last executing test programs:

2.350633579s ago: executing program 1 (id=11):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0xd, 0x10, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000000100)='GPL\x00', 0x6, 0xfc, &(0x7f0000000440)=""/252, 0x0, 0x48}, 0x94)

2.212038339s ago: executing program 1 (id=14):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0)
readv(r1, &(0x7f0000000280)=[{&(0x7f0000000140)=""/183, 0xb7}, {0x0}], 0x2)

2.092575678s ago: executing program 1 (id=17):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @private1, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x3, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045)
shutdown(r0, 0x1)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e21, 0xfffffff9, @empty, 0x40}}, 0x9, 0x4000}, 0x90)

1.962797367s ago: executing program 1 (id=19):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300)
setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4)
setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4)
recvmmsg(r0, &(0x7f0000008cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000006b00)=""/31, 0x1f}, 0x5}], 0x1, 0x45833af92e4b39ff, 0x0)

1.681416417s ago: executing program 0 (id=22):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)

1.582684212s ago: executing program 1 (id=23):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8)
sendto$inet6(r0, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0xffff, 0x0, @rand_addr=' \x01\x00', 0x200}, 0x1c)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8)

1.582496087s ago: executing program 0 (id=24):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r0, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0)

1.461293582s ago: executing program 0 (id=25):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x0, 'rr\x00'}, 0x2c)

1.46109024s ago: executing program 0 (id=26):
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$netlink(r0, 0x10e, 0x9, 0x0, &(0x7f0000000040)=0xd)

1.382058361s ago: executing program 1 (id=27):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x4, 0x3, 0xfffffffffffffffd, 0x0, 0x2, 0x80000000, 0xfffffffffffffffe}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x6, 0x9, 0x5, 0x0, 0x7fffffff}, 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0)
close(r2)
socket$inet6(0xa, 0x2, 0x3a)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})

1.381785102s ago: executing program 0 (id=28):
socket$packet(0x11, 0x3, 0x300)
pipe(&(0x7f0000000300))
socket$rds(0x15, 0x5, 0x0)
pipe(&(0x7f0000000100))
socket$xdp(0x2c, 0x3, 0x0)
unshare(0x2c020400)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300, 0x3, 0x0, 0x40000, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x1000000000002, 0x0, 0x0, 0x5, 0x4, 0x80000001, 0x7fffffffffffffff}, 0x0, 0x0)

1.241931888s ago: executing program 2 (id=29):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0)
preadv(r1, &(0x7f0000000100), 0xa, 0x0, 0x0)

1.182004968s ago: executing program 2 (id=30):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x98, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0xc, 0x2, 0x0, 0x1, [{0x4, 0x102}, {0x4}]}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)

1.12259859s ago: executing program 2 (id=31):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@typedef={0x3}]}, {0x0, [0x30, 0x0, 0x5f]}}, 0x0, 0x29}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x9, &(0x7f0000000000)={0xfffffffe}, 0x8}, 0x94)

1.122315404s ago: executing program 2 (id=32):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r0}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x41}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r1}, 0x38)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r2}, 0x10)

190.348606ms ago: executing program 0 (id=33):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00')
unshare(0x6a040000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000ffffff7f000000007c0000040042800c00018006000600800a00000c0002ffb71ae63151dd31707260d48d52"], 0x30}, 0x1, 0x0, 0x0, 0x2400c011}, 0xc000)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, 0x0, 0x4000041)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0xfffffffe, {0x6, 0x0, 0x8100, 0x0, {0x2}, {0xfff1, 0xc}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x400}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000022c0)=[{{0x0, 0x0, &(0x7f0000001140)=[{0x0}, {&(0x7f0000002200)=""/157, 0x9d}], 0x2}, 0x4}], 0x1, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300)
recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x38c}}, 0x8001)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)=@o_path={0x0, r4, 0x4000, r4}, 0x18)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000480)=r4, 0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, 0x0, 0x44805)
socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000240)={'wg1\x00'})

190.023984ms ago: executing program 2 (id=34):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4a20, 0x6, @empty, 0x4}}, 0x0, 0x5, 0x3fc, 0x0, 0x32}, 0x9c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback, 0x80000000}}, 0x0, 0x0, 0x300, 0x0, 0xcd, 0x7fffffff}, 0x9c)

0s ago: executing program 2 (id=35):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x10, 0x803, 0x0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmmsg$inet_sctp(r0, &(0x7f0000009d40), 0x0, 0x90)
socket$nl_generic(0x10, 0x3, 0x10)
socket$alg(0x26, 0x5, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket(0x15, 0x5, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$alg(0x26, 0x5, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:47523' (ED25519) to the list of known hosts.
syzkaller login: [   56.016096][ T5812] cgroup: Unknown subsys name 'net'
[   56.127133][ T5812] cgroup: Unknown subsys name 'cpuset'
[   56.132319][ T5812] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.109401][ T5812] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   62.547121][ T5218] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   62.554788][ T5218] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   62.557671][ T5218] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   62.561087][ T5218] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   62.564260][ T5218] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   62.593619][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   62.599778][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   62.602913][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   62.617933][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   62.620818][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   62.634881][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   62.637710][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   62.640820][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   62.653829][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   62.660337][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   62.778854][ T5827] chnl_net:caif_netlink_parms(): no params data found
[   62.861129][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.864043][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.866573][ T5827] bridge_slave_0: entered allmulticast mode
[   62.869769][ T5827] bridge_slave_0: entered promiscuous mode
[   62.877755][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.879941][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.882404][ T5827] bridge_slave_1: entered allmulticast mode
[   62.886934][ T5827] bridge_slave_1: entered promiscuous mode
[   62.933890][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.952658][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.000269][ T5827] team0: Port device team_slave_0 added
[   63.019444][ T5827] team0: Port device team_slave_1 added
[   63.050943][ T5831] chnl_net:caif_netlink_parms(): no params data found
[   63.060796][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.063522][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.071152][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.087507][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.089722][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.098152][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.128926][ T5834] chnl_net:caif_netlink_parms(): no params data found
[   63.172453][ T5827] hsr_slave_0: entered promiscuous mode
[   63.175122][ T5827] hsr_slave_1: entered promiscuous mode
[   63.187926][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.190298][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.192617][ T5831] bridge_slave_0: entered allmulticast mode
[   63.196693][ T5831] bridge_slave_0: entered promiscuous mode
[   63.206730][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.208959][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.211376][ T5831] bridge_slave_1: entered allmulticast mode
[   63.215103][ T5831] bridge_slave_1: entered promiscuous mode
[   63.278233][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.302134][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.345753][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.348533][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.350830][ T5834] bridge_slave_0: entered allmulticast mode
[   63.354263][ T5834] bridge_slave_0: entered promiscuous mode
[   63.376379][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.379277][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.381840][ T5834] bridge_slave_1: entered allmulticast mode
[   63.385846][ T5834] bridge_slave_1: entered promiscuous mode
[   63.391240][ T5831] team0: Port device team_slave_0 added
[   63.408381][ T5831] team0: Port device team_slave_1 added
[   63.444708][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.448160][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.450778][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.459278][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.472702][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.476486][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.478725][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.489447][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.545103][ T5834] team0: Port device team_slave_0 added
[   63.567938][ T5834] team0: Port device team_slave_1 added
[   63.575656][ T5831] hsr_slave_0: entered promiscuous mode
[   63.578878][ T5831] hsr_slave_1: entered promiscuous mode
[   63.581858][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   63.585690][ T5831] Cannot create hsr debugfs directory
[   63.609383][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.611570][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.619500][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.643028][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.645930][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.655114][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.747013][ T5834] hsr_slave_0: entered promiscuous mode
[   63.749457][ T5834] hsr_slave_1: entered promiscuous mode
[   63.751850][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   63.754877][ T5834] Cannot create hsr debugfs directory
[   63.779455][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   63.790557][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   63.800934][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   63.834092][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   63.981121][ T5831] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   63.999270][ T5831] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   64.005097][ T5831] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   64.025897][ T5831] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   64.101064][ T5834] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   64.107930][ T5834] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   64.114378][ T5834] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   64.125939][ T5834] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   64.161080][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.187579][ T5827] 8021q: adding VLAN 0 to HW filter on device team0
[   64.201068][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.203574][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.217883][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.220212][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.272205][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.331190][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   64.348234][  T142] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.350972][  T142] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.358756][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.376339][  T142] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.379308][  T142] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.387245][ T5834] 8021q: adding VLAN 0 to HW filter on device team0
[   64.400727][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.402985][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.406753][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.409140][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.499389][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.535589][ T5827] veth0_vlan: entered promiscuous mode
[   64.543154][ T5827] veth1_vlan: entered promiscuous mode
[   64.570985][ T5827] veth0_macvtap: entered promiscuous mode
[   64.587115][ T5827] veth1_macvtap: entered promiscuous mode
[   64.594229][   T54] Bluetooth: hci0: command tx timeout
[   64.613970][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.625036][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.632710][ T5827] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.637505][ T5827] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.640331][ T5827] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.642937][ T5827] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.672068][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.695606][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.743540][   T54] Bluetooth: hci1: command tx timeout
[   64.746410][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.753980][   T54] Bluetooth: hci2: command tx timeout
[   64.756052][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.801373][ T5831] veth0_vlan: entered promiscuous mode
[   64.807760][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.812699][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.818697][ T5831] veth1_vlan: entered promiscuous mode
[   64.855185][ T5834] veth0_vlan: entered promiscuous mode
[   64.866963][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   64.895722][ T5834] veth1_vlan: entered promiscuous mode
[   64.935780][ T5831] veth0_macvtap: entered promiscuous mode
[   64.949170][ T5831] veth1_macvtap: entered promiscuous mode
[   64.962511][ T5834] veth0_macvtap: entered promiscuous mode
[   64.976093][ T5834] veth1_macvtap: entered promiscuous mode
[   64.981535][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.990007][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.002991][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.014586][ T5831] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.017293][ T5831] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.019930][ T5831] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.022474][ T5831] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.046079][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.068150][ T5834] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.070944][ T5834] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.083082][ T5834] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.090760][ T5834] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.209363][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.212516][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.261388][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.270584][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.272560][  T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.280794][  T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.308956][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.312885][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.611959][ T5915] syz.1.6 uses obsolete (PF_INET,SOCK_PACKET)
[   65.851642][ T5925] netlink: 27 bytes leftover after parsing attributes in process `syz.0.12'.
[   66.642267][ T5899] IPVS: starting estimator thread 0...
[   66.663474][   T54] Bluetooth: hci0: command tx timeout
[   66.745532][ T5958] IPVS: using max 62 ests per chain, 148800 per kthread
[   66.823480][   T54] Bluetooth: hci2: command tx timeout
[   66.823547][ T5218] Bluetooth: hci1: command tx timeout
[   66.837586][ T5966] syzkaller0: entered promiscuous mode
[   66.839557][ T5966] syzkaller0: entered allmulticast mode
[   68.064678][ T5977] netlink: 'syz.0.33': attribute type 13 has an invalid length.
[   68.067675][ T5977] netlink: 'syz.0.33': attribute type 17 has an invalid length.
[   68.184347][ T5985] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   68.755058][ T5218] Bluetooth: hci0: command tx timeout
[   68.790263][ T5977] eql: refused to change device tx_queue_len
[   68.792392][ T5977] A link change request failed with some changes committed already. Interface eql may have been left with an inconsistent configuration, please check.
[   68.801639][ T5984] batadv0: entered promiscuous mode
[   68.807937][ T5984] vlan2: entered promiscuous mode
[   68.909046][ T5218] Bluetooth: hci1: command tx timeout
[   68.909084][   T54] Bluetooth: hci2: command tx timeout
[   69.028664][ T6002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.39'.
[   69.035364][ T6002] wg1: entered promiscuous mode
[   69.037295][ T6002] wg1: entered allmulticast mode
[   69.077115][ T6005] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.38'.
[   69.222804][ T6013] Illegal XDP return value 580008320 on prog  (id 6) dev N/A, expect packet loss!
[   70.823552][   T54] Bluetooth: hci0: command tx timeout
[   70.983451][   T54] Bluetooth: hci1: command tx timeout
[   70.993500][   T54] Bluetooth: hci2: command tx timeout
[   71.228778][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.230896][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   86.594516][  T792] cfg80211: failed to load regulatory.db
[  132.667637][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.670016][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  185.953532][ T5839] Bluetooth: hci0: command 0x0406 tx timeout
[  185.955974][   T54] Bluetooth: hci1: command 0x0406 tx timeout
[  191.063399][ T5218] Bluetooth: hci2: command 0x0406 tx timeout
[  194.109779][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  194.112388][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  255.547114][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  255.549179][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  316.986424][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  316.988441][ T1362] ieee802154 phy1 wpan1: encryption failed: -22

VM DIAGNOSIS:
00:53:52  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000000a RBX=ffffffff8ec7e938 RCX=00000000000007d9 RDX=0000000000000000
RSI=0000000000000000 RDI=ffff888022b73980 RBP=00000000000007d9 RSP=ffffc9000444f8e8
R8 =0000000000000000 R9 =ffffffff8666683d R10=dffffc0000000000 R11=fffffbfff1d8fd25
R12=0000000000000000 R13=0000000000000000 R14=ffff888022b744c0 R15=ffff888022b74470
RIP=ffffffff819e4542 RFL=00000003 [------C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055e2cef77600 CR3=0000000027486000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=2aaadc12cd970800 RBX=ffffffff81976c78 RCX=2aaadc12cd970800 RDX=0000000000000001
RSI=ffffffff8d998b14 RDI=ffffffff8be29dc0 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f5b R9 =1ffff11026cc65eb R10=dffffc0000000000 R11=ffffed1026cc65ec
R12=ffffffff8fa1f3f0 R13=0000000000000001 R14=0000000000000001 R15=1ffff110201d2000
RIP=ffffffff8b6f34d3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055e2cef78680 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000ff0000000000 XMM03=0000000000000000 00000000000000ff
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
