last executing test programs:

919.314514ms ago: executing program 0 (id=369):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0)
write$tun(r0, &(0x7f0000000380)={@val, @void, @eth={@multicast, @multicast, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x6}}, {@ipv4={0x800, @tipc={{0x15, 0x4, 0x1, 0x5, 0x74, 0x66, 0x0, 0xff, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x12}, @dev={0xac, 0x14, 0x14, 0x43}, {[@timestamp_addr={0x44, 0x4, 0x99, 0x1, 0xd}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x3, [{@multicast1, 0x7fffffff}, {@broadcast}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@broadcast, 0xd3b1}, {@multicast2, 0x4}, {@rand_addr=0x64010101, 0x5}, {@empty, 0x6}]}]}}, @payload_direct={{{{0x20, 0x0, 0x1, 0x1, 0x1, 0x8, 0x2, 0x2, 0x2, 0x0, 0x1, 0x5, 0x3, 0x3, 0x0, 0x347b, 0x2, 0x4e20, 0x4e22}, 0x0, 0x2}}}}}}}}, 0x8e)

773.086393ms ago: executing program 0 (id=372):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
socket$kcm(0x29, 0x3, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x5}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56d45, 0x70b923, 0x7ffff, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0x2, 0xb}, {0x3, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4800}, 0x10008004)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

648.971426ms ago: executing program 0 (id=379):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001200)={0x60000010})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xa000000d})
r3 = socket$netlink(0x10, 0x3, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000000))

549.963549ms ago: executing program 0 (id=381):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0, 0x500}, {&(0x7f0000001a00)=""/4109, 0x100d}, {0x0}, {&(0x7f00000004c0)=""/121, 0x79}], 0x4}, 0x8}, {{0x0, 0x0, 0x0}, 0xc}], 0x7, 0x40000020, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

497.482359ms ago: executing program 0 (id=384):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58)
close(0x3)

310.306746ms ago: executing program 0 (id=391):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20)
r1 = accept(r0, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000b80)={0x5dc, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{{0x8}, {0x254, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1b}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x26c, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x7ae, 0xc, 0x6, 0x7fff}, {0x9, 0xff, 0x2, 0x6}, {0x7fff, 0x80, 0x81, 0x8}, {0x2, 0x8, 0x5, 0x7ff}, {0x1, 0x52, 0x2, 0x2}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4b4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x6, 0x3, 0x2, 0x2}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x101, 0x80, 0x40, 0x6}, {0x5, 0x6, 0x9, 0xffffffff}, {0x7, 0x9, 0x5, 0x5}, {0x400, 0xb, 0xb8}, {0xffff, 0x6, 0x5, 0x5}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}]}}]}, 0x5dc}}, 0x8800)
syz_genetlink_get_family_id$wireguard(&(0x7f00000013c0), r1)

240.302626ms ago: executing program 1 (id=396):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000440)={0x2, &(0x7f0000000000)=[{0x74, 0x0, 0x1}, {0x6}]})

149.879946ms ago: executing program 1 (id=398):
unshare(0x20000400)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000b80)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc6751dfb265a0e3ccae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce935b0f327cb3f011a7d06602e2fd52347125907000000000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df262ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71d20fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada12f7a1525320e716660000000000b02b001500a710eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d3294000000000000000000000000000000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18a904c0e585a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7e197253a2b66c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1c77a211bfa02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0843b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f04c7f0be31491eb8c9ff68236c8600000000000000000000000066e034c81c3cab4e33fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f2243471221c15fa12313ffbfa7c2730302b66a99f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca20508"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x0, 0x0}, 0x10)

149.772564ms ago: executing program 2 (id=399):
r0 = socket$rxrpc(0x21, 0x2, 0x2)
connect$rxrpc(r0, &(0x7f0000002800)=@in4={0x21, 0x0, 0xa, 0x10}, 0x24)

149.613673ms ago: executing program 1 (id=400):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}}, 0x0)

75.873243ms ago: executing program 2 (id=401):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$sock_buf(r0, 0x1, 0x22, &(0x7f0000000040)=""/232, &(0x7f0000000180)=0xe8)

75.663296ms ago: executing program 1 (id=402):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f00000017c0)=""/130, 0x82}], 0x61}, 0xa1}], 0x1, 0x0, 0x0)

75.491116ms ago: executing program 2 (id=403):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="80000000", @ANYRES16=r2, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="0600cd0000030000590033"], 0x80}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

75.312299ms ago: executing program 1 (id=404):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_inet_SIOCADDRT(r0, 0x8918, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x78, 0x0, 0x0, 0x0, 0x3})

73.814745ms ago: executing program 2 (id=405):
r0 = socket(0x2a, 0x2, 0x0)
bind$xdp(r0, &(0x7f00000002c0)={0x2c, 0x5, 0x0, 0x16, r0}, 0x10)

73.586509ms ago: executing program 1 (id=406):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x6a040000)
socket(0x8, 0x3, 0x0)
socket(0x2, 0x3, 0xff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18)
socket$kcm(0x2, 0x1, 0x84)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
socket$inet6(0xa, 0x5, 0x0)
r3 = accept(r1, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000099f27e2ad67657d999cf86000000000000fdf5056ff976a5de96b8aef709cf4d874599e3b06ca2f99277db55189cf5aa5bd2efa71557a3c507ec8ceb6dbb45a32faaf073e6305a3d53e4160e1288788a830f779237bacbde94508e25ab1b566461086888294089fa7b62d7b798aef65ce9402a7dd1a03129c9205ba165d1b5059492ccbc9983311d94481a02fe5d378e902eb8bf2bc07d5dd7"], 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0xd0}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000060a0b0400000000000000000200000018000480140001800a0001007265646972000000040002800900010073797a30000000000900020073"], 0x6c}}, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0)
connect$unix(r3, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e)
r4 = socket(0x2, 0x5, 0x0)
sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000200)="f9", 0x1}], 0x1, 0x0, 0x0, 0x80020}], 0x1, 0x40c0)
sendmmsg$inet_sctp(r4, &(0x7f0000000bc0), 0x0, 0x0)

530.735µs ago: executing program 2 (id=407):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
listen(r0, 0x0)
ioctl$SIOCX25SDTEFACILITIES(r0, 0x89eb, &(0x7f0000000080)={0xa, 0x1, 0xfff, 0x80, 0x7, 0x0, 0x23, "e758cae9ffed00000000b24000", "39e80000000000000000e30300"})

0s ago: executing program 2 (id=408):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={0x0, 0x101}, &(0x7f0000000180)=0x8)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r1, 0x4)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:6390' (ED25519) to the list of known hosts.
syzkaller login: [   48.252739][ T5829] cgroup: Unknown subsys name 'net'
[   48.357567][ T5829] cgroup: Unknown subsys name 'cpuset'
[   48.361500][ T5829] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.017249][ T5829] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   60.297093][ T5875] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   60.301975][ T5875] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   60.305621][ T5875] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   60.309528][ T5875] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   60.312434][ T5875] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   60.316160][ T5880] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   60.320170][ T5880] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   60.326803][ T5880] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   60.332514][ T5880] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   60.335626][ T5880] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   60.361229][ T5242] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   60.366459][ T5242] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   60.369687][ T5242] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   60.377693][ T5242] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   60.394725][ T5242] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   60.630566][ T5874] chnl_net:caif_netlink_parms(): no params data found
[   60.688151][ T5877] chnl_net:caif_netlink_parms(): no params data found
[   60.720526][ T5881] chnl_net:caif_netlink_parms(): no params data found
[   60.842000][ T5874] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.844229][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.846720][ T5874] bridge_slave_0: entered allmulticast mode
[   60.849647][ T5874] bridge_slave_0: entered promiscuous mode
[   60.853098][ T5881] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.856506][ T5881] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.858881][ T5881] bridge_slave_0: entered allmulticast mode
[   60.861595][ T5881] bridge_slave_0: entered promiscuous mode
[   60.864743][ T5877] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.867311][ T5877] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.869424][ T5877] bridge_slave_0: entered allmulticast mode
[   60.872307][ T5877] bridge_slave_0: entered promiscuous mode
[   60.877088][ T5877] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.879225][ T5877] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.881313][ T5877] bridge_slave_1: entered allmulticast mode
[   60.884069][ T5877] bridge_slave_1: entered promiscuous mode
[   60.887073][ T5874] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.889137][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.891220][ T5874] bridge_slave_1: entered allmulticast mode
[   60.894001][ T5874] bridge_slave_1: entered promiscuous mode
[   60.897531][ T5881] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.899824][ T5881] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.901967][ T5881] bridge_slave_1: entered allmulticast mode
[   60.904588][ T5881] bridge_slave_1: entered promiscuous mode
[   60.960956][ T5877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.966469][ T5881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.971095][ T5874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.976106][ T5877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.981264][ T5881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.993653][ T5874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.034124][ T5874] team0: Port device team_slave_0 added
[   61.052858][ T5877] team0: Port device team_slave_0 added
[   61.057112][ T5881] team0: Port device team_slave_0 added
[   61.060910][ T5874] team0: Port device team_slave_1 added
[   61.064652][ T5881] team0: Port device team_slave_1 added
[   61.079149][ T5877] team0: Port device team_slave_1 added
[   61.107689][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.110479][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.123503][ T5874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.130292][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.132857][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.141517][ T5874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.170684][ T5881] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.173297][ T5881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.184145][ T5881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.189525][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.191552][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.199871][ T5877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.204392][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.206696][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.214227][ T5877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.219889][ T5881] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.222399][ T5881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.231989][ T5881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.276846][ T5874] hsr_slave_0: entered promiscuous mode
[   61.279140][ T5874] hsr_slave_1: entered promiscuous mode
[   61.297542][ T5881] hsr_slave_0: entered promiscuous mode
[   61.300008][ T5881] hsr_slave_1: entered promiscuous mode
[   61.302007][ T5881] debugfs: 'hsr0' already exists in 'hsr'
[   61.303738][ T5881] Cannot create hsr debugfs directory
[   61.347838][ T5877] hsr_slave_0: entered promiscuous mode
[   61.350181][ T5877] hsr_slave_1: entered promiscuous mode
[   61.352201][ T5877] debugfs: 'hsr0' already exists in 'hsr'
[   61.353951][ T5877] Cannot create hsr debugfs directory
[   61.588274][ T5874] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   61.598531][ T5874] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   61.603767][ T5874] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   61.620516][ T5874] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   61.654306][ T5877] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   61.664311][ T5877] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   61.670356][ T5877] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   61.686725][ T5877] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   61.733206][ T5881] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   61.747838][ T5881] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   61.753171][ T5881] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   61.761314][ T5881] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   61.819719][ T5874] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.843205][ T5874] 8021q: adding VLAN 0 to HW filter on device team0
[   61.867334][ T4361] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.870098][ T4361] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.882141][ T5877] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.892298][ T4361] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.894465][ T4361] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.929384][ T5877] 8021q: adding VLAN 0 to HW filter on device team0
[   61.951034][ T4361] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.953266][ T4361] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.960006][ T5881] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.979053][ T4361] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.981561][ T4361] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.002064][ T5881] 8021q: adding VLAN 0 to HW filter on device team0
[   62.041641][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.043906][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.081307][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.083667][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.140697][ T5874] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.187756][ T5874] veth0_vlan: entered promiscuous mode
[   62.208614][ T5874] veth1_vlan: entered promiscuous mode
[   62.244629][ T5874] veth0_macvtap: entered promiscuous mode
[   62.259811][ T5874] veth1_macvtap: entered promiscuous mode
[   62.275873][ T5881] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.282043][ T5877] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.290274][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.302933][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.327879][ T5902] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.333108][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.338553][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.354156][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.356020][ T5242] Bluetooth: hci0: command tx timeout
[   62.357038][ T5880] Bluetooth: hci1: command tx timeout
[   62.378936][ T5877] veth0_vlan: entered promiscuous mode
[   62.387771][ T5881] veth0_vlan: entered promiscuous mode
[   62.397538][ T5877] veth1_vlan: entered promiscuous mode
[   62.419313][ T5881] veth1_vlan: entered promiscuous mode
[   62.435788][ T5880] Bluetooth: hci2: command tx timeout
[   62.460787][ T5877] veth0_macvtap: entered promiscuous mode
[   62.470467][ T3799] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.472983][ T3799] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.482793][ T5877] veth1_macvtap: entered promiscuous mode
[   62.491103][ T5881] veth0_macvtap: entered promiscuous mode
[   62.504644][ T5881] veth1_macvtap: entered promiscuous mode
[   62.517793][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.527980][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.531643][ T4361] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.534043][ T4361] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.538137][ T5872] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.552720][ T5872] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.556834][ T5872] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.567480][ T5881] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.570850][ T5872] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.582722][ T5881] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.598066][ T5872] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.601124][ T5872] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.612542][ T5872] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.618423][ T5872] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.631130][ T5874] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   62.677117][   T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.682075][   T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.713698][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.720177][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.767142][   T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.769716][   T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.792860][ T4361] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.801922][ T4361] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.832686][ T5942] netlink: 224 bytes leftover after parsing attributes in process `syz.2.21'.
[   62.873213][ T5942] netlink: 'syz.2.21': attribute type 1 has an invalid length.
[   63.586617][ T5990] netlink: 12 bytes leftover after parsing attributes in process `syz.2.42'.
[   63.589553][ T5990] netlink: 'syz.2.42': attribute type 1 has an invalid length.
[   63.592180][ T5990] netlink: 'syz.2.42': attribute type 2 has an invalid length.
[   63.594626][ T5990] netlink: 80 bytes leftover after parsing attributes in process `syz.2.42'.
[   63.732547][ T6003] tipc: Can't bind to reserved service type 2
[   63.793403][ T6010] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   63.952284][ T6022] netlink: 24 bytes leftover after parsing attributes in process `syz.0.55'.
[   64.037969][ T6027] netlink: 16 bytes leftover after parsing attributes in process `syz.0.57'.
[   64.049632][ T6030] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   64.403482][ T6061] netlink: 'syz.0.72': attribute type 30 has an invalid length.
[   64.436711][ T5880] Bluetooth: hci1: command tx timeout
[   64.437245][ T5242] Bluetooth: hci0: command tx timeout
[   64.517300][ T5242] Bluetooth: hci2: command tx timeout
[   64.700591][ T6085] netlink: 12 bytes leftover after parsing attributes in process `syz.1.82'.
[   64.703484][ T6085] netlink: 20 bytes leftover after parsing attributes in process `syz.1.82'.
[   64.720461][ T6087] netlink: 'syz.0.83': attribute type 4 has an invalid length.
[   65.045908][ T6107] netlink: 277 bytes leftover after parsing attributes in process `syz.2.93'.
[   65.055927][ T6107] Zero length message leads to an empty skb
[   65.096574][ T6107] netlink: 'syz.2.93': attribute type 10 has an invalid length.
[   65.120177][ T6107] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.123854][ T6107] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   65.135625][ T6107] netlink: 'syz.2.93': attribute type 10 has an invalid length.
[   65.138079][ T6107] netlink: 40 bytes leftover after parsing attributes in process `syz.2.93'.
[   65.141149][ T6107] batadv0: entered promiscuous mode
[   65.142743][ T6107] batadv0: entered allmulticast mode
[   65.165467][ T6107] bond0: (slave batadv0): Releasing backup interface
[   65.173970][ T6107] bridge0: port 3(batadv0) entered blocking state
[   65.177783][ T6107] bridge0: port 3(batadv0) entered disabled state
[   65.182502][ T6114] netlink: 'syz.1.96': attribute type 282 has an invalid length.
[   65.253306][ T6122] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   65.258105][ T6107] syz.2.93 (6107) used greatest stack depth: 20472 bytes left
[   65.279948][ T6124] netlink: 16 bytes leftover after parsing attributes in process `syz.2.101'.
[   65.286148][ T5872] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[   65.289266][ T5872] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[   65.372469][ T6132] sctp: [Deprecated]: syz.0.104 (pid 6132) Use of int in max_burst socket option.
[   65.372469][ T6132] Use struct sctp_assoc_value instead
[   65.760985][ T6159] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[   65.774677][ T6159] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[   65.980099][ T6183] bridge: RTM_NEWNEIGH with invalid ether address
[   66.238165][ T6208] syzkaller1: entered promiscuous mode
[   66.239934][ T6208] syzkaller1: entered allmulticast mode
[   66.397024][ T6227] netlink: 'syz.0.146': attribute type 1 has an invalid length.
[   66.409502][ T6228] syz.2.147 uses obsolete (PF_INET,SOCK_PACKET)
[   66.442110][ T6227] bond2: (slave gretap1): making interface the new active one
[   66.448550][ T6227] bond2: (slave gretap1): Enslaving as an active interface with an up link
[   66.471618][ T6227] syz.0.146 (6227) used greatest stack depth: 19944 bytes left
[   66.517124][ T5242] Bluetooth: hci0: command tx timeout
[   66.526643][ T5242] Bluetooth: hci1: command tx timeout
[   66.588974][ T6241] trusted_key: syz.1.152 sent an empty control message without MSG_MORE.
[   66.596915][ T5242] Bluetooth: hci2: command tx timeout
[   66.659619][ T6245] Illegal XDP return value 4294967294 on prog  (id 24) dev N/A, expect packet loss!
[   66.895662][ T6261] netlink: 'syz.0.162': attribute type 10 has an invalid length.
[   66.902374][ T6261] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.907571][ T6261] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   66.933931][ T6261] syz.0.162 (6261) used greatest stack depth: 18424 bytes left
[   67.077677][ T6275] syz_tun: entered promiscuous mode
[   67.079917][ T6275] macvtap1: entered promiscuous mode
[   67.084385][ T6275] syz_tun: left promiscuous mode
[   67.236986][ T6285] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   68.152778][ T6350] gre1: entered allmulticast mode
[   68.190305][ T6352] __nla_validate_parse: 9 callbacks suppressed
[   68.190318][ T6352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.204'.
[   68.393502][ T6360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.208'.
[   68.595670][ T5242] Bluetooth: hci0: command tx timeout
[   68.606369][ T5242] Bluetooth: hci1: command tx timeout
[   68.610715][ T6328] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[   68.681008][ T6379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.214'.
[   68.685061][ T5242] Bluetooth: hci2: command tx timeout
[   68.745498][ T6383] validate_nla: 2 callbacks suppressed
[   68.745524][ T6383] netlink: 'syz.2.215': attribute type 1 has an invalid length.
[   68.780725][   T33] audit: type=1800 audit(1754976842.737:2): pid=6388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.217" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=430 res=0 errno=0
[   69.398619][ T6428] netlink: 8 bytes leftover after parsing attributes in process `syz.0.236'.
[   69.586673][ T6448] netlink: 12 bytes leftover after parsing attributes in process `syz.2.245'.
[   69.752182][ T6462] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   69.860693][ T6469] netlink: 'syz.2.255': attribute type 1 has an invalid length.
[   69.863279][ T6469] netlink: 228 bytes leftover after parsing attributes in process `syz.2.255'.
[   70.044110][ T6478] netlink: 52 bytes leftover after parsing attributes in process `syz.2.259'.
[   70.048495][ T6478] netlink: 'syz.2.259': attribute type 1 has an invalid length.
[   70.180737][    T9] cfg80211: failed to load regulatory.db
[   70.328425][ T6494] netlink: 24 bytes leftover after parsing attributes in process `syz.0.266'.
[   70.469294][ T6500] netlink: 'syz.0.269': attribute type 32 has an invalid length.
[   70.833335][ T6527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.282'.
[   71.159025][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.160990][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.402391][ T6561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   71.786057][ T6580] netlink: 'syz.1.303': attribute type 29 has an invalid length.
[   71.789656][ T6580] netlink: 4 bytes leftover after parsing attributes in process `syz.1.303'.
[   71.970187][ T5295] udevd[5295]: worker [6466] terminated by signal 33 (Unknown signal 33)
[   71.972953][ T5295] udevd[5295]: worker [6466] failed while handling '/devices/virtual/block/loop2'
[   72.199628][ T6617] bridge0: entered allmulticast mode
[   72.203504][ T6617] bridge_slave_1: left allmulticast mode
[   72.212722][ T6617] bridge_slave_1: left promiscuous mode
[   72.215460][ T6617] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.227613][ T6617] bridge_slave_0: left allmulticast mode
[   72.229472][ T6617] bridge_slave_0: left promiscuous mode
[   72.231328][ T6617] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.272594][ T6617] bridge0 (unregistering): left allmulticast mode
[   72.389375][ T6630] netlink: 'syz.0.326': attribute type 1 has an invalid length.
[   72.437543][ T6634] netlink: 'syz.1.327': attribute type 1 has an invalid length.
[   72.440215][ T6634] netlink: 'syz.1.327': attribute type 2 has an invalid length.
[   72.442619][ T6634] netlink: 'syz.1.327': attribute type 1 has an invalid length.
[   72.939462][ T6670] tipc: Started in network mode
[   72.941047][ T6670] tipc: Node identity 225efed36a1b, cluster identity 4711
[   72.943443][ T6670] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   72.955999][ T6670] syzkaller0: entered promiscuous mode
[   72.958935][ T6670] syzkaller0: entered allmulticast mode
[   73.003589][ T6670] tipc: Resetting bearer <eth:syzkaller0>
[   73.032664][ T6668] tipc: Resetting bearer <eth:syzkaller0>
[   73.061674][ T6668] tipc: Disabling bearer <eth:syzkaller0>
[   73.075429][ T5880] Bluetooth: hci2: command tx timeout
[   73.087318][ T6681] syzkaller0: entered promiscuous mode
[   73.089083][ T6681] syzkaller0: entered allmulticast mode
[   73.094604][   T12] syzkaller0: tun_net_xmit 70
[   73.097134][ T6681] syzkaller0: tun_chr_ioctl cmd 1074025677
[   73.099018][ T6681] syzkaller0: Linktype set failed because interface is up
[   73.200337][ T6689] tipc: Started in network mode
[   73.202192][ T6689] tipc: Node identity 06b714d134c1, cluster identity 4711
[   73.210218][ T6689] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   73.237732][ T6689] syzkaller0: entered promiscuous mode
[   73.239587][ T6689] syzkaller0: entered allmulticast mode
[   73.259508][ T6689] tipc: Resetting bearer <eth:syzkaller0>
[   73.266705][ T6688] tipc: Resetting bearer <eth:syzkaller0>
[   73.274281][ T6688] tipc: Disabling bearer <eth:syzkaller0>
[   73.825930][ T6735] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   73.829557][ T6735] syzkaller0: entered promiscuous mode
[   73.832242][ T6735] syzkaller0: entered allmulticast mode
[   73.853962][ T6735] tipc: Resetting bearer <eth:syzkaller0>
[   73.860561][ T6732] tipc: Resetting bearer <eth:syzkaller0>
[   73.869653][ T6732] tipc: Disabling bearer <eth:syzkaller0>
[   74.063848][ T6755] netlink: 'syz.1.383': attribute type 16 has an invalid length.
[   74.067238][ T6755] netlink: 'syz.1.383': attribute type 3 has an invalid length.
[   74.069725][ T6755] __nla_validate_parse: 5 callbacks suppressed
[   74.069735][ T6755] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.383'.
Connection to localhost closed by remote host.
[   75.086617][ T5872] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.155092][ T5880] Bluetooth: hci2: command 0x0405 tx timeout
[   75.172574][ T5872] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.241488][ T5872] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.326677][ T5872] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.438055][ T5872] bridge0: port 3(batadv0) entered disabled state
[   75.443567][ T5872] bridge_slave_1: left allmulticast mode
[   75.447786][ T5872] bridge_slave_1: left promiscuous mode
[   75.450167][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.458675][ T5872] bridge_slave_0: left allmulticast mode
[   75.460860][ T5872] bridge_slave_0: left promiscuous mode
[   75.463209][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.715109][ T5872] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   75.720006][ T5872] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   75.723845][ T5872] bond0 (unregistering): Released all slaves
[   75.792350][ T5872] tipc: Left network mode
[   75.953670][ T5872] hsr_slave_0: left promiscuous mode
[   75.957619][ T5872] hsr_slave_1: left promiscuous mode
[   75.959818][ T5872] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   75.962471][ T5872] batman_adv: batadv0: Removing interface: batadv_slave_0
[   75.966960][ T5872] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   75.969524][ T5872] batman_adv: batadv0: Removing interface: batadv_slave_1
[   75.981997][ T5872] veth1_macvtap: left promiscuous mode
[   75.986139][ T5872] veth0_macvtap: left promiscuous mode
[   75.988791][ T5872] veth1_vlan: left promiscuous mode
[   75.990642][ T5872] veth0_vlan: left promiscuous mode
[   76.293748][ T5872] team0 (unregistering): Port device team_slave_1 removed
[   76.314463][ T5872] team0 (unregistering): Port device team_slave_0 removed

VM DIAGNOSIS:
05:34:18  Registers:
info registers vcpu 0

CPU#0
RAX=14adaa0273a85300 RBX=ffffffff81968308 RCX=14adaa0273a85300 RDX=0000000000000001
RSI=ffffffff8d9b494b RDI=ffffffff8be32680 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa34730 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b78b3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8621000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b3431eff8 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000ff 0000000000000000 XMM01=6f6c2f7261762f00 6469756e69676f6c
XMM02=0000ffffffffff00 0000000000000000 XMM03=0000000000000000 000000000000002f
XMM04=74772f676f6c2f72 61762f00706d7475 XMM05=3f3f3f3f3f3f3f3f 3f3f3f3f3f3f3f3f
XMM06=9999999999999999 9999999999999999 XMM07=2020202020202020 2020202020202020
XMM08=0020202000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=d7c2c22ee49c9e00 RBX=ffffffff81968308 RCX=d7c2c22ee49c9e00 RDX=0000000000000001
RSI=ffffffff8d9b494b RDI=ffffffff8be32680 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa34730 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d4000
RIP=ffffffff8b78b3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c21000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c352056 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff81cea1ea ffffffff8168893f
XMM02=0000000000000000 ffffffff821ff198 XMM03=0000000000000000 0000000000000000
XMM04=00007fc806eed100 00007fc806387460 XMM05=00007fc806387478 00007fc8063874c0
XMM06=00007fc8063874b8 00007fc8063874b0 XMM07=00007fc8063874a8 00007fc8063874a0
XMM08=0000000000000000 00007fc806212ee7 XMM09=0000000000000000 00007fc806212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
