last executing test programs:

7m57.237825571s ago: executing program 0 (id=926):
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @in6={0xa, 0x4e20, 0x0, @loopback, 0x3}]}, &(0x7f0000000180)=0x10) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async)
r1 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r1, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x30044889)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x2d}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r2, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff20000000bfa100000000000007010000f8ffffffb702000008000000b7030000080000008500000006000000950000000000000067a4218054a235ebee260dc599347efd19b56a"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x6}, 0x50)
socket(0x2a, 0x2, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000040)) (async)
ioctl$PPPIOCSNPMODE(r5, 0x4008744b, &(0x7f0000000040)={0x2b, 0x3}) (async)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r6}, 0x10) (async)
close(0xffffffffffffffff) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff}) (async)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0xf, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x4}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r8}, &(0x7f0000000040), &(0x7f0000000140)=r7}, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))

7m57.163833343s ago: executing program 0 (id=927):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044004)
recvmmsg(r0, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x10003}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f0000000000)=""/18, 0x12}, {&(0x7f0000001780)=""/95, 0x5f}, {&(0x7f00000018c0)=""/4109, 0x100d}, {&(0x7f0000000bc0)=""/217, 0xd9}, {&(0x7f0000000f40)=""/218, 0xda}, {&(0x7f0000000cc0)=""/109, 0x6d}, {&(0x7f0000000dc0)=""/214, 0xd6}, {&(0x7f0000001200)=""/155, 0x9b}, {&(0x7f00000012c0)=""/240, 0xf0}, {&(0x7f0000000540)=""/50, 0x32}, {&(0x7f00000013c0)=""/186, 0xba}, {&(0x7f00000004c0)=""/102, 0x66}, {&(0x7f0000000580)=""/59, 0x3b}, {&(0x7f0000001480)=""/225, 0xe1}], 0xf, 0x0, 0x4000}, 0x80000002}, {{&(0x7f0000000040)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/2, 0x2}], 0x1, &(0x7f0000000340)=""/232, 0xe8}, 0x9}, {{&(0x7f0000000440)=@nfc, 0x80, &(0x7f0000000900), 0x0, &(0x7f00000009c0)}, 0x5cc}], 0x6, 0x40000000, 0x0)

7m57.16352448s ago: executing program 0 (id=928):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newsa={0x1b0, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@private}, {@in=@broadcast, 0x19000000, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "b74a27a4f44bd05db8f139a0e0f8147b"}}]}, 0x1b0}}, 0x0)

7m57.058124407s ago: executing program 0 (id=929):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'gre0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}]}}}]}, 0x38}}, 0x0)
sendmmsg$inet6(r0, &(0x7f0000005200)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x3, @private0, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000440)=[@pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x2e}}}}], 0x28}}], 0x1, 0x40088d0)

7m57.02623263s ago: executing program 0 (id=930):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r4, {0x7, 0xb}, {0xffff, 0xe}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x5}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x1, 0x2000000000, 0xb2, 0x8003ff, 0x8, 0x7f}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r4, {}, {0xffe6, 0xb}, {0xffe0, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x8000}, 0x48)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='i2c_reply\x00', r5, 0x0, 0x2}, 0x18)
epoll_create(0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)={0x14, 0x1b, 0x1, 0x0, 0x0, "", [@typed={0x0, 0x12b, 0x0, 0x0, @str='\x00'}]}, 0x14}], 0x1}, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
epoll_create1(0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000001c0)='mr_integ_alloc\x00', r7, 0x0, 0xfffffffffffffff7}, 0x18)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRESHEX=r6, @ANYBLOB="01000000000000000000140000000814000200eefdffffffffffffff30001f0b000000000000093a9347fdb326080000fcffff000000000000000008001100000000000800", @ANYBLOB="3d6860bca4d282ad4ac219a7c6dfc67e5836b18ed1878ca9e5617c8a1748442330bdcd75cfc092"], 0x5c}, 0x1, 0x0, 0x0, 0x20008004}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)

7m56.632654994s ago: executing program 1 (id=931):
syz_emit_ethernet(0x46, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x2, 0x2e, 0x38, 0x65, 0x0, 0x2, 0x6, 0x0, @private=0xa010102, @remote, {[@timestamp_addr={0x44, 0x4, 0x9d, 0x1, 0x9}, @lsrr={0x83, 0x7, 0x9c, [@private=0xa010102]}, @timestamp_addr={0x44, 0x4, 0xbe, 0x1, 0x1}]}}, {{0x4e24, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x8, 0xfffd, 0x0, 0x57}}}}}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f0000c808ffffffea080006000700000008000400", @ANYRES32=r0, @ANYBLOB="06001c004e21000008000100ac1414"], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040084)

7m56.547963768s ago: executing program 1 (id=932):
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="850000003c000000791000000000000063000000001000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52, 0x0, 0xffffffffffffffff, 0xfffffffffffffde6}, 0x37)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0xfffffffe)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x180, 0x4, 0x28}, 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r8}, 0x18)
r9 = socket$netlink(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r9)
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r12=>0xffffffffffffffff, <r13=>0xffffffffffffffff})
sendmsg$inet(r13, &(0x7f0000000500)={0x0, 0x16, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYRES32=r1], 0x128}, 0x0)
recvmsg(r12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000680)="68c8e4bc8e6569f85655cf3cd072d238c08b2abd0abb3e12889093c16add1c084ea3f26ba93354e659a28671009282f2eac4a5d7579849fb4478193301a22dd8d4dfd85c33bc", 0x46}], 0x1)
r14 = accept4$unix(r0, 0x0, 0x0, 0x0)
recvmmsg(r14, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0)
recvfrom$unix(r14, &(0x7f00000001c0)=""/236, 0x26, 0x10120, 0x0, 0x0)

7m51.947852723s ago: executing program 1 (id=934):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x14, 0x14, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) (async)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x2, 0x400000000000003, 0x20, 0x0, 0x19, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x0, 0x0, 0x100000000000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @loopback}}, @sadb_lifetime={0x4, 0x4, 0x2, 0xfffffffffffffffe}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @broadcast}}, @sadb_address={0x5, 0x7, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x5, @private1}}, @sadb_x_sa2={0x2, 0x13, 0x3, 0x0, 0x0, 0x0, 0x3501}]}, 0xc8}}, 0x0)

7m51.777772047s ago: executing program 1 (id=936):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044004)
recvmmsg(r0, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x10003}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f0000000000)=""/18, 0x12}, {&(0x7f0000001780)=""/95, 0x5f}, {&(0x7f00000018c0)=""/4109, 0x100d}, {&(0x7f0000000bc0)=""/217, 0xd9}, {&(0x7f0000000f40)=""/218, 0xda}, {&(0x7f0000000cc0)=""/109, 0x6d}, {&(0x7f0000000dc0)=""/214, 0xd6}, {&(0x7f0000001200)=""/155, 0x9b}, {&(0x7f00000012c0)=""/240, 0xf0}, {&(0x7f0000000540)=""/50, 0x32}, {&(0x7f00000013c0)=""/186, 0xba}, {&(0x7f00000004c0)=""/102, 0x66}, {&(0x7f0000000580)=""/59, 0x3b}, {&(0x7f0000001480)=""/225, 0xe1}], 0xf, 0x0, 0x0, 0x20}, 0x80000002}, {{&(0x7f0000000040)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/2, 0x2}], 0x1, &(0x7f0000000340)=""/232, 0xe8}, 0x9}, {{&(0x7f0000000440)=@nfc, 0x80, &(0x7f0000000900), 0x0, &(0x7f00000009c0)}, 0x5cc}], 0x6, 0x40000000, 0x0)

7m51.685953779s ago: executing program 2 (id=937):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x710}, 0x1, 0x0, 0x0, 0x20044080}, 0x10)

7m51.685521817s ago: executing program 1 (id=938):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0xb)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0a00000001000000dd00000009"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff})
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14)
sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x1000000}, 0x4, r4}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

7m51.591799247s ago: executing program 2 (id=939):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000080)={'sit0\x00', <r2=>0x0, 0x91, 0x0, 0x40, 0x10001, {{0x22, 0x4, 0x3, 0x39, 0x88, 0x66, 0x0, 0x80, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x8, 0xbe, 0x0, 0x0, [0x3a8]}, @rr={0x7, 0xf, 0xef, [@remote, @loopback, @local]}, @end, @ra={0x94, 0x4}, @noop, @timestamp_prespec={0x44, 0x34, 0x65, 0x3, 0x8, [{@private=0xa010100, 0x9}, {@empty, 0x1ff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@private=0xa010100, 0x5}, {@empty, 0xffff}, {@remote, 0x5}]}, @cipso={0x86, 0x1c, 0xffffffffffffffff, [{0x1, 0x9, "f0ef149272a3e7"}, {0x2, 0xd, "c13a831395d7194431b694"}]}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r1, 0x310, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000840}, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)={<r3=>r0})
getpeername$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000002c0)=0x14)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000300)={0x8, 'vlan1\x00', {'veth1_to_hsr\x00'}, 0xfff8})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f0000000380)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000003c0)={@local, @dev}, &(0x7f0000000400)=0x8)
sendmsg$key(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x2, 0x8, 0x7, 0x2, 0xf, 0x0, 0x70bd28, 0x25dfdbfc, [@sadb_spirange={0x2, 0x10, 0x4d4, 0x4d6}, @sadb_ident={0x2, 0xa, 0x5, 0x0, 0x1f2d94d0}, @sadb_x_filter={0x5, 0x1a, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x10, 0x0, 0x4}, @sadb_lifetime={0x4, 0x3, 0xfffffe01, 0x5a24, 0x5, 0xfffffffffffffffe}]}, 0x78}}, 0x20000004)
recvfrom$inet(r3, &(0x7f0000000540)=""/252, 0xfc, 0x40000000, &(0x7f0000000640)={0x2, 0x4e23, @empty}, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r3)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x68, r7, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x5, 0x19}}}}, [@NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @random="c5ffafdb49e9"}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac=@device_b}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x40, 0x2, 0x6, 0x0, {0x1, 0x9, 0x0, 0x6, 0x0, 0x1, 0x0, 0x3}, 0x1, 0x34c, 0xea}}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0xba8c171a2728764c}, 0x800)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000840)=[@in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffffe}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x17}}, @in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e22, @private=0xa010100}], 0x5c)
r9 = socket$vsock_stream(0x28, 0x1, 0x0)
r10 = accept4$rose(r6, &(0x7f00000008c0)=@short={0xb, @dev, @rose}, &(0x7f0000000900)=0x1c, 0x80000)
ioctl$BTRFS_IOC_DEV_INFO(r9, 0xd000941e, &(0x7f0000000940)={<r11=>0x0, "2d3277a595090357f6cb8a7d62e6bc56"})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r9, 0x84009422, &(0x7f0000001940)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, <r12=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001d40)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r13=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$BTRFS_IOC_BALANCE_V2(r10, 0xc4009420, &(0x7f0000002140)={0x10, 0x6, {0x35c7, @struct, r11, 0xffff, 0x401, 0x1000, 0xc, 0x8, 0x41, @struct={0xfffffffa, 0x9cea}, 0x5, 0x7, [0xf, 0xfffffffffffffff7, 0x7, 0x3, 0x8, 0x5]}, {0x8, @usage=0xffff, r12, 0x9, 0x7, 0x4, 0x7, 0x2, 0x4b3, @struct={0x5, 0xffffffff}, 0x10001, 0xfffff888, [0x6, 0x7fffffff, 0x2, 0xc, 0xd, 0x100000001]}, {0x9, @struct={0x3, 0x1}, r13, 0x1, 0x1, 0x2, 0x8, 0xfffffffffffffff8, 0x0, @usage, 0x2, 0x2, [0x1, 0x6, 0xffffffffffffb73d, 0x59e4, 0x3, 0x8]}, {0x9, 0x7b, 0x4}})
r14 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write$bt_hci(r14, &(0x7f0000002540)={0x1, @sniff_mode={{0x803, 0xa}, {0xc8, 0x53, 0xb, 0x89f, 0xff}}}, 0xe)
r15 = syz_genetlink_get_family_id$ethtool(&(0x7f00000025c0), r6)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000003b00)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003ac0)={&(0x7f0000002600)={0x14b4, r15, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x14a0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x50, 0x3, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'vlan1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ']/\x1b\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xff\xff'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0xd0, 0x4, "56d40e8b5c864f84d969efbbcdd32fd637e2b66fcd4a887d07024da637d30ed1c396d093130f1bd3c62d03070b9612bd4988a5da6c53b8f47356b0868c497f60f450130491e27049ad0e03e1d087da011679ebbb347f56b9b0e0fb6dddce630657bcc4fa9819042f7d37ee1db9f1490179cf1ae153692fdda1275c6d7573b8a44b55d8b631cb62e40ab42722c3a3b007ce091223bae374038431e01b8036a4b7f0ef8002bc7ae0b1545e635c4c14b77393d145575a9cb703c6e12999ad46ca21e9af44685c7e5ebee599245d"}, @ETHTOOL_A_BITSET_MASK={0x33, 0x5, "139c95e35291daa3cf8fcc4224f60b5c622172f634574d08002f1ab7669103a2eb1fb6d9d61132b3ae16f8a873794d"}, @ETHTOOL_A_BITSET_VALUE={0xdf, 0x4, "3f6c580338205339db97def10406c24c9bf4237da6527aa808f76123f0b80ffb7ddce005da2a5c5147a11af7362e38403db1118ff222de4d4f0ec5f70b112ca3544b4cf452364f9cfc77b4221bf12f0084986fdc0215252de16c894c60256f3013dac918ea006b55dccac5f44a0504b6f03501ba2c23bd78545e5e3361ec9199d06e51e4b84d1a5cb09008949d6624c5e6842be2a3655ffa628ef071b8bb7794a54b6f67e22cff6bd28bff17eebe1d1f20a112e271679a7f625daa983253becfcecfb9dcbbcd5b6bd5f5fb21914e30095472f9fab45e71203d016a"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x57}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xd1, 0x5, "38efa4f3f3fc2037e5defa82c2bb0d88f16543c4f43294e44960468395c693f495d72db20d1f4226c6afdefa738e94d79eee0f43d56fd89a61972f45229688b79dcdeea57964bce27c307dcda3e37635a8141a7fea00060923a26d2990fcaccf58099a7b1bf2d1863f7fa140b4daee882baad645fc65c322f81aaaaeec3816277050be0e3d18729b58075a20d87d1d3809c6c3367ac2dc0438a0b5a4860c261ed77102cd7a5100a40d2580d76d72f4870db32b3f6110dc79aba5381130448546dd45b19006c38f50faaf07c34d"}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_MASK={0x101, 0x5, "c8de7ba58d796df94e057a9b94b6ceffebaf127586960b40009e9708ddde6d6f4b768bf126ef6b3a96fe3cac3d6a1741d802054fa9a6d6962ec98c715b1614687867e16f0dca2b960f827383ea24350d94cfdf76fc1b3b9dbc097eb92283d65be13157edf3c5bab17fcb3e77119f51331811fffa8b3b378366c327885367212fe24f520f2a766f0de971611707ff11b129c3aa400f2ab806aaf6398222f0c513fd8d75c25809f4507cbf6687252fddbe09f9598b8c9b376c5051763e6f01da4d784bc33d683c129dad320e9ae6d76d07b1977f77071cb33c88a833ed118405e6c2220ab6e8892d5eb0521975c5e1df1b9f73a5952f27000874e4ce3af1"}, @ETHTOOL_A_BITSET_BITS={0x80, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffc}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\x87/[$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfc3}, @ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, './cgroup.net/syz1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xff\xff'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x14b4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44010)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000003b80)={'wlan0\x00', <r16=>0x0})
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f0000003c40)={&(0x7f0000003b40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003c00)={&(0x7f0000003bc0)={0x40, r7, 0x8, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r16}, @val={0xc, 0x99, {0x41, 0x44}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}]}, 0x40}, 0x1, 0x0, 0x0, 0x51}, 0x4000024)
ioctl$IMCTRLREQ(r6, 0x80044945, &(0x7f0000003c80)={0x4008, 0x2, 0x9, 0x8})

7m51.591320595s ago: executing program 1 (id=940):
unshare(0x22020600)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0))
socket$kcm(0x10, 0x2, 0x0)
socket$packet(0x11, 0x3, 0x300) (async)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
socketpair(0x26, 0x100000005, 0x4, &(0x7f0000000000)) (async)
socketpair(0x26, 0x100000005, 0x4, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async)
getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0xfff0, &(0x7f0000000080)={&(0x7f0000000180)=@gettfilter={0x24, 0x2e, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) (async)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0xfff0, &(0x7f0000000080)={&(0x7f0000000180)=@gettfilter={0x24, 0x2e, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'ip6_vti0\x00', 0x0, 0x4, 0x3, 0x4, 0x3, 0x24, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x8000, 0x20, 0x400, 0x4}})
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000004c0), &(0x7f0000000600)=0x4)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000640)={'syztnl1\x00', &(0x7f00000006c0)={'syztnl1\x00', 0x0, 0x2f, 0x7, 0x5, 0x7, 0x22, @loopback, @mcast2, 0x7800, 0x7, 0xa0de, 0x6e9e}})
socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f0000001880)={'wg0\x00', <r9=>0x0})
r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000280)={0x40, r10, 0xa29, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r9}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000fcffffff0100000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb54208000100", @ANYRES32=r9], 0x40}, 0x1, 0x0, 0x0, 0x8c0}, 0x20000000)
ioctl$PPPIOCSFLAGS1(r0, 0x40047459, 0x0) (async)
ioctl$PPPIOCSFLAGS1(r0, 0x40047459, 0x0)
ioctl$SIOCAX25DELFWD(r2, 0x89eb, &(0x7f0000000100)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}})

7m51.486595956s ago: executing program 2 (id=941):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='bridge0\x00', 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000008500000011000000180100002020642500000000002020207b1af8ff00000000bea100000000000007010000f8ffffffb702000008000000b70300000400000085000000060000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES8=r1], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800b00010065787468647200002c00028008000340000000e108000140000000130500020094000000080006400000000208000440000000140900010073797a30000000000900020073797a32"], 0x94}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000340)="b9ff03316844268cb89614f086dd", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
write$tun(r1, &(0x7f0000000000)=ANY=[], 0x38)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000140)=0xffffffffffffffff, 0x4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x1b, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @alu={0x7, 0x1, 0x9, 0x3, 0x0, 0x8, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x3, 0x7, 0xb, 0x6}, @exit, @map_fd={0x18, 0x2, 0x1, 0x0, r1}, @map_val={0x18, 0x2, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x68}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}]}, &(0x7f0000000240)='syzkaller\x00', 0x3, 0xc, &(0x7f0000000480)=""/12, 0x41000, 0x42, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, r2, 0x4, &(0x7f0000000580)=[r1], &(0x7f00000005c0)=[{0x1, 0x2, 0xb}, {0x4, 0x5, 0x10}, {0x5, 0x4, 0x3, 0x9}, {0x0, 0x2, 0x8, 0x2}], 0x10, 0x6}, 0x94)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000006c0)={r5, r6, 0x4, r2}, 0x10)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f00000000c0)=0x8004, 0x4)
sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)={0x18, 0x56, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x0)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', <r8=>0x0})
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000900)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d61637365630000140002800500060001000000050007000100000008000500", @ANYRES32=r8], 0x54}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r4)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0x8004b708, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000a40)={0x0, <r10=>0x0}, 0x8)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r11}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r11, &(0x7f0000000000), &(0x7f0000000140)=""/75}, 0x20)
r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={0xffffffffffffffff, 0xd, 0x8}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x1c, 0x8, &(0x7f0000000700)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @map_fd={0x18, 0x4, 0x1, 0x0, r1}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x8}, @alu={0x4, 0x0, 0xc, 0xb, 0x6, 0xffffffffffffffff, 0x1}, @jmp={0x5, 0x0, 0xb, 0x9, 0x4, 0xfffffffffffffff8, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000000740)='syzkaller\x00', 0x2, 0xd9, &(0x7f0000000780)=""/217, 0x41100, 0x11, '\x00', 0x0, @fallback=0x1, r9, 0x8, &(0x7f00000009c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000a00)={0x3, 0x0, 0x1, 0x9}, 0x10, r10, r1, 0x4, &(0x7f0000000ac0)=[r1, r1, r1, r1, r11, r1, r12, r1, r1], &(0x7f0000000b00)=[{0x5, 0x2, 0x8, 0x5}, {0x1, 0x1, 0xa, 0x6}, {0x2, 0x5, 0xe, 0x1}, {0x1, 0x4, 0xa, 0x8}], 0x10, 0x4}, 0x94)
sendto$inet(r0, &(0x7f0000000040)="255f5a03204f", 0x6, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1=0xe000006a}, 0x10)

7m51.367450426s ago: executing program 2 (id=942):
pipe(&(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000066090100000003e71600000006000000180100002020702500000000002020207b9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b70300000400000056000000060000003c30000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000066090100000003e71600000006000000180100002020702500000000002020207b9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b70300000400000056000000060000003c30000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001640)={'ip6gre0\x00', &(0x7f00000015c0)={'syztnl0\x00', <r3=>0x0, 0x2f, 0x2, 0xe, 0x2, 0x9, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8, 0x8000, 0x2, 0x7}})
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001680), 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000001740)=@bloom_filter={0x1e, 0x0, 0x10000, 0xeb6, 0x800, 0xffffffffffffffff, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x5, 0xf}, 0x50) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=@bloom_filter={0x1e, 0x0, 0x10000, 0xeb6, 0x800, 0xffffffffffffffff, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x5, 0xf}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, &(0x7f0000000080), &(0x7f0000000300)=r0}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0xffffffffffffffff, <r6=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000300)=r0}, 0x20)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a000000880000000200000004"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000007200000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00'})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001840)=@bpf_tracing={0x1a, 0x1f, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@generic={0x5, 0x8, 0x5, 0x6, 0x1}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffe7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @exit, @call={0x85, 0x0, 0x0, 0xce}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x4}, @map_fd={0x18, 0x2, 0x1, 0x0, r2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000440)='GPL\x00', 0xa3d7a24, 0x1000, &(0x7f00000005c0)=""/4096, 0x40f00, 0x41, '\x00', r3, 0x1a, r4, 0x8, &(0x7f00000016c0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000001700)={0x0, 0x10, 0xdee9, 0x3}, 0x10, 0x30876, 0xffffffffffffffff, 0x4, &(0x7f0000000380)=[r5, r6, r7, r2], &(0x7f0000001800)=[{0x2, 0x1, 0x1, 0x3}, {0x3, 0x2, 0x0, 0x8}, {0x5, 0x2, 0x3, 0xa}, {0x5, 0x3, 0x10, 0x6}], 0x10, 0xff800000}, 0x94) (async)
r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001840)=@bpf_tracing={0x1a, 0x1f, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@generic={0x5, 0x8, 0x5, 0x6, 0x1}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffe7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @exit, @call={0x85, 0x0, 0x0, 0xce}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x4}, @map_fd={0x18, 0x2, 0x1, 0x0, r2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000440)='GPL\x00', 0xa3d7a24, 0x1000, &(0x7f00000005c0)=""/4096, 0x40f00, 0x41, '\x00', r3, 0x1a, r4, 0x8, &(0x7f00000016c0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000001700)={0x0, 0x10, 0xdee9, 0x3}, 0x10, 0x30876, 0xffffffffffffffff, 0x4, &(0x7f0000000380)=[r5, r6, r7, r2], &(0x7f0000001800)=[{0x2, 0x1, 0x1, 0x3}, {0x3, 0x2, 0x0, 0x8}, {0x5, 0x2, 0x3, 0xa}, {0x5, 0x3, 0x10, 0x6}], 0x10, 0xff800000}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
getsockname$llc(r10, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000000c0)={<r11=>0x0, 0xf2, "70c38902ba9a6a7f0d03881094efb8d8157b6536ddbba78bd4f7fb70f382060b457ea453c8a9a0836395916944c75acabf007978515698bcb746991ad16f24eb72807a6e2694edb82af0df44a1183cdca32045337df53f8438b1fdbd849450513dfe8ac055a0bff49044654ba3158d5ddec86e776a598d61498690f815dcf9af313a50e1ba82424d07d018c187799111231398d768d435c426a223481d34b4f1deee8979aedbb8370d50a70e765921e8b9839e31d536a3244df7de2b53d333674189bb86d93dac8d111e7d3a7c23a2a03e26a30207f0d9d6e31e01b2c91959c19ddc340d9b0a8b8a2d42a139060d22fed6b5"}, &(0x7f0000000040)=0xfa)
sendfile(r8, r9, &(0x7f0000000240)=0x7, 0x7) (async)
sendfile(r8, r9, &(0x7f0000000240)=0x7, 0x7)
unshare(0x8000400) (async)
unshare(0x8000400)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0)
unshare(0x800)
r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet6(r12, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private0}, 0x76)
setsockopt$ARPT_SO_SET_REPLACE(r10, 0x0, 0x60, &(0x7f0000001900)={'filter\x00', 0x7, 0x4, 0x410, 0x0, 0x110, 0x110, 0x328, 0x328, 0x328, 0x4, &(0x7f00000002c0), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="236c720ff65a", @mac=@random="9e0b1488a361", @broadcast, @empty, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xfffffff9, 'syz1\x00', {0x800}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x460)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000001c0)={r11, 0x2}, &(0x7f0000000200)=0x8)

7m51.286115169s ago: executing program 2 (id=943):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0)
recvmmsg(r0, &(0x7f0000000fc0)=[{{0x0, 0x0, 0x0}, 0x827}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000002a80)=""/209, 0xd1}, {&(0x7f0000001940)=""/210, 0xd2}, {&(0x7f0000000140)=""/39, 0x27}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000002d40)=""/4084, 0xff4}, {&(0x7f00000000c0)=""/66, 0x42}, {&(0x7f0000000940)=""/226, 0xe2}], 0x7}, 0x2}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000440)=""/160, 0xa0}, {&(0x7f0000001a40)=""/4103, 0x1007}, {&(0x7f0000002c40)=""/196, 0xc4}], 0x3}, 0x6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000}, 0x104}, {{&(0x7f0000000340)=@generic, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000d00)=""/12, 0xc}, {&(0x7f0000003d80)=""/4096, 0x1000}, {&(0x7f0000000500)=""/173, 0xad}], 0x3, &(0x7f00000003c0)=""/68, 0x44}, 0x8001}, {{&(0x7f00000005c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000001280)=""/236, 0xec}, {&(0x7f0000000740)=""/111, 0x6f}, {&(0x7f0000000840)=""/202, 0xca}, {&(0x7f0000004d80)=""/4096, 0x1000}, {&(0x7f0000000a40)=""/132, 0x84}, {&(0x7f0000000b00)=""/223, 0xdf}, {&(0x7f0000000c00)=""/77, 0x4d}, {&(0x7f0000000c80)=""/114, 0x72}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000000040)=""/47, 0x2f}], 0xa, &(0x7f0000000f00)=""/141, 0x8d}, 0x1}], 0x7, 0x10102, 0x0)

7m51.279811627s ago: executing program 2 (id=944):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a90000000000000001002000000000004400050020010000000000000000000000000000000000022b0000000a000000fc010000000000000000000000000000000000000400"/180], 0xfc}}, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101842, 0x0)
r2 = socket$inet(0x2b, 0x801, 0x0)
connect$inet(r2, &(0x7f0000000340)={0x2, 0xfffb, @local}, 0x10)
setsockopt$inet_tcp_int(r2, 0x6, 0x2c, &(0x7f00000000c0)=0x100000001, 0x4)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x6, 0x2a, 0x0, &(0x7f0000000000)=0x2)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040))
ioctl$PPPIOCSACTIVE(r1, 0x40047459, &(0x7f0000000440)={0x0, 0x0})
readv(r1, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/61, 0x3d}], 0x1)
r4 = socket(0x2, 0x3, 0x6)
bind$inet(r4, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10)
setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4)
pselect6(0x40, &(0x7f0000000140)={0x40, 0x606, 0xfffffffffffffff7, 0x4, 0x3, 0x731e, 0x9, 0x80000000}, &(0x7f0000000180)={0x0, 0xb3, 0x2, 0xe27f, 0x48000, 0xb, 0x4, 0x6}, &(0x7f00000001c0)={0x80000001, 0x3ff, 0x81, 0x0, 0x0, 0x8, 0x2, 0x3}, &(0x7f0000000380), &(0x7f0000000400)={&(0x7f00000003c0)={[0xaf68]}, 0x8})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000000d0a010800000000000000000e0000010900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c000a8008000100688d33f2"], 0x48}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
sendto$inet(r4, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10)

7m49.872685981s ago: executing program 0 (id=945):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044004)
recvmmsg(r0, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x10003}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f0000000000)=""/18, 0x12}, {&(0x7f0000001780)=""/95, 0x5f}, {&(0x7f00000018c0)=""/4109, 0x100d}, {&(0x7f0000000bc0)=""/217, 0xd9}, {&(0x7f0000000f40)=""/218, 0xda}, {&(0x7f0000000cc0)=""/109, 0x6d}, {&(0x7f0000000dc0)=""/214, 0xd6}, {&(0x7f0000001200)=""/155, 0x9b}, {&(0x7f00000012c0)=""/240, 0xf0}, {&(0x7f0000000540)=""/50, 0x32}, {&(0x7f00000013c0)=""/186, 0xba}, {&(0x7f00000004c0)=""/102, 0x66}, {&(0x7f0000000580)=""/59, 0x3b}, {&(0x7f0000001480)=""/225, 0xe1}], 0xf, 0x0, 0x0, 0x2000}, 0x80000002}, {{&(0x7f0000000040)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/2, 0x2}], 0x1, &(0x7f0000000340)=""/232, 0xe8}, 0x9}, {{&(0x7f0000000440)=@nfc, 0x80, &(0x7f0000000900), 0x0, &(0x7f00000009c0)}, 0x5cc}], 0x6, 0x40000000, 0x0)

7m32.370574531s ago: executing program 32 (id=940):
unshare(0x22020600)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0))
socket$kcm(0x10, 0x2, 0x0)
socket$packet(0x11, 0x3, 0x300) (async)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
socketpair(0x26, 0x100000005, 0x4, &(0x7f0000000000)) (async)
socketpair(0x26, 0x100000005, 0x4, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async)
getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0xfff0, &(0x7f0000000080)={&(0x7f0000000180)=@gettfilter={0x24, 0x2e, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) (async)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0xfff0, &(0x7f0000000080)={&(0x7f0000000180)=@gettfilter={0x24, 0x2e, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'ip6_vti0\x00', 0x0, 0x4, 0x3, 0x4, 0x3, 0x24, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x8000, 0x20, 0x400, 0x4}})
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000004c0), &(0x7f0000000600)=0x4)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000640)={'syztnl1\x00', &(0x7f00000006c0)={'syztnl1\x00', 0x0, 0x2f, 0x7, 0x5, 0x7, 0x22, @loopback, @mcast2, 0x7800, 0x7, 0xa0de, 0x6e9e}})
socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f0000001880)={'wg0\x00', <r9=>0x0})
r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000280)={0x40, r10, 0xa29, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r9}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000fcffffff0100000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb54208000100", @ANYRES32=r9], 0x40}, 0x1, 0x0, 0x0, 0x8c0}, 0x20000000)
ioctl$PPPIOCSFLAGS1(r0, 0x40047459, 0x0) (async)
ioctl$PPPIOCSFLAGS1(r0, 0x40047459, 0x0)
ioctl$SIOCAX25DELFWD(r2, 0x89eb, &(0x7f0000000100)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}})

7m30.767678951s ago: executing program 33 (id=945):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044004)
recvmmsg(r0, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x10003}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f0000000000)=""/18, 0x12}, {&(0x7f0000001780)=""/95, 0x5f}, {&(0x7f00000018c0)=""/4109, 0x100d}, {&(0x7f0000000bc0)=""/217, 0xd9}, {&(0x7f0000000f40)=""/218, 0xda}, {&(0x7f0000000cc0)=""/109, 0x6d}, {&(0x7f0000000dc0)=""/214, 0xd6}, {&(0x7f0000001200)=""/155, 0x9b}, {&(0x7f00000012c0)=""/240, 0xf0}, {&(0x7f0000000540)=""/50, 0x32}, {&(0x7f00000013c0)=""/186, 0xba}, {&(0x7f00000004c0)=""/102, 0x66}, {&(0x7f0000000580)=""/59, 0x3b}, {&(0x7f0000001480)=""/225, 0xe1}], 0xf, 0x0, 0x0, 0x2000}, 0x80000002}, {{&(0x7f0000000040)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/2, 0x2}], 0x1, &(0x7f0000000340)=""/232, 0xe8}, 0x9}, {{&(0x7f0000000440)=@nfc, 0x80, &(0x7f0000000900), 0x0, &(0x7f00000009c0)}, 0x5cc}], 0x6, 0x40000000, 0x0)

7m29.663684559s ago: executing program 34 (id=944):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a90000000000000001002000000000004400050020010000000000000000000000000000000000022b0000000a000000fc010000000000000000000000000000000000000400"/180], 0xfc}}, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101842, 0x0)
r2 = socket$inet(0x2b, 0x801, 0x0)
connect$inet(r2, &(0x7f0000000340)={0x2, 0xfffb, @local}, 0x10)
setsockopt$inet_tcp_int(r2, 0x6, 0x2c, &(0x7f00000000c0)=0x100000001, 0x4)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x6, 0x2a, 0x0, &(0x7f0000000000)=0x2)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040))
ioctl$PPPIOCSACTIVE(r1, 0x40047459, &(0x7f0000000440)={0x0, 0x0})
readv(r1, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/61, 0x3d}], 0x1)
r4 = socket(0x2, 0x3, 0x6)
bind$inet(r4, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10)
setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4)
pselect6(0x40, &(0x7f0000000140)={0x40, 0x606, 0xfffffffffffffff7, 0x4, 0x3, 0x731e, 0x9, 0x80000000}, &(0x7f0000000180)={0x0, 0xb3, 0x2, 0xe27f, 0x48000, 0xb, 0x4, 0x6}, &(0x7f00000001c0)={0x80000001, 0x3ff, 0x81, 0x0, 0x0, 0x8, 0x2, 0x3}, &(0x7f0000000380), &(0x7f0000000400)={&(0x7f00000003c0)={[0xaf68]}, 0x8})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000000d0a010800000000000000000e0000010900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c000a8008000100688d33f2"], 0x48}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
sendto$inet(r4, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10)

6m33.336272416s ago: executing program 5 (id=948):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x10012, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000380)={0x2}, 0x2)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

3m36.992215697s ago: executing program 5 (id=948):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x10012, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000380)={0x2}, 0x2)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

0s ago: executing program 3 (id=946):
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000000000000002", 0x54}, {&(0x7f00000001c0)="ee641681", 0x4}], 0x2)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000003000)=@file={0x1}, 0x6e) (async)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x4f) (async)
r3 = socket$netlink(0x10, 0x3, 0x4)
listen(r2, 0x5) (async)
write(r3, &(0x7f0000000100)="29000000140005b7ff000000040860eb0101b6ff021596db2d6d6974b5d728aa4b5d02c26ed638eeb7", 0x29) (async)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r4) (async)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote, 0x4000006}, 0x1c)
listen(r5, 0x6) (async)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r7 = accept(r4, 0x0, 0x0)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r7)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r7, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3561e59d688a8929f18d5c8dd9fcca0700d9ba5df30096069e5b0d7c4795188a9c70d323790987d9596f658c524af26b697014e29b", @ANYRES16=r8, @ANYBLOB="000028bd7000ffdbdf2501000000000000000b0000000014001462726f6164636173742d6c696e6b0000"], 0x30}, 0x1, 0x0, 0x0, 0x4004090}, 0x8000) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r10, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:13596' (ED25519) to the list of known hosts.
syzkaller login: [   56.541294][ T5774] cgroup: Unknown subsys name 'net'
[   56.653939][ T5774] cgroup: Unknown subsys name 'cpuset'
[   56.658763][ T5774] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.357747][ T5774] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   64.776904][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   64.780532][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   64.783487][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   64.787257][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   64.791303][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   64.847303][ T5210] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   64.850775][ T5210] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   64.855056][ T5210] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   64.858144][ T5210] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   64.862902][ T5210] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   64.911050][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   64.914635][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   64.917475][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   64.931272][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   64.934830][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   65.114869][ T5821] chnl_net:caif_netlink_parms(): no params data found
[   65.260772][ T5827] chnl_net:caif_netlink_parms(): no params data found
[   65.266067][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.270034][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.272534][ T5821] bridge_slave_0: entered allmulticast mode
[   65.275378][ T5821] bridge_slave_0: entered promiscuous mode
[   65.300825][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.303231][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.305352][ T5821] bridge_slave_1: entered allmulticast mode
[   65.308047][ T5821] bridge_slave_1: entered promiscuous mode
[   65.342985][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.350963][ T5830] chnl_net:caif_netlink_parms(): no params data found
[   65.366217][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.382995][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.385239][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.387495][ T5827] bridge_slave_0: entered allmulticast mode
[   65.390468][ T5827] bridge_slave_0: entered promiscuous mode
[   65.415474][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.418256][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.422651][ T5827] bridge_slave_1: entered allmulticast mode
[   65.426356][ T5827] bridge_slave_1: entered promiscuous mode
[   65.449923][ T5821] team0: Port device team_slave_0 added
[   65.454481][ T5821] team0: Port device team_slave_1 added
[   65.507173][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.512383][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.534893][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.537760][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.549418][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.584151][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.586914][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.597161][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.611024][ T5827] team0: Port device team_slave_0 added
[   65.628688][ T5827] team0: Port device team_slave_1 added
[   65.633135][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.635896][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.638293][ T5830] bridge_slave_0: entered allmulticast mode
[   65.641751][ T5830] bridge_slave_0: entered promiscuous mode
[   65.645735][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.648039][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.651136][ T5830] bridge_slave_1: entered allmulticast mode
[   65.654026][ T5830] bridge_slave_1: entered promiscuous mode
[   65.712232][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.714789][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.725032][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.731901][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.734661][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.745688][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.771098][ T5821] hsr_slave_0: entered promiscuous mode
[   65.774491][ T5821] hsr_slave_1: entered promiscuous mode
[   65.802070][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.812164][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.876477][ T5830] team0: Port device team_slave_0 added
[   65.910935][ T5830] team0: Port device team_slave_1 added
[   65.934321][ T5827] hsr_slave_0: entered promiscuous mode
[   65.937827][ T5827] hsr_slave_1: entered promiscuous mode
[   65.941014][ T5827] debugfs: 'hsr0' already exists in 'hsr'
[   65.943248][ T5827] Cannot create hsr debugfs directory
[   65.993209][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.995865][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.005548][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.012240][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.014876][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.024499][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.168837][ T5830] hsr_slave_0: entered promiscuous mode
[   66.177314][ T5830] hsr_slave_1: entered promiscuous mode
[   66.180754][ T5830] debugfs: 'hsr0' already exists in 'hsr'
[   66.183034][ T5830] Cannot create hsr debugfs directory
[   66.327266][ T5821] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   66.354492][ T5821] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   66.390069][ T5821] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   66.406331][ T5821] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   66.441795][ T5827] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   66.447793][ T5827] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   66.466031][ T5827] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   66.484157][ T5827] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   66.534260][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   66.541774][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   66.560414][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   66.568112][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   66.655972][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.701567][ T5821] 8021q: adding VLAN 0 to HW filter on device team0
[   66.710092][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.732623][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.735570][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.742473][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.745314][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.775824][ T5827] 8021q: adding VLAN 0 to HW filter on device team0
[   66.803743][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.806676][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.812633][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.815479][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.826180][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.880225][ T5210] Bluetooth: hci1: command tx timeout
[   66.882659][ T5210] Bluetooth: hci0: command tx timeout
[   66.883723][ T5830] 8021q: adding VLAN 0 to HW filter on device team0
[   66.916750][ T1181] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.919780][ T1181] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.952656][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.955640][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.964223][ T5827] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   66.970125][ T5210] Bluetooth: hci2: command tx timeout
[   67.142003][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.172801][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.267873][ T5821] veth0_vlan: entered promiscuous mode
[   67.293223][ T5821] veth1_vlan: entered promiscuous mode
[   67.297461][ T5827] veth0_vlan: entered promiscuous mode
[   67.303544][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.313346][ T5827] veth1_vlan: entered promiscuous mode
[   67.357036][ T5821] veth0_macvtap: entered promiscuous mode
[   67.367734][ T5821] veth1_macvtap: entered promiscuous mode
[   67.374877][ T5827] veth0_macvtap: entered promiscuous mode
[   67.386947][ T5827] veth1_macvtap: entered promiscuous mode
[   67.393662][ T5830] veth0_vlan: entered promiscuous mode
[   67.412232][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.418754][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.433220][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.446947][ T5830] veth1_vlan: entered promiscuous mode
[   67.452995][ T5693] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.458725][ T5693] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.465713][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.475523][ T5693] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.480100][ T5693] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.506508][ T5693] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.512810][ T5693] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.525423][ T5693] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.537287][ T5693] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.635528][ T5830] veth0_macvtap: entered promiscuous mode
[   67.643745][ T4955] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.649851][ T4955] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.662011][ T5830] veth1_macvtap: entered promiscuous mode
[   67.693698][   T87] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.696818][   T87] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.704114][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.735849][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.754246][ T1181] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.766137][ T1181] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.775012][ T5884] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.797373][ T5884] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.806345][ T5884] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.821276][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   67.826080][ T5884] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.835659][   T87] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.838815][   T87] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.937688][ T4991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.943565][ T4991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.950151][ T5889] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4'.
[   67.987206][   T87] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.991106][   T87] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.110216][ T5902] veth0_vlan: entered allmulticast mode
[   68.127722][ T5902] : renamed from vlan0
[   68.163331][ T5907] delete_channel: no stack
[   68.333115][ T5917] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9'.
[   68.932598][ T5931] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14'.
[   68.943256][ T5933] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   68.948975][ T5931] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14'.
[   68.960473][ T5210] Bluetooth: hci1: command tx timeout
[   68.960554][   T55] Bluetooth: hci0: command tx timeout
[   69.049415][   T55] Bluetooth: hci2: command tx timeout
[   69.052961][ T5931] Zero length message leads to an empty skb
[   69.137006][ T5943] netlink: 'syz.1.20': attribute type 1 has an invalid length.
[   69.284452][ T5956] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   69.356879][ T5959] Bluetooth: MGMT ver 1.23
[   69.427339][ T5966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.27'.
[   69.483453][ T5967] netlink: 'syz.0.28': attribute type 21 has an invalid length.
[   69.502907][ T5967] netlink: 132 bytes leftover after parsing attributes in process `syz.0.28'.
[   69.533456][ T5969] netlink: 4 bytes leftover after parsing attributes in process `syz.2.29'.
[   69.536804][ T5969] bridge_slave_1: left allmulticast mode
[   69.542683][ T5969] bridge_slave_1: left promiscuous mode
[   69.545393][ T5969] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.555402][ T5969] bridge_slave_0: left allmulticast mode
[   69.562947][ T5969] bridge_slave_0: left promiscuous mode
[   69.565190][ T5969] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.748079][ T5976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.31'.
[   69.905070][ T5984] syzkaller0: entered promiscuous mode
[   69.907309][ T5984] syzkaller0: entered allmulticast mode
[   70.308986][ T5988] netlink: 84 bytes leftover after parsing attributes in process `syz.0.35'.
[   70.313074][ T5988] netem: invalid attributes len -16
[   70.315205][ T5988] netem: change failed
[   70.546378][ T5998] netlink: 16 bytes leftover after parsing attributes in process `syz.0.40'.
[   70.971505][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   70.974172][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   71.039623][   T55] Bluetooth: hci1: command tx timeout
[   71.039684][ T5210] Bluetooth: hci0: command tx timeout
[   71.120087][ T5210] Bluetooth: hci2: command tx timeout
[   71.380852][ T6034] bridge_slave_1: left allmulticast mode
[   71.383205][ T6034] bridge_slave_1: left promiscuous mode
[   71.385586][ T6034] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.407017][ T6034] bridge_slave_0: left allmulticast mode
[   71.411007][ T6034] bridge_slave_0: left promiscuous mode
[   71.413420][ T6034] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.612906][ T6050] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   71.685189][ T6056] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   71.698789][ T6054] team0: Device macvlan1 is up. Set it down before adding it as a team port
[   71.828999][ T6064] syz.1.64 uses obsolete (PF_INET,SOCK_PACKET)
[   71.896194][ T6067] Bluetooth: MGMT ver 1.23
[   71.997834][ T6070] netlink: 'syz.0.66': attribute type 62 has an invalid length.
[   72.002544][ T6070] netlink: 'syz.0.66': attribute type 1 has an invalid length.
[   72.063155][ T6073] geneve2: entered promiscuous mode
[   72.356483][ T6084] netlink: 'syz.0.69': attribute type 2 has an invalid length.
[   72.496251][ T6086] netlink: 'syz.2.71': attribute type 1 has an invalid length.
[   72.517655][ T6096] IPVS: set_ctl: invalid protocol: 94 172.20.20.170:20004
[   72.732503][ T6064] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   72.823911][ T6110] netlink: 'syz.2.77': attribute type 11 has an invalid length.
[   73.068225][ T6125] __nla_validate_parse: 7 callbacks suppressed
[   73.068240][ T6125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.83'.
[   73.120105][   T55] Bluetooth: hci1: command tx timeout
[   73.165620][ T6134] openvswitch: netlink: Missing valid actions attribute.
[   73.168565][ T6134] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   73.199591][   T55] Bluetooth: hci2: command tx timeout
[   73.555718][ T6159] netlink: 'syz.1.95': attribute type 11 has an invalid length.
[   73.594182][ T6161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.96'.
[   73.646471][ T6169] netlink: 'syz.0.98': attribute type 21 has an invalid length.
[   73.649979][ T6169] netlink: 'syz.0.98': attribute type 1 has an invalid length.
[   73.655883][ T6169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.98'.
[   73.885416][ T6186] tipc: Started in network mode
[   73.887761][ T6186] tipc: Node identity b663f97106e, cluster identity 4711
[   73.893672][ T6186] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   73.898433][ T6186] syzkaller0: entered promiscuous mode
[   73.900999][ T6186] syzkaller0: entered allmulticast mode
[   73.915335][ T6186] tipc: Resetting bearer <eth:syzkaller0>
[   73.943282][ T6186] tipc: Resetting bearer <eth:syzkaller0>
[   73.952009][ T6186] tipc: Disabling bearer <eth:syzkaller0>
[   74.066805][ T6200] netlink: 44 bytes leftover after parsing attributes in process `syz.1.108'.
[   74.122246][ T6205] netlink: 4 bytes leftover after parsing attributes in process `syz.0.109'.
[   74.235848][ T6211] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   74.242123][ T6211] netlink: 24 bytes leftover after parsing attributes in process `syz.0.113'.
[   74.542031][ T6230] netlink: 44 bytes leftover after parsing attributes in process `syz.1.118'.
[   74.734714][ T6241] netlink: 68 bytes leftover after parsing attributes in process `syz.1.121'.
[   74.745878][ T6244] netlink: 4 bytes leftover after parsing attributes in process `syz.2.120'.
[   74.762891][ T6245] netlink: 68 bytes leftover after parsing attributes in process `syz.1.121'.
[   74.799171][ T5210] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   75.141922][ T6272] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   75.594007][ T6300] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   75.682006][ T6305] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   75.834105][   T12] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x9
[   75.888190][ T6311] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   76.055080][ T6329] ieee802154 phy0 wpan0: encryption failed: -22
[   76.225053][ T6345] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   76.229839][ T5693] bond0: (slave bond_slave_0): interface is now down
[   76.234338][ T5693] bond0: (slave bond_slave_1): interface is now down
[   76.241426][ T5693] bond0: now running without any active interface!
[   76.970301][ T6386] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   77.204936][   T33] audit: type=1800 audit(1754660666.430:2): pid=6407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.176" name="memory.events" dev="tmpfs" ino=315 res=0 errno=0
[   77.638947][ T6436] netlink: 'syz.0.186': attribute type 11 has an invalid length.
[   77.640565][ T6434] netlink: 'syz.2.187': attribute type 11 has an invalid length.
[   77.868038][ T6448] v: renamed from ip6_vti0 (while UP)
[   78.459305][ T6488] warning: `syz.0.205' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   78.481550][ T6490] __nla_validate_parse: 11 callbacks suppressed
[   78.481567][ T6490] netlink: 28 bytes leftover after parsing attributes in process `syz.2.204'.
[   78.610926][ T6497] netlink: 'syz.0.208': attribute type 7 has an invalid length.
[   78.680897][ T6505] netlink: 4 bytes leftover after parsing attributes in process `syz.2.210'.
[   78.736767][ T6497] netlink: 'syz.0.208': attribute type 1 has an invalid length.
[   78.743221][ T6510] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   78.837466][ T6504] bond1: (slave bridge0): making interface the new active one
[   78.845489][ T6504] bond1: (slave bridge0): Enslaving as an active interface with an up link
[   78.939570][ T6515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.214'.
[   78.943472][ T6515] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   78.987544][ T6515] batman_adv: batadv0: Removing interface: batadv_slave_1
[   79.247423][ T6540] netlink: 'syz.0.219': attribute type 1 has an invalid length.
[   79.321119][ T6548] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   79.377494][ T6550] syzkaller1: entered promiscuous mode
[   79.380446][ T6550] syzkaller1: entered allmulticast mode
[   79.414869][ T6552] raw_sendmsg: syz.0.223 forgot to set AF_INET. Fix it!
[   79.507964][ T6558] netlink: 6 bytes leftover after parsing attributes in process `syz.0.226'.
[   79.585369][ T6558] netlink: 16 bytes leftover after parsing attributes in process `syz.0.226'.
[   79.615641][ T6562] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   79.716253][ T6569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.228'.
[   79.733432][ T6571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.229'.
[   79.738780][ T6569] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   79.785911][ T6573] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   80.053686][ T6584] openvswitch: netlink: Missing key (keys=40, expected=200000)
[   80.061028][ T6586] netlink: 20 bytes leftover after parsing attributes in process `syz.2.236'.
[   80.073996][ T6586] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.236'.
[   80.333707][ T6604] netlink: 4 bytes leftover after parsing attributes in process `syz.2.244'.
[   80.523187][ T6621] netlink: 'syz.2.251': attribute type 39 has an invalid length.
[   80.575635][ T6625] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   80.862960][ T6636] netem: invalid attributes len -16
[   80.875599][ T6636] netem: change failed
[   81.225446][ T6658] netlink: 'syz.0.265': attribute type 20 has an invalid length.
[   81.228021][ T6658] netlink: 'syz.0.265': attribute type 21 has an invalid length.
[   81.265753][ T6660] tipc: Started in network mode
[   81.270184][ T6660] tipc: Node identity 6276d6676e31, cluster identity 4711
[   81.273751][ T6660] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.276622][ T6662] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   81.282244][ T6660] syzkaller0: entered promiscuous mode
[   81.284296][ T6660] syzkaller0: entered allmulticast mode
[   81.296881][ T6660] tipc: Resetting bearer <eth:syzkaller0>
[   81.306815][ T6660] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   81.319641][ T6659] tipc: Resetting bearer <eth:syzkaller0>
[   81.330397][ T6659] tipc: Disabling bearer <eth:syzkaller0>
[   82.141709][ T6704] syzkaller0: entered promiscuous mode
[   82.143776][ T6704] syzkaller0: entered allmulticast mode
[   82.389594][ T6723] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   82.475624][ T6727] vlan2: entered promiscuous mode
[   82.477535][ T6727] vlan2: entered allmulticast mode
[   82.479811][ T6727] hsr_slave_1: entered allmulticast mode
[   82.489652][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   82.767424][ T6736] netlink: 'syz.1.289': attribute type 15 has an invalid length.
[   83.044615][ T6742] bridge_slave_1: left allmulticast mode
[   83.046381][ T6742] bridge_slave_1: left promiscuous mode
[   83.048189][ T6742] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.075775][ T6742] bridge_slave_0: left allmulticast mode
[   83.077549][ T6742] bridge_slave_0: left promiscuous mode
[   83.089409][ T6742] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.339628][ T6756] DL<Y: renamed from lo (while UP)
[   83.386518][ T6758] netlink: 'syz.1.298': attribute type 11 has an invalid length.
[   83.653431][ T6784] __nla_validate_parse: 9 callbacks suppressed
[   83.653446][ T6784] netlink: 12 bytes leftover after parsing attributes in process `syz.0.307'.
[   83.830628][ T6800] netlink: 'syz.2.311': attribute type 11 has an invalid length.
[   83.931417][ T6804] netlink: 4 bytes leftover after parsing attributes in process `syz.0.314'.
[   83.978876][ T6809] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[   84.051911][ T6814] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   84.056450][ T6814] macsec1: entered promiscuous mode
[   84.060287][ T6814] macsec1: entered allmulticast mode
[   84.062380][ T6814] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[   84.174060][ T6823] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   84.181620][ T6823] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   84.202091][ T6825] netlink: 4 bytes leftover after parsing attributes in process `syz.2.322'.
[   84.278468][ T6829] netlink: 4 bytes leftover after parsing attributes in process `syz.0.324'.
[   84.300346][ T6832] geneve3: entered promiscuous mode
[   84.772239][ T6862] netlink: 'syz.2.336': attribute type 11 has an invalid length.
[   84.917972][ T6873] netlink: 'syz.2.341': attribute type 21 has an invalid length.
[   84.922920][ T6873] netlink: 128 bytes leftover after parsing attributes in process `syz.2.341'.
[   84.926512][ T6873] netlink: 3 bytes leftover after parsing attributes in process `syz.2.341'.
[   84.951470][ T6875] netlink: 'syz.1.342': attribute type 5 has an invalid length.
[   85.087871][ T6889] netlink: 12 bytes leftover after parsing attributes in process `syz.0.347'.
[   85.095240][ T6889] netlink: 124 bytes leftover after parsing attributes in process `syz.0.347'.
[   85.132813][ T6892] netlink: 4 bytes leftover after parsing attributes in process `syz.0.348'.
[   85.226588][ T6901] netlink: 'syz.1.353': attribute type 11 has an invalid length.
[   85.233224][ T6902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.352'.
[   85.340484][ T6911] vlan3: entered promiscuous mode
[   85.342186][ T6911] gretap0: entered promiscuous mode
[   85.415573][ T6920] ipvlan2: entered promiscuous mode
[   85.422315][ T6920] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   86.335807][   T47] cfg80211: failed to load regulatory.db
[   86.740025][ T7002] netlink: 'syz.1.385': attribute type 5 has an invalid length.
[   86.747512][ T7002] netlink: 'syz.1.385': attribute type 5 has an invalid length.
[   86.874739][ T7016] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.931440][ T7021] netlink: 'syz.1.388': attribute type 83 has an invalid length.
[   87.007921][ T7016] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.094622][ T7028] tipc: Can't bind to reserved service type 1
[   87.153328][ T7016] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.253471][ T7016] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.379349][ T5693] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.389267][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.407439][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.421826][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.623526][ T7059] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   87.652085][ T7060] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   87.652187][ T5693] bond0: (slave bond_slave_0): interface is now down
[   87.658135][ T5693] bond0: (slave bond_slave_1): interface is now down
[   87.689869][ T5693] bond0: now running without any active interface!
[   87.718037][ T7064] syzkaller1: entered promiscuous mode
[   87.720611][ T7064] syzkaller1: entered allmulticast mode
[   88.097032][ T7082] validate_nla: 1 callbacks suppressed
[   88.097065][ T7082] netlink: 'syz.2.412': attribute type 11 has an invalid length.
[   88.120522][ T7082] netlink: 'syz.2.412': attribute type 11 has an invalid length.
[   88.124397][ T7082] netlink: 'syz.2.412': attribute type 11 has an invalid length.
[   88.138978][ T7082] netlink: 'syz.2.412': attribute type 11 has an invalid length.
[   88.142909][ T7082] netlink: 'syz.2.412': attribute type 11 has an invalid length.
[   88.146219][ T7082] netlink: 'syz.2.412': attribute type 11 has an invalid length.
[   88.151180][ T7082] netlink: 'syz.2.412': attribute type 11 has an invalid length.
[   88.153984][ T7082] netlink: 'syz.2.412': attribute type 11 has an invalid length.
[   88.156784][ T7082] netlink: 'syz.2.412': attribute type 11 has an invalid length.
[   88.160951][ T7082] netlink: 'syz.2.412': attribute type 11 has an invalid length.
[   88.662191][ T7120] __nla_validate_parse: 49 callbacks suppressed
[   88.662206][ T7120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.422'.
[   88.720933][ T7124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.424'.
[   88.730237][ T7124] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   88.734053][ T7124] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   89.596219][ T7139] netlink: 32 bytes leftover after parsing attributes in process `syz.0.429'.
[   89.711991][ T7136] infiniband syz!: set active
[   89.715131][ T7136] infiniband syz!: added team_slave_0
[   89.745315][ T7136] RDS/IB: syz!: added
[   89.756016][ T7136] smc: adding ib device syz! with port count 1
[   89.758464][ T7136] smc:    ib device syz! port 1 has pnetid 
[   89.818738][ T7148] netlink: 36 bytes leftover after parsing attributes in process `syz.0.432'.
[   89.946573][ T7150] syzkaller0: entered promiscuous mode
[   89.948798][ T7150] syzkaller0: entered allmulticast mode
[   90.932322][ T7156] netlink: 184 bytes leftover after parsing attributes in process `syz.0.436'.
[   91.151564][ T7169] netlink: 24 bytes leftover after parsing attributes in process `syz.1.438'.
[   91.211190][ T7169] netlink: 36 bytes leftover after parsing attributes in process `syz.1.438'.
[   91.549869][ T7193] sctp: [Deprecated]: syz.0.447 (pid 7193) Use of int in max_burst socket option.
[   91.549869][ T7193] Use struct sctp_assoc_value instead
[   91.565770][ T7195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.448'.
[   91.577906][ T7197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.448'.
[   91.833746][ T7209] Bluetooth: MGMT ver 1.23
[   92.006808][ T7218] bond3: (slave bridge1): making interface the new active one
[   92.010395][ T7218] bond3: (slave bridge1): Enslaving as an active interface with an up link
[   92.032611][ T7218] bond3: (slave bridge2): Enslaving as an active interface with a down link
[   92.145815][ T7230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.460'.
[   92.160066][ T7227] v: renamed from ip6_vti0 (while UP)
[   92.577047][ T7259] netlink: ct family unspecified
[   92.579288][ T7259] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   92.614590][ T7263] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   93.068345][ T7285] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   93.920679][ T7317] __nla_validate_parse: 1 callbacks suppressed
[   93.920698][ T7317] netlink: 36 bytes leftover after parsing attributes in process `syz.2.493'.
[   94.192263][ T7326] validate_nla: 28 callbacks suppressed
[   94.192277][ T7326] netlink: 'syz.2.498': attribute type 11 has an invalid length.
[   94.377381][ T7343] netlink: 'syz.1.502': attribute type 21 has an invalid length.
[   94.383025][ T7343] netlink: 132 bytes leftover after parsing attributes in process `syz.1.502'.
[   95.218984][ T7351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.505'.
[   95.236670][ T7354] netlink: 164 bytes leftover after parsing attributes in process `syz.0.507'.
[   95.311777][ T7358] netlink: 'syz.2.508': attribute type 11 has an invalid length.
[   95.412366][ T7360] pim6reg1: entered promiscuous mode
[   95.415515][ T7360] pim6reg1: entered allmulticast mode
[   95.455463][ T7368] netlink: 8 bytes leftover after parsing attributes in process `syz.2.513'.
[   95.480614][ T7368] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   95.802270][ T7395] netlink: 52 bytes leftover after parsing attributes in process `syz.1.522'.
[   96.106781][ T7417] netlink: 4 bytes leftover after parsing attributes in process `syz.2.531'.
[   96.398971][ T7432] netlink: 'syz.2.536': attribute type 32 has an invalid length.
[   96.503660][ T7437] netlink: 12 bytes leftover after parsing attributes in process `syz.0.538'.
[   96.512471][ T7439] netlink: 4 bytes leftover after parsing attributes in process `syz.2.539'.
[   96.949168][ T7471] netlink: 148 bytes leftover after parsing attributes in process `syz.0.548'.
[   96.953416][ T7472] syz_tun: entered allmulticast mode
[   97.094539][ T7477] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[   97.153728][ T7484] netlink: 'syz.0.552': attribute type 1 has an invalid length.
[   97.249580][ T7496] 8021q: adding VLAN 0 to HW filter on device bond4
[   97.273348][ T7488] 8021q: adding VLAN 0 to HW filter on device bond4
[   97.276488][ T7488] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address
[   97.282632][ T7488] bond4: (slave vxcan3): Error -95 calling set_mac_address
[   97.711835][ T7516] netlink: 'syz.2.562': attribute type 1 has an invalid length.
[   97.797546][ T7516] bond5: (slave gretap1): making interface the new active one
[   97.805131][ T7516] bond5: (slave gretap1): Enslaving as an active interface with an up link
[   98.012737][ T7521] netlink: 'syz.2.564': attribute type 1 has an invalid length.
[   98.024500][ T7523] netlink: 'syz.2.564': attribute type 1 has an invalid length.
[   98.243229][ T7537] netlink: ct family unspecified
[   98.245207][ T7537] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   98.430981][ T7549] geneve2: entered promiscuous mode
[   98.458931][ T7556] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   98.466875][   T24] IPVS: starting estimator thread 0...
[   98.563406][ T7558] IPVS: using max 62 ests per chain, 148800 per kthread
[   98.710140][ T7575] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4300
[   98.895315][ T7590] netlink: 'syz.1.591': attribute type 2 has an invalid length.
[   98.925908][ T7590] : entered promiscuous mode
[   98.996762][ T7596] vlan1: entered promiscuous mode
[   99.002021][ T7596] vlan1: entered allmulticast mode
[   99.004217][ T7596] hsr_slave_1: entered allmulticast mode
[   99.250307][ T7614] netlink: 'syz.2.600': attribute type 2 has an invalid length.
[   99.265828][ T7614] k*]: entered promiscuous mode
[   99.285742][ T7614] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   99.365705][ T7619] netlink: 'syz.2.603': attribute type 1 has an invalid length.
[   99.493974][ T7627] __nla_validate_parse: 9 callbacks suppressed
[   99.493993][ T7627] netlink: 20 bytes leftover after parsing attributes in process `syz.1.606'.
[   99.550736][ T7631] netlink: 4 bytes leftover after parsing attributes in process `syz.0.607'.
[   99.605125][ T7627] netlink: 20 bytes leftover after parsing attributes in process `syz.1.606'.
[   99.616308][ T7627] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[   99.724316][ T7640] delete_channel: no stack
[   99.733929][ T7644] netlink: 12 bytes leftover after parsing attributes in process `syz.2.612'.
[   99.736814][ T7644] openvswitch: netlink: Flow key attr not present in new flow.
[   99.744798][ T7644] netlink: 28 bytes leftover after parsing attributes in process `syz.2.612'.
[   99.759589][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   99.854548][ T7658] netlink: 'syz.0.614': attribute type 1 has an invalid length.
[   99.995793][ T7665] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.616'.
[  100.137653][ T7677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.620'.
[  100.208127][ T7680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.619'.
[  100.435996][ T7690] netlink: 32 bytes leftover after parsing attributes in process `syz.2.626'.
[  100.515472][ T7698] netlink: 68 bytes leftover after parsing attributes in process `syz.0.629'.
[  100.874628][ T7719] netlink: 'syz.0.639': attribute type 13 has an invalid length.
[  100.877734][ T7723] netlink: 'syz.2.640': attribute type 4 has an invalid length.
[  101.364428][ T7756] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  101.405477][ T7758] smc: net device bond0 applied user defined pnetid SYZ2
[  101.513125][ T7759] smc: removing net device bond0 with user defined pnetid SYZ2
[  101.516518][ T7759] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  101.523570][ T7759] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  101.528395][ T7759] bond0 (unregistering): Released all slaves
[  101.701387][ T7769] netlink: 'syz.2.653': attribute type 1 has an invalid length.
[  101.705483][ T7769] netlink: 'syz.2.653': attribute type 2 has an invalid length.
[  101.755354][ T7772] veth1_macvtap: left promiscuous mode
[  101.757713][ T7772] macsec0: entered allmulticast mode
[  102.853878][ T7825] netlink: 'syz.0.664': attribute type 3 has an invalid length.
[  102.857090][ T7825] netlink: 'syz.0.664': attribute type 1 has an invalid length.
[  103.115538][ T7841] ip6gre1: entered allmulticast mode
[  103.304995][ T7849] macsec1: entered allmulticast mode
[  103.415592][ T7861] ipvlan0: entered promiscuous mode
[  103.417756][ T7861] ipvlan0: entered allmulticast mode
[  103.761895][ T7881] netlink: ct family unspecified
[  103.763793][ T7881] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  103.821716][ T7836] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  104.127972][ T7901] tls_set_device_offload: netdev not found
[  104.520538][ T7933] __nla_validate_parse: 15 callbacks suppressed
[  104.520557][ T7933] netlink: 176 bytes leftover after parsing attributes in process `syz.2.695'.
[  104.693173][ T7949] netlink: 4 bytes leftover after parsing attributes in process `syz.1.698'.
[  104.905154][ T7962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.704'.
[  104.908748][ T7962] netlink: 12 bytes leftover after parsing attributes in process `syz.1.704'.
[  104.923915][ T7962] netlink: 'syz.1.704': attribute type 15 has an invalid length.
[  104.956080][   T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  104.959821][ T7962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.704'.
[  104.964259][   T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  104.967561][   T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  104.981557][ T7962] netlink: 12 bytes leftover after parsing attributes in process `syz.1.704'.
[  104.989700][ T7962] netlink: 'syz.1.704': attribute type 15 has an invalid length.
[  104.995386][   T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  105.075900][ T7975] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40
[  105.111908][ T7977] netlink: 48 bytes leftover after parsing attributes in process `syz.0.711'.
[  105.201865][ T7983] netlink: ct family unspecified
[  105.203846][ T7983] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  106.040816][ T8024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.725'.
[  106.101700][ T8026] netlink: 'syz.0.727': attribute type 11 has an invalid length.
[  106.105870][ T8028] netlink: 'syz.1.728': attribute type 1 has an invalid length.
[  106.180318][ T8034] netlink: 'syz.1.730': attribute type 1 has an invalid length.
[  106.233212][ T8039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.731'.
[  106.244317][ T8039] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  106.332976][ T8050] netlink: 28 bytes leftover after parsing attributes in process `syz.1.732'.
[  106.462949][ T8056] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  106.465801][ T8056] syzkaller0: entered promiscuous mode
[  106.471589][ T8056] syzkaller0: entered allmulticast mode
[  106.477970][ T8056] tipc: Resetting bearer <eth:syzkaller0>
[  106.484623][ T8055] tipc: Resetting bearer <eth:syzkaller0>
[  106.497827][ T8055] tipc: Disabling bearer <eth:syzkaller0>
[  106.567827][ T8065] netlink: ct family unspecified
[  106.572492][ T8065] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  106.845094][   T33] audit: type=1804 audit(1754660696.070:3): pid=8080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.745" name="/newroot/219/cgroup.controllers" dev="tmpfs" ino=1130 res=1 errno=0
[  106.860598][   T33] audit: type=1800 audit(1754660696.070:4): pid=8080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.745" name="cgroup.controllers" dev="tmpfs" ino=1130 res=0 errno=0
[  106.945428][ T8076] netlink: 'syz.2.742': attribute type 13 has an invalid length.
[  107.902862][ T8120] syzkaller1: entered promiscuous mode
[  107.904724][ T8120] syzkaller1: entered allmulticast mode
[  108.033447][ T8131] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  108.165378][ T8138] delete_channel: no stack
[  108.418791][ T8153] netlink: 'syz.2.770': attribute type 11 has an invalid length.
[  109.473466][ T8176] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  109.564377][ T8185] netlink: 'syz.1.784': attribute type 1 has an invalid length.
[  109.566867][ T8185] __nla_validate_parse: 9 callbacks suppressed
[  109.566876][ T8185] netlink: 228 bytes leftover after parsing attributes in process `syz.1.784'.
[  109.595632][ T8187] netlink: 60 bytes leftover after parsing attributes in process `syz.0.782'.
[  109.605049][ T8182] netlink: 60 bytes leftover after parsing attributes in process `syz.0.782'.
[  109.618163][ T8182] netlink: 172 bytes leftover after parsing attributes in process `syz.0.782'.
[  109.953010][ T8216] netlink: 92 bytes leftover after parsing attributes in process `syz.0.792'.
[  109.958907][ T8217] netlink: 92 bytes leftover after parsing attributes in process `syz.0.792'.
[  110.096886][ T8233] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  110.226159][ T8244] netlink: 56 bytes leftover after parsing attributes in process `syz.0.800'.
[  110.995994][ T8298] netlink: 'syz.0.817': attribute type 2 has an invalid length.
[  111.001523][ T8298] netlink: 64 bytes leftover after parsing attributes in process `syz.0.817'.
[  111.014318][ T8296] syzkaller0: entered promiscuous mode
[  111.016096][ T8296] syzkaller0: entered allmulticast mode
[  111.020913][ T8298] netlink: 72 bytes leftover after parsing attributes in process `syz.0.817'.
[  111.129640][ T8302] netlink: 4 bytes leftover after parsing attributes in process `syz.0.818'.
[  112.107371][ T8312] netlink: 'syz.1.820': attribute type 29 has an invalid length.
[  112.545917][ T8351] team0: Device sit1 is of different type
[  112.874469][ T8380] netlink: 'syz.0.841': attribute type 26 has an invalid length.
[  113.384753][ T8420] netlink: 'syz.0.856': attribute type 1 has an invalid length.
[  114.343649][ T8443] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  114.748491][ T8469] __nla_validate_parse: 4 callbacks suppressed
[  114.748511][ T8469] netlink: 4 bytes leftover after parsing attributes in process `syz.0.872'.
[  114.757030][ T8469] netlink: 12 bytes leftover after parsing attributes in process `syz.0.872'.
[  114.864802][ T8464] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  115.028683][ T8464] vlan2: left promiscuous mode
[  115.031641][ T8464] vlan2: left allmulticast mode
[  115.033660][ T8464] hsr_slave_1: left allmulticast mode
[  115.037859][ T8464] vlan3: left promiscuous mode
[  115.039960][ T8464] gretap0: left promiscuous mode
[  115.044557][ T8464] geneve2: left promiscuous mode
[  115.068982][ T5884] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  115.074369][ T5884] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  115.083678][ T5884] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  115.088639][ T5884] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  115.095761][ T5884] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  115.099984][ T5884] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  115.105207][ T5884] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  115.108932][ T5884] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  115.167083][ T8485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.875'.
[  115.184120][ T8485] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  115.214756][ T8483] netlink: 16 bytes leftover after parsing attributes in process `syz.1.874'.
[  116.477111][ T8492] netlink: 4 bytes leftover after parsing attributes in process `syz.2.878'.
[  116.663563][ T8508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.884'.
[  116.678654][ T8508] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  116.682532][ T8509] netlink: 'syz.0.885': attribute type 1 has an invalid length.
[  116.687052][ T8509] netlink: 24 bytes leftover after parsing attributes in process `syz.0.885'.
[  116.863146][ T8526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.889'.
[  116.867599][ T8527] Driver unsupported XDP return value 0 on prog  (id 213) dev N/A, expect packet loss!
[  116.871970][ T8526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.889'.
[  116.962548][ T8540] veth0_to_bond: entered allmulticast mode
[  117.001825][ T8542] netlink: 'syz.0.897': attribute type 3 has an invalid length.
[  117.005072][ T8542] netlink: 666 bytes leftover after parsing attributes in process `syz.0.897'.
[  118.477426][ T8597] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  119.622292][ T8610] netlink: 'syz.0.919': attribute type 1 has an invalid length.
[  119.686573][ T8610] 8021q: adding VLAN 0 to HW filter on device bond4
[  119.723413][ T8614] bond4: (slave gretap2): making interface the new active one
[  119.752646][ T8614] bond4: (slave gretap2): Enslaving as an active interface with an up link
[  120.033191][ T8614] syz.0.919 (8614) used greatest stack depth: 19672 bytes left
[  120.180480][ T8630] __nla_validate_parse: 6 callbacks suppressed
[  120.180498][ T8630] netlink: 20 bytes leftover after parsing attributes in process `syz.0.925'.
[  120.886280][ T8645] netlink: 276 bytes leftover after parsing attributes in process `syz.1.931'.
[  121.044227][ T8650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.933'.
[  125.456430][ T8652] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  125.577488][ T8657] netlink: 12 bytes leftover after parsing attributes in process `syz.2.935'.
[  126.045449][ T8675] netlink: 8 bytes leftover after parsing attributes in process `syz.2.941'.
[  126.056579][ T8675] veth1_macvtap: entered promiscuous mode
[  132.341693][ T5885] page_pool_release_retry() stalled pool shutdown: id 16, 1 inflight 60 sec
[  132.787745][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  132.800499][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  132.829062][    C1] sched: DL replenish lagged too much
[  134.962271][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  135.046342][ T5829] page_pool_release_retry() stalled pool shutdown: id 19, 1 inflight 60 sec
[  151.272967][ T5821] syz_tun (unregistering): left allmulticast mode
[  161.013379][   T24] page_pool_release_retry() stalled pool shutdown: id 24, 1 inflight 61 sec
[  163.205416][ T5823] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  163.535900][ T5823] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  165.018639][ T5823] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  165.625516][ T5823] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  165.642110][ T5823] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  169.824825][ T5823] Bluetooth: hci0: command tx timeout
[  170.338693][ T5210] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  170.438188][ T5210] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  170.458024][ T5210] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  170.478854][ T5210] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  170.573699][ T5210] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  171.965231][ T5823] Bluetooth: hci0: command tx timeout
[  173.746742][ T5823] Bluetooth: hci1: command tx timeout
[  174.013556][ T5823] Bluetooth: hci0: command tx timeout
[  176.061677][ T5823] Bluetooth: hci1: command tx timeout
[  176.116850][   T55] Bluetooth: hci0: command tx timeout
[  178.166554][   T55] Bluetooth: hci1: command tx timeout
[  180.252466][   T55] Bluetooth: hci1: command tx timeout
[  193.969607][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  193.978013][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  200.592637][   T55] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  200.977395][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  202.983315][ T8702] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  209.212999][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  234.994337][ T5823] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  235.024576][ T5823] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  235.028391][ T5823] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  235.084593][ T5823] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  235.095552][ T5823] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  237.960283][ T5823] Bluetooth: hci1: command tx timeout
[  239.904449][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  240.116085][   T55] Bluetooth: hci1: command tx timeout
[  240.117971][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  240.126892][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  240.135401][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  240.138336][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  240.397435][ T8720] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  240.405126][ T8720] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  240.407845][ T8720] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  240.416723][ T8720] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  240.423374][ T8720] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  242.167866][ T8720] Bluetooth: hci1: command tx timeout
[  242.415761][ T8720] Bluetooth: hci2: command tx timeout
[  242.769938][ T8720] Bluetooth: hci3: command tx timeout
[  244.310399][ T8720] Bluetooth: hci1: command tx timeout
[  244.604723][ T8720] Bluetooth: hci2: command tx timeout
[  244.825095][ T8720] Bluetooth: hci3: command tx timeout
[  246.715264][ T5210] Bluetooth: hci2: command tx timeout
[  247.019649][ T8720] Bluetooth: hci3: command tx timeout
[  248.822434][ T8720] Bluetooth: hci2: command tx timeout
[  249.181905][ T8720] Bluetooth: hci3: command tx timeout
[  255.385314][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  255.573194][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  293.241872][ T5210] Bluetooth: hci0: command 0x0406 tx timeout
[  316.823162][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  316.831287][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  338.608193][ T5210] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  338.647518][ T5210] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  338.716840][ T5823] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  338.792253][   T55] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  338.796304][   T55] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  338.804070][   T55] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  338.806800][   T55] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  338.813261][   T55] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  338.912928][   T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  338.915687][ T5210] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  338.970738][ T5210] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  338.974439][ T5210] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  338.977605][ T5210] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  338.986626][ T5210] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  339.027611][ T5210] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  340.914763][ T5210] Bluetooth: hci5: command tx timeout
[  341.055098][ T5210] Bluetooth: hci6: command tx timeout
[  341.162561][ T5210] Bluetooth: hci4: command tx timeout
[  343.062023][ T5210] Bluetooth: hci5: command tx timeout
[  343.145444][ T8720] Bluetooth: hci6: command tx timeout
[  343.220815][ T8720] Bluetooth: hci4: command tx timeout
[  345.250147][ T8720] Bluetooth: hci5: command tx timeout
[  345.251967][ T8720] Bluetooth: hci6: command tx timeout
[  345.287440][ T5210] Bluetooth: hci4: command tx timeout
[  347.441033][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  347.523846][ T8720] Bluetooth: hci6: command tx timeout
[  347.526100][ T8720] Bluetooth: hci5: command tx timeout
[  347.528277][ T8720] Bluetooth: hci4: command tx timeout
[  360.016892][ T5210] Bluetooth: hci1: command 0x0406 tx timeout
[  364.983582][   T55] Bluetooth: hci2: command 0x0406 tx timeout
[  364.986277][   T55] Bluetooth: hci3: command 0x0406 tx timeout
[  368.333217][ T5850] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  370.301304][ T5850] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  370.743385][ T5850] bond0 (unregistering): Released all slaves
[  373.479296][ T8720] Bluetooth: hci7: Opcode 0x0c03 failed: -110
[  373.911680][ T8720] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  375.945713][ T8750] Bluetooth: hci7: Opcode 0x0c03 failed: -110
[  378.369786][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  378.381177][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  379.809942][ T5850] bond1 (unregistering): Released all slaves
[  382.271979][ T5210] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  382.275626][ T5210] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  382.278484][ T5210] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  382.285126][ T5210] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  382.288220][ T5210] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  383.715565][ T5850] : left promiscuous mode
[  385.250588][ T5210] Bluetooth: hci7: command tx timeout
[  385.541916][ T8720] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  385.574127][ T8720] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  385.583538][ T8720] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  385.924761][ T8720] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  385.927502][ T8720] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  387.558108][ T5210] Bluetooth: hci7: command tx timeout
[  388.385039][ T5210] Bluetooth: hci8: command tx timeout
[  389.624707][ T5210] Bluetooth: hci7: command tx timeout
[  390.534344][ T5210] Bluetooth: hci8: command tx timeout
[  391.725922][ T5210] Bluetooth: hci7: command tx timeout
[  392.766809][ T5210] Bluetooth: hci8: command tx timeout
[  393.357381][ T8720] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  393.390818][ T8720] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  393.583143][ T8720] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  393.976660][ T8720] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  394.243244][ T8720] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  394.819904][ T5210] Bluetooth: hci8: command tx timeout
[  396.695261][ T8720] Bluetooth: hci4: command tx timeout
[  398.974890][ T8720] Bluetooth: hci4: command tx timeout
[  401.062423][ T8720] Bluetooth: hci4: command tx timeout
[  403.128590][ T8720] Bluetooth: hci4: command tx timeout
[  426.883306][ T5850] tipc: Left network mode
[  439.713603][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  439.721355][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  453.564027][ T5210] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  453.805850][ T5210] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  453.848820][ T5823] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  453.873947][ T5823] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  453.876563][ T5823] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  454.113586][ T5823] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  454.150617][ T5823] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  454.212394][ T5823] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  454.216725][ T5823] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  454.957897][ T5823] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  456.113771][ T5823] Bluetooth: hci5: command tx timeout
[  457.555101][ T5823] Bluetooth: hci6: command tx timeout
[  458.451068][ T5823] Bluetooth: hci5: command tx timeout
[  459.637646][ T5210] Bluetooth: hci6: command tx timeout
[  460.722711][ T5210] Bluetooth: hci5: command tx timeout
[  461.825177][ T5210] Bluetooth: hci6: command tx timeout
[  462.915500][ T5210] Bluetooth: hci5: command tx timeout
[  463.887785][ T5210] Bluetooth: hci6: command tx timeout
[  469.213885][ T5823] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  469.217639][ T5823] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  469.228108][ T5823] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  469.240322][ T5823] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  469.243534][ T5823] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  471.451226][ T5823] Bluetooth: hci4: command tx timeout
[  473.543845][ T5823] Bluetooth: hci4: command tx timeout
[  476.053894][ T5823] Bluetooth: hci4: command tx timeout
[  478.099657][ T5823] Bluetooth: hci4: command tx timeout
[  501.135622][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  501.140996][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  508.424283][   T55] Bluetooth: hci7: command 0x0406 tx timeout
[  508.426689][   T55] Bluetooth: hci8: command 0x0406 tx timeout
[  530.321641][ T5823] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  530.326285][ T5823] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  530.422101][ T5823] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  530.426188][ T5823] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  530.428883][ T5823] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  532.136077][ T8720] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  532.154775][ T8720] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  532.158458][ T8720] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  532.342422][ T8720] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  532.349655][ T8720] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  534.968064][ T5210] Bluetooth: hci9: command tx timeout
[  537.087293][   T55] Bluetooth: hci9: command tx timeout
[  537.508085][ T5210] Bluetooth: hci10: command tx timeout
[  537.558876][ T8720] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  537.578324][ T8720] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  537.613295][ T8720] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  537.617156][ T8720] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  537.638017][ T8720] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  539.127870][ T8720] Bluetooth: hci9: command tx timeout
[  539.628114][ T8720] Bluetooth: hci10: command tx timeout
[  540.936109][ T8720] Bluetooth: hci11: command tx timeout
[  541.264976][ T8720] Bluetooth: hci9: command tx timeout
[  541.858314][ T8720] Bluetooth: hci10: command tx timeout
[  543.156962][ T8720] Bluetooth: hci11: command tx timeout
[  543.931302][ T8720] Bluetooth: hci10: command tx timeout
[  545.240134][ T8720] Bluetooth: hci11: command tx timeout
[  547.302349][ T8720] Bluetooth: hci11: command tx timeout
[  562.861401][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  562.869773][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  565.499918][ T5850] hsr_slave_0: left promiscuous mode
[  566.114860][ T5850] hsr_slave_1: left promiscuous mode
[  566.484347][ T5850] batman_adv: batadv0: Removing interface: batadv_slave_0
[  581.135665][   T55] Bluetooth: hci6: command 0x0406 tx timeout
[  583.882005][   T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  583.908750][   T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  584.140918][   T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  584.216355][   T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  584.218958][   T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  586.523527][   T55] Bluetooth: hci4: command tx timeout
[  588.709427][   T55] Bluetooth: hci4: command tx timeout
[  591.009968][ T8720] Bluetooth: hci4: command tx timeout
[  591.222189][   T55] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  591.834986][   T55] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  593.087722][   T55] Bluetooth: hci4: command tx timeout
[  594.051811][ T8823] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  613.943067][ T8720] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  614.037343][ T8720] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  614.071266][ T8720] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  614.236212][ T8720] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  614.251971][ T8720] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  616.572042][ T8720] Bluetooth: hci5: command tx timeout
[  618.658234][ T8720] Bluetooth: hci5: command tx timeout
[  620.997427][ T8720] Bluetooth: hci5: command tx timeout
[  623.332858][ T8720] Bluetooth: hci5: command tx timeout
[  623.934937][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  624.384132][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  624.392065][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  662.873129][ T5210] Bluetooth: hci9: command 0x0406 tx timeout
[  662.875060][ T5210] Bluetooth: hci10: command 0x0406 tx timeout
[  662.876961][ T5210] Bluetooth: hci11: command 0x0406 tx timeout
[  669.768435][   T55] Bluetooth: hci12: Opcode 0x0c03 failed: -110
[  674.217553][   T55] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  676.247531][ T8835] Bluetooth: hci12: Opcode 0x0c03 failed: -110
[  685.648384][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  685.661804][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  688.413226][ T5210] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  688.801552][ T5210] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  688.810574][ T5210] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  688.895846][ T5210] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  689.150272][ T5210] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  691.457714][   T34] INFO: task syz-executor:8713 blocked for more than 143 seconds.
[  691.473212][   T34]       Not tainted 6.16.0-syzkaller-06620-gae633388cae3-dirty #0
[  691.475688][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  691.478399][   T34] task:syz-executor    state:D stack:23720 pid:8713  tgid:8713  ppid:1      task_flags:0x400140 flags:0x00004006
[  691.755504][   T34] Call Trace:
[  691.756545][   T34]  <TASK>
[  691.757797][   T34]  __schedule+0x1737/0x4d30
[  691.986094][   T34]  ? __kernel_text_address+0xd/0x40
[  691.988259][   T34]  ? __lock_acquire+0xab9/0xd20
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  692.418954][ T8834] syz-executor: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  692.437753][ T8834] CPU: 1 UID: 0 PID: 8834 Comm: syz-executor Not tainted 6.16.0-syzkaller-06620-gae633388cae3-dirty #0 PREEMPT(full) 
[  692.437775][ T8834] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  692.437784][ T8834] Call Trace:
[  692.437791][ T8834]  <TASK>
[  692.437798][ T8834]  dump_stack_lvl+0x189/0x250
[  692.437822][ T8834]  ? __pfx_dump_stack_lvl+0x10/0x10
[  692.437837][ T8834]  ? __pfx__printk+0x10/0x10
[  692.437855][ T8834]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  692.437872][ T8834]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  692.437889][ T8834]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  692.437905][ T8834]  warn_alloc+0x214/0x310
[  692.437925][ T8834]  ? __pfx_warn_alloc+0x10/0x10
[  692.437945][ T8834]  ? __get_vm_area_node+0x28f/0x300
[  692.437967][ T8834]  ? kcov_ioctl+0x55/0x640
[  692.437989][ T8834]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  692.438025][ T8834]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  692.438044][ T8834]  ? __pfx_kcov_ioctl+0x10/0x10
[  692.438061][ T8834]  vmalloc_user_noprof+0xad/0xf0
[  692.438073][ T8834]  ? kcov_ioctl+0x55/0x640
[  692.438092][ T8834]  kcov_ioctl+0x55/0x640
[  692.438111][ T8834]  ? bpf_lsm_file_ioctl+0x9/0x20
[  692.438130][ T8834]  ? __pfx_kcov_ioctl+0x10/0x10
[  692.438147][ T8834]  __se_sys_ioctl+0xfc/0x170
[  692.438167][ T8834]  do_syscall_64+0xfa/0x3b0
[  692.438188][ T8834]  ? lockdep_hardirqs_on+0x9c/0x150
[  692.438205][ T8834]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  692.438219][ T8834]  ? exc_page_fault+0x9f/0xf0
[  692.438238][ T8834]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  692.438252][ T8834] RIP: 0033:0x7faf1878e7eb
[  692.438269][ T8834] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[  692.438282][ T8834] RSP: 002b:00007ffe03bf05c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  692.438296][ T8834] RAX: ffffffffffffffda RBX: 0000000000100000 RCX: 00007faf1878e7eb
[  692.438306][ T8834] RDX: 0000000000100000 RSI: ffffffff80086301 RDI: 00000000000000d7
[  692.438315][ T8834] RBP: 00007faf189b5f40 R08: 00000000000000da R09: 0000000000000000
[  692.438324][ T8834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  692.438332][ T8834] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000
[  692.438361][ T8834]  </TASK>
[  692.438367][ T8834] Mem-Info:
[  692.629315][   T34]  ? schedule+0x165/0x360
[  693.419717][   T34]  ? __lock_acquire+0xab9/0xd20
[  693.421756][   T34]  ? __pfx___schedule+0x10/0x10
[  693.423746][   T34]  ? schedule+0x91/0x360
[  693.425474][   T34]  schedule+0x165/0x360
[  693.427080][   T34]  schedule_preempt_disabled+0x13/0x30
[  693.756689][   T34]  __mutex_lock+0x7e3/0x1340
[  693.758665][   T34]  ? __mutex_lock+0x5b6/0x1340
[  693.773088][   T34]  ? mpls_net_exit+0x79/0x270
[  693.775061][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  693.777092][   T34]  ? kasan_quarantine_put+0xdd/0x220
[  693.986932][   T34]  ? kfree+0x18e/0x440
[  693.988703][   T34]  ? do_raw_spin_unlock+0x4d/0x240
[  694.024081][   T34]  mpls_net_exit+0x79/0x270
[  694.024756][ T8834] active_anon:6453 inactive_anon:0 isolated_anon:0
[  694.024756][ T8834]  active_file:1373 inactive_file:11867 isolated_file:0
[  694.024756][ T8834]  unevictable:1768 dirty:12 writeback:0
[  694.024756][ T8834]  slab_reclaimable:7277 slab_unreclaimable:130019
[  694.024756][ T8834]  mapped:71672 shmem:2414 pagetables:1285
[  694.024756][ T8834]  sec_pagetables:0 bounce:0
[  694.024756][ T8834]  kernel_misc_reclaimable:0
[  694.024756][ T8834]  free:117449 free_pcp:22308 free_cma:0
[  694.026212][   T34]  ops_undo_list+0x49a/0x990
[  694.026254][   T34]  ? __pfx_ops_undo_list+0x10/0x10
[  694.026274][   T34]  ? ops_init+0x469/0x5c0
[  694.026303][   T34]  setup_net+0x2d3/0x320
[  694.026326][   T34]  ? __pfx_setup_net+0x10/0x10
[  694.026349][   T34]  ? copy_net_ns+0x304/0x4d0
[  694.026369][   T34]  ? down_read_killable+0x1d1/0x350
[  694.026389][   T34]  copy_net_ns+0x31b/0x4d0
[  694.026440][   T34]  create_new_namespaces+0x3f3/0x720
[  694.026469][   T34]  ? security_capable+0x7e/0x2e0
[  694.026497][   T34]  unshare_nsproxy_namespaces+0x11c/0x170
[  694.026522][   T34]  ksys_unshare+0x4c8/0x8c0
[  694.026546][   T34]  ? __pfx_ksys_unshare+0x10/0x10
[  694.026564][   T34]  ? rcu_is_watching+0x15/0xb0
[  694.026595][   T34]  __x64_sys_unshare+0x38/0x50
[  694.026613][   T34]  do_syscall_64+0xfa/0x3b0
[  694.026633][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  694.026654][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  694.026670][   T34]  ? exc_page_fault+0x9f/0xf0
[  694.026691][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  694.026706][   T34] RIP: 0033:0x7f0e021903e7
[  694.026720][   T34] RSP: 002b:00007fffbf587168 EFLAGS: 00000202 ORIG_RAX: 0000000000000110
[  694.026740][   T34] RAX: ffffffffffffffda RBX: 00007f0e023b5f40 RCX: 00007f0e021903e7
[  694.026751][   T34] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[  694.026761][   T34] RBP: 00007f0e023b67b8 R08: 0000000000000000 R09: 0000000000000000
[  694.026771][   T34] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008
[  694.026781][   T34] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000
[  694.026804][   T34]  </TASK>
[  694.026845][   T34] INFO: task syz-executor:8717 blocked for more than 146 seconds.
[  694.026859][   T34]       Not tainted 6.16.0-syzkaller-06620-gae633388cae3-dirty #0
[  694.026868][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  694.026876][   T34] task:syz-executor    state:D stack:25304 pid:8717  tgid:8717  ppid:1      task_flags:0x400140 flags:0x00004006
[  694.026922][   T34] Call Trace:
[  694.026929][   T34]  <TASK>
[  694.026939][   T34]  __schedule+0x1737/0x4d30
[  694.026973][   T34]  ? __lock_acquire+0xab9/0xd20
[  694.026996][   T34]  ? schedule+0x165/0x360
[  694.027015][   T34]  ? __lock_acquire+0xab9/0xd20
[  694.027036][   T34]  ? __pfx___schedule+0x10/0x10
[  694.027086][   T34]  ? schedule+0x91/0x360
[  694.027107][   T34]  schedule+0x165/0x360
[  694.027128][   T34]  schedule_preempt_disabled+0x13/0x30
[  694.027151][   T34]  __mutex_lock+0x7e3/0x1340
[  694.027177][   T34]  ? __mutex_lock+0x5b6/0x1340
[  694.027200][   T34]  ? cfg802154_pernet_exit+0x19/0xe0
[  694.027223][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  694.027249][   T34]  ? __pfx___might_resched+0x10/0x10
[  694.027275][   T34]  ? __pfx_rdma_dev_exit_net+0x10/0x10
[  694.027294][   T34]  ? net_generic+0x1e/0x240
[  694.027314][   T34]  cfg802154_pernet_exit+0x19/0xe0
[  694.027335][   T34]  ops_undo_list+0x49a/0x990
[  694.027362][   T34]  ? __pfx_ops_undo_list+0x10/0x10
[  694.027382][   T34]  ? ops_init+0x469/0x5c0
[  694.027436][   T34]  setup_net+0x2d3/0x320
[  694.027458][   T34]  ? __pfx_setup_net+0x10/0x10
[  694.027480][   T34]  ? copy_net_ns+0x304/0x4d0
[  694.027499][   T34]  ? down_read_killable+0x1d1/0x350
[  694.027518][   T34]  copy_net_ns+0x31b/0x4d0
[  694.027542][   T34]  create_new_namespaces+0x3f3/0x720
[  694.027567][   T34]  ? security_capable+0x7e/0x2e0
[  694.027591][   T34]  unshare_nsproxy_namespaces+0x11c/0x170
[  694.027615][   T34]  ksys_unshare+0x4c8/0x8c0
[  694.027637][   T34]  ? __pfx_ksys_unshare+0x10/0x10
[  694.027654][   T34]  ? rcu_is_watching+0x15/0xb0
[  694.027684][   T34]  __x64_sys_unshare+0x38/0x50
[  694.027700][   T34]  do_syscall_64+0xfa/0x3b0
[  694.027720][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  694.027739][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  694.027754][   T34]  ? exc_page_fault+0x9f/0xf0
[  694.027775][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  694.027789][   T34] RIP: 0033:0x7f804d9903e7
[  694.027800][   T34] RSP: 002b:00007fff3bd02918 EFLAGS: 00000206 ORIG_RAX: 0000000000000110
[  694.027815][   T34] RAX: ffffffffffffffda RBX: 00007f804dbb5f40 RCX: 00007f804d9903e7
[  694.027826][   T34] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[  694.027835][   T34] RBP: 00007f804dbb67b8 R08: 0000000000000000 R09: 0000000000000000
[  694.027844][   T34] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008
[  694.027853][   T34] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000
[  694.027874][   T34]  </TASK>
[  694.027885][   T34] INFO: task syz-executor:8757 blocked for more than 146 seconds.
[  694.027895][   T34]       Not tainted 6.16.0-syzkaller-06620-gae633388cae3-dirty #0
[  694.027904][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  694.027911][   T34] task:syz-executor    state:D stack:25736 pid:8757  tgid:8757  ppid:1      task_flags:0x400140 flags:0x00004006
[  694.027952][   T34] Call Trace:
[  694.027958][   T34]  <TASK>
[  694.027967][   T34]  __schedule+0x1737/0x4d30
[  694.027996][   T34]  ? __lock_acquire+0xab9/0xd20
[  694.028018][   T34]  ? schedule+0x165/0x360
[  694.028034][   T34]  ? __lock_acquire+0xab9/0xd20
[  694.028053][   T34]  ? __pfx___schedule+0x10/0x10
[  694.028082][   T34]  ? schedule+0x91/0x360
[  694.028103][   T34]  schedule+0x165/0x360
[  694.028123][   T34]  schedule_preempt_disabled+0x13/0x30
[  694.028149][   T34]  __mutex_lock+0x7e3/0x1340
[  694.028174][   T34]  ? __mutex_lock+0x5b6/0x1340
[  694.028196][   T34]  ? ipmr_net_exit_batch+0x20/0x90
[  694.028219][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  694.028246][   T34]  ? kvfree_call_rcu+0x374/0x410
[  694.028276][   T34]  ipmr_net_exit_batch+0x20/0x90
[  694.028293][   T34]  ? __pfx_ipmr_net_exit_batch+0x10/0x10
[  694.028309][   T34]  ops_undo_list+0x525/0x990
[  694.028335][   T34]  ? __pfx_ops_undo_list+0x10/0x10
[  694.028353][   T34]  ? ops_init+0x469/0x5c0
[  694.028380][   T34]  setup_net+0x2d3/0x320
[  694.028426][   T34]  ? __pfx_setup_net+0x10/0x10
[  694.028449][   T34]  ? copy_net_ns+0x304/0x4d0
[  694.028469][   T34]  ? down_read_killable+0x1d1/0x350
[  694.028487][   T34]  copy_net_ns+0x31b/0x4d0
[  694.028510][   T34]  create_new_namespaces+0x3f3/0x720
[  694.028535][   T34]  ? security_capable+0x7e/0x2e0
[  694.028559][   T34]  unshare_nsproxy_namespaces+0x11c/0x170
[  694.028583][   T34]  ksys_unshare+0x4c8/0x8c0
[  694.028605][   T34]  ? __pfx_ksys_unshare+0x10/0x10
[  694.028632][   T34]  __x64_sys_unshare+0x38/0x50
[  694.028647][   T34]  do_syscall_64+0xfa/0x3b0
[  694.028667][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  694.028688][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  694.028702][   T34]  ? exc_page_fault+0x9f/0xf0
[  694.028720][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  694.028733][   T34] RIP: 0033:0x7f53339903e7
[  694.028747][   T34] RSP: 002b:00007ffd52e85078 EFLAGS: 00000206 ORIG_RAX: 0000000000000110
[  694.028762][   T34] RAX: ffffffffffffffda RBX: 00007f5333bb5f40 RCX: 00007f53339903e7
[  694.028773][   T34] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[  694.028781][   T34] RBP: 00007f5333bb67b8 R08: 0000000000000000 R09: 0000000000000000
[  694.028789][   T34] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008
[  694.028798][   T34] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000
[  694.028821][   T34]  </TASK>
[  694.028830][   T34] INFO: task syz-executor:8800 blocked for more than 146 seconds.
[  694.028840][   T34]       Not tainted 6.16.0-syzkaller-06620-gae633388cae3-dirty #0
[  694.028849][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  694.028855][   T34] task:syz-executor    state:D stack:26920 pid:8800  tgid:8800  ppid:1      task_flags:0x400140 flags:0x00004004
[  694.028898][   T34] Call Trace:
[  694.028903][   T34]  <TASK>
[  694.028913][   T34]  __schedule+0x1737/0x4d30
[  694.028944][   T34]  ? __lock_acquire+0xab9/0xd20
[  694.028966][   T34]  ? schedule+0x165/0x360
[  694.028985][   T34]  ? __lock_acquire+0xab9/0xd20
[  694.578173][ T5210] Bluetooth: hci12: command tx timeout
[  695.187480][   T34]  ? __pfx___schedule+0x10/0x10
[  695.204101][   T34]  ? schedule+0x91/0x360
[  695.205929][   T34]  schedule+0x165/0x360
[  695.207634][   T34]  schedule_preempt_disabled+0x13/0x30
[  695.721251][   T34]  __mutex_lock+0x7e3/0x1340
[  695.723167][   T34]  ? __pfx___nla_validate_parse+0x10/0x10
[  695.725467][   T34]  ? __mutex_lock+0x5b6/0x1340
[  695.727438][   T34]  ? inet_rtm_newaddr+0x3b0/0x18b0
[  695.756425][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  695.758499][   T34]  ? __nla_parse+0x40/0x60
[  695.774838][   T34]  inet_rtm_newaddr+0x3b0/0x18b0
[  695.776948][   T34]  ? __pfx_inet_rtm_newaddr+0x10/0x10
[  696.036685][ T8834] Node 0 active_anon:14204kB inactive_anon:0kB active_file:4668kB inactive_file:39524kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:98128kB dirty:24kB writeback:0kB shmem:4936kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4752kB pagetables:1948kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  696.108478][   T34]  ? __pfx_inet_rtm_newaddr+0x10/0x10
[  696.122125][   T34]  rtnetlink_rcv_msg+0x7cf/0xb70
[  696.124174][   T34]  ? __lock_acquire+0xab9/0xd20
[  696.132411][   T34]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  696.134529][   T34]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  696.136752][   T34]  netlink_rcv_skb+0x208/0x470
[  696.138691][   T34]  ? __lock_acquire+0xab9/0xd20
[  696.262497][ T8834] Node 1 active_anon:11320kB inactive_anon:0kB active_file:824kB inactive_file:7944kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:186588kB dirty:24kB writeback:0kB shmem:4724kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6768kB pagetables:3176kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  696.472400][   T34]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  696.474659][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  696.476809][   T34]  ? netlink_deliver_tap+0x2e/0x1b0
[  696.478917][   T34]  netlink_unicast+0x82f/0x9e0
[  696.538404][ T8834] Node 0 DMA free:4040kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:692kB local_pcp:368kB free_cma:0kB
[  697.676719][ T5210] Bluetooth: hci12: command tx timeout
[  697.949773][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  697.951586][   T34]  ? netlink_sendmsg+0x642/0xb30
[  697.953178][   T34]  ? skb_put+0x11b/0x210
[  697.954508][   T34]  netlink_sendmsg+0x805/0xb30
[  697.955999][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  697.957665][   T34]  ? aa_sock_msg_perm+0x94/0x160
[  698.925085][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  698.926753][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  698.928405][   T34]  __sock_sendmsg+0x21c/0x270
[  698.942755][ T8834] lowmem_reserve[]: 0 814 814 814 814
[  698.944571][ T8834] Node 0 DMA32 free:42796kB boost:0kB min:33720kB low:42148kB high:50576kB reserved_highatomic:10240KB free_highatomic:1736KB active_anon:13396kB inactive_anon:0kB active_file:4668kB inactive_file:39524kB unevictable:3536kB writepending:24kB present:1556484kB managed:834028kB mlocked:0kB bounce:0kB free_pcp:37228kB local_pcp:19744kB free_cma:0kB
[  698.990211][   T34]  __sys_sendto+0x3bd/0x520
[  698.991696][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  698.993271][   T34]  ? count_memcg_event_mm+0x21/0x260
[  698.994865][   T34]  ? exc_page_fault+0x76/0xf0
[  698.996476][   T34]  ? do_user_addr_fault+0xc8a/0x1390
[  698.998528][   T34]  __x64_sys_sendto+0xde/0x100
[  699.033927][   T34]  do_syscall_64+0xfa/0x3b0
[  699.035811][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  699.037898][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  699.089980][ T8834] lowmem_reserve[]: 0 0 0 0 0
[  699.091523][ T8834] Node 1 DMA32 free:379928kB boost:0kB min:19168kB low:23960kB high:28752kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1760kB inactive_anon:0kB active_file:0kB inactive_file:44kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:21528kB local_pcp:11236kB free_cma:0kB
[  699.122346][ T8834] lowmem_reserve[]: 0 0 854 854 854
[  699.124061][ T8834] Node 1 Normal free:61304kB boost:0kB min:36576kB low:45720kB high:54864kB reserved_highatomic:10240KB free_highatomic:8088KB active_anon:9548kB inactive_anon:0kB active_file:824kB inactive_file:7936kB unevictable:3536kB writepending:24kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:27980kB local_pcp:22404kB free_cma:0kB
[  699.294317][   T34]  ? exc_page_fault+0x9f/0xf0
[  699.295943][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  699.298080][   T34] RIP: 0033:0x7ff1b6990a7c
[  699.309883][   T34] RSP: 002b:00007ffca68ed730 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  699.313234][   T34] RAX: ffffffffffffffda RBX: 00007ff1b76e4620 RCX: 00007ff1b6990a7c
[  699.316383][   T34] RDX: 0000000000000028 RSI: 00007ff1b76e4670 RDI: 0000000000000003
[  699.330889][ T8834] lowmem_reserve[]: 0 0 0 0 0
[  699.339968][ T8834] Node 0 DMA: 0*4kB 1*8kB (U) 0*16kB 2*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 1*2048kB (M) 0*4096kB = 4040kB
[  699.344483][ T8834] Node 0 DMA32: 121*4kB (UMEH) 147*8kB (UMEH) 225*16kB (UMEH) 95*32kB (UMEH) 29*64kB (MEH) 27*128kB (UME) 12*256kB (UME) 7*512kB (UME) 6*1024kB (UM) 8*2048kB (M) 0*4096kB = 42796kB
[  699.370871][   T34] RBP: 0000000000000000 R08: 00007ffca68ed784 R09: 000000000000000c
[  699.373610][   T34] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[  699.376093][   T34] R13: 0000000000000000 R14: 00007ff1b76e4670 R15: 0000000000000000
[  699.378572][   T34]  </TASK>
[  699.637467][ T8834] Node 1 DMA32: 5*4kB (ME) 555*8kB (UME) 641*16kB (UME) 525*32kB (UM) 427*64kB (UM) 315*128kB (UE) 144*256kB (UME) 50*512kB (UME) 65*1024kB (UME) 40*2048kB (UME) 18*4096kB (UM) = 383836kB
[  699.665278][   T34] INFO: task syz-executor:8805 blocked for more than 151 seconds.
[  699.667986][   T34]       Not tainted 6.16.0-syzkaller-06620-gae633388cae3-dirty #0
[  699.785250][ T5210] Bluetooth: hci12: command tx timeout
[  699.788431][ T8834] Node 1 Normal: 39*4kB (UMH) 52*8kB (UMEH) 61*16kB (UMEH) 173*32kB (UMEH) 74*64kB (UMEH) 42*128kB (UMEH) 23*256kB (UMEH) 13*512kB (UMEH) 7*1024kB (UME) 6*2048kB (UME) 2*4096kB (M) = 57388kB
[  699.915472][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  699.918529][   T34] task:syz-executor    state:D stack:26920 pid:8805  tgid:8805  ppid:1      task_flags:0x400140 flags:0x00004004
[  699.928732][ T8834] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  699.935875][ T8834] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  699.938745][ T8834] 15669 total pagecache pages
[  700.025203][ T8834] 0 pages in swap cache
[  700.026969][ T8834] Free swap  = 124996kB
[  700.028641][ T8834] Total swap = 124996kB
[  700.052198][   T34] Call Trace:
[  700.053603][   T34]  <TASK>
[  700.054708][   T34]  __schedule+0x1737/0x4d30
[  700.056481][   T34]  ? __lock_acquire+0xab9/0xd20
[  700.058254][   T34]  ? schedule+0x165/0x360
[  700.079486][ T8834] 786301 pages RAM
[  700.080994][ T8834] 0 pages HighMem/MovableOnly
[  700.082538][ T8834] 240546 pages reserved
[  700.083929][ T8834] 0 pages cma reserved

VM DIAGNOSIS:
13:54:40  Registers:
info registers vcpu 0

CPU#0
RAX=1ffffffff1bccdbc RBX=0000000000000000 RCX=ffff88801c2d5640 RDX=0000000000000100
RSI=ffff88806f02b100 RDI=ffff888100ab8c80 RBP=ffff88806f02b288 RSP=ffffc900000071d0
R8 =ffff8880389fa843 R9 =1ffff1100713f508 R10=dffffc0000000000 R11=ffffed100713f509
R12=ffff88806f02b282 R13=1ffff1100eebcd99 R14=0000000000000000 R15=ffff8880775e6c00
RIP=ffffffff82180d0d RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8680000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fbfd15185b0 CR3=0000000123f00000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fbfd1787498 00007fbfd1787470 XMM03=00007fbfd17874a8 00007fbfd17874a0
XMM04=00007fbfd22ed100 00007fbfd1787460 XMM05=00007fbfd1787478 00007fbfd17874c0
XMM06=00007fbfd17874b8 00007fbfd17874b0 XMM07=00007fbfd17874a8 00007fbfd17874a0
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=ffff888136632f58 RCX=be11b2cbd795dd00 RDX=ffff88801d2ab980
RSI=ffffffff8be309e0 RDI=ffffffff8be309a0 RBP=ffffc900001dff10 RSP=ffffc900001dfe30
R8 =ffff88801d2ab980 R9 =0000000000000002 R10=000000000000000a R11=0000000000000100
R12=0000000000000001 R13=ffff88810ead6000 R14=ffffffff8db9ecd8 R15=dffffc0000000000
RIP=ffffffff81a6606a RFL=00000a06 [-O---P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c80000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffe6a0386f8 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00007fbed4f87d20
XMM02=0000000500000007 00004f3e00000001 XMM03=03977adce0dbbe7d d0c6697262000100
XMM04=0000000000000000 0000000000000013 XMM05=0000000000000000 000000000003bf12
XMM06=08060a016b921210 0000030000000007 XMM07=0401000000000000 0168e000080003e0
XMM08=0300100003d00300 100003c000000006 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
