last executing test programs:

40.093139285s ago: executing program 2 (id=563):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000780)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @multicast1}, @info_request={0xf, 0x0, 0x0, 0x8001, 0x2}}}}}, 0x0)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
getsockopt$llc_int(r1, 0x10c, 0x5, 0x0, &(0x7f0000000080))
close(r0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x9)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='westwood\x00', 0x9)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
socket$isdn_base(0x22, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, 0x0, 0x800)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
writev(0xffffffffffffffff, &(0x7f0000000080), 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mem_disconnect\x00', r6, 0x0, 0xffffffff}, 0x18)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newtaction={0x490, 0x30, 0xffff, 0x0, 0x0, {}, [{0x47c, 0x1, [@m_police={0x478, 0x1, 0x0, 0x0, {{0xb}, {0x44c, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0x200, 0x2, 0x2, 0x1, 0x80000000, 0x7, 0x4d68, 0xdee, 0x40, 0x7fe, 0x9, 0x6, 0xa, 0x80000001, 0x5, 0x5, 0xfffeffff, 0x7f, 0xe0, 0x4, 0x32c, 0x1, 0x8000000, 0xc1, 0x6, 0x3, 0x84, 0x4, 0x0, 0x400, 0x7, 0x9, 0x101, 0x0, 0x9, 0x600, 0x7fffffff, 0x0, 0x7, 0x40, 0x8989, 0x8, 0x8, 0x1, 0x11f70b4, 0x2, 0x6, 0x1d6e, 0x5, 0x201, 0x6, 0x7, 0x7790, 0x7, 0x2, 0x0, 0x7, 0x8, 0x7, 0x1000, 0x30a5cf24, 0x3ff, 0x8, 0x4, 0x80000001, 0x9, 0xf, 0x8, 0x6, 0x6, 0x2, 0x1000, 0x3, 0xd94, 0x4c8b, 0x1, 0x3ff, 0x9, 0x9, 0x5, 0x1, 0x100, 0x7, 0x6, 0x9, 0xf, 0x7, 0x7, 0x100000, 0x1, 0x8, 0x6, 0xff, 0x1000, 0x2, 0x5, 0x1, 0x0, 0x1, 0x4, 0x97, 0x7, 0x8, 0x5, 0x4, 0x3, 0x7, 0xf28c, 0xff, 0x3ab928f4, 0xa638b41, 0x9, 0x2, 0x3, 0x9, 0x9, 0x6, 0x8, 0x1, 0x7, 0x1, 0x1, 0x6, 0x100, 0x2, 0xbe7b, 0x401, 0x8, 0x400, 0x9, 0xe, 0xfffffffe, 0x10001, 0xa05, 0x7ff, 0x5, 0x7, 0x0, 0x7, 0x1ff, 0x9, 0x3, 0x4, 0x7, 0x8000, 0x3ff, 0xa4c9, 0xff, 0xff, 0x8, 0x1d, 0x80000000, 0x6, 0x400, 0x3, 0x2176, 0x9, 0xfffffff8, 0x81, 0x3, 0x2, 0x5, 0x9, 0x4, 0x100, 0x7fff, 0xf8, 0x419c5faf, 0xfffff800, 0x27, 0x8000, 0x1c00000, 0x800, 0xffc0000, 0x8, 0x0, 0x6, 0x8, 0x0, 0xd8ec, 0x8, 0xfffffffc, 0x8, 0xf, 0x101, 0x4, 0x80, 0x183, 0x6, 0x7ff, 0x4, 0x400, 0xfa, 0x3, 0x400, 0x800, 0x7, 0x59, 0x80, 0x6, 0x5, 0x2, 0xfffeffff, 0x8, 0xc, 0xea, 0x101, 0xa000000, 0xb, 0x0, 0x631, 0x400, 0x1, 0xfffffff7, 0x6, 0x4, 0xd, 0x3, 0x0, 0x0, 0x6, 0x1, 0xfffffff9, 0x6, 0xc, 0x3, 0x0, 0x9, 0x0, 0xa8a, 0x200, 0xb45e, 0x6, 0x5, 0x3, 0x0, 0x0, 0x7, 0x27a, 0x0, 0x9cb, 0xffff, 0xbeb, 0x3, 0x81, 0x3, 0x8, 0x7, 0xff, 0x2, 0x6, 0x7, 0x8, 0x4, 0x10, 0xf]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x7, 0x101, 0x0, 0x3, {0x4, 0x2, 0x100, 0x7, 0xffff, 0x10001}, {0xff, 0x2, 0x2, 0x3, 0x2}, 0xc2d, 0x3, 0x2}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x490}}, 0x0)

39.176117215s ago: executing program 2 (id=579):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000040000000007000000000000000300000008000500000000000000d922e4bf5470be9b001400048005000300050000000500030002000000bcf65a2da87437fc45f884e08def5709b410471fd63d013060a80d2e587509ed37199bf25d29daf4efd3d3cfd2968cc5574e6b3c01cd640b680edc585842606d7ac0"], 0x38}, 0x1, 0x0, 0x0, 0xc082}, 0xc000)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, &(0x7f0000000880)=""/4096, &(0x7f0000000080)=0x1000)
r4 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r4, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4)
setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xbac5}], 0x38)
r5 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r5, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x240, 0x240, 0x0, 0x350, 0x370, 0x350, 0x4, 0x0, {[{{@arp={@private, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_to_batadv\x00', 'batadv0\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "bc2e329885ea3654891fbae8c6c66e07212432bde429bcda7deb48d85c6f5e269c2021c8f8dc09af0b3f2e10e8ac79cc67e264613c4be6838ee2daacf7926a6e"}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr, @broadcast}}}, {{@arp={@private, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0\x00', 'veth0_to_bond\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488)
r6 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r6, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000600)=ANY=[], 0x8)
recvmmsg(r6, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
setsockopt$inet6_int(r6, 0x29, 0x4, &(0x7f0000000000)=0x7f, 0x4)
sendto$inet6(r6, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYRES8=r7, @ANYRES32, @ANYRES8=r0, @ANYBLOB='\b\x00'], 0x38}}, 0x0)
write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24)

38.985214414s ago: executing program 1 (id=583):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000100)={@val={0x2000}, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x300, 0x0, 0x29, 0x0, @gue={{0x2}, "ebc7a1e0ff5befe1fdbc66e400d7e83306de422b4a81099bda"}}}}}}}, 0x4f)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xd8}}, 0x800)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000040)=0xfff, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet(0x2, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x0, 0x0, 0x0, 0x2}, 0x94)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004000000130317"], 0x328}}, 0x84)

38.712840159s ago: executing program 1 (id=586):
syz_emit_ethernet(0x3b6, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0xdb0b, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb04619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f604d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x3, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e10090cf6164000000020000000000000000000000ffff008879e66485201a0015ca837c7357a0274500f700000000000000000080"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0)

38.712621392s ago: executing program 1 (id=587):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000005050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}}, 0x0)

38.605002664s ago: executing program 0 (id=588):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='fscache_relinquish\x00', r0, 0x0, 0x40000}, 0x18)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x5e20, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffffff}}}, 0x84)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x453, 0x4, 0x70bd24, 0x25dfdbbf}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x4048800)
r3 = socket(0x18, 0x0, 0xc)
r4 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r5, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b4050000200080066110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0b2ae13d922e6235592ce847e2566c43d72918a897323fd0723043c47c896ce0bce66a245ad9d6817fd98cd824498949714ffaac8a6f77ef0000ca5d82054d54d53cd2b6db714e75d9bdae214fa68a0557eb2c5ca683a4b6fcfcff0bffffffffffd47042eaebfa6fa26fa7a347c7faa8e700458c60897d4a6148a1c11428427c40de60beacf871ab5c2ff88a02084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632f7a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e0359c41cf3626e1230bc1cd4c02c460ceb44276e9bd94d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd00000000000fbf940e6652d357474ed5f816f66ac3027460ae66317f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf5a43e05c92bfef0dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486ad8dd600000000000000000000c7766ea7c581782c0d90f42a85303835fc291c25d29e6bead5d7360f2e1929d7736ebc8558c4506407d3046022bdf25485bd5442169e9b4c1278343581b7a06f65e8ea6b042c4fd08381e5000000000000006398d6480000001a723b91030000006480304c66b217aea0156ce9eef911fe5b7370f79987303ecb3aabc53c60014a0101ab766754f596b41da9534d12b8306a1b36cf3b03f0d790879f523eabfbee83d8bd472ef69660cf6ec897106c51e54a17497f384c4956b41f3843e7c878b1e11316d8ddae1c6c3b85aaf7a9fcaf8f5d6186c42542d68ba72682c938d3c0a2e6e10eed71b1d31c9f300b41745329bf34495c63e43fb896e4903fb0fae54a8f0fe3b48a5b29d279070647e65097c8ecf32a15080000000000000001007ba4a70a084bd994ac5e00000000000000000000000000351a30cd97f83d72631d0fe92efa974a53f4dc1eb9a86df632a6d463688123f64d42a919bcfc44a90ffd680200000091f842a91c977f6075d07e39e669b0713af0498a99bf5261cb3269d499a5202d7a08b33ade7b38829b9bd39619688d5e9af22170ef83e5b92cbb32b655c45de1c154aad81bf64351668a3f76d5afa958aff76249e0ffdf8e45155536a1a44bfcbfbfd232af000052f9002a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB="05"], 0x10)
close(r6)
close(0x4)
sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
epoll_create1(0x80000)
syz_80211_inject_frame(&(0x7f0000000180)=@device_b, 0x0, 0x0)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
socket$kcm(0x10, 0x3, 0x10)

38.602795777s ago: executing program 1 (id=589):
syz_emit_ethernet(0x3b6, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0xdb0b, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb04619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f604d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x3, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e10090cf61640000000200000000f5ff0000000000ffff008879e66485201a0015ca837c7357a0274500f700"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0)

38.414773934s ago: executing program 1 (id=590):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r1 = socket$kcm(0x10, 0x2, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='dctcp\x00', 0x6)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x0)

37.401905203s ago: executing program 1 (id=591):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x114, 0x1b, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0xf}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0)
unshare(0x6a040000)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x300080c1)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x4, [@type_tag={0x10, 0x0, 0x0, 0x12, 0x5}, @float={0xc, 0x0, 0x0, 0x10, 0x4}, @decl_tag={0xb, 0x0, 0x0, 0x11, 0x1, 0x7}, @typedef={0xb, 0x0, 0x0, 0x8, 0x4}, @fwd={0xc}, @typedef={0x7, 0x0, 0x0, 0x8, 0x4}]}, {0x0, [0x30, 0x6e]}}, &(0x7f0000000180)=""/160, 0x68, 0xa0, 0x1, 0x9}, 0x28)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="040100001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800050001200000080001"], 0x104}}, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
close(0x4) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x114, 0x1b, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0xf}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) (async)
unshare(0x6a040000) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x300080c1) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x4, [@type_tag={0x10, 0x0, 0x0, 0x12, 0x5}, @float={0xc, 0x0, 0x0, 0x10, 0x4}, @decl_tag={0xb, 0x0, 0x0, 0x11, 0x1, 0x7}, @typedef={0xb, 0x0, 0x0, 0x8, 0x4}, @fwd={0xc}, @typedef={0x7, 0x0, 0x0, 0x8, 0x4}]}, {0x0, [0x30, 0x6e]}}, &(0x7f0000000180)=""/160, 0x68, 0xa0, 0x1, 0x9}, 0x28) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="040100001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800050001200000080001"], 0x104}}, 0x0) (async)

36.74699597s ago: executing program 0 (id=592):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8}]}}]}, 0x3c}}, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x12)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0)

35.667949414s ago: executing program 2 (id=593):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000ec0)={0x103c, r2, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x5}, @ETHTOOL_A_LINKMODES_OURS={0x1010, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x8}]}, 0x103c}, 0x1, 0x0, 0x0, 0x8040}, 0x20000000)
r3 = accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x80000)
socketpair(0x21, 0x6, 0x5be09a99, &(0x7f0000000180)={<r4=>0xffffffffffffffff})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010000305000000090000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800130001000000080014"], 0x44}}, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000240)={0x3ff, 0xfffffffffffffffe, 0x7, 0x0, 0x0, [{{r3}, 0x7}, {{r0}, 0x800}, {{r0}, 0x6}, {{r4}, 0x80000001}, {{r5}, 0x7}, {{r0}}, {{r1}, 0x200}]})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r6, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}, 0x7f}, {{&(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x80, 0x0}, 0x3}], 0x2, 0x832b, 0x0)
r7 = socket$inet6(0xa, 0x2, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
sendto$inet6(r7, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
setsockopt$sock_int(r6, 0x1, 0x2a, &(0x7f0000000000)=0x1, 0x4)
sendto$inet6(r7, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYRES16=r5], 0x378}}, 0x0)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r8, 0x800448d2, &(0x7f00000001c0)="ab1c257de930f89f4507962983f3b154eb627ecd9a47")

34.902430543s ago: executing program 0 (id=594):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10004}, {{0x0, 0x0, 0x0}, 0x40000001}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000000)=""/194, 0xc2}, {&(0x7f0000000340)=""/257, 0x101}, {&(0x7f0000000a40)=""/4118, 0x1016}, {&(0x7f00000006c0)=""/220, 0xdc}], 0x4}, 0x7ffffffc}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000003e00)=""/4108, 0x100c}, {&(0x7f0000000800)=""/242, 0xf2}, {&(0x7f0000000480)=""/96, 0x60}, {&(0x7f0000000240)=""/140, 0x8c}, {&(0x7f0000002e00)=""/4089, 0xff9}, {&(0x7f0000000900)=""/261, 0x105}], 0x6}, 0xb0}, {{0x0, 0x0, 0x0}, 0xa}], 0x8, 0x6c0e000000000000, 0x0)

32.433668911s ago: executing program 2 (id=595):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000340)={0x14, r1, 0x607, 0x70bd2a}, 0x14}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xfffffffd, 0x20}, 0xc)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback, 0x200}, 0x1c)
sendmmsg$sock(r2, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="89", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="1fa6948f", 0x4}], 0x1}}], 0x2, 0x20044044)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000002c0)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x80000000, 0x25dfdbfb, {0xa, 0x80, 0x80, 0x8, 0x0, 0x0, 0xfd, 0x8, 0x3500}, [@RTA_SRC={0x8, 0x2, @broadcast}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000050)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0)
shutdown(r2, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b40000000000000069107700000000000400000000000100950000000000000088a94fcb2dbc3e75c158affa3ed4"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48)

31.452299938s ago: executing program 0 (id=596):
syz_emit_ethernet(0x3b6, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0xdb0b, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb04619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f604d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x3, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e10090cf6164000000020000000000000000000000ffff008879e66485201a0015ca837c7357a0274500f70000000000000007ffff"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0)

30.111009934s ago: executing program 0 (id=597):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r1 = socket$kcm(0x10, 0x2, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='dctcp\x00', 0x6)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x0)

27.970236594s ago: executing program 0 (id=598):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000002c0)={0x2, 0x0, @private=0xa010101}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r3 = openat$cgroup_devices(r2, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYBLOB='c 75:*\tmm'], 0x3d)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
r7 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
bind$ax25(r7, &(0x7f0000000040)={{0x3, @bcast, 0x1}, [@null={0x40, 0x10}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
setsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={<r8=>0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000040)={0x2, 0x206, 0x8ce, 0xf44, r8}, 0x10)
ppoll(&(0x7f0000000100)=[{r4}], 0x1, &(0x7f0000000180)={0x77359400}, 0x0, 0x0)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10)
connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00)
r10 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r10, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10)
connect$llc(r10, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x2, 0x0, @random='\x00\x00\x00\x00\x00\a'}, 0x10)
r11 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x6, 0x81, 0x5}, 0x10)
connect$llc(r11, &(0x7f0000000340)={0x1a, 0x322, 0x0, 0x0, 0x4, 0x90, @random}, 0x10)
syz_init_net_socket$llc(0x1a, 0x801, 0x0)

27.372003456s ago: executing program 2 (id=599):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x6, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r1, @ANYBLOB="0000000000000000c30000000001000095"], &(0x7f0000000180)='GPL\x00', 0x8}, 0x94)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5809c4b5290601040000000000000000020000000c00078008000640000000020500010006000000050005000a0000000500000011000300686173683a69702c706f7274000000000cbf4e4ff3fc11231eb9259083a333a06563a239f4bdc7937af58775fc1545576b136363eb5ee07076c322eb04770bcbcdc7d6685ddaba666185df7aa54e73e8ed45fda210f3e49d55e35599e57d1b9b6da9c41de5ff6f6fce"], 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x400a0c0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x6, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r1, @ANYBLOB="0000000000000000c30000000001000095"], &(0x7f0000000180)='GPL\x00', 0x8}, 0x94) (async)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5809c4b5290601040000000000000000020000000c00078008000640000000020500010006000000050005000a0000000500000011000300686173683a69702c706f7274000000000cbf4e4ff3fc11231eb9259083a333a06563a239f4bdc7937af58775fc1545576b136363eb5ee07076c322eb04770bcbcdc7d6685ddaba666185df7aa54e73e8ed45fda210f3e49d55e35599e57d1b9b6da9c41de5ff6f6fce"], 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x400a0c0) (async)

25.327603631s ago: executing program 2 (id=600):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x28, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0x700}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0xfe98, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2, 0xf1}, @TCA_FQ_FLOW_MAX_RATE={0xfffffffffffffd87, 0x7, 0x3}]}}]}, 0x48}}, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0) (async)
r6 = syz_init_net_socket$ax25(0x3, 0x2, 0xca)
setsockopt$ax25_int(r6, 0x101, 0x2, &(0x7f0000000000)=0xfffffffb, 0x4)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_ZERO(r7, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="97a4d9", @ANYRES16=0x0, @ANYBLOB="2c7225bd7000fedbdf251000000008000600fcffffff08000400010400000800060080000000080006000000000864000180140003000a010101000000000000000000000000060001000a000000060004004e200000060002001d000000060001000a0000000c0007000100000024000000060004004e2400000600010002000000060002002f00000008000b0073697000"], 0x98}, 0x1, 0x0, 0x0, 0x8000}, 0x44) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000700)={'ipvlan0\x00', <r9=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500f0e66f1500000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r9], 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000100001040100"/20, @ANYRES32=0x0, @ANYBLOB="1ef0000140000000140012800b0001006970366772650000040002801400030069703667726530000000000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r10 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100), 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r10, 0x0, 0xaa, 0x39, &(0x7f0000000300)="8478c4a8e3f284382449b918aae4db1bbe49f380474465aea1818fbfeda06c94252f0da3995d6c3f7d938c699e6c424f16cfae9b266787bb994e38b49e28a5bd9e398ef5d8663112487f60dc4f692e8ef0d8663908c582bdd7a944062837bcbae243c497fc591c16e05e8d504888aaf4abb102e01583b4abde63c793ec625a0f833acb7f9b9788709588562ae68958b2ccd8d506da4e39b60ecced78762a6aa64c803e8c79c0512f7f1b", &(0x7f0000000280)=""/57, 0x3, 0x0, 0x17, 0xc5, &(0x7f00000003c0)="e0fcfad45322d5cb3709621d54292a7815184cceb4cb8f", &(0x7f0000000400)="ca0ebf76c1878b8fbba029f709b18905ea11f457ca4389274b61b3fb1a5ab53a5ecfd8daa03eaed58204e4c5efac7d99e91013f7e8ee6220a7360d8943805f6115fa0d7ab00e8e1cb75b9beea73d57c7198605d0a879017f9c0d0c308d3170cc6939e3d664c76ddba7caceb6e2140002ac09e53f9c28624eaeaa6772a11709d2b88165dcc819dda8a8ec48bd787cf1c0db7654cd49159c17bdae9e8fd473de4a0adc76271357cec9155bcd1e80bcb4a738b7f5abcd0aa65f162720d37fb63a09d364e4555e", 0x0, 0x0, 0x8000000}, 0x50)

21.396284116s ago: executing program 32 (id=591):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x114, 0x1b, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0xf}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0)
unshare(0x6a040000)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x300080c1)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x4, [@type_tag={0x10, 0x0, 0x0, 0x12, 0x5}, @float={0xc, 0x0, 0x0, 0x10, 0x4}, @decl_tag={0xb, 0x0, 0x0, 0x11, 0x1, 0x7}, @typedef={0xb, 0x0, 0x0, 0x8, 0x4}, @fwd={0xc}, @typedef={0x7, 0x0, 0x0, 0x8, 0x4}]}, {0x0, [0x30, 0x6e]}}, &(0x7f0000000180)=""/160, 0x68, 0xa0, 0x1, 0x9}, 0x28)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="040100001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800050001200000080001"], 0x104}}, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
close(0x4) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x114, 0x1b, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0xf}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) (async)
unshare(0x6a040000) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x300080c1) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x4, [@type_tag={0x10, 0x0, 0x0, 0x12, 0x5}, @float={0xc, 0x0, 0x0, 0x10, 0x4}, @decl_tag={0xb, 0x0, 0x0, 0x11, 0x1, 0x7}, @typedef={0xb, 0x0, 0x0, 0x8, 0x4}, @fwd={0xc}, @typedef={0x7, 0x0, 0x0, 0x8, 0x4}]}, {0x0, [0x30, 0x6e]}}, &(0x7f0000000180)=""/160, 0x68, 0xa0, 0x1, 0x9}, 0x28) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="040100001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800050001200000080001"], 0x104}}, 0x0) (async)

7.405725402s ago: executing program 33 (id=598):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000002c0)={0x2, 0x0, @private=0xa010101}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r3 = openat$cgroup_devices(r2, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYBLOB='c 75:*\tmm'], 0x3d)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
r7 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
bind$ax25(r7, &(0x7f0000000040)={{0x3, @bcast, 0x1}, [@null={0x40, 0x10}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
setsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={<r8=>0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000040)={0x2, 0x206, 0x8ce, 0xf44, r8}, 0x10)
ppoll(&(0x7f0000000100)=[{r4}], 0x1, &(0x7f0000000180)={0x77359400}, 0x0, 0x0)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10)
connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00)
r10 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r10, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10)
connect$llc(r10, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x2, 0x0, @random='\x00\x00\x00\x00\x00\a'}, 0x10)
r11 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x6, 0x81, 0x5}, 0x10)
connect$llc(r11, &(0x7f0000000340)={0x1a, 0x322, 0x0, 0x0, 0x4, 0x90, @random}, 0x10)
syz_init_net_socket$llc(0x1a, 0x801, 0x0)

0s ago: executing program 34 (id=600):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x28, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0x700}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0xfe98, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2, 0xf1}, @TCA_FQ_FLOW_MAX_RATE={0xfffffffffffffd87, 0x7, 0x3}]}}]}, 0x48}}, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0) (async)
r6 = syz_init_net_socket$ax25(0x3, 0x2, 0xca)
setsockopt$ax25_int(r6, 0x101, 0x2, &(0x7f0000000000)=0xfffffffb, 0x4)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_ZERO(r7, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="97a4d9", @ANYRES16=0x0, @ANYBLOB="2c7225bd7000fedbdf251000000008000600fcffffff08000400010400000800060080000000080006000000000864000180140003000a010101000000000000000000000000060001000a000000060004004e200000060002001d000000060001000a0000000c0007000100000024000000060004004e2400000600010002000000060002002f00000008000b0073697000"], 0x98}, 0x1, 0x0, 0x0, 0x8000}, 0x44) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000700)={'ipvlan0\x00', <r9=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500f0e66f1500000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r9], 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000100001040100"/20, @ANYRES32=0x0, @ANYBLOB="1ef0000140000000140012800b0001006970366772650000040002801400030069703667726530000000000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r10 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100), 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r10, 0x0, 0xaa, 0x39, &(0x7f0000000300)="8478c4a8e3f284382449b918aae4db1bbe49f380474465aea1818fbfeda06c94252f0da3995d6c3f7d938c699e6c424f16cfae9b266787bb994e38b49e28a5bd9e398ef5d8663112487f60dc4f692e8ef0d8663908c582bdd7a944062837bcbae243c497fc591c16e05e8d504888aaf4abb102e01583b4abde63c793ec625a0f833acb7f9b9788709588562ae68958b2ccd8d506da4e39b60ecced78762a6aa64c803e8c79c0512f7f1b", &(0x7f0000000280)=""/57, 0x3, 0x0, 0x17, 0xc5, &(0x7f00000003c0)="e0fcfad45322d5cb3709621d54292a7815184cceb4cb8f", &(0x7f0000000400)="ca0ebf76c1878b8fbba029f709b18905ea11f457ca4389274b61b3fb1a5ab53a5ecfd8daa03eaed58204e4c5efac7d99e91013f7e8ee6220a7360d8943805f6115fa0d7ab00e8e1cb75b9beea73d57c7198605d0a879017f9c0d0c308d3170cc6939e3d664c76ddba7caceb6e2140002ac09e53f9c28624eaeaa6772a11709d2b88165dcc819dda8a8ec48bd787cf1c0db7654cd49159c17bdae9e8fd473de4a0adc76271357cec9155bcd1e80bcb4a738b7f5abcd0aa65f162720d37fb63a09d364e4555e", 0x0, 0x0, 0x8000000}, 0x50)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:23947' (ED25519) to the list of known hosts.
syzkaller login: [   56.795913][ T5832] cgroup: Unknown subsys name 'net'
[   56.949644][ T5832] cgroup: Unknown subsys name 'cpuset'
[   56.956537][ T5832] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.038954][ T5832] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   64.371573][ T5853] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   64.377586][ T5855] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   64.381970][ T5234] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   64.410534][ T5855] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   64.413336][ T5855] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   64.413924][ T5861] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   64.416662][ T5855] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   64.421548][ T5861] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   64.423549][ T5855] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   64.427573][ T5861] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   64.427676][ T5857] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   64.434453][ T5855] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   64.437025][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   64.440667][ T5855] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   64.443477][ T5855] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.754141][ T5854] chnl_net:caif_netlink_parms(): no params data found
[   64.948766][ T5850] chnl_net:caif_netlink_parms(): no params data found
[   64.957091][ T5858] chnl_net:caif_netlink_parms(): no params data found
[   64.993854][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.998303][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.002311][ T5854] bridge_slave_0: entered allmulticast mode
[   65.007323][ T5854] bridge_slave_0: entered promiscuous mode
[   65.044414][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.047379][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.050432][ T5854] bridge_slave_1: entered allmulticast mode
[   65.054788][ T5854] bridge_slave_1: entered promiscuous mode
[   65.151330][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.178627][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.220609][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.223189][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.226590][ T5850] bridge_slave_0: entered allmulticast mode
[   65.230756][ T5850] bridge_slave_0: entered promiscuous mode
[   65.236604][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.239115][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.241799][ T5858] bridge_slave_0: entered allmulticast mode
[   65.246345][ T5858] bridge_slave_0: entered promiscuous mode
[   65.267746][ T5854] team0: Port device team_slave_0 added
[   65.270536][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.272964][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.275901][ T5850] bridge_slave_1: entered allmulticast mode
[   65.279032][ T5850] bridge_slave_1: entered promiscuous mode
[   65.292679][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.295825][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.298418][ T5858] bridge_slave_1: entered allmulticast mode
[   65.301360][ T5858] bridge_slave_1: entered promiscuous mode
[   65.305354][ T5854] team0: Port device team_slave_1 added
[   65.330200][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.358204][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.362026][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.364950][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.373262][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.399248][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.401561][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.412618][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.419049][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.440862][ T5850] team0: Port device team_slave_0 added
[   65.445416][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.462050][ T5850] team0: Port device team_slave_1 added
[   65.507241][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.509548][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.518233][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.524802][ T5858] team0: Port device team_slave_0 added
[   65.538958][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.541228][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.550591][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.557318][ T5858] team0: Port device team_slave_1 added
[   65.563067][ T5854] hsr_slave_0: entered promiscuous mode
[   65.567174][ T5854] hsr_slave_1: entered promiscuous mode
[   65.611615][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.614101][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.624292][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.662737][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.665764][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.674778][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.702541][ T5850] hsr_slave_0: entered promiscuous mode
[   65.706672][ T5850] hsr_slave_1: entered promiscuous mode
[   65.709228][ T5850] debugfs: 'hsr0' already exists in 'hsr'
[   65.711198][ T5850] Cannot create hsr debugfs directory
[   65.807335][ T5858] hsr_slave_0: entered promiscuous mode
[   65.810659][ T5858] hsr_slave_1: entered promiscuous mode
[   65.813662][ T5858] debugfs: 'hsr0' already exists in 'hsr'
[   65.816267][ T5858] Cannot create hsr debugfs directory
[   66.096421][ T5854] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   66.115522][ T5854] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   66.131093][ T5854] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   66.147231][ T5854] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   66.178586][ T5850] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   66.208427][ T5850] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   66.228928][ T5850] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   66.238723][ T5850] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   66.281767][ T5858] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   66.293995][ T5858] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   66.302041][ T5858] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   66.311953][ T5858] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   66.427951][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.463418][ T5854] 8021q: adding VLAN 0 to HW filter on device team0
[   66.488159][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.496424][ T3548] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.498842][ T3548] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.506347][ T5853] Bluetooth: hci0: command tx timeout
[   66.506386][ T5855] Bluetooth: hci2: command tx timeout
[   66.520483][ T5850] 8021q: adding VLAN 0 to HW filter on device team0
[   66.524560][ T5853] Bluetooth: hci1: command tx timeout
[   66.537632][ T3548] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.540171][ T3548] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.546106][ T3548] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.548688][ T3548] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.566729][ T3548] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.569272][ T3548] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.577495][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.613432][ T5858] 8021q: adding VLAN 0 to HW filter on device team0
[   66.639234][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.642197][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.650055][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.652992][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.720519][ T5858] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   66.727858][ T5858] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   66.849767][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.861809][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.904140][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.913788][ T5850] veth0_vlan: entered promiscuous mode
[   66.938397][ T5850] veth1_vlan: entered promiscuous mode
[   66.943056][ T5854] veth0_vlan: entered promiscuous mode
[   66.965888][ T5854] veth1_vlan: entered promiscuous mode
[   66.993706][ T5850] veth0_macvtap: entered promiscuous mode
[   66.999900][ T5858] veth0_vlan: entered promiscuous mode
[   67.009150][ T5858] veth1_vlan: entered promiscuous mode
[   67.017837][ T5850] veth1_macvtap: entered promiscuous mode
[   67.031733][ T5854] veth0_macvtap: entered promiscuous mode
[   67.043270][ T5854] veth1_macvtap: entered promiscuous mode
[   67.058000][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.073496][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.083751][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.090640][ T5858] veth0_macvtap: entered promiscuous mode
[   67.096128][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.106590][ T5858] veth1_macvtap: entered promiscuous mode
[   67.113116][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.125831][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.133868][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.137988][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.140718][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.143654][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.157791][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.167455][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.176782][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.189217][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.222999][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.227897][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.239244][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.242370][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.285240][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.288028][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.334743][ T1233] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.337956][ T1233] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.351873][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.356901][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.393739][ T1233] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.405199][ T1233] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.432767][ T5850] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   67.436110][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.447323][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.489126][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.492381][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.601009][ T5924] syz.1.4 uses obsolete (PF_INET,SOCK_PACKET)
[   67.655042][ T5930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5'.
[   67.670698][   T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   67.673569][ T5930] Zero length message leads to an empty skb
[   67.676810][   T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   67.680732][   T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   67.690102][   T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   67.694992][ T5932] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'.
[   67.754647][ T5935] openvswitch: netlink: IPv6 tunnel dst address is zero
[   67.771356][ T5937] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8'.
[   67.775503][ T5935] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7'.
[   68.585246][ T5853] Bluetooth: hci1: command tx timeout
[   68.587970][ T5853] Bluetooth: hci2: command tx timeout
[   68.589816][ T5853] Bluetooth: hci0: command tx timeout
[   68.905621][ T5970] IPv6: addrconf: prefix option has invalid lifetime
[   69.151302][ T5983] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   69.157587][ T5983] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.352854][ T5990] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   69.361073][ T5990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23'.
[   69.407679][ T5993] IPv6: addrconf: prefix option has invalid lifetime
[   69.460126][ T5995] openvswitch: netlink: IPv6 tunnel dst address is zero
[   69.465995][ T5995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.25'.
[   70.256548][ T6002] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   70.409181][ T6004] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.413447][ T6004] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.529475][ T6004] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   70.542561][ T6004] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   70.664500][ T5855] Bluetooth: hci2: command tx timeout
[   70.670750][ T5855] Bluetooth: hci1: command tx timeout
[   70.705039][ T5983] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   70.708323][ T5983] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.722965][ T5883] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.735993][ T5883] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.740478][ T5883] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.743432][ T5883] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.782957][ T6015] netlink: 4 bytes leftover after parsing attributes in process `syz.1.31'.
[   70.790523][ T5983] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   70.795897][ T5983] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.839599][ T6015] bridge_slave_1: left allmulticast mode
[   70.842374][ T6015] bridge_slave_1: left promiscuous mode
[   70.844924][ T6015] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.849867][ T6015] bridge_slave_0: left allmulticast mode
[   70.851697][ T6015] bridge_slave_0: left promiscuous mode
[   70.853643][ T6015] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.862202][ T6016] netlink: 'syz.0.30': attribute type 11 has an invalid length.
[   70.914100][ T6018] netlink: 308 bytes leftover after parsing attributes in process `syz.0.30'.
[   70.917924][ T6018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.30'.
[   70.927318][ T6011] netlink: 'syz.0.30': attribute type 1 has an invalid length.
[   70.946172][ T5983] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   70.949363][ T5983] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.958086][ T6018] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[   70.987543][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   70.990279][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.048188][ T6022] macvtap0: refused to change device tx_queue_len
[   71.080694][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   71.083815][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.115315][ T6026] IPv6: addrconf: prefix option has invalid lifetime
[   71.120278][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   71.123495][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.128177][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   71.137943][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.157950][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   71.168112][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.249672][ T6033] netlink: 'syz.1.36': attribute type 6 has an invalid length.
[   71.257193][ T6030] netlink: 'syz.1.36': attribute type 6 has an invalid length.
[   71.361241][ T6046] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   71.398749][ T6049] IPv6: addrconf: prefix option has invalid lifetime
[   71.532121][ T6054] IPv6: addrconf: prefix option has invalid lifetime
[   71.909532][ T6063] netlink: 'syz.0.45': attribute type 6 has an invalid length.
[   71.912553][ T6063] netlink: 'syz.0.45': attribute type 6 has an invalid length.
[   72.011326][ T6071] netlink: 'syz.0.49': attribute type 1 has an invalid length.
[   72.046828][ T6071] bond1 (unregistering): Released all slaves
[   72.098913][ T6079] IPv6: addrconf: prefix option has invalid lifetime
[   72.411140][ T6096] netlink: 155800 bytes leftover after parsing attributes in process `syz.1.55'.
[   72.520775][ T6101] syz.1.56 (6101) used greatest stack depth: 18616 bytes left
[   72.541601][ T6103] IPv6: addrconf: prefix option has invalid lifetime
[   72.747134][ T5855] Bluetooth: hci1: command tx timeout
[   72.754636][ T5855] Bluetooth: hci2: command tx timeout
[   72.788633][ T6116] IPv6: addrconf: prefix option has invalid lifetime
[   73.032413][ T6120] infiniband syz1: set active
[   73.034065][ T6120] infiniband syz1: added bond0
[   73.062495][ T6120] RDS/IB: syz1: added
[   73.065505][ T6120] smc: adding ib device syz1 with port count 1
[   73.067637][ T6120] smc:    ib device syz1 port 1 has pnetid 
[   73.315106][ T6124] syzkaller0: create flow: hash 376307991 index 1
[   73.336373][ T6124] syzkaller0: delete flow: hash 376307991 index 1
[   74.382388][ T6128] tun0: tun_chr_ioctl cmd 1074025673
[   74.386364][ T6130] tun0: tun_chr_ioctl cmd 21731
[   74.388975][ T6129] tun0: tun_chr_ioctl cmd 2148045848
[   74.462477][ T6133] __nla_validate_parse: 2 callbacks suppressed
[   74.462495][ T6133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.67'.
[   74.678379][ T6148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.72'.
[   74.681112][ T6148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.72'.
[   75.701214][ T6181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.82'.
[   75.759933][ T6186] netlink: 'syz.1.82': attribute type 1 has an invalid length.
[   75.828949][ T6186] gretap1: entered promiscuous mode
[   76.375823][ T6223] netlink: 4 bytes leftover after parsing attributes in process `syz.2.94'.
[   76.638555][ T6244] tipc: Started in network mode
[   76.640755][ T6244] tipc: Node identity 2e946591ef15, cluster identity 4711
[   76.648586][ T6244] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   76.652271][ T6245] syzkaller0: entered promiscuous mode
[   76.654137][ T6245] syzkaller0: entered allmulticast mode
[   76.709144][ T6245] tipc: Resetting bearer <eth:syzkaller0>
[   76.738921][ T6245] tipc: Disabling bearer <eth:syzkaller0>
[   76.780877][ T6259] netlink: 8 bytes leftover after parsing attributes in process `syz.0.108'.
[   76.813766][ T6261] netlink: 16 bytes leftover after parsing attributes in process `syz.2.109'.
[   76.819160][ T6261] netlink: 16 bytes leftover after parsing attributes in process `syz.2.109'.
[   76.863283][ T6266] netlink: ct family unspecified
[   76.871496][ T6266] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   77.096114][ T6278] IPv6: addrconf: prefix option has invalid lifetime
[   77.143558][ T6280] netlink: 12 bytes leftover after parsing attributes in process `syz.0.115'.
[   77.594652][ T6293] netlink: 'syz.0.119': attribute type 1 has an invalid length.
[   77.704780][ T6266] netlink: 40 bytes leftover after parsing attributes in process `syz.1.110'.
[   77.892719][ T6304] IPv6: addrconf: prefix option has invalid lifetime
[   78.244032][ T6328] syzkaller0: entered promiscuous mode
[   78.246983][ T6328] syzkaller0: entered allmulticast mode
[   78.479969][ T6336] IPv6: addrconf: prefix option has invalid lifetime
[   79.504760][ T6353] tap0: tun_chr_ioctl cmd 1074025676
[   79.506630][ T6353] tap0: owner set to 0
[   79.529060][ T6353] macvlan2: entered allmulticast mode
[   79.530845][ T6353] veth1_vlan: entered allmulticast mode
[   79.535598][ T6353] veth1_vlan: left allmulticast mode
[   79.630257][ T5885] IPVS: starting estimator thread 0...
[   79.710178][ T6368] netlink: 'syz.2.144': attribute type 4 has an invalid length.
[   79.719203][ T6359] IPVS: using max 48 ests per chain, 115200 per kthread
[   79.770102][ T6370] netlink: 'syz.1.145': attribute type 75 has an invalid length.
[   79.796622][ T6370] __nla_validate_parse: 36 callbacks suppressed
[   79.796642][ T6370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.145'.
[   80.086996][ T6394] IPv6: addrconf: prefix option has invalid lifetime
[   80.154138][ T6398] netlink: 28 bytes leftover after parsing attributes in process `syz.2.153'.
[   80.160507][ T6398] netlink: 28 bytes leftover after parsing attributes in process `syz.2.153'.
[   80.171263][ T6396] syzkaller1: entered promiscuous mode
[   80.173700][ T6396] syzkaller1: entered allmulticast mode
[   80.451999][ T6424] netlink: 12 bytes leftover after parsing attributes in process `syz.1.163'.
[   80.456913][ T6424] smc: net device bond0 applied user defined pnetid SYZ
[   80.531029][ T6427] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   80.542171][ T6427] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.563396][ T6431] tipc: Started in network mode
[   80.565693][ T6431] tipc: Node identity 923781dc64c1, cluster identity 4711
[   80.570627][ T6431] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   80.579551][ T6431] syzkaller0: entered promiscuous mode
[   80.581846][ T6431] syzkaller0: entered allmulticast mode
[   80.595550][ T6436] netlink: 28 bytes leftover after parsing attributes in process `syz.1.167'.
[   80.613459][ T6427] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   80.620781][ T6427] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.632801][ T6431] tipc: Resetting bearer <eth:syzkaller0>
[   80.662192][ T6440] tipc: Resetting bearer <eth:syzkaller0>
[   80.679922][ T6440] tipc: Disabling bearer <eth:syzkaller0>
[   80.690468][ T6436] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.167'.
[   80.699077][ T6427] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   80.703037][ T6427] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.773163][ T6427] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   80.782858][ T6427] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.886046][ T5883] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   80.888678][ T5883] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.902422][ T5883] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   80.909595][ T5883] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.913272][ T6452] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   80.932458][ T5883] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   80.937109][ T5883] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.949786][ T6451] tipc: Disabling bearer <eth:syzkaller0>
[   80.960083][ T5883] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   80.964930][ T5883] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.130704][ T6460] ip6tnl1: entered promiscuous mode
[   81.132560][ T6460] ip6tnl1: entered allmulticast mode
[   81.137570][ T6460] team0: Device ip6tnl1 is of different type
[   81.211313][ T6466] netlink: 28 bytes leftover after parsing attributes in process `syz.0.175'.
[   81.220426][ T6466] netlink: 'syz.0.175': attribute type 7 has an invalid length.
[   81.223683][ T6466] netlink: 'syz.0.175': attribute type 8 has an invalid length.
[   81.229261][ T6466] netlink: 4 bytes leftover after parsing attributes in process `syz.0.175'.
[   81.269005][ T6468] IPv6: addrconf: prefix option has invalid lifetime
[   81.353898][ T6472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.177'.
[   81.361206][ T6472] netlink: 24 bytes leftover after parsing attributes in process `syz.2.177'.
[   81.522964][ T6484] IPv6: addrconf: prefix option has invalid lifetime
[   81.598902][ T6493] IPv6: addrconf: prefix option has invalid lifetime
[   81.650015][ T6495] netlink: 'syz.0.185': attribute type 1 has an invalid length.
[   82.135471][ T6525] Bluetooth: MGMT ver 1.23
[   82.443868][ T6540] IPv6: addrconf: prefix option has invalid lifetime
[   82.484802][ T6542] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   82.502655][ T6541] delete_channel: no stack
[   82.829851][ T6561] IPVS: set_ctl: invalid protocol: 33 0.0.0.0:20000
[   84.086457][ T6632] bridge_slave_1: left allmulticast mode
[   84.101520][ T6632] bridge_slave_1: left promiscuous mode
[   84.104040][ T6632] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.134837][ T6632] bridge_slave_0: left allmulticast mode
[   84.148407][ T6632] bridge_slave_0: left promiscuous mode
[   84.151489][ T6632] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.177763][ T6638] IPv6: addrconf: prefix option has invalid lifetime
[   84.275350][ T6645] sctp: [Deprecated]: syz.0.223 (pid 6645) Use of struct sctp_assoc_value in delayed_ack socket option.
[   84.275350][ T6645] Use struct sctp_sack_info instead
[   84.349531][ T6644] syzkaller0: entered promiscuous mode
[   84.351306][ T6644] syzkaller0: entered allmulticast mode
[   84.510554][ T6640] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[   84.513667][ T6640] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[   84.666221][ T6656] IPv6: addrconf: prefix option has invalid lifetime
[   84.852842][ T6672] vlan0: entered promiscuous mode
[   84.933815][ T6676] netlink: 'syz.2.235': attribute type 1 has an invalid length.
[   84.937068][ T6676] __nla_validate_parse: 12 callbacks suppressed
[   84.937081][ T6676] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.235'.
[   84.990337][ T6676] Dead loop on virtual device ip6_vti0, fix it urgently!
[   85.945717][ T6689] netlink: 1 bytes leftover after parsing attributes in process `syz.2.238'.
[   86.115905][ T6699] bridge0: port 3(erspan0) entered blocking state
[   86.118515][ T6699] bridge0: port 3(erspan0) entered disabled state
[   86.120761][ T6699] erspan0: entered allmulticast mode
[   86.123840][ T6699] erspan0: entered promiscuous mode
[   86.129529][ T6699] erspan0: left allmulticast mode
[   86.131497][ T6699] erspan0: left promiscuous mode
[   86.133909][ T6699] bridge0: port 3(erspan0) entered disabled state
[   86.220697][ T6709] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.308420][ T6709] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.348044][  T793] cfg80211: failed to load regulatory.db
[   86.379746][ T6709] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.387625][ T6728] IPv6: addrconf: prefix option has invalid lifetime
[   86.446234][ T6709] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.540786][ T5883] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.551126][ T5883] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.569572][ T5883] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.583763][ T5883] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.750730][ T6742] netlink: 'syz.2.257': attribute type 8 has an invalid length.
[   87.482040][ T6735] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   87.487150][ T6735] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[   87.496676][ T6735] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   87.499135][ T6735] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[   87.600960][ T6789] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   87.604044][ T6789] IPv6: NLM_F_CREATE should be set when creating new route
[   87.803405][ T6797] IPv6: addrconf: prefix option has invalid lifetime
[   87.913825][ T6806] netlink: 48 bytes leftover after parsing attributes in process `syz.2.271'.
[   87.919466][ T6806] netlink: 91 bytes leftover after parsing attributes in process `syz.2.271'.
[   88.225609][ T6832] netlink: 8 bytes leftover after parsing attributes in process `syz.0.277'.
[   88.228434][ T6832] netlink: 4 bytes leftover after parsing attributes in process `syz.0.277'.
[   88.231161][ T6832] netlink: 'syz.0.277': attribute type 14 has an invalid length.
[   88.233557][ T6832] netlink: 'syz.0.277': attribute type 13 has an invalid length.
[   88.242189][ T6832] netlink: 24 bytes leftover after parsing attributes in process `syz.0.277'.
[   88.526141][ T6848] bridge_slave_0: left allmulticast mode
[   88.528474][ T6848] bridge_slave_0: left promiscuous mode
[   88.530891][ T6848] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.537386][ T6848] bridge_slave_1: left allmulticast mode
[   88.539723][ T6848] bridge_slave_1: left promiscuous mode
[   88.542139][ T6848] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.549045][ T6848] bond0: (slave bond_slave_0): Releasing backup interface
[   88.554047][ T6848] bond0: (slave bond_slave_1): Releasing backup interface
[   88.559528][ T6848] team0: Port device team_slave_0 removed
[   88.563524][ T6848] team0: Port device team_slave_1 removed
[   88.566182][ T6848] batman_adv: batadv0: Removing interface: batadv_slave_0
[   88.570165][ T6848] batman_adv: batadv0: Removing interface: batadv_slave_1
[   88.688073][ T6850] IPv6: addrconf: prefix option has invalid lifetime
[   88.759442][ T6854] netlink: 'syz.1.284': attribute type 1 has an invalid length.
[   88.762162][ T6854] netlink: 224 bytes leftover after parsing attributes in process `syz.1.284'.
[   88.819096][ T6861] IPv6: addrconf: prefix option has invalid lifetime
[   88.941352][ T6869] gretap1: entered promiscuous mode
[   88.944912][ T6869] gretap1: entered allmulticast mode
[   89.320287][ T6875] netlink: 24 bytes leftover after parsing attributes in process `syz.0.292'.
[   89.532445][ T6886] netlink: 'syz.0.295': attribute type 4 has an invalid length.
[   89.826955][ T6900] syzkaller0: entered promiscuous mode
[   89.829402][ T6900] syzkaller0: entered allmulticast mode
[   91.337761][ T6946] netlink: 212296 bytes leftover after parsing attributes in process `syz.0.313'.
[   91.367433][ T6947] netlink: 'syz.2.310': attribute type 1 has an invalid length.
[   91.370616][ T6947] netlink: 4 bytes leftover after parsing attributes in process `syz.2.310'.
[   91.391126][ T5294] udevd[5294]: worker [6125] terminated by signal 33 (Unknown signal 33)
[   91.398727][ T5294] udevd[5294]: worker [6125] failed while handling '/devices/virtual/block/loop0'
[   91.521666][ T6957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.317'.
[   91.632585][ T6964] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   91.700205][ T6968] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   91.893042][ T6989] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   91.901367][ T6990] syzkaller0: entered promiscuous mode
[   91.903609][ T6990] syzkaller0: entered allmulticast mode
[   91.939322][ T6990] tipc: Resetting bearer <eth:syzkaller0>
[   91.975848][ T6990] tipc: Disabling bearer <eth:syzkaller0>
[   92.192616][ T7006] netlink: 48 bytes leftover after parsing attributes in process `syz.2.330'.
[   92.305534][ T7012] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[   92.308967][ T5885] IPVS: starting estimator thread 0...
[   92.332809][ T7018] can: request_module (can-proto-0) failed.
[   92.356237][ T7022] IPv6: addrconf: prefix option has invalid lifetime
[   92.404406][ T7020] IPVS: using max 38 ests per chain, 91200 per kthread
[   92.440580][ T7026] netlink: 16 bytes leftover after parsing attributes in process `syz.1.338'.
[   92.583856][ T7048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.344'.
[   93.487777][ T7070] IPv6: addrconf: prefix option has invalid lifetime
[   93.510942][ T7072] netlink: 'syz.0.353': attribute type 19 has an invalid length.
[   93.545277][ T7075] netlink: 24 bytes leftover after parsing attributes in process `syz.0.355'.
[   93.545377][ T7076] netlink: 8 bytes leftover after parsing attributes in process `syz.1.354'.
[   93.560526][ T7075] macsec1: entered promiscuous mode
[   93.569258][ T7076] netlink: 44 bytes leftover after parsing attributes in process `syz.1.354'.
[   93.616899][ T7080] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   93.619183][ T7079] C: renamed from team_slave_0
[   93.628800][ T7079] netlink: 'syz.0.356': attribute type 8 has an invalid length.
[   93.632360][ T7079] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   93.866851][ T7089] warning: `syz.0.361' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   94.149033][ T7106] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[   94.453991][ T7121] netlink: 140 bytes leftover after parsing attributes in process `syz.0.368'.
[   94.891356][ T7155] netlink: 'syz.2.377': attribute type 4 has an invalid length.
[   95.002372][ T7167] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   95.006199][ T7167] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   95.108152][ T7171] netlink: 'syz.2.382': attribute type 10 has an invalid length.
[   95.128361][ T7171] team0: Port device dummy0 added
[   95.131672][ T7171] netlink: 'syz.2.382': attribute type 10 has an invalid length.
[   95.155689][ T7171] team0: Port device dummy0 removed
[   95.167967][ T7171] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   95.204543][ T7176] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   95.208705][ T7177] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   95.214986][ T7175] syzkaller0: entered promiscuous mode
[   95.217352][ T7175] syzkaller0: entered allmulticast mode
[   95.221167][ T7176] bond0: option ad_select: unable to set because the bond device is up
[   95.255482][ T7175] tipc: Resetting bearer <eth:syzkaller0>
[   95.271171][ T7175] tipc: Disabling bearer <eth:syzkaller0>
[   96.507975][ T7249] IPv6: addrconf: prefix option has invalid lifetime
[   96.533771][ T7245] netlink: 'syz.0.413': attribute type 1 has an invalid length.
[   96.537216][ T7245] __nla_validate_parse: 3 callbacks suppressed
[   96.537225][ T7245] netlink: 204 bytes leftover after parsing attributes in process `syz.0.413'.
[   96.542618][ T7245] netlink: 'syz.0.413': attribute type 1 has an invalid length.
[   96.611852][ T7261] sock: sock_timestamping_bind_phc: sock not bind to device
[   96.616075][ T7250] lo speed is unknown, defaulting to 1000
[   96.618803][ T7250] lo speed is unknown, defaulting to 1000
[   96.635348][ T7250] lo speed is unknown, defaulting to 1000
[   96.643074][ T7250] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   96.657958][ T7250] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   96.698245][ T7250] lo speed is unknown, defaulting to 1000
[   96.701345][ T7250] lo speed is unknown, defaulting to 1000
[   96.711246][ T7250] lo speed is unknown, defaulting to 1000
[   96.804806][ T7273] netlink: 12 bytes leftover after parsing attributes in process `syz.0.421'.
[   96.816540][ T7275] IPv6: addrconf: prefix option has invalid lifetime
[   96.886016][ T7284] netlink: 336 bytes leftover after parsing attributes in process `syz.0.424'.
[   96.892053][ T7283] netlink: 336 bytes leftover after parsing attributes in process `syz.0.424'.
[   97.050595][ T7300] IPv6: addrconf: prefix option has invalid lifetime
[   97.092875][ T7301] bond0: (slave dummy0): Releasing backup interface
[   97.107666][ T7301] bond0: (slave bond_slave_0): Releasing backup interface
[   97.122472][ T7301] bond0: (slave bond_slave_1): Releasing backup interface
[   97.133439][ T7296] netlink: 24 bytes leftover after parsing attributes in process `syz.2.426'.
[   97.151388][ T7301] team0: Port device team_slave_0 removed
[   97.167002][ T7301] team0: Port device team_slave_1 removed
[   97.169671][ T7301] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   97.172762][ T7301] batman_adv: batadv0: Removing interface: batadv_slave_0
[   97.178896][ T7301] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   97.181911][ T7301] batman_adv: batadv0: Removing interface: batadv_slave_1
[   97.204837][  T793] lo speed is unknown, defaulting to 1000
[   98.160084][ T7364] tipc: Started in network mode
[   98.162286][ T7364] tipc: Node identity 3eb4ddc12408, cluster identity 4711
[   98.166506][ T7364] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   98.219530][ T7365] syzkaller0: entered promiscuous mode
[   98.221399][ T7365] syzkaller0: entered allmulticast mode
[   98.297282][ T7365] tipc: Resetting bearer <eth:syzkaller0>
[   98.379625][ T7365] tipc: Disabling bearer <eth:syzkaller0>
[   98.817763][ T7397] netlink: 12 bytes leftover after parsing attributes in process `syz.2.464'.
[   98.898846][ T7397] netlink: 32 bytes leftover after parsing attributes in process `syz.2.464'.
[  100.123094][ T7455] netlink: 16 bytes leftover after parsing attributes in process `syz.1.485'.
[  100.129585][ T7455] openvswitch: netlink: EtherType 0 is less than min 600
[  100.162398][ T7455] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  100.240721][ T7458] IPv6: addrconf: prefix option has invalid lifetime
[  100.277240][ T7459] netlink: 36 bytes leftover after parsing attributes in process `syz.2.486'.
[  101.080627][ T7469] lo speed is unknown, defaulting to 1000
[  101.518843][ T7502] netlink: 12 bytes leftover after parsing attributes in process `syz.0.503'.
[  101.616971][ T7506] IPv6: addrconf: prefix option has invalid lifetime
[  104.534177][    C1] sched: DL replenish lagged too much
[  104.641974][ T7532] netlink: 316 bytes leftover after parsing attributes in process `syz.2.511'.
[  104.646656][ T7532] netlink: 'syz.2.511': attribute type 2 has an invalid length.
[  104.941120][ T7547] netlink: 'syz.0.518': attribute type 1 has an invalid length.
[  105.227210][ T7557] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  105.400608][ T7565] netlink: 68 bytes leftover after parsing attributes in process `syz.0.524'.
[  105.582405][ T7580] netlink: 108 bytes leftover after parsing attributes in process `syz.0.527'.
[  105.870077][ T7589] netlink: 'syz.2.530': attribute type 13 has an invalid length.
[  105.872543][ T7589] netlink: 'syz.2.530': attribute type 17 has an invalid length.
[  106.087183][ T7597] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  106.112950][ T7589] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  107.197145][ T7640] syz.1.546 uses old SIOCAX25GETINFO
[  107.328157][ T7647] tipc: Can't bind to reserved service type 2
[  107.807627][ T7676] IPv6: addrconf: prefix option has invalid lifetime
[  107.964639][ T7671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.555'.
[  108.631782][ T7695] netlink: 36 bytes leftover after parsing attributes in process `syz.2.563'.
[  108.637034][ T7695] netlink: 16 bytes leftover after parsing attributes in process `syz.2.563'.
[  108.640729][ T7695] netlink: 36 bytes leftover after parsing attributes in process `syz.2.563'.
[  108.645191][ T7695] netlink: 36 bytes leftover after parsing attributes in process `syz.2.563'.
[  109.035574][ T7716] netlink: 12 bytes leftover after parsing attributes in process `syz.1.570'.
[  109.038926][ T7716] netlink: 12 bytes leftover after parsing attributes in process `syz.1.570'.
[  109.147737][ T7723] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  109.218838][ T7728] IPv6: addrconf: prefix option has invalid lifetime
[  109.592266][ T7755] IPv6: addrconf: prefix option has invalid lifetime
[  109.709588][ T7760] netlink: 'syz.1.583': attribute type 23 has an invalid length.
[  109.913285][ T7766] IPv6: addrconf: prefix option has invalid lifetime
[  110.033020][ T7771] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  110.041639][ T7771] netlink: 'syz.0.588': attribute type 1 has an invalid length.
[  110.088085][ T7773] IPv6: addrconf: prefix option has invalid lifetime
[  112.485313][ T7779] netlink: 'syz.1.591': attribute type 1 has an invalid length.
[  112.487749][ T7779] netlink: 224 bytes leftover after parsing attributes in process `syz.1.591'.
[  112.977809][ T7782] netlink: 192 bytes leftover after parsing attributes in process `syz.1.591'.
[  114.281752][ T7786] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (1953002597)
[  114.290428][ T7786] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  120.750348][ T7779] lo speed is unknown, defaulting to 1000
[  132.586841][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.612701][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  155.785527][ T5853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  155.839897][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  155.842866][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  155.849876][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  155.852430][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  156.028279][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  156.069733][ T5234] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  156.097985][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  156.101658][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  156.158237][ T5234] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  156.162187][ T5234] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  156.246509][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  156.280125][ T5234] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  156.327390][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  156.410972][ T5234] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  156.926346][ T5855] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  156.931124][ T5855] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  156.957005][ T5855] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  156.960851][ T5855] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  156.998859][ T5855] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  158.432588][ T5855] Bluetooth: hci1: command tx timeout
[  158.876101][ T5855] Bluetooth: hci2: command tx timeout
[  159.070467][ T5234] Bluetooth: hci3: command tx timeout
[  160.509587][ T5234] Bluetooth: hci1: command tx timeout
[  161.007595][ T5234] Bluetooth: hci2: command tx timeout
[  161.386956][ T5234] Bluetooth: hci3: command tx timeout
[  162.590041][ T5234] Bluetooth: hci1: command tx timeout
[  163.079207][ T5234] Bluetooth: hci2: command tx timeout
[  163.468262][ T5234] Bluetooth: hci3: command tx timeout
[  164.755339][ T5234] Bluetooth: hci1: command tx timeout
[  165.179244][ T5234] Bluetooth: hci2: command tx timeout
[  165.620953][ T5234] Bluetooth: hci3: command tx timeout
[  193.967362][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  193.975265][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  211.562049][ T5855] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  211.573688][ T5855] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  211.581251][ T5855] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  211.588138][ T5855] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  211.590816][ T5855] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  213.707403][ T5855] Bluetooth: hci0: command tx timeout
[  216.778146][ T5855] Bluetooth: hci0: command tx timeout
[  218.834958][ T5855] Bluetooth: hci0: command tx timeout
[  220.920829][ T5855] Bluetooth: hci0: command tx timeout
[  237.865682][ T5234] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  237.869356][ T5234] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  237.872082][ T5234] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  237.966242][ T5234] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  237.968856][ T5234] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  239.797882][ T5234] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  239.807401][ T5234] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  239.819732][ T5234] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  239.851204][ T5234] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  239.865472][ T5234] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  241.656558][ T5855] Bluetooth: hci4: command tx timeout
[  242.032056][ T5855] Bluetooth: hci5: command tx timeout
[  243.711469][ T5855] Bluetooth: hci4: command tx timeout
[  244.113498][ T5855] Bluetooth: hci5: command tx timeout
[  245.806319][ T5855] Bluetooth: hci4: command tx timeout
[  246.230525][ T5855] Bluetooth: hci5: command tx timeout
[  247.871074][ T5855] Bluetooth: hci4: command tx timeout
[  248.270715][ T5855] Bluetooth: hci5: command tx timeout
[  255.426719][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  255.434753][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  283.013111][   T55] Bluetooth: hci3: command 0x0406 tx timeout
[  283.021017][   T55] Bluetooth: hci1: command 0x0406 tx timeout
[  283.023408][   T55] Bluetooth: hci2: command 0x0406 tx timeout
[  287.106072][ T5884] bond0 (unregistering): Released all slaves
[  290.196902][ T5884] bond1 (unregistering): Released all slaves
[  290.594894][ T7824] lo speed is unknown, defaulting to 1000
[  290.785857][ T5234] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  290.854838][ T5234] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  290.890651][ T5234] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  291.163721][ T5234] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  291.192282][ T5234] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  291.639613][ T5853] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  291.666312][ T5853] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  291.693420][ T5853] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  291.848203][ T5853] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  291.850762][ T5853] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  292.507515][ T5884] tipc: Left network mode
[  293.376359][ T5853] Bluetooth: hci6: command tx timeout
[  293.954958][ T5853] Bluetooth: hci7: command tx timeout
[  294.322353][ T5234] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  294.348973][ T5234] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  294.364120][ T5234] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  294.401951][ T5234] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  295.330561][ T5234] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  295.427661][ T5234] Bluetooth: hci6: command tx timeout
[  296.070441][ T5855] Bluetooth: hci7: command tx timeout
[  297.471827][ T5855] Bluetooth: hci6: command tx timeout
[  298.112354][ T5855] Bluetooth: hci7: command tx timeout
[  298.188095][ T5855] Bluetooth: hci8: command tx timeout
[  299.561236][ T5855] Bluetooth: hci6: command tx timeout
[  300.190612][ T5855] Bluetooth: hci7: command tx timeout
[  300.290642][ T5855] Bluetooth: hci8: command tx timeout
[  302.358865][ T5855] Bluetooth: hci8: command tx timeout
[  304.431784][ T5855] Bluetooth: hci8: command tx timeout
[  307.602229][ T7822] lo speed is unknown, defaulting to 1000
[  316.856266][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  316.868786][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  342.078498][ T5853] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  342.151134][ T5853] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  342.168882][ T5853] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  342.172664][ T5853] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  342.300892][ T5853] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  344.775830][ T5853] Bluetooth: hci0: command tx timeout
[  345.353073][ T5855] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  345.367899][ T5855] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  345.371200][ T5855] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  345.380073][ T5855] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  345.383480][ T5855] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  345.899842][ T7844] lo speed is unknown, defaulting to 1000
[  346.022565][ T7826] lo speed is unknown, defaulting to 1000
[  346.832117][ T5855] Bluetooth: hci0: command tx timeout
[  347.554994][ T5855] Bluetooth: hci4: command tx timeout
[  348.422130][ T5853] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  348.461349][ T5853] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  348.469822][ T5853] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  348.472602][ T5853] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  348.480376][ T5853] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  348.924714][ T5853] Bluetooth: hci0: command tx timeout
[  349.628750][ T5853] Bluetooth: hci4: command tx timeout
[  350.610383][ T5853] Bluetooth: hci5: command tx timeout
[  350.987863][ T5853] Bluetooth: hci0: command tx timeout
[  351.706432][ T5853] Bluetooth: hci4: command tx timeout
[  352.727726][ T5853] Bluetooth: hci5: command tx timeout
[  353.788025][ T5853] Bluetooth: hci4: command tx timeout
[  354.761417][ T5853] Bluetooth: hci5: command tx timeout
[  356.944831][ T5853] Bluetooth: hci5: command tx timeout
[  360.197506][ T7848] lo speed is unknown, defaulting to 1000
[  360.339380][ T7846] lo speed is unknown, defaulting to 1000
[  372.743269][ T5884] hsr_slave_0: left promiscuous mode
[  372.926931][ T5884] hsr_slave_1: left promiscuous mode
[  378.276009][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  378.291613][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  416.532388][ T5853] Bluetooth: hci6: command 0x0406 tx timeout
[  416.538954][ T5853] Bluetooth: hci7: command 0x0406 tx timeout
[  421.411046][ T5234] Bluetooth: hci8: command 0x0406 tx timeout

VM DIAGNOSIS:
17:54:21  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff89eb4338 RBX=ffff888026025380 RCX=ffff88810e1b3980 RDX=0000000000000100
RSI=0000000000000000 RDI=ffff8880229ca440 RBP=ffffc900000071f0 RSP=ffffc900000070a8
R8 =ffff88803a8e5203 R9 =1ffff1100751ca40 R10=dffffc0000000000 R11=ffffed100751ca41
R12=ffff88812d1bf254 R13=dffffc0000000000 R14=0000000000000000 R15=ffff8880229ca440
RIP=ffffffff89eb433e RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f0db57a7740 ffffffff 00c00000
GS =0000 ffff8880b8621000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fee95c2ef3c CR3=0000000111942000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ff00000000ffff00 0000000000000000 XMM01=0100000000000100 0000000000000000
XMM02=65626d6520002e74 736f686c61636f6c XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffff00 0000000000000000 XMM05=0200000000000000 00000000000002ff
XMM06=0200000000000000 00000000000002ff XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000007 RBX=ffff88801c2ee180 RCX=0cb02f3774526300 RDX=ffff88801c2ed640
RSI=ffffffff8e139ee0 RDI=ffff88801c2ee158 RBP=00000000ffffffff RSP=ffffc900001df918
R8 =ffffc900001dfc60 R9 =ffffc900001dfc70 R10=ffffc900001dfac0 R11=fffff5200003bf5a
R12=0000000000000246 R13=ffff88801c2ed640 R14=ffffffff8e139ee0 R15=0000000000000002
RIP=ffffffff8b78bbaa RFL=00000092 [--S-A--] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c21000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f9cb1790b00 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007f9cb24ed6c0 00007f9cb24ed6c0 XMM01=00007f9cb24ed6b0 00007f9cb24ed6b0
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
