover after parsing attributes in process `syz.3.443'.
[   95.740685][ T7382] netlink: 124 bytes leftover after parsing attributes in process `syz.3.448'.
[   95.787752][ T7387] netlink: 'syz.3.450': attribute type 15 has an invalid length.
[   95.790374][ T7387] netlink: 20 bytes leftover after parsing attributes in process `syz.3.450'.
[   95.798015][ T7389] netlink: 'syz.3.450': attribute type 15 has an invalid length.
[   95.805013][ T7387] bond0: option resend_igmp: invalid value (196616)
[   95.812859][ T7389] netlink: 20 bytes leftover after parsing attributes in process `syz.3.450'.
[   95.821591][ T7387] bond0: option resend_igmp: allowed values 0 - 255
[   95.835299][ T7389] bond0: option resend_igmp: invalid value (196616)
[   95.840653][ T7389] bond0: option resend_igmp: allowed values 0 - 255
[   96.011216][ T7408] netlink: 'syz.1.454': attribute type 1 has an invalid length.
[   96.015407][ T7408] netlink: 144 bytes leftover after parsing attributes in process `syz.1.454'.
[   96.019553][ T7408] netlink: 'syz.1.454': attribute type 1 has an invalid length.
[   96.198234][ T7419] bond0: entered promiscuous mode
[   96.396249][ T7435] syzkaller0 speed is unknown, defaulting to 1000
[   96.976687][ T7470] bridge0: entered allmulticast mode
[   97.137098][ T7483] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   97.140146][ T7483] openvswitch: netlink: Duplicate key (type 0).
[   97.148948][ T7483] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   97.153005][ T7483] openvswitch: netlink: Duplicate key (type 0).
[   97.346303][   T54] Bluetooth: hci3: command tx timeout
[   97.367357][ T7499] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   97.615979][ T7527] syzkaller0 speed is unknown, defaulting to 1000
[   98.328072][ T7578] netlink: 'syz.3.499': attribute type 1 has an invalid length.
[   98.332894][ T7578] netlink: 'syz.3.499': attribute type 15 has an invalid length.
[   98.662345][ T7595] C: renamed from team_slave_0 (while UP)
[   98.666886][ T7595] netlink: 'syz.3.502': attribute type 1 has an invalid length.
[   98.670478][ T7595] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   99.245296][ T7639] netlink: 'syz.1.515': attribute type 1 has an invalid length.
[   99.271127][ T7639] 8021q: adding VLAN 0 to HW filter on device bond2
[   99.289135][ T7639] 8021q: adding VLAN 0 to HW filter on device bond2
[   99.291889][ T7639] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[   99.298414][ T7639] bond2: (slave vxcan3): Error -95 calling set_mac_address
[   99.343289][ T7640] gretap1: entered promiscuous mode
[   99.347353][ T7640] bond2: (slave gretap1): making interface the new active one
[   99.354948][ T7640] bond2: (slave gretap1): Enslaving as an active interface with an up link
[   99.788596][ T7689] __nla_validate_parse: 24 callbacks suppressed
[   99.788615][ T7689] netlink: 96 bytes leftover after parsing attributes in process `syz.1.525'.
[   99.850842][ T7699] netlink: 'syz.1.527': attribute type 1 has an invalid length.
[  100.023648][ T7714] netlink: 176 bytes leftover after parsing attributes in process `syz.1.530'.
[  100.030240][ T7714] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  100.455816][ T7757] netlink: 16 bytes leftover after parsing attributes in process `syz.2.545'.
[  100.480823][ T7759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.546'.
[  100.758126][ T7776] x_tables: ip_tables: osf match: only valid for protocol 6
[  100.974649][ T7788] bridge_slave_0: left allmulticast mode
[  100.977132][ T7788] bridge_slave_0: left promiscuous mode
[  100.979569][ T7788] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.987504][ T7788] bridge_slave_1: left allmulticast mode
[  100.989856][ T7788] bridge_slave_1: left promiscuous mode
[  100.994090][ T7788] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.008501][ T7788] bond0: (slave bond_slave_0): Releasing backup interface
[  101.018727][ T7788] bond0: (slave bond_slave_1): Releasing backup interface
[  101.037298][ T7788] team0: Port device C removed
[  101.046032][ T7788] team0: Port device team_slave_1 removed
[  101.048928][ T7788] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  101.051852][ T7788] batman_adv: batadv0: Removing interface: batadv_slave_0
[  101.056060][ T7788] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  101.058906][ T7788] batman_adv: batadv0: Removing interface: batadv_slave_1
[  101.091621][ T7784] team0: Mode changed to "broadcast"
[  101.113129][ T7790] netlink: 4 bytes leftover after parsing attributes in process `syz.1.556'.
[  101.198088][ T7797] delete_channel: no stack
[  101.268060][ T7799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.558'.
[  102.033196][ T7806] netlink: 12 bytes leftover after parsing attributes in process `syz.3.561'.
[  102.466828][ T7811] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  102.567832][ T7836] Cannot find set identified by id 0 to match
[  102.610607][ T7836] Cannot find del_set index 0 as target
[  102.663348][ T7839] netlink: 12 bytes leftover after parsing attributes in process `syz.3.569'.
[  103.096921][ T7850] validate_nla: 1 callbacks suppressed
[  103.096938][ T7850] netlink: 'syz.3.573': attribute type 29 has an invalid length.
[  103.350787][ T7870] netlink: 'syz.3.581': attribute type 12 has an invalid length.
[  103.627619][ T7889] tipc: Started in network mode
[  103.629379][ T7889] tipc: Node identity aaaaaaaaaa3a, cluster identity 4711
[  103.631895][ T7889] tipc: Enabled bearer <eth:macvtap0>, priority 10
[  103.818574][ T7902] netlink: 4 bytes leftover after parsing attributes in process `syz.3.590'.
[  103.845989][ T7909] batman_adv: batadv0: Adding interface: gretap2
[  103.848160][ T7909] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  103.861608][ T7909] batman_adv: batadv0: Interface activated: gretap2
[  104.117308][ T7929] netlink: 16 bytes leftover after parsing attributes in process `syz.3.600'.
[  104.585181][ T7937] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun!
[  104.743952][ T5820] tipc: Node number set to 9480874
[  104.799578][ T7945] __nla_validate_parse: 1 callbacks suppressed
[  104.799595][ T7945] netlink: 4 bytes leftover after parsing attributes in process `syz.1.604'.
[  104.810664][ T7943] netlink: 19 bytes leftover after parsing attributes in process `syz.2.603'.
[  104.814196][ T7946] netlink: 24 bytes leftover after parsing attributes in process `syz.1.604'.
[  104.818614][ T7943] netlink: 52 bytes leftover after parsing attributes in process `syz.2.603'.
[  104.856800][ T7953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.607'.
[  104.997407][ T7965] netlink: 44 bytes leftover after parsing attributes in process `syz.3.612'.
[  105.008657][ T7965] netlink: 44 bytes leftover after parsing attributes in process `syz.3.612'.
[  105.017041][ T7965] netlink: 44 bytes leftover after parsing attributes in process `syz.3.612'.
[  105.020824][ T7965] netlink: 44 bytes leftover after parsing attributes in process `syz.3.612'.
[  105.025779][ T7965] netlink: 44 bytes leftover after parsing attributes in process `syz.3.612'.
[  105.038725][ T7963] syzkaller0 speed is unknown, defaulting to 1000
[  105.868100][ T8020] ieee802154 phy1 wpan1: encryption failed: -22
[  105.899239][ T8022] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  105.901936][ T8022] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  106.166115][ T8045] vlan2: entered allmulticast mode
[  106.168196][ T8045] bridge_slave_0: entered allmulticast mode
[  107.266395][ T8085] xt_NFQUEUE: number of total queues is 0
[  108.592253][ T8132] netlink: 'syz.2.655': attribute type 6 has an invalid length.
[  108.594830][ T8132] netlink: 'syz.2.655': attribute type 5 has an invalid length.
[  108.599433][ T8135] netlink: 'syz.3.658': attribute type 1 has an invalid length.
[  108.647909][ T8138] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  108.808877][ T8149] x_tables: duplicate underflow at hook 1
[  108.835971][ T8151] syzkaller0 speed is unknown, defaulting to 1000
[  109.351511][ T8177] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  109.362799][ T8177] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  109.385457][ T8174] syzkaller0 speed is unknown, defaulting to 1000
[  109.477333][ T8180] tipc: Invalid UDP bearer configuration
[  109.477382][ T8180] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  109.491925][ T8184] tipc: Invalid UDP bearer configuration
[  109.491972][ T8184] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  110.943578][ T8216] __nla_validate_parse: 70 callbacks suppressed
[  110.943595][ T8216] netlink: 12 bytes leftover after parsing attributes in process `syz.1.679'.
[  110.950341][ T8217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.678'.
[  110.960852][ T8217] netlink: 24 bytes leftover after parsing attributes in process `syz.2.678'.
[  111.018834][ T8222] netlink: 12 bytes leftover after parsing attributes in process `syz.2.681'.
[  111.260782][ T8236] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  111.331881][ T8241] IPVS: set_ctl: invalid protocol: 135 100.1.1.2:20001
[  111.347162][ T8241] IPVS: set_ctl: invalid protocol: 135 100.1.1.2:20001
[  111.381211][ T8243] netlink: 'syz.1.687': attribute type 1 has an invalid length.
[  111.384624][ T8243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.687'.
[  111.424867][ T8245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.689'.
[  111.427980][ T8245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.689'.
[  111.450993][ T8247] netlink: 12 bytes leftover after parsing attributes in process `syz.2.688'.
[  111.629314][ T8260] xt_CT: You must specify a L4 protocol and not use inversions on it
[  111.638037][ T8260] netlink: 132 bytes leftover after parsing attributes in process `syz.1.694'.
[  111.697174][ T8262] netlink: 12 bytes leftover after parsing attributes in process `syz.1.695'.
[  111.748645][ T8262] 8021q: adding VLAN 0 to HW filter on device bond3
[  111.783765][ T8268] 8021q: adding VLAN 0 to HW filter on device bond3
[  111.794436][ T8268] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[  111.799929][ T8268] bond3: (slave vxcan3): Error -95 calling set_mac_address
[  111.855032][ T8262] macvlan2: entered promiscuous mode
[  111.857270][ T8262] macvlan2: entered allmulticast mode
[  111.859867][ T8262] bond3: (slave macvlan2): Error -98 calling set_mac_address
[  111.885900][ T8276] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  112.146334][ T8286] netlink: 'syz.3.704': attribute type 29 has an invalid length.
[  112.161784][ T8286] netlink: 'syz.3.704': attribute type 29 has an invalid length.
[  112.177234][ T8286] IPv6: Can't replace route, no match found
[  112.186920][ T8291] netlink: 'syz.1.705': attribute type 5 has an invalid length.
[  112.387918][ T8315] pimreg: entered allmulticast mode
[  112.391358][ T8315] pimreg: left allmulticast mode
[  112.574209][ T8320] netlink: 'syz.3.716': attribute type 4 has an invalid length.
[  112.620096][ T8320] netlink: 'syz.3.716': attribute type 4 has an invalid length.
[  112.819403][ T8334] syzkaller0 speed is unknown, defaulting to 1000
[  112.920346][ T8339] nbd: must specify at least one socket
[  113.109048][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  113.114732][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  113.118314][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  113.122724][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  113.126250][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  113.220255][ T8346] syzkaller0 speed is unknown, defaulting to 1000
[  113.414979][ T8346] chnl_net:caif_netlink_parms(): no params data found
[  113.525951][ T8346] bridge0: port 1(bridge_slave_0) entered blocking state
[  113.528989][ T8346] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.537772][ T8346] bridge_slave_0: entered allmulticast mode
[  113.548945][ T8346] bridge_slave_0: entered promiscuous mode
[  113.560316][ T8346] bridge0: port 2(bridge_slave_1) entered blocking state
[  113.564357][ T8346] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.568778][ T8346] bridge_slave_1: entered allmulticast mode
[  113.571779][ T8346] bridge_slave_1: entered promiscuous mode
[  113.609842][ T8346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  113.617042][ T8346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  113.658272][ T8346] team0: Port device team_slave_0 added
[  113.664185][ T8346] team0: Port device team_slave_1 added
[  113.705449][ T8346] batman_adv: batadv0: Adding interface: batadv_slave_0
[  113.708640][ T8346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  113.719472][ T8346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  113.726456][ T8346] batman_adv: batadv0: Adding interface: batadv_slave_1
[  113.733767][ T8346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  113.753933][ T8346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  113.764696][ T8390] netlink: 'syz.1.735': attribute type 4 has an invalid length.
[  113.804992][ T8346] hsr_slave_0: entered promiscuous mode
[  113.813693][ T8346] hsr_slave_1: entered promiscuous mode
[  113.820490][ T8346] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  113.825006][ T8346] Cannot create hsr debugfs directory
[  114.036281][ T8346] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.131667][ T8346] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.139826][ T8399] openvswitch: netlink: IPv4 tun info is not correct
[  114.205951][ T8346] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.324034][ T8346] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.430358][ T8346] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  114.435638][ T8346] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  114.446383][ T8346] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  114.453261][ T8412] netlink: 'syz.1.745': attribute type 5 has an invalid length.
[  114.455987][ T8346] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  114.527473][ T8346] 8021q: adding VLAN 0 to HW filter on device bond0
[  114.539645][ T8346] 8021q: adding VLAN 0 to HW filter on device team0
[  114.551718][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.554943][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state
[  114.563937][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.566975][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state
[  114.701383][ T8346] 8021q: adding VLAN 0 to HW filter on device batadv0
[  114.737118][ T8346] veth0_vlan: entered promiscuous mode
[  114.748181][ T8346] veth1_vlan: entered promiscuous mode
[  114.766425][ T8346] veth0_macvtap: entered promiscuous mode
[  114.773540][ T8346] veth1_macvtap: entered promiscuous mode
[  114.791042][ T8346] batman_adv: batadv0: Interface activated: batadv_slave_0
[  114.801860][ T8346] batman_adv: batadv0: Interface activated: batadv_slave_1
[  114.810152][ T8346] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  114.813877][ T8346] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  114.816861][ T8346] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  114.820216][ T8346] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  114.877665][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.888590][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.906291][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.909600][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.183259][   T54] Bluetooth: hci2: command tx timeout
[  115.357313][ T8437] No such timeout policy "syz0"
[  115.388770][ T8439] x_tables: unsorted entry at hook 3
[  115.586945][ T8463] 8021q: adding VLAN 0 to HW filter on device bond3
[  115.607791][ T8463] macvlan2: entered promiscuous mode
[  115.610431][ T8463] macvlan2: entered allmulticast mode
[  115.616154][ T8463] bond3: (slave macvlan2): Opening slave failed
[  115.650659][ T8470] xt_bpf: check failed: parse error
[  116.266417][ T8501] __nla_validate_parse: 25 callbacks suppressed
[  116.266434][ T8501] netlink: 40 bytes leftover after parsing attributes in process `syz.1.768'.
[  116.273979][ T8501] netlink: 40 bytes leftover after parsing attributes in process `syz.1.768'.
[  116.281673][ T8501] openvswitch: netlink: Key type 272 is out of range max 32
[  116.611078][ T8514] lo: entered allmulticast mode
[  116.613297][ T8514] tunl0: entered allmulticast mode
[  116.615101][ T8514] gre0: entered allmulticast mode
[  116.617053][ T8514] gretap0: entered allmulticast mode
[  116.619122][ T8514] erspan0: entered allmulticast mode
[  116.621062][ T8514] ip_vti0: entered allmulticast mode
[  116.625611][ T8514] ip6_vti0: entered allmulticast mode
[  116.627915][ T8514] sit0: entered allmulticast mode
[  116.629664][ T8514] ip6tnl0: entered allmulticast mode
[  116.631449][ T8514] ip6gre0: entered allmulticast mode
[  116.634417][ T8514] syz_tun: entered allmulticast mode
[  116.636423][ T8514] ip6gretap0: entered allmulticast mode
[  116.638639][ T8514] bond0: left promiscuous mode
[  116.640549][ T8514] bond0: entered allmulticast mode
[  116.644887][ T8514] team0: entered allmulticast mode
[  116.646796][ T8514] dummy0: entered allmulticast mode
[  116.649044][ T8514] nlmon0: entered allmulticast mode
[  116.650931][ T8514] caif0: entered allmulticast mode
[  116.653561][ T8514] batadv0: entered allmulticast mode
[  116.655649][ T8514] vxcan0: entered allmulticast mode
[  116.657854][ T8514] vxcan1: entered allmulticast mode
[  116.659989][ T8514] veth0: entered allmulticast mode
[  116.665279][ T8514] veth1: entered allmulticast mode
[  116.667006][ T8514] wg1: entered allmulticast mode
[  116.668649][ T8514] wg2: entered allmulticast mode
[  116.670379][ T8514] veth0_to_bridge: entered allmulticast mode
[  116.672468][ T8514] x9: entered allmulticast mode
[  116.674352][ T8514] veth1_to_bridge: entered allmulticast mode
[  116.676334][ T8514] bridge_slave_1: entered allmulticast mode
[  116.678336][ T8514] veth0_to_bond: entered allmulticast mode
[  116.680284][ T8514] bond_slave_0: entered allmulticast mode
[  116.684569][ T8514] veth1_to_bond: entered allmulticast mode
[  116.686732][ T8514] bond_slave_1: entered allmulticast mode
[  116.688748][ T8514] veth0_to_team: entered allmulticast mode
[  116.690894][ T8514] team_slave_0: entered allmulticast mode
[  116.694365][ T8514] veth1_to_team: entered allmulticast mode
[  116.696350][ T8514] team_slave_1: entered allmulticast mode
[  116.698196][ T8514] veth0_to_batadv: entered allmulticast mode
[  116.700222][ T8514] batadv_slave_0: entered allmulticast mode
[  116.704539][ T8514] veth1_to_batadv: entered allmulticast mode
[  116.706627][ T8514] batadv_slave_1: entered allmulticast mode
[  116.708628][ T8514] xfrm0: entered allmulticast mode
[  116.710436][ T8514] veth0_to_hsr: entered allmulticast mode
[  116.712834][ T8514] veth1_to_hsr: entered allmulticast mode
[  116.714950][ T8514] veth1_virt_wifi: entered allmulticast mode
[  116.717075][ T8514] veth0_virt_wifi: entered allmulticast mode
[  116.719132][ T8514] veth1_vlan: entered allmulticast mode
[  116.721056][ T8514] veth0_vlan: entered allmulticast mode
[  116.723294][ T8514] vlan0: entered allmulticast mode
[  116.725190][ T8514] vlan1: entered allmulticast mode
[  116.726964][ T8514] macvlan0: entered allmulticast mode
[  116.728885][ T8514] macvlan1: entered allmulticast mode
[  116.730745][ T8514] ipvlan0: entered allmulticast mode
[  116.732813][ T8514] ipvlan1: entered allmulticast mode
[  116.734856][ T8514] veth1_macvtap: entered allmulticast mode
[  116.736855][ T8514] veth0_macvtap: entered allmulticast mode
[  116.738929][ T8514] macvtap0: entered allmulticast mode
[  116.740771][ T8514] macsec0: entered allmulticast mode
[  116.742673][ T8514] geneve0: entered allmulticast mode
[  116.744656][ T8514] geneve1: entered allmulticast mode
[  116.746380][ T8514] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  116.748678][ T8514] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  116.751152][ T8514] netdevsim netdevsim1 netdevsim1: entered allmulticast mode
[  116.753863][ T8514] netdevsim netdevsim1 netdevsim2: entered allmulticast mode
[  116.756584][ T8514] netdevsim netdevsim1 netdevsim3: entered allmulticast mode
[  116.758994][ T8514] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  116.761448][ T8514] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  116.764405][ T8514] vxlan0: entered allmulticast mode
[  116.766131][ T8514] ;: entered allmulticast mode
[  116.767744][ T8514] macsec1: entered allmulticast mode
[  116.769539][ T8514] ip6tnl1: entered allmulticast mode
[  116.771291][ T8514] bridge1: left promiscuous mode
[  116.773860][ T8514] xfrm1: entered allmulticast mode
[  116.775651][ T8514] bond1: entered allmulticast mode
[  116.777545][ T8514] bridge2: entered allmulticast mode
[  116.781462][ T8514] ipvlan2: entered allmulticast mode
[  116.787335][ T8514] batadv1: entered allmulticast mode
[  116.789147][ T8514] bond2: entered allmulticast mode
[  116.790806][ T8514] gretap1: entered allmulticast mode
[  116.794979][ T8514] gretap1: left promiscuous mode
[  116.797425][ T8514] gre1: entered allmulticast mode
[  116.799568][ T8514] batman_adv: batadv0: Interface deactivated: gretap2
[  116.803849][ T8514] gretap2: entered allmulticast mode
[  116.808164][ T8514] bridge0: entered allmulticast mode
[  116.810002][ T8514] bond3: entered allmulticast mode
[  116.835976][ T8521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.774'.
[  116.839721][ T8521] netlink: 12 bytes leftover after parsing attributes in process `syz.1.774'.
[  116.891624][ T8524] netlink: 'syz.3.775': attribute type 4 has an invalid length.
[  116.894503][ T8524] netlink: 152 bytes leftover after parsing attributes in process `syz.3.775'.
[  116.900504][ T8524] : renamed from bond0 (while UP)
[  116.910255][ T8529] netlink: 36 bytes leftover after parsing attributes in process `syz.1.777'.
[  117.008378][ T8538] netlink: 72 bytes leftover after parsing attributes in process `syz.1.781'.
[  117.082996][ T8544] netlink: 12 bytes leftover after parsing attributes in process `syz.1.783'.
[  117.158158][ T8546] IPv6: sit1: Disabled Multicast RS
[  117.161493][ T8546] sit1: entered allmulticast mode
[  117.274100][ T8549] netlink: 56 bytes leftover after parsing attributes in process `syz.1.785'.
[  117.886924][ T8566] netlink: 12 bytes leftover after parsing attributes in process `syz.3.791'.
[  118.239374][ T8589] xt_SECMARK: invalid mode: 0
[  118.567438][ T8624] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  118.768026][ T8652] xt_l2tp: v2 doesn't support IP mode
[  118.771802][ T8652] xt_CT: You must specify a L4 protocol and not use inversions on it
[  118.795355][ T8654] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551607)
[  118.801249][ T8654] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[  119.264842][ T8691] netlink: 'syz.1.831': attribute type 10 has an invalid length.
[  119.268307][ T8691] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  119.272485][ T8691] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  119.274890][ T8691] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  119.438006][ T8703] tunl0: left allmulticast mode
[  119.505909][ T8706] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  119.561373][ T8708] pim6reg1: entered allmulticast mode
[  120.196721][ T8731] 8021q: adding VLAN 0 to HW filter on device bond5
[  120.528082][ T8749] xt_hashlimit: size too large, truncated to 1048576
[  120.761056][ T8761] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  120.840337][ T5262] udevd[5262]: worker [6781] terminated by signal 33 (Unknown signal 33)
[  120.848715][ T5262] udevd[5262]: worker [6800] terminated by signal 33 (Unknown signal 33)
[  120.852642][ T5262] udevd[5262]: worker [6798] terminated by signal 33 (Unknown signal 33)
[  121.444352][ T8813] netlink: 'syz.1.866': attribute type 1 has an invalid length.
[  121.471798][ T8813] 8021q: adding VLAN 0 to HW filter on device bond4
[  121.488654][ T8813] bond4: (slave gretap3): making interface the new active one
[  121.493456][ T8813] bond4: (slave gretap3): Enslaving as an active interface with an up link
[  121.502895][   T46] wlan1: Trigger new scan to find an IBSS to join
[  121.508838][ T8813] syz.1.866 (8813) used greatest stack depth: 20136 bytes left
[  121.548620][ T8816] __nla_validate_parse: 25 callbacks suppressed
[  121.548633][ T8816] netlink: 16 bytes leftover after parsing attributes in process `syz.1.867'.
[  121.559645][ T8817] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  121.704677][ T8824] netlink: 72 bytes leftover after parsing attributes in process `syz.1.869'.
[  121.734917][ T8824] bond0: (slave wlan1): Releasing backup interface
[  121.739299][ T8824] mac80211_hwsim hwsim3 wlan1 (unregistering): left allmulticast mode
[  121.767426][ T8825] netlink: 40 bytes leftover after parsing attributes in process `syz.1.869'.
[  122.059569][ T8837] IPVS: length: 4096 != 8
[  122.088422][ T8839] netlink: 12 bytes leftover after parsing attributes in process `syz.1.874'.
[  122.910275][ T8851] netlink: 'syz.3.878': attribute type 1 has an invalid length.
[  122.953440][ T8855] netlink: 28 bytes leftover after parsing attributes in process `syz.3.879'.
[  123.075944][ T8862] tipc: Started in network mode
[  123.077705][ T8862] tipc: Node identity 4, cluster identity 4711
[  123.080109][ T8862] tipc: Node number set to 4
[  123.179779][ T8868] netlink: 100 bytes leftover after parsing attributes in process `syz.3.882'.
[  123.388127][ T8872] netlink: 17 bytes leftover after parsing attributes in process `syz.1.884'.
[  123.395108][ T8872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.884'.
[  123.530994][ T8874] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  123.541196][ T8879] netlink: 12 bytes leftover after parsing attributes in process `syz.1.886'.
[  123.548741][ T8879] openvswitch: netlink: Flow actions attr not present in new flow.
[  123.671724][ T8890] netlink: 4 bytes leftover after parsing attributes in process `syz.1.889'.
[  123.677818][ T8888] syzkaller0: entered promiscuous mode
[  123.680219][ T8888] syzkaller0: entered allmulticast mode
[  123.826933][ T8896] netlink: 'syz.3.893': attribute type 5 has an invalid length.
[  123.915743][ T8905] netlink: 'syz.3.895': attribute type 1 has an invalid length.
[  124.115478][ T8926] netlink: 'syz.1.903': attribute type 11 has an invalid length.
[  124.244077][ T8936] syzkaller0 speed is unknown, defaulting to 1000
[  124.293784][ T8937] bridge1: entered promiscuous mode
[  124.542858][ T1086] wlan1: Trigger new scan to find an IBSS to join
[  125.229038][ T8947] netlink: 'syz.1.908': attribute type 1 has an invalid length.
[  125.496206][ T8953] netlink: 'syz.3.909': attribute type 1 has an invalid length.
[  125.521185][ T8953] bond6: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  125.531933][   T12] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  125.532782][ T8953] 8021q: adding VLAN 0 to HW filter on device bond6
[  125.551482][ T8956] nftables ruleset with unbound chain
[  125.568089][ T8953] veth3: entered promiscuous mode
[  125.572789][ T8953] bond6: (slave veth3): Enslaving as a backup interface with a down link
[  125.610895][ T8953] bond6: (slave ip6gretap1): Removing an active aggregator
[  125.615721][ T8953] bond6: (slave ip6gretap1): Releasing backup interface
[  125.618031][ T8953] bond6: (slave ip6gretap1): the permanent HWaddr of slave - ca:23:45:08:bd:d2 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  127.502148][   T27] wlan1: Trigger new scan to find an IBSS to join
[  128.530112][ T8953] bond6: (slave veth3): Releasing backup interface
[  128.538859][   T89] wlan1: Creating new IBSS network, BSSID be:b4:e5:2d:40:b5
[  128.605999][ T8960] __nla_validate_parse: 11 callbacks suppressed
[  128.606016][ T8960] netlink: 12 bytes leftover after parsing attributes in process `syz.1.911'.
[  128.811113][ T8972] netlink: 144 bytes leftover after parsing attributes in process `syz.3.914'.
[  128.850985][ T8974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.915'.
[  128.970560][ T8979] netlink: 4 bytes leftover after parsing attributes in process `syz.3.916'.
[  129.879330][ T8988] netlink: 12 bytes leftover after parsing attributes in process `syz.3.919'.
[  130.206729][ T9001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.922'.
[  130.288388][ T9008] syzkaller1: entered promiscuous mode
[  130.290541][ T9008] syzkaller1: entered allmulticast mode
[  130.346805][ T9006] syzkaller0 speed is unknown, defaulting to 1000
[  130.557459][ T9024] netlink: 12 bytes leftover after parsing attributes in process `syz.1.926'.
[  130.719899][ T9026] netlink: 4 bytes leftover after parsing attributes in process `syz.1.927'.
[  130.821656][ T9032] macsec0: left allmulticast mode
[  130.861979][ T9034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.930'.
[  130.975074][ T9040] netlink: 16 bytes leftover after parsing attributes in process `syz.1.933'.
[  131.235334][ T9047] 8021q: adding VLAN 0 to HW filter on device batadv1
[  131.240037][ T9047] team0: Port device batadv1 added
[  131.263472][ T9047] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  131.269715][ T9047] netlink: 'syz.3.936': attribute type 21 has an invalid length.
[  131.274057][ T9047] netlink: 'syz.3.936': attribute type 1 has an invalid length.
[  131.961601][ T9065] ip6tnl0: Master is either lo or non-ether device
[  132.111851][ T9076] gretap4: entered allmulticast mode
[  132.447319][ T9099] raw_sendmsg: syz.3.952 forgot to set AF_INET. Fix it!
[  132.476862][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  132.534251][ T9104] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  132.558821][ T9106] netlink: 'syz.1.955': attribute type 21 has an invalid length.
[  132.727665][ T9122] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  133.066187][ T9139] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  133.248594][ T9142] netlink: 'syz.1.967': attribute type 6 has an invalid length.
[  133.393558][ T9149] C: renamed from team_slave_0
[  133.396887][ T9149] netlink: 'syz.1.969': attribute type 1 has an invalid length.
[  133.399724][ T9149] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  133.545719][ T9154] wireguard0: entered promiscuous mode
[  133.548209][ T9154] wireguard0: entered allmulticast mode
[  133.805068][ T9162] netlink: 'syz.3.973': attribute type 10 has an invalid length.
[  133.818966][ T9162] wlan1: mtu less than device minimum
[  133.821562][ T9162] : (slave wlan1): Error -22 calling dev_set_mtu
[  133.938721][ T9166] tipc: New replicast peer: 0.0.0.0
[  133.943320][ T9166] tipc: Enabled bearer <udp:syz2>, priority 10
[  133.946655][ T9166] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa
[  134.292579][ T9179] __nla_validate_parse: 56 callbacks suppressed
[  134.292599][ T9179] netlink: 40 bytes leftover after parsing attributes in process `syz.3.981'.
[  134.335876][ T9183] netlink: 12 bytes leftover after parsing attributes in process `syz.1.983'.
[  134.426691][ T9185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.984'.
[  134.528926][ T9192] netlink: 'syz.1.987': attribute type 1 has an invalid length.
[  134.560630][ T9192] bond7: (slave gretap5): making interface the new active one
[  134.564924][ T9192] bond7: (slave gretap5): Enslaving as an active interface with an up link
[  134.684355][ T9195] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[  134.714680][ T9201] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  134.771408][ T9206] netlink: 'syz.1.990': attribute type 3 has an invalid length.
[  134.778790][ T9205] netlink: 'syz.1.990': attribute type 3 has an invalid length.
[  134.832780][ T9212] netlink: 8 bytes leftover after parsing attributes in process `syz.3.992'.
[  134.880031][ T9218] netlink: 8 bytes leftover after parsing attributes in process `syz.3.993'.
[  135.018885][ T9237] netlink: 12 bytes leftover after parsing attributes in process `syz.3.998'.
[  135.025725][ T9237] netlink: 48 bytes leftover after parsing attributes in process `syz.3.998'.
[  135.035232][ T9237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  135.048204][ T9239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.999'.
[  135.229205][ T9248] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1003'.
[  135.553094][ T9259] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1007'.
[  135.666381][ T9268] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  135.676613][ T9268] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  136.263255][ T9297] Cannot find add_set index 0 as target
[  136.386167][ T9299] bond0 (unregistering): Released all slaves
[  136.641938][ T9318] pim6reg1: entered promiscuous mode
[  136.646696][ T9318] pim6reg1: entered allmulticast mode
[  136.958782][ T9341] tipc: Can't bind to reserved service type 0
[  137.083832][ T9353] pimreg: entered allmulticast mode
[  137.193412][ T9365] netlink: 'syz.1.1034': attribute type 15 has an invalid length.
[  137.196936][ T9365] netlink: 'syz.1.1034': attribute type 18 has an invalid length.
[  137.303189][ T9377] netlink: 'syz.3.1038': attribute type 5 has an invalid length.
[  137.311246][ T9377] netlink: 'syz.3.1038': attribute type 7 has an invalid length.
[  137.320272][ T9377] : entered promiscuous mode
[  137.494425][ T9387] syzkaller0: entered promiscuous mode
[  137.496817][ T9387] syzkaller0: entered allmulticast mode
[  138.954732][ T9419] IPVS: set_ctl: invalid protocol: 58 172.30.1.4:20000
[  139.443971][ T9439] syzkaller0: entered promiscuous mode
[  139.446444][ T9439] syzkaller0: entered allmulticast mode
[  139.614773][ T9443] siw: device registration error -23
[  139.947189][ T9467] __nla_validate_parse: 14 callbacks suppressed
[  139.947201][ T9467] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1064'.
[  139.957869][ T9467] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  139.992823][ T9471] batadv_slave_1: entered promiscuous mode
[  139.999300][ T9470] batadv_slave_1: left promiscuous mode
[  140.058141][ T9481] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1068'.
[  140.165461][ T9489] Driver unsupported XDP return value 0 on prog  (id 452) dev N/A, expect packet loss!
[  140.378957][ T9488] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  140.383591][ T9488] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  140.386932][ T9488] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  140.390552][ T9488] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  140.399012][ T9488] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  140.435611][ T9488] bridge1: left promiscuous mode
[  140.439752][ T9488] veth3: left promiscuous mode
[  140.452469][ T9492] netlink: 'syz.1.1072': attribute type 1 has an invalid length.
[  140.455051][ T9492] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1072'.
[  140.519560][ T9496] netlink: 'syz.1.1073': attribute type 10 has an invalid length.
[  140.591646][ T9500] netdevsim netdevsim1: Direct firmware load for .
[  140.591646][ T9500]  failed with error -2
[  140.601563][ T9500] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  140.601563][ T9500] 
[  140.686996][ T9504] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1077'.
[  140.937145][ T9522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1082'.
[  140.981926][ T9525] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1083'.
[  141.048542][ T9527] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1084'.
[  141.131639][ T9529] bridge3: entered allmulticast mode
[  141.240191][ T9535] netlink: 'syz.1.1088': attribute type 33 has an invalid length.
[  141.246680][ T9535] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1088'.
[  141.309199][ T9539] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1090'.
[  141.517684][ T9553] block nbd0: Receive control failed (result -32)
[  141.525042][ T9555] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1097'.
[  141.528587][ T9555] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  142.191767][ T9598] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  142.809494][ T9620] openvswitch: netlink: Message has 4 unknown bytes.
[  143.006252][ T9631] batman_adv: batadv0: Adding interface: ip6gretap2
[  143.009209][ T9631] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  143.021290][ T9631] batman_adv: batadv0: Not using interface ip6gretap2 (retrying later): interface not active
[  143.030359][ T9631] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  143.139280][ T9633] batman_adv: batadv0: Removing interface: ip6gretap2
[  143.828752][ T9660] (unnamed net_device) (uninitialized): up delay (2) is not a multiple of miimon (6), value rounded to 0 ms
[  143.917506][ T9665] macsec3: entered promiscuous mode
[  143.919799][ T9665] macsec3: entered allmulticast mode
[  144.825360][ T9677] netlink: 'syz.3.1136': attribute type 26 has an invalid length.
[  144.851879][ T9679] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  145.041305][   T33] audit: type=1800 audit(1751895294.793:4): pid=9700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1140" name="memory.events" dev="tmpfs" ino=2589 res=0 errno=0
[  145.056675][   T33] audit: type=1800 audit(1751895294.813:5): pid=9700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1140" name="memory.events" dev="tmpfs" ino=2589 res=0 errno=0
[  145.172670][ T9708] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  145.295328][ T9712] __nla_validate_parse: 11 callbacks suppressed
[  145.295345][ T9712] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1144'.
[  145.347197][ T9716] x_tables: unsorted entry at hook 1
[  145.357684][ T9718] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1146'.
[  145.381680][ T9718] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1146'.
[  145.464245][ T9726] x_tables: duplicate underflow at hook 3
[  145.495734][ T9728] netlink: 'syz.3.1149': attribute type 11 has an invalid length.
[  145.499117][ T9728] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1149'.
[  145.520794][ T9730] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1150'.
[  145.528316][ T9730] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1150'.
[  145.536196][ T9730] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1150'.
[  145.549851][ T9730] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1150'.
[  145.553846][ T9730] netlink: zone id is out of range
[  145.555957][ T9730] netlink: zone id is out of range
[  145.558076][ T9730] netlink: zone id is out of range
[  145.563057][ T9730] netlink: zone id is out of range
[  145.565280][ T9730] netlink: get zone limit has 8 unknown bytes
[  145.636664][ T9741] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1153'.
[  145.710562][ T9747] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1156'.
[  146.331147][   T54] Bluetooth: hci3: link tx timeout
[  146.334035][   T54] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  146.583104][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  146.586978][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  146.611272][ T9780] ieee802154 phy1 wpan1: encryption failed: -22
[  146.984861][ T9797] nbd: must specify a size in bytes for the device
[  147.224594][ T9802] syz.1.1175 (9802) used obsolete PPPIOCDETACH ioctl
[  147.625687][ T9823] IPVS: Unknown mcast interface: wg0
[  148.207910][ T9847] netlink: 'syz.1.1192': attribute type 8 has an invalid length.
[  148.385976][   T54] Bluetooth: hci3: command 0x0405 tx timeout
[  148.427244][ T9868] rdma_rxe: rxe_newlink: failed to add vxcan1
[  148.554400][ T9883] netlink: 'syz.1.1199': attribute type 1 has an invalid length.
[  149.242495][ T9926] netlink: 'syz.1.1212': attribute type 1 has an invalid length.
[  149.378450][ T9930] netlink: 'syz.1.1214': attribute type 16 has an invalid length.
[  149.381727][ T9930] netlink: 'syz.1.1214': attribute type 17 has an invalid length.
[  149.443016][ T9930] IPv6: NLM_F_REPLACE set, but no existing node found!
[  149.523232][ T9935] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  150.334734][   T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  150.339233][   T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  150.346965][   T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  150.351381][   T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  150.356426][   T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  150.824938][ T5822]  (unregistering): Released all slaves
[  150.910278][ T5822] bond1 (unregistering): Released all slaves
[  150.986509][ T5822] bond2 (unregistering): Released all slaves
[  151.060270][ T5822] bond3 (unregistering): Released all slaves
[  151.073842][ T5822] bond0 (unregistering): Released all slaves
[  151.086273][ T5822] bond4 (unregistering): Released all slaves
[  151.165049][ T5822] bond5 (unregistering): Released all slaves
[  151.228982][ T5822] bond6 (unregistering): Released all slaves
[  151.260159][ T9965] syzkaller0 speed is unknown, defaulting to 1000
[  151.354978][ T5822] : left promiscuous mode
[  151.425772][ T5822] tipc: Disabling bearer <udp:syz2>
[  151.428783][ T5822] tipc: Left network mode
[  151.474372][ T9965] chnl_net:caif_netlink_parms(): no params data found
[  151.585691][ T9965] bridge0: port 1(bridge_slave_0) entered blocking state
[  151.602493][ T9965] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.605280][ T9965] bridge_slave_0: entered allmulticast mode
[  151.608165][ T9965] bridge_slave_0: entered promiscuous mode
[  151.654079][ T9965] bridge0: port 2(bridge_slave_1) entered blocking state
[  151.657053][ T9965] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.659637][ T9965] bridge_slave_1: entered allmulticast mode
[  151.666801][ T9965] bridge_slave_1: entered promiscuous mode
[  151.684745][ T9995] batadv2: entered allmulticast mode
[  151.688475][ T9995] 8021q: adding VLAN 0 to HW filter on device batadv2
[  151.737648][ T9965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  151.755288][ T9965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  151.782061][ T5822] hsr_slave_0: left promiscuous mode
[  151.795566][ T5822] hsr_slave_1: left promiscuous mode
[  151.815382][ T5822] team0 (unregistering): Port device batadv1 removed
[  152.365959][ T9965] team0: Port device team_slave_0 added
[  152.369539][ T9965] team0: Port device team_slave_1 added
[  152.384004][   T54] Bluetooth: hci3: command tx timeout
[  152.395345][ T9965] batman_adv: batadv0: Adding interface: batadv_slave_0
[  152.397921][ T9965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  152.408649][T10011] __nla_validate_parse: 25 callbacks suppressed
[  152.408659][T10011] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1233'.
[  152.414063][ T9965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  152.421502][ T9965] batman_adv: batadv0: Adding interface: batadv_slave_1
[  152.425214][ T9965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  152.435240][ T9965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  152.486353][ T9965] hsr_slave_0: entered promiscuous mode
[  152.488734][ T9965] hsr_slave_1: entered promiscuous mode
[  152.625130][ T5822] IPVS: stop unused estimator thread 0...
[  152.987487][ T9965] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  152.995246][ T9965] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  153.006986][ T9965] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  153.015697][ T9965] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  153.117707][ T9965] 8021q: adding VLAN 0 to HW filter on device bond0
[  153.138841][ T9965] 8021q: adding VLAN 0 to HW filter on device team0
[  153.147918][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.150592][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[  153.168005][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.170543][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[  153.348478][ T9965] 8021q: adding VLAN 0 to HW filter on device batadv0
[  153.399815][ T9965] veth0_vlan: entered promiscuous mode
[  153.408693][ T9965] veth1_vlan: entered promiscuous mode
[  153.427907][ T9965] veth0_macvtap: entered promiscuous mode
[  153.431855][ T9965] veth1_macvtap: entered promiscuous mode
[  153.446710][ T9965] batman_adv: batadv0: Interface activated: batadv_slave_0
[  153.458013][ T9965] batman_adv: batadv0: Interface activated: batadv_slave_1
[  153.468926][ T9965] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  153.473494][ T9965] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  153.476545][ T9965] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  153.480253][ T9965] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  153.553082][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  153.557815][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  153.599441][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  153.607273][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  154.099689][T10077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1239'.
[  154.186028][T10083] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1241'.
[  154.250962][T10085] netlink: 22 bytes leftover after parsing attributes in process `syz.1.1242'.
[  154.343862][T10089] syzkaller0 speed is unknown, defaulting to 1000
[  154.446827][T10089] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1243'.
[  154.673167][T10098] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1245'.
[  154.865480][  T789] ------------[ cut here ]------------
[  154.868032][  T789] workqueue: cannot queue hci_conn_timeout on wq hci2
[  154.870892][  T789] WARNING: CPU: 1 PID: 789 at kernel/workqueue.c:2258 __queue_work+0xd62/0xfe0
[  154.874651][  T789] Modules linked in:
[  154.876696][  T789] CPU: 1 UID: 0 PID: 789 Comm: kworker/1:2 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  154.882945][  T789] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  154.887014][  T789] Workqueue: events l2cap_chan_timeout
[  154.889234][  T789] RIP: 0010:__queue_work+0xd62/0xfe0
[  154.891423][  T789] Code: 42 80 3c 20 00 74 08 4c 89 ef e8 69 0f 99 00 49 8b 75 00 49 81 c7 78 01 00 00 48 c7 c7 40 e1 89 8b 4c 89 fa e8 1f 34 f9 ff 90 <0f> 0b 90 90 e9 f1 f4 ff ff e8 80 8b 35 00 90 0f 0b 90 e9 dd fc ff
[  154.899554][  T789] RSP: 0018:ffffc900045ef7a8 EFLAGS: 00010046
[  154.902171][  T789] RAX: fcc1709d7d925000 RBX: 0000000000000020 RCX: ffff8881062a3980
[  154.905442][  T789] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  154.908773][  T789] RBP: 1ffff11023aad338 R08: ffff888136624293 R09: 1ffff11026cc4852
[  154.912185][  T789] R10: dffffc0000000000 R11: ffffed1026cc4853 R12: dffffc0000000000
[  154.915784][  T789] R13: ffff88811fc4c960 R14: ffff888100004008 R15: ffff88811d569978
[  154.919075][  T789] FS:  0000000000000000(0000) GS:ffff8881a3c50000(0000) knlGS:0000000000000000
[  154.922747][  T789] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  154.925484][  T789] CR2: 000000110c38ec18 CR3: 0000000110776000 CR4: 00000000000006f0
[  154.928808][  T789] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  154.932361][  T789] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  154.935868][  T789] Call Trace:
[  154.937309][  T789]  <TASK>
[  154.938639][  T789]  ? __queue_delayed_work+0xe1/0x2d0
[  154.940842][  T789]  queue_delayed_work_on+0x18b/0x280
[  154.943025][  T789]  ? __pfx___cancel_work+0x10/0x10
[  154.945100][  T789]  ? __pfx_queue_delayed_work_on+0x10/0x10
[  154.947505][  T789]  ? hci_conn_drop+0x14d/0x280
[  154.949605][  T789]  l2cap_chan_del+0x285/0x5e0
[  154.951642][  T789]  l2cap_chan_close+0x597/0x980
[  154.953846][  T789]  ? __pfx_l2cap_chan_close+0x10/0x10
[  154.956153][  T789]  ? process_scheduled_works+0x9ef/0x17b0
[  154.958562][  T789]  l2cap_chan_timeout+0x158/0x390
[  154.960669][  T789]  ? process_scheduled_works+0x9ef/0x17b0
[  154.963068][  T789]  process_scheduled_works+0xae1/0x17b0
[  154.965478][  T789]  ? __pfx_process_scheduled_works+0x10/0x10
[  154.967956][  T789]  worker_thread+0x8a0/0xda0
[  154.970189][  T789]  kthread+0x711/0x8a0
[  154.972232][  T789]  ? __pfx_worker_thread+0x10/0x10
[  154.974449][  T789]  ? __pfx_kthread+0x10/0x10
[  154.976320][  T789]  ? _raw_spin_unlock_irq+0x23/0x50
[  154.978432][  T789]  ? lockdep_hardirqs_on+0x9c/0x150
[  154.980584][  T789]  ? __pfx_kthread+0x10/0x10
[  154.982544][  T789]  ret_from_fork+0x3fc/0x770
[  154.984481][  T789]  ? __pfx_ret_from_fork+0x10/0x10
[  154.986680][  T789]  ? __switch_to_asm+0x39/0x70
[  154.988829][  T789]  ? __switch_to_asm+0x33/0x70
[  154.990915][  T789]  ? __pfx_kthread+0x10/0x10
[  154.992939][  T789]  ret_from_fork_asm+0x1a/0x30
[  154.995005][  T789]  </TASK>
[  154.996333][  T789] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  154.999454][  T789] CPU: 1 UID: 0 PID: 789 Comm: kworker/1:2 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  155.004825][  T789] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  155.009010][  T789] Workqueue: events l2cap_chan_timeout
[  155.011250][  T789] Call Trace:
[  155.012635][  T789]  <TASK>
[  155.013888][  T789]  dump_stack_lvl+0x99/0x250
[  155.016024][  T789]  ? __asan_memcpy+0x40/0x70
[  155.018139][  T789]  ? __pfx_dump_stack_lvl+0x10/0x10
[  155.020553][  T789]  ? __pfx__printk+0x10/0x10
[  155.022566][  T789]  panic+0x2db/0x790
[  155.024242][  T789]  ? __pfx_panic+0x10/0x10
[  155.026123][  T789]  ? show_trace_log_lvl+0x4fb/0x550
[  155.028265][  T789]  ? ret_from_fork_asm+0x1a/0x30
[  155.030337][  T789]  __warn+0x31b/0x4b0
[  155.032172][  T789]  ? __queue_work+0xd62/0xfe0
[  155.034264][  T789]  ? __queue_work+0xd62/0xfe0
[  155.036379][  T789]  report_bug+0x2be/0x4f0
[  155.038318][  T789]  ? __queue_work+0xd62/0xfe0
[  155.040249][  T789]  ? __queue_work+0xd62/0xfe0
[  155.042226][  T789]  ? __queue_work+0xd64/0xfe0
[  155.044261][  T789]  handle_bug+0x84/0x160
[  155.046103][  T789]  exc_invalid_op+0x1a/0x50
[  155.048181][  T789]  asm_exc_invalid_op+0x1a/0x20
[  155.050404][  T789] RIP: 0010:__queue_work+0xd62/0xfe0
[  155.052726][  T789] Code: 42 80 3c 20 00 74 08 4c 89 ef e8 69 0f 99 00 49 8b 75 00 49 81 c7 78 01 00 00 48 c7 c7 40 e1 89 8b 4c 89 fa e8 1f 34 f9 ff 90 <0f> 0b 90 90 e9 f1 f4 ff ff e8 80 8b 35 00 90 0f 0b 90 e9 dd fc ff
[  155.061174][  T789] RSP: 0018:ffffc900045ef7a8 EFLAGS: 00010046
[  155.063730][  T789] RAX: fcc1709d7d925000 RBX: 0000000000000020 RCX: ffff8881062a3980
[  155.067081][  T789] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  155.070550][  T789] RBP: 1ffff11023aad338 R08: ffff888136624293 R09: 1ffff11026cc4852
[  155.073876][  T789] R10: dffffc0000000000 R11: ffffed1026cc4853 R12: dffffc0000000000
[  155.077353][  T789] R13: ffff88811fc4c960 R14: ffff888100004008 R15: ffff88811d569978
[  155.080701][  T789]  ? __queue_work+0xd61/0xfe0
[  155.082642][  T789]  ? __queue_delayed_work+0xe1/0x2d0
[  155.084824][  T789]  queue_delayed_work_on+0x18b/0x280
[  155.087035][  T789]  ? __pfx___cancel_work+0x10/0x10
[  155.089214][  T789]  ? __pfx_queue_delayed_work_on+0x10/0x10
[  155.091847][  T789]  ? hci_conn_drop+0x14d/0x280
[  155.094005][  T789]  l2cap_chan_del+0x285/0x5e0
[  155.095957][  T789]  l2cap_chan_close+0x597/0x980
[  155.098012][  T789]  ? __pfx_l2cap_chan_close+0x10/0x10
[  155.100228][  T789]  ? process_scheduled_works+0x9ef/0x17b0
[  155.102701][  T789]  l2cap_chan_timeout+0x158/0x390
[  155.104879][  T789]  ? process_scheduled_works+0x9ef/0x17b0
[  155.107444][  T789]  process_scheduled_works+0xae1/0x17b0
[  155.109828][  T789]  ? __pfx_process_scheduled_works+0x10/0x10
[  155.112274][  T789]  worker_thread+0x8a0/0xda0
[  155.114302][  T789]  kthread+0x711/0x8a0
[  155.116063][  T789]  ? __pfx_worker_thread+0x10/0x10
[  155.118182][  T789]  ? __pfx_kthread+0x10/0x10
[  155.120136][  T789]  ? _raw_spin_unlock_irq+0x23/0x50
[  155.122439][  T789]  ? lockdep_hardirqs_on+0x9c/0x150
[  155.124734][  T789]  ? __pfx_kthread+0x10/0x10
[  155.126726][  T789]  ret_from_fork+0x3fc/0x770
[  155.128815][  T789]  ? __pfx_ret_from_fork+0x10/0x10
[  155.131062][  T789]  ? __switch_to_asm+0x39/0x70
[  155.133109][  T789]  ? __switch_to_asm+0x33/0x70
[  155.135165][  T789]  ? __pfx_kthread+0x10/0x10
[  155.137155][  T789]  ret_from_fork_asm+0x1a/0x30
[  155.139193][  T789]  </TASK>
[  155.141334][  T789] Kernel Offset: disabled
[  155.143145][  T789] Rebooting in 86400 seconds..

VM DIAGNOSIS:
13:35:04  Registers:
info registers vcpu 0

CPU#0
RAX=a2fc71f871b63d00 RBX=ffffffff81974d58 RCX=a2fc71f871b63d00 RDX=0000000000000001
RSI=ffffffff8d9822d0 RDI=ffffffff8be28d40 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa10cf0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b66b4a3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8650000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c32ecc2 CR3=0000000110776000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00ff000000000000 ff00000000000000 XMM05=0000000000000123 00002d002b326c6c
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffff0000 ffff00ff00000000 XMM09=00000000000001e1 00302d0032326c6c
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000050 RBX=0000000000000050 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900045eef50
R8 =ffff888021860237 R9 =1ffff1100430c046 R10=dffffc0000000000 R11=ffffffff85474610
R12=dffffc0000000000 R13=ffffffff99ac48e6 R14=ffffffff99dc9760 R15=0000000000000000
RIP=ffffffff8547468c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c50000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c38ec18 CR3=0000000110776000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=f5523db010c9d02f e2b17b0b0b1c0eaa XMM03=6bf42ac24d6e77bb ed410d69fb5b67dc
XMM04=d87f87de35b1d01d 9f7b485aaaedf1f5 XMM05=e2b979d2df37d87f 87de35b1d01d9f7b
XMM06=485aaaedf1f56bf4 2ac24d6e77bbed41 XMM07=0d69fb5b67dcf552 3db010c9d02fe2b1
XMM08=7b0b0b1c0eaa0644 a7a64bd6c0fc9dda XMM09=0000000000000000 00007f2b0e611c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
