last executing test programs:

18.673599052s ago: executing program 0 (id=1519):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x34, r1, 0x1, 0x0, 0x0, {0x4f}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r2 = socket(0x8, 0x3, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYRES32=r2], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0xfffffffe}, [@alu={0x4, 0x0, 0xd, 0xa, 0x0, 0x0, 0x10}]}, &(0x7f0000000000)='GPL\x00', 0x1, 0x7d, &(0x7f00000001c0)=""/125, 0x40f00, 0x4}, 0x94)
sendmsg$NFT_BATCH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a300000000034000480300001800a0001006d617463680000002000028005000300000000000b000100736f636b657400000800024000000003"], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x20000000)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x5)
setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x4}}, [@NFT_MSG_DELCHAIN={0x19c, 0x5, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'wg1\x00'}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_COUNTERS={0x70, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x200}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xa}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x311}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x34}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_USERDATA={0xe3, 0xc, "30655d8b5101f1fa323bb41140e9947bf5483725eaf1f34146f70e22bb8f23857790ca8942e205aeeb433b601d932934596a3fbe85410b1532cef672c1d0f45da8f909601998fc7db93502e5cd154e5b1d70fe001d148deaf1064cc1ce9d45c7034886f4808d621a659331b720262b49959e072900be7b6e2638bcd9450a786bf046f4f694913a8907f30ac1db7e9983a82dc5c71cd700976c7be074fb946768b172e4739948ae541e105bd0f35d4758e7accd0063f3e51bef110ba4a9b0d0d390207127a909eaf1c17a866da8f1ad968dd23620ff575d724324010930b3ae"}]}, @NFT_MSG_DELRULE={0x30, 0x8, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x88, 0x3, 0xa, 0x0, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_USERDATA={0x66, 0xc, "88371b7cb5fd53a46c057f8365c38d20ba00d2672ef47c2832bfd91a25b443744045d35e16a21276805c951cd6a7d038b3e4991536207d58da2a0a70be8fa1463bce3a8057d59cdae20885f583e42286c96b661b459ee1ac43282923ec69dfe399a7"}]}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x9}]}, @NFT_MSG_DELTABLE={0x184, 0x2, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0xb9, 0x6, "a9d0acb6e1f15648b45662f2370f34dcf81d1d48dacc35aa6f7e11ca43f6f6e593f1b9594041be9412e567c5ccc4ec8620f212fa92fa37c178045587e2255408b426adfab19c2428dc0c133c561649acfe9991c96617664ea76d8382b123e86150311b68232fce156740dd687538bca1f414687a8fd1d0e7e8b9cc2ed9e14c5b0b6e4b1c71027fe04b316ac045ca4be0187fe091f4c831e401b6affdc4d05a042323b7585bf81a5e2bafd7f6504d3e35666655fb9b"}, @NFTA_TABLE_USERDATA={0x89, 0x6, "1fd0d533d0e60f2352ff2c6df07b2ae5aa4441528b752f2af2fdaecaa79b2bd21f44c4423c93fc0e27be680eb36426f01e6fa231ed5d8983e5c6c56d0c1febea496c62aa66ef7ee53a076490f77443c5b276b6cfa9f17f01d5f24c263c119ebad9e4dc3540ec033838ebd7d9541f4ee45a63681d8e9ddbaa1bbbc82b3c0392fd529efa0d86"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_NEWFLOWTABLE={0xd0, 0x16, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xb0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14}, {0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}]}]}, @NFT_MSG_NEWCHAIN={0x90, 0x3, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x38, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6639508b}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x420d0bf6}, @NFTA_HOOK_DEV={0x14, 0x3, 'vlan1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}, @NFT_MSG_NEWOBJ={0x68, 0x12, 0xa, 0x100, 0x0, 0x0, {0xa, 0x0, 0x8}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_DATA={0x54, 0x4, 0x0, 0x1, [@NFTA_CT_EXPECT_SIZE={0x5, 0x5, 0xa}, @NFTA_CT_EXPECT_L3PROTO={0x6, 0x1, 0x1, 0x0, 0xa00}, @NFTA_CT_EXPECT_DPORT={0x6, 0x3, 0x1, 0x0, 0x4e20}, @NFTA_CT_EXPECT_SIZE={0x5, 0x5, 0x7}, @NFTA_CT_EXPECT_SIZE={0x5, 0x5, 0x2}, @NFTA_CT_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_CT_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x8}, @NFTA_CT_EXPECT_SIZE={0x5, 0x5, 0x4}, @NFTA_CT_EXPECT_L4PROTO={0x5, 0x2, 0x88}, @NFTA_CT_EXPECT_L3PROTO={0x6, 0x1, 0x1, 0x0, 0x81b9}]}}, @NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x63c}, 0x1, 0x0, 0x0, 0xc025}, 0x4000000)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
ioctl$IMGETCOUNT(r2, 0x40106183, &(0x7f0000000000))

18.248414504s ago: executing program 0 (id=1522):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r0 = socket(0x8, 0x3, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a300000000034000480300001800a0001006d617463680000002000028005000300000000000b000100736f636b657400000800024000000003"], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3e, &(0x7f00000000c0)=0x4, 0x4)
bind$llc(r2, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x20000000)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={<r4=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000040)={0xf2e7, 0x3, 0x8204, 0x0, 0x22, 0x9, 0x2, 0x4, r4}, &(0x7f0000000080)=0x20)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r5)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00')
sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[], 0x3c}}, 0x0)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="d4d627540ca88d09bf4535c2878bec63846b1e3aeb7384e7d980b9555796df3b63748f700adbf467acef6287486e2e96d8cc69c9d447bd585ae662bca74193df630eff18984a1ba43d6881d511b0bc812b99c27edfc4af4bcd2d4663e52d94000000000000", @ANYRES16=r6, @ANYBLOB="140326bd7000fcdbdf250000000014000c00fe8000000000000000000000000000aa14000b00fe8000000000000000000000000000bb"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x5)
setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
ioctl$IMGETCOUNT(r0, 0x40106183, &(0x7f0000000000))

17.935526412s ago: executing program 0 (id=1524):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
r1 = getpid()
syz_open_procfs$namespace(r1, &(0x7f0000000280)='ns/time\x00')
unshare(0x6a040000)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[], 0x7c}}, 0x4000)
sendmsg$NFT_BATCH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a300000000034000480300001800a0001006d617463680000002000028005000300000000000b000100736f636b657400000800024000000003"], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
unshare(0x280)
write(r0, 0x0, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0x8, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0x8, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @TCA_RATE={0x6, 0x5, {0x7, 0x2}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x3c}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
sendto$packet(r3, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c286dd", 0xe, 0x400c0c4, &(0x7f0000000440)={0x11, 0x0, r6, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x1010, 0xffffffffffffffff, 0x20000000)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x5)
setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
setsockopt$rose(r8, 0x104, 0x5, &(0x7f0000000040)=0x8f, 0x4)
connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0), 0x4)

17.692741496s ago: executing program 2 (id=1526):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r0 = socket(0x8, 0x3, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4810)
sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={0x0, 0x3a, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a300000000034000480300001800a0001006d617463680000002000028005000300000000000b000100736f636b657400000800024000000003"], 0x88}, 0x1, 0x0, 0x0, 0x48800}, 0x84)
writev(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x20000000)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x5)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x117, 0x5, 0x0, 0x3aef)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r5}, 0x10)
r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="00000000000000000500000000dfffff9400000000000000e98cefc3a93c17763dcdfce58f13e9"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="11000000000000005a580000", @ANYRES32=r7, @ANYRES64=0x0], 0x20)
ioctl$sock_inet_SIOCGIFDSTADDR(r3, 0x8917, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4)
setsockopt$inet_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "59518363708cd7de", "d50cb2a2e2bdbe1862f47c81b609787e", "ffffffff", "d4042ae06daa942b"}, 0x28)
mmap(&(0x7f0000585000/0x2000)=nil, 0x2000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)

17.469135164s ago: executing program 0 (id=1528):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fedbdf254d0000000e0001006e6574640f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x4) (async)
sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fedbdf254d0000000e0001006e6574640f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x4)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000) (async)
unshare(0x6a040000)
r2 = socket(0x8, 0x3, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7) (async)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'virt_wifi0\x00', &(0x7f0000000240)=@ethtool_gfeatures}) (async)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'virt_wifi0\x00', &(0x7f0000000240)=@ethtool_gfeatures})
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004ff000016000000000300000000000000000000000000000d0000001a000000000000000a"], 0x0, 0x4a, 0x0, 0x1, 0x800}, 0x28)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000)
sendmsg$NFT_BATCH(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a300000000034000480300001800a0001006d617463680000002000028005000300000000000b000100736f636b657400000800024000000003"], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0) (async)
write(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x20000000)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x5) (async)
setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x5)
setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
ioctl$IMGETCOUNT(r2, 0x40106183, &(0x7f0000000000)) (async)
ioctl$IMGETCOUNT(r2, 0x40106183, &(0x7f0000000000))

17.321300343s ago: executing program 2 (id=1529):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r1 = socket(0x8, 0x3, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
sendmsg$NFT_BATCH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a300000000034000480300001800a0001006d617463680000002000028005000300000000000b000100736f636b657400000800024000000003"], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', <r4=>0x0})
bind$can_raw(r3, &(0x7f0000000140)={0x1d, r4}, 0x10)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x20000000)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x5)
setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
ioctl$IMGETCOUNT(r1, 0x40106183, &(0x7f0000000000))

16.87057973s ago: executing program 2 (id=1530):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
socket(0x8, 0x3, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a300000000034000480300001800a0001006d617463680000002000028005000300000000000b000100736f636b657400000800024000000003"], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x4, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x2, 0x1}]}, @struct={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}, {0x0, [0x0, 0x51]}}, &(0x7f00000005c0)=""/240, 0x48, 0xf0, 0x1}, 0x28)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
pwrite64(r2, 0x0, 0x0, 0xee)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x1, 0x4, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000040)
r3 = socket$inet6(0xa, 0x80002, 0x0)
listen(r3, 0xc98e)
sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0, 0x26, 0x0, 0x1}, 0x28)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x20, 0x1405, 0x1, 0x70bd28, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
sendmsg$TIPC_NL_NET_SET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8000}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x20004804)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x5c, 0x0, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_vlan\x00'}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4010000}, 0x8080)
writev(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x20000000)

16.868951234s ago: executing program 1 (id=1531):
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 32)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async, rerun: 32)
close(0x4) (async, rerun: 32)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (rerun: 32)
unshare(0x6a040000)
r0 = socket(0x8, 0x3, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a300000000034000480300001800a0001006d617463680000002000028005000300000000000b000100736f636b657400000800024000000003"], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) (async)
writev(0xffffffffffffffff, 0x0, 0x0) (async)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r2) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000180)={0x48, r5, 0x1, 0x80000000, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4081}, 0x40050) (async)
write(0xffffffffffffffff, 0x0, 0x0) (async)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x20000000)
r6 = socket$inet_tcp(0x2, 0x1, 0x0) (async)
r7 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) (async)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r7, 0x29, 0x37, &(0x7f0000000200)={0x33}, 0x8) (async)
setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) (async)
sendmmsg(r7, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0xc040) (async)
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x5) (async, rerun: 32)
setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (rerun: 32)
connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async)
setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async, rerun: 64)
ioctl$IMGETCOUNT(r0, 0x40106183, &(0x7f0000000000)) (rerun: 64)

16.802995133s ago: executing program 1 (id=1532):
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async, rerun: 64)
close(0x4) (async, rerun: 64)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async, rerun: 64)
unshare(0x6a040000) (async, rerun: 64)
r1 = socket(0x8, 0x3, 0x0) (async)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
sendmsg$NFT_BATCH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a300000000034000480300001800a0001006d617463680000002000028005000300000000000b000100736f636b657400000800024000000003"], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x250041, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000002c0)=ANY=[@ANYBLOB="0700000000d399024a5626c1695c", @ANYRES32=r2, @ANYBLOB="000000000200"/28, @ANYRES32=r3, @ANYBLOB="0000000021ffffffffffffff00"/28])
writev(0xffffffffffffffff, 0x0, 0x0) (async)
write(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x20000000) (async, rerun: 64)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x5) (async, rerun: 32)
setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (rerun: 32)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5d, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r5, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x10, 0x1000000, 0x2, 0x0}}, 0x10) (async)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async, rerun: 64)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (rerun: 64)
ioctl$IMGETCOUNT(r1, 0x40106183, &(0x7f0000000000))

16.740656698s ago: executing program 1 (id=1533):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
socket(0x8, 0x3, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x24040820}, 0x24000000)
writev(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x1010, 0xffffffffffffffff, 0x20000000)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x5)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYRESOCT=0x0], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x4000}, 0x10}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r2, @ANYRES8=r3], 0x10)
close(r2)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
listen(r4, 0xd75)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r3, <r5=>0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)=r2}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r5, &(0x7f0000000200)}, 0x20)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)

16.540545712s ago: executing program 0 (id=1534):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
socket(0x8, 0x3, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
sendmsg$NFT_BATCH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a300000000034000480300001800a0001006d617463680000002000028005000300000000000b000100736f636b657400000800024000000003"], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
write(r1, 0x0, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x20000000)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x5)
setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
socket$inet_sctp(0x2, 0x5, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x400000000010, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x4, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000240), &(0x7f0000000380)=r5}, 0x20)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r4, &(0x7f0000000680)='@', &(0x7f0000000400)=@tcp6=r6, 0x2}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10)

16.422876435s ago: executing program 1 (id=1535):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x20, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94)
close(0x4)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd25, 0x25dfdbfc, {0x7, 0x0, 0x0, r1, 0x10, 0x26, 0xb}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20040010)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x4a, 0x0, &(0x7f0000000080)=0xe)
socket(0x8, 0x3, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440040000000900010073797a30000000000800034000000001340000001f0a03000000000000000000020000000900010073797a300000000008000340000000200c0006"], 0x98}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
sendmsg$NFT_BATCH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a300000000034000480300001800a0001006d617463680000002000028005000300000000000b000100736f636b657400000800024000000003"], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x20000000)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x0, 0x4, 0x40}, {}, {}, {}, {}, {0x0, 0x0, 0xd}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffff8}, {}, {}, {}, {}, {0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {0x0, 0x401}, {}, {0x80}, {0x0, 0x0, 0x9}, {}, {}, {}, {0x0, 0x0, 0x7ff}, {0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x8000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xffffffff}, {}, {}, {}, {}, {0x0, 0xfffffffc}, {}, {}, {0x0, 0xfffffffd}, {}, {0x0, 0x101}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x8}, {}, {}, {0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x80000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0xfffffffa}], [{}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x20004000)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x5)
setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0x4)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)

16.421627428s ago: executing program 2 (id=1536):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, 0x0)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r1 = socket(0x8, 0x3, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000000d0003006c6973743a736574000000000500050000000000050001000700000005000400000000000900020073797a3200000000140007800800064000000000080017"], 0x5c}}, 0x0)
setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000240)=0x6, 0x4)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
sendmsg$NFT_BATCH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a300000000034000480300001800a0001006d617463680000002000028005000300000000000b000100736f636b657400000800024000000003"], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000140), 0x4)
write(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x20000000)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x5)
setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
ioctl$IMGETCOUNT(r1, 0x40106183, &(0x7f0000000000))
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r2, 0x8040942d, &(0x7f0000000100))

16.222206689s ago: executing program 1 (id=1537):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r1 = socket(0x8, 0x3, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000100))
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
sendmsg$NFT_BATCH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a300000000034000480300001800a0001006d617463680000002000028005000300000000000b000100736f636b657400000800024000000003"], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r3}, 0x18)
r4 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000500)={0x0, {{0xa, 0x0, 0x0, @mcast1, 0xfff}}, {{0xa, 0x0, 0x3, @empty}}}, 0x108)
write(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x20000000)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x5)
setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
ioctl$IMGETCOUNT(r1, 0x40106183, &(0x7f0000000000))

16.220174086s ago: executing program 2 (id=1538):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'})
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r1 = socket(0x8, 0x3, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
sendmsg$NFT_BATCH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a300000000034000480300001800a0001006d617463680000002000028005000300000000000b000100736f636b657400000800024000000003"], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x20000000)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x5)
setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
ioctl$IMGETCOUNT(r1, 0x40106183, &(0x7f0000000000))

16.211852321s ago: executing program 0 (id=1539):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
listen(r0, 0x3)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000280)=0xfffff908, 0x4) (async)
setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000280)=0xfffff908, 0x4)
unshare(0x6a040000) (async)
unshare(0x6a040000)
r2 = socket(0x8, 0x3, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) (async)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
sendmsg$NFT_BATCH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a300000000034000480300001800a0001006d617463680000002000028005000300000000000b000100736f636b657400000800024000000003"], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) (async)
sendmsg$NFT_BATCH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a300000000034000480300001800a0001006d617463680000002000028005000300000000000b000100736f636b657400000800024000000003"], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0) (async)
writev(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000100)=0x7, 0x4)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x20000000) (async)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x20000000)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x5)
setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
ioctl$IMGETCOUNT(r2, 0x40106183, &(0x7f0000000000))

15.902809261s ago: executing program 1 (id=1540):
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[@ANYBLOB="000100001600010127bd7000fedbdf25e0000001000000000000000000000000ff0200000000000000000000000000014e2000084e2400070a0011a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe880000000000000000000000000101000004d633000000ffffffff00000000000000000000000003000000000000000900000000000000feffffffffffffff08000000000000000800000000000000060000000000000004000000000000000000000000000000010000000000000001000000000000006d6d000000000000020000000000000001000000fd0f0000970000002dbd7000043500000a00000e179ec66f81000000000000000100000005"], 0x100}}, 0x44040) (async, rerun: 32)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async, rerun: 32)
close(0x4) (async, rerun: 32)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (rerun: 32)
unshare(0x6a040000)
r1 = socket(0x8, 0x3, 0x0) (async)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x28, r3, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}]}, 0x28}}, 0x0) (async)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4010)
sendmsg$NFT_BATCH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a300000000034000480300001800a0001006d617463680000002000028005000300000000000b000100736f636b657400000800024000000003"], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) (async)
writev(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32)
getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000240), &(0x7f0000000280)=0x4) (rerun: 32)
write(0xffffffffffffffff, 0x0, 0x0) (async)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x20000000) (async)
r4 = socket(0xa, 0x3, 0x3a)
connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x2, 0x4, {0xa, 0x4e21, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}}}, 0x32) (async)
setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000040), 0x4) (async, rerun: 32)
r5 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32)
setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x5) (async, rerun: 32)
setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async, rerun: 32)
connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async)
ioctl$IMGETCOUNT(r1, 0x40106183, &(0x7f0000000000))

15.90160766s ago: executing program 2 (id=1541):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) (async)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000100)={'wpan0\x00', <r3=>0x0})
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x3000000}, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4) (async)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000) (async)
unshare(0x6a040000)
r5 = socket(0x8, 0x3, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) (async)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) (async)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
sendmsg$NFT_BATCH(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a300000000034000480300001800a0001006d617463680000002000028005000300000000000b000100736f636b657400000800024000000003"], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x20000000)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x5) (async)
setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x5)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r4, 0x40049366, &(0x7f0000000100)=0x2)
setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async)
connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0), 0x4)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
ioctl$IMGETCOUNT(r5, 0x40106183, &(0x7f0000000000))

299.969988ms ago: executing program 32 (id=1539):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
listen(r0, 0x3)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000280)=0xfffff908, 0x4) (async)
setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000280)=0xfffff908, 0x4)
unshare(0x6a040000) (async)
unshare(0x6a040000)
r2 = socket(0x8, 0x3, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) (async)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
sendmsg$NFT_BATCH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a300000000034000480300001800a0001006d617463680000002000028005000300000000000b000100736f636b657400000800024000000003"], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) (async)
sendmsg$NFT_BATCH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a300000000034000480300001800a0001006d617463680000002000028005000300000000000b000100736f636b657400000800024000000003"], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0) (async)
writev(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000100)=0x7, 0x4)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x20000000) (async)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x20000000)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x5)
setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
ioctl$IMGETCOUNT(r2, 0x40106183, &(0x7f0000000000))

251.683944ms ago: executing program 33 (id=1540):
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[@ANYBLOB="000100001600010127bd7000fedbdf25e0000001000000000000000000000000ff0200000000000000000000000000014e2000084e2400070a0011a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe880000000000000000000000000101000004d633000000ffffffff00000000000000000000000003000000000000000900000000000000feffffffffffffff08000000000000000800000000000000060000000000000004000000000000000000000000000000010000000000000001000000000000006d6d000000000000020000000000000001000000fd0f0000970000002dbd7000043500000a00000e179ec66f81000000000000000100000005"], 0x100}}, 0x44040) (async, rerun: 32)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async, rerun: 32)
close(0x4) (async, rerun: 32)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (rerun: 32)
unshare(0x6a040000)
r1 = socket(0x8, 0x3, 0x0) (async)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x28, r3, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}]}, 0x28}}, 0x0) (async)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4010)
sendmsg$NFT_BATCH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a300000000034000480300001800a0001006d617463680000002000028005000300000000000b000100736f636b657400000800024000000003"], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) (async)
writev(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32)
getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000240), &(0x7f0000000280)=0x4) (rerun: 32)
write(0xffffffffffffffff, 0x0, 0x0) (async)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x20000000) (async)
r4 = socket(0xa, 0x3, 0x3a)
connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x2, 0x4, {0xa, 0x4e21, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}}}, 0x32) (async)
setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000040), 0x4) (async, rerun: 32)
r5 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32)
setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x5) (async, rerun: 32)
setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async, rerun: 32)
connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async)
ioctl$IMGETCOUNT(r1, 0x40106183, &(0x7f0000000000))

0s ago: executing program 34 (id=1541):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) (async)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000100)={'wpan0\x00', <r3=>0x0})
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x3000000}, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4) (async)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000) (async)
unshare(0x6a040000)
r5 = socket(0x8, 0x3, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) (async)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) (async)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
sendmsg$NFT_BATCH(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a300000000034000480300001800a0001006d617463680000002000028005000300000000000b000100736f636b657400000800024000000003"], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x20000000)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x5) (async)
setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x5)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r4, 0x40049366, &(0x7f0000000100)=0x2)
setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async)
connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0), 0x4)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
ioctl$IMGETCOUNT(r5, 0x40106183, &(0x7f0000000000))

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:57378' (ED25519) to the list of known hosts.
syzkaller login: [   55.905963][ T5832] cgroup: Unknown subsys name 'net'
[   56.097754][ T5832] cgroup: Unknown subsys name 'cpuset'
[   56.105027][ T5832] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.416301][ T5832] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   63.257515][ T5852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   63.261141][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   63.264496][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   63.267428][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   63.270168][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   63.397733][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   63.401838][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   63.405493][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   63.408421][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   63.411359][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   63.428018][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   63.431129][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   63.435076][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   63.438991][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   63.442236][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   63.499630][ T5850] chnl_net:caif_netlink_parms(): no params data found
[   63.695269][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.698355][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.701557][ T5850] bridge_slave_0: entered allmulticast mode
[   63.705880][ T5850] bridge_slave_0: entered promiscuous mode
[   63.719946][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.722878][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.726792][ T5850] bridge_slave_1: entered allmulticast mode
[   63.730674][ T5850] bridge_slave_1: entered promiscuous mode
[   63.778116][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.788835][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.851543][ T5850] team0: Port device team_slave_0 added
[   63.872793][ T5850] team0: Port device team_slave_1 added
[   63.921596][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.924425][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   63.934269][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.942981][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.945710][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   63.954133][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.965836][ T5858] chnl_net:caif_netlink_parms(): no params data found
[   63.971865][ T5855] chnl_net:caif_netlink_parms(): no params data found
[   64.058210][ T5850] hsr_slave_0: entered promiscuous mode
[   64.060702][ T5850] hsr_slave_1: entered promiscuous mode
[   64.106010][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.108994][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.112062][ T5858] bridge_slave_0: entered allmulticast mode
[   64.116083][ T5858] bridge_slave_0: entered promiscuous mode
[   64.142263][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.144840][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.147237][ T5858] bridge_slave_1: entered allmulticast mode
[   64.150171][ T5858] bridge_slave_1: entered promiscuous mode
[   64.194202][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.196490][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.198759][ T5855] bridge_slave_0: entered allmulticast mode
[   64.202146][ T5855] bridge_slave_0: entered promiscuous mode
[   64.221537][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.225615][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.228058][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.230386][ T5855] bridge_slave_1: entered allmulticast mode
[   64.233341][ T5855] bridge_slave_1: entered promiscuous mode
[   64.249175][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.265058][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.284299][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.332837][ T5858] team0: Port device team_slave_0 added
[   64.347304][ T5858] team0: Port device team_slave_1 added
[   64.350710][ T5855] team0: Port device team_slave_0 added
[   64.370895][ T5855] team0: Port device team_slave_1 added
[   64.374960][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.377165][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.386731][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.407777][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.410077][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.418358][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.449332][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.451855][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.461055][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.479991][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.482267][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.491561][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.509088][ T5850] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   64.522157][ T5858] hsr_slave_0: entered promiscuous mode
[   64.524720][ T5858] hsr_slave_1: entered promiscuous mode
[   64.526922][ T5858] debugfs: 'hsr0' already exists in 'hsr'
[   64.528780][ T5858] Cannot create hsr debugfs directory
[   64.540100][ T5850] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   64.561894][ T5850] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   64.581070][ T5855] hsr_slave_0: entered promiscuous mode
[   64.583949][ T5855] hsr_slave_1: entered promiscuous mode
[   64.586207][ T5855] debugfs: 'hsr0' already exists in 'hsr'
[   64.588045][ T5855] Cannot create hsr debugfs directory
[   64.589959][ T5850] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   64.850936][ T5855] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   64.865456][ T5855] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   64.872962][ T5855] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   64.894926][ T5855] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   64.930422][ T5858] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   64.942074][ T5858] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   64.952777][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.955891][ T5858] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   64.970093][ T5858] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   64.992215][ T5850] 8021q: adding VLAN 0 to HW filter on device team0
[   65.018305][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.021338][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.040770][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.043793][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.119806][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.169240][ T5855] 8021q: adding VLAN 0 to HW filter on device team0
[   65.187498][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.191470][ T1125] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.194328][ T1125] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.210019][ T1125] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.212792][ T1125] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.229966][ T5858] 8021q: adding VLAN 0 to HW filter on device team0
[   65.244952][ T1125] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.247430][ T1125] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.273148][ T1125] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.276016][ T1125] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.324627][   T55] Bluetooth: hci0: command tx timeout
[   65.362448][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.417698][ T5850] veth0_vlan: entered promiscuous mode
[   65.428736][ T5850] veth1_vlan: entered promiscuous mode
[   65.447903][ T5850] veth0_macvtap: entered promiscuous mode
[   65.452414][ T5850] veth1_macvtap: entered promiscuous mode
[   65.467175][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.476678][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.484254][   T55] Bluetooth: hci2: command tx timeout
[   65.486840][   T55] Bluetooth: hci1: command tx timeout
[   65.505358][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.509067][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.520613][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.525851][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.566347][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.572394][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.624773][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.630062][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.679270][ T5855] veth0_vlan: entered promiscuous mode
[   65.689959][ T5858] veth0_vlan: entered promiscuous mode
[   65.693612][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.697108][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.701184][ T5855] veth1_vlan: entered promiscuous mode
[   65.705660][ T5858] veth1_vlan: entered promiscuous mode
[   65.733308][ T5858] veth0_macvtap: entered promiscuous mode
[   65.740896][ T5858] veth1_macvtap: entered promiscuous mode
[   65.760642][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.761503][ T5850] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   65.766073][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.772874][ T5855] veth0_macvtap: entered promiscuous mode
[   65.784596][ T5855] veth1_macvtap: entered promiscuous mode
[   65.793355][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.798415][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.814417][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.817515][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.835517][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.853234][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.864602][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.870325][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.874418][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.892993][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.958850][ T5913] netlink: 180 bytes leftover after parsing attributes in process `syz.2.3'.
[   66.051016][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.055289][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.180889][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.185420][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.199127][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.201668][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.237328][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.240915][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.572272][ T5938] netlink: 'syz.2.6': attribute type 1 has an invalid length.
[   66.575330][ T5938] netlink: 244 bytes leftover after parsing attributes in process `syz.2.6'.
[   67.349977][ T5962] Zero length message leads to an empty skb
[   67.404105][ T5852] Bluetooth: hci0: command tx timeout
[   67.563782][ T5852] Bluetooth: hci1: command tx timeout
[   67.566064][ T5852] Bluetooth: hci2: command tx timeout
[   67.599503][ T5982] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   67.746197][ T5982] netlink: 'syz.1.15': attribute type 12 has an invalid length.
[   67.749826][ T5982] netlink: 'syz.1.15': attribute type 29 has an invalid length.
[   67.752339][ T5982] netlink: 148 bytes leftover after parsing attributes in process `syz.1.15'.
[   67.755527][ T5982] netlink: 59 bytes leftover after parsing attributes in process `syz.1.15'.
[   68.082600][ T5999] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   68.134584][ T5994] netlink: 76 bytes leftover after parsing attributes in process `syz.0.17'.
[   68.857901][ T6005] warning: `syz.2.20' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   69.483189][   T55] Bluetooth: hci0: command tx timeout
[   69.572920][ T6035] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   69.645112][   T55] Bluetooth: hci2: command tx timeout
[   69.647159][   T55] Bluetooth: hci1: command tx timeout
[   69.791927][ T6048] netlink: 'syz.1.27': attribute type 3 has an invalid length.
[   69.957026][ T6052] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   69.982285][ T6052] netlink: 16 bytes leftover after parsing attributes in process `syz.2.28'.
[   71.172270][ T1359] ieee802154 phy0 wpan0: encryption failed: -22
[   71.175319][ T1359] ieee802154 phy1 wpan1: encryption failed: -22
[   71.402301][ T6128] netlink: 'syz.1.42': attribute type 1 has an invalid length.
[   71.563949][   T55] Bluetooth: hci0: command tx timeout
[   71.724744][ T5852] Bluetooth: hci2: command tx timeout
[   71.727024][   T55] Bluetooth: hci1: command tx timeout
[   74.009476][ T6280] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20004
[   74.320507][ T6299] syz.2.71 uses obsolete (PF_INET,SOCK_PACKET)
[   74.832851][ T6319] netlink: 68 bytes leftover after parsing attributes in process `syz.0.77'.
[   74.941239][ T6291] Bluetooth: hci0: Opcode 0x0401 failed: -4
[   75.055774][ T6331] openvswitch: netlink: Message has 8 unknown bytes.
[   76.070051][ T6374] netlink: 64 bytes leftover after parsing attributes in process `syz.0.86'.
[   76.293639][   T55] Bluetooth: hci0: command 0x0401 tx timeout
[   76.763295][ T6415] netlink: 128 bytes leftover after parsing attributes in process `syz.0.96'.
[   76.767216][ T6415] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   77.618809][ T6455] syz_tun: entered allmulticast mode
[   77.808047][ T6452] syz_tun: left allmulticast mode
[   78.475239][ T6490] netlink: 12 bytes leftover after parsing attributes in process `syz.0.109'.
[   80.182219][ T6577] netlink: 68 bytes leftover after parsing attributes in process `syz.1.124'.
[   80.681216][ T6603] netlink: 48 bytes leftover after parsing attributes in process `syz.2.129'.
[   81.412373][ T3477] cfg80211: failed to load regulatory.db
[   81.660670][ T6649] netlink: 24 bytes leftover after parsing attributes in process `syz.0.137'.
[   81.717099][ T6651] netlink: 32 bytes leftover after parsing attributes in process `syz.0.137'.
[   82.762307][ T6711] netlink: 28 bytes leftover after parsing attributes in process `syz.0.149'.
[   84.212221][ T6780] netlink: 'syz.1.161': attribute type 46 has an invalid length.
[   84.750457][ T6802] netlink: 20 bytes leftover after parsing attributes in process `syz.2.165'.
[   87.174675][ T6928] netlink: 'syz.0.183': attribute type 1 has an invalid length.
[   87.177740][ T6928] netlink: 224 bytes leftover after parsing attributes in process `syz.0.183'.
[   89.311380][ T7033] netlink: 1 bytes leftover after parsing attributes in process `syz.0.202'.
[   90.072105][ T7060] tipc: Failed to obtain node identity
[   90.074234][ T7060] tipc: Enabling of bearer <ib:caif0> rejected, failed to enable media
[   90.970923][ T7110] netlink: 40 bytes leftover after parsing attributes in process `syz.2.219'.
[   91.482229][ T7125] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   91.497247][   T24] IPVS: starting estimator thread 0...
[   91.595366][ T7135] IPVS: using max 63 ests per chain, 151200 per kthread
[  117.216789][ T7255] netlink: 36 bytes leftover after parsing attributes in process `syz.0.246'.
[  117.391336][ T7255] netlink: 12 bytes leftover after parsing attributes in process `syz.0.246'.
[  119.169326][ T7351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.263'.
[  119.702967][ T7384] netlink: 'syz.2.269': attribute type 8 has an invalid length.
[  119.711379][ T7384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.269'.
[  119.822456][ T7384] bond0: entered promiscuous mode
[  119.824905][ T7384] bond_slave_0: entered promiscuous mode
[  119.826889][ T7384] bond_slave_1: entered promiscuous mode
[  119.838706][ T7384] bond0: left promiscuous mode
[  119.841447][ T7384] bond_slave_0: left promiscuous mode
[  119.844463][ T7384] bond_slave_1: left promiscuous mode
[  120.860561][ T7419] syzkaller1: entered allmulticast mode
[  123.087201][ T7489] netlink: 68 bytes leftover after parsing attributes in process `syz.0.289'.
[  124.213036][ T7557] netlink: 4 bytes leftover after parsing attributes in process `syz.2.300'.
[  125.624349][ T7635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.314'.
[  125.667047][ T7635] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.681069][ T7635] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.704293][ T7636] Illegal XDP return value 4294967289 on prog  (id 19) dev N/A, expect packet loss!
[  125.761636][ T7635] netlink: 116 bytes leftover after parsing attributes in process `syz.0.314'.
[  126.180245][ T7649] syzkaller0: entered promiscuous mode
[  126.182525][ T7649] syzkaller0: entered allmulticast mode
[  129.319780][ T7800] ieee802154 phy1 wpan1: encryption failed: -22
[  129.327862][ T7800] netlink: 'syz.2.346': attribute type 10 has an invalid length.
[  129.370442][ T7800] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  129.919718][ T7832] netlink: 4 bytes leftover after parsing attributes in process `syz.1.351'.
[  131.154789][ T7890] geneve2: entered promiscuous mode
[  131.156824][ T7890] geneve2: entered allmulticast mode
[  131.172947][ T5867] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 54065 - 0
[  131.177884][ T5867] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 39104 - 0
[  131.181886][ T5867] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 54065 - 0
[  131.186437][ T5867] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 39104 - 0
[  131.189884][ T5867] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 54065 - 0
[  131.194775][ T5867] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 39104 - 0
[  131.210479][ T5867] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 54065 - 0
[  131.218800][ T5867] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 39104 - 0
[  132.444029][ T7954] veth0_macvtap: entered allmulticast mode
[  132.607765][ T1359] ieee802154 phy1 wpan1: encryption failed: -22
[  133.132496][ T7989] netlink: 'syz.0.381': attribute type 2 has an invalid length.
[  133.145686][ T7994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.382'.
[  133.396088][ T7998] Bluetooth: MGMT ver 1.23
[  135.762809][ T8134] netlink: 'syz.2.410': attribute type 9 has an invalid length.
[  136.805180][ T8183] netlink: 8 bytes leftover after parsing attributes in process `syz.2.419'.
[  136.809841][ T8183] netlink: 'syz.2.419': attribute type 30 has an invalid length.
[  136.813827][ T8183] netlink: 12 bytes leftover after parsing attributes in process `syz.2.419'.
[  137.930690][ T8252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.431'.
[  137.945019][ T8252] netlink: 12 bytes leftover after parsing attributes in process `syz.0.431'.
[  138.370583][ T8271] syzkaller1: entered promiscuous mode
[  138.374220][ T8271] syzkaller1: entered allmulticast mode
[  139.817685][ T8335] delete_channel: no stack
[  140.416808][ T8369] syz.1.453: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  140.422863][ T8369] CPU: 0 UID: 0 PID: 8369 Comm: syz.1.453 Not tainted syzkaller #0 PREEMPT(full) 
[  140.422883][ T8369] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  140.422893][ T8369] Call Trace:
[  140.422911][ T8369]  <TASK>
[  140.422919][ T8369]  dump_stack_lvl+0x189/0x250
[  140.422946][ T8369]  ? __pfx_dump_stack_lvl+0x10/0x10
[  140.422961][ T8369]  ? __pfx__printk+0x10/0x10
[  140.422977][ T8369]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  140.422993][ T8369]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  140.423010][ T8369]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  140.423026][ T8369]  warn_alloc+0x214/0x310
[  140.423045][ T8369]  ? stack_depot_save_flags+0x40/0x860
[  140.423089][ T8369]  ? __pfx_warn_alloc+0x10/0x10
[  140.423108][ T8369]  ? kasan_save_track+0x4f/0x80
[  140.423122][ T8369]  ? xskq_create+0x56/0x170
[  140.423141][ T8369]  ? xsk_init_queue+0xb0/0x110
[  140.423155][ T8369]  ? xsk_setsockopt+0x4dc/0x8d0
[  140.423168][ T8369]  ? do_sock_setsockopt+0x17c/0x1b0
[  140.423181][ T8369]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  140.423194][ T8369]  ? do_syscall_64+0xfa/0x3b0
[  140.423207][ T8369]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  140.423225][ T8369]  __vmalloc_node_range_noprof+0x125/0x12f0
[  140.423266][ T8369]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  140.423283][ T8369]  ? xskq_create+0x56/0x170
[  140.423302][ T8369]  ? __kasan_kmalloc+0x93/0xb0
[  140.423320][ T8369]  vmalloc_user_noprof+0xad/0xf0
[  140.423336][ T8369]  ? xskq_create+0xbf/0x170
[  140.423355][ T8369]  xskq_create+0xbf/0x170
[  140.423374][ T8369]  xsk_init_queue+0xb0/0x110
[  140.423394][ T8369]  xsk_setsockopt+0x4dc/0x8d0
[  140.423414][ T8369]  ? __pfx_xsk_setsockopt+0x10/0x10
[  140.423430][ T8369]  ? __pfx_aa_sk_perm+0x10/0x10
[  140.423451][ T8369]  ? aa_sock_opt_perm+0xff/0x1b0
[  140.423498][ T8369]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  140.423513][ T8369]  ? __pfx_xsk_setsockopt+0x10/0x10
[  140.423531][ T8369]  do_sock_setsockopt+0x17c/0x1b0
[  140.423552][ T8369]  __x64_sys_setsockopt+0x13f/0x1b0
[  140.423572][ T8369]  do_syscall_64+0xfa/0x3b0
[  140.423585][ T8369]  ? lockdep_hardirqs_on+0x9c/0x150
[  140.423606][ T8369]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  140.423618][ T8369]  ? exc_page_fault+0x9f/0xf0
[  140.423637][ T8369]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  140.423650][ T8369] RIP: 0033:0x7f3adf18ec29
[  140.423664][ T8369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  140.423676][ T8369] RSP: 002b:00007f3ae0002038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  140.423701][ T8369] RAX: ffffffffffffffda RBX: 00007f3adf3d5fa0 RCX: 00007f3adf18ec29
[  140.423710][ T8369] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000d
[  140.423718][ T8369] RBP: 00007f3adf211e41 R08: 0000000000000004 R09: 0000000000000000
[  140.423726][ T8369] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  140.423735][ T8369] R13: 00007f3adf3d6038 R14: 00007f3adf3d5fa0 R15: 00007ffc12380128
[  140.423757][ T8369]  </TASK>
[  140.576418][ T8369] Mem-Info:
[  140.577548][ T8369] active_anon:5347 inactive_anon:0 isolated_anon:0
[  140.577548][ T8369]  active_file:1096 inactive_file:38261 isolated_file:0
[  140.577548][ T8369]  unevictable:1768 dirty:36 writeback:0
[  140.577548][ T8369]  slab_reclaimable:9887 slab_unreclaimable:53428
[  140.577548][ T8369]  mapped:18029 shmem:2431 pagetables:937
[  140.577548][ T8369]  sec_pagetables:0 bounce:0
[  140.577548][ T8369]  kernel_misc_reclaimable:0
[  140.577548][ T8369]  free:303968 free_pcp:15063 free_cma:0
[  140.596396][ T8369] Node 0 active_anon:12564kB inactive_anon:0kB active_file:3872kB inactive_file:145888kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:32192kB dirty:132kB writeback:0kB shmem:4860kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4924kB pagetables:2080kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  140.607635][ T8369] Node 1 active_anon:8848kB inactive_anon:0kB active_file:512kB inactive_file:7156kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:40176kB dirty:12kB writeback:0kB shmem:4864kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6596kB pagetables:1620kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  140.617818][ T8369] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  140.634236][ T8369] lowmem_reserve[]: 0 814 814 814 814
[  140.636537][ T8369] Node 0 DMA32 free:302036kB boost:0kB min:33720kB low:42148kB high:50576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12572kB inactive_anon:0kB active_file:3872kB inactive_file:145888kB unevictable:3536kB writepending:132kB present:1556484kB managed:833644kB mlocked:0kB bounce:0kB free_pcp:23388kB local_pcp:13664kB free_cma:0kB
[  140.649785][ T8369] lowmem_reserve[]: 0 0 0 0 0
[  140.651733][ T8369] Node 1 DMA32 free:458616kB boost:0kB min:19172kB low:23964kB high:28756kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  140.665694][ T8369] lowmem_reserve[]: 0 0 854 854 854
[  140.667894][ T8369] Node 1 Normal free:439540kB boost:0kB min:36576kB low:45720kB high:54864kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8836kB inactive_anon:0kB active_file:512kB inactive_file:7156kB unevictable:3536kB writepending:12kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:37176kB local_pcp:20476kB free_cma:0kB
[  140.703216][ T8369] lowmem_reserve[]: 0 0 0 0 0
[  140.705406][ T8369] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  140.722513][ T8369] Node 0 DMA32: 2*4kB (E) 232*8kB (UME) 89*16kB (UME) 158*32kB (UME) 91*64kB (UME) 31*128kB (UME) 16*256kB (UM) 8*512kB (UM) 5*1024kB (UM) 4*2048kB (UM) 64*4096kB (UM) = 301784kB
[  140.749657][ T8369] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  140.759954][ T8369] Node 1 Normal: 1*4kB (E) 22*8kB (UE) 458*16kB (UE) 334*32kB (UM) 167*64kB (UM) 54*128kB (UM) 15*256kB (UME) 7*512kB (UM) 7*1024kB (UME) 2*2048kB (ME) 94*4096kB (M) = 439508kB
[  140.783278][ T8369] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  140.787153][ T8369] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  140.790933][ T8369] 41788 total pagecache pages
[  140.793522][ T8369] 0 pages in swap cache
[  140.797655][ T8369] Free swap  = 124996kB
[  140.800963][ T8369] Total swap = 124996kB
[  140.823504][ T8369] 786301 pages RAM
[  140.826294][ T8369] 0 pages HighMem/MovableOnly
[  140.830362][ T8369] 240658 pages reserved
[  140.832855][ T8369] 0 pages cma reserved
[  140.860268][ T8388] netlink: 'syz.0.456': attribute type 1 has an invalid length.
[  141.173189][ T8400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  141.721674][ T8419] syzkaller1: entered promiscuous mode
[  141.727644][ T8419] syzkaller1: entered allmulticast mode
[  141.734256][ T8419] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324
[  142.781662][ T8474] syzkaller1: entered promiscuous mode
[  142.785277][ T8474] syzkaller1: entered allmulticast mode
[  143.688568][ T8517] netlink: 4 bytes leftover after parsing attributes in process `syz.0.481'.
[  143.738187][ T8517] netlink: 12 bytes leftover after parsing attributes in process `syz.0.481'.
[  143.753756][ T8517] netlink: 84 bytes leftover after parsing attributes in process `syz.0.481'.
[  144.132073][ T8531] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  144.684906][ T8564] netlink: 16 bytes leftover after parsing attributes in process `syz.0.490'.
[  144.688984][ T8564] sch_fq: defrate 0 ignored.
[  144.844336][ T8566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.490'.
[  144.848117][ T8566] netlink: 'syz.0.490': attribute type 5 has an invalid length.
[  144.851351][ T8566] netlink: 4 bytes leftover after parsing attributes in process `syz.0.490'.
[  145.258617][ T8592] netlink: 24 bytes leftover after parsing attributes in process `syz.0.495'.
[  148.074211][ T8768] netlink: 'syz.2.521': attribute type 1 has an invalid length.
[  148.077210][ T8768] netlink: 24 bytes leftover after parsing attributes in process `syz.2.521'.
[  148.617166][ T8788] netlink: 32 bytes leftover after parsing attributes in process `syz.0.526'.
[  152.635095][ T9036] can: request_module (can-proto-0) failed.
[  152.681429][ T9040] netlink: 4 bytes leftover after parsing attributes in process `syz.2.568'.
[  153.361550][ T9079] netlink: 28 bytes leftover after parsing attributes in process `syz.0.574'.
[  155.207268][ T9174] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  155.501427][ T9194] netlink: 44 bytes leftover after parsing attributes in process `syz.1.595'.
[  155.507956][ T9193] netlink: 44 bytes leftover after parsing attributes in process `syz.1.595'.
[  155.514816][ T9193] netlink: 12 bytes leftover after parsing attributes in process `syz.1.595'.
[  155.533278][ T9194] netlink: 12 bytes leftover after parsing attributes in process `syz.1.595'.
[  155.951255][ T9210] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.596'.
[  156.812967][ T9243] syzkaller1: entered promiscuous mode
[  156.815622][ T9243] syzkaller1: entered allmulticast mode
[  157.252582][ T9268] netlink: 112 bytes leftover after parsing attributes in process `syz.0.608'.
[  157.767737][ T9300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.613'.
[  158.445987][ T9337] netlink: 'syz.1.620': attribute type 12 has an invalid length.
[  159.006402][ T9362] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.044710][ T9363] netlink: 24 bytes leftover after parsing attributes in process `syz.0.624'.
[  159.127751][ T9362] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.182572][ T9362] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.344262][ T9362] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.521206][ T5867] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  159.525328][ T5867] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  159.541543][ T5867] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  159.545372][ T5867] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  162.708914][ T9567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.659'.
[  163.913706][ T9613] netlink: 12 bytes leftover after parsing attributes in process `syz.2.667'.
[  164.018353][ T9613] 8021q: adding VLAN 0 to HW filter on device bond0
[  164.031300][ T9613] bond0: (slave rose0): Enslaving as an active interface with an up link
[  164.229886][ T9641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.673'.
[  165.369678][ T9712] sctp: [Deprecated]: syz.1.686 (pid 9712) Use of struct sctp_assoc_value in delayed_ack socket option.
[  165.369678][ T9712] Use struct sctp_sack_info instead
[  166.578514][ T9773] netlink: 36 bytes leftover after parsing attributes in process `syz.1.698'.
[  168.746898][ T9897] IPVS: ovf: FWM 3 0x00000003 - no destination available
[  169.636736][ T9939] netlink: 12 bytes leftover after parsing attributes in process `syz.2.728'.
[  169.639527][ T9939] tipc: Started in network mode
[  169.641224][ T9939] tipc: Node identity 0000000000002d210000000000000001, cluster identity 4711
[  169.647320][ T9939] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  171.724790][T10043] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615)
[  171.728176][T10043] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[  172.703787][T10099] netlink: 28 bytes leftover after parsing attributes in process `syz.2.758'.
[  172.711632][T10099] netlink: 20 bytes leftover after parsing attributes in process `syz.2.758'.
[  172.850155][T10107] netlink: 26 bytes leftover after parsing attributes in process `syz.0.760'.
[  174.320785][T10190] netlink: 'syz.1.773': attribute type 1 has an invalid length.
[  177.083270][   T55] Bluetooth: hci2: command tx timeout
[  178.108704][T10373] netlink: 40 bytes leftover after parsing attributes in process `syz.1.809'.
[  178.117533][T10373] netlink: 12 bytes leftover after parsing attributes in process `syz.1.809'.
[  179.362313][T10440] syzkaller1: entered promiscuous mode
[  179.372476][T10440] syzkaller1: entered allmulticast mode
[  179.802015][T10463] netlink: 12 bytes leftover after parsing attributes in process `syz.0.824'.
[  180.102519][T10481] netlink: 'syz.2.828': attribute type 1 has an invalid length.
[  180.120578][T10481] netlink: 76 bytes leftover after parsing attributes in process `syz.2.828'.
[  180.130730][T10481] netlink: 28 bytes leftover after parsing attributes in process `syz.2.828'.
[  180.142092][T10481] 8021q: adding VLAN 0 to HW filter on device bond1
[  181.704692][T10578] netlink: 4 bytes leftover after parsing attributes in process `syz.1.845'.
[  182.192182][T10606] netlink: 'syz.0.850': attribute type 11 has an invalid length.
[  182.196171][T10606] netlink: 'syz.0.850': attribute type 4 has an invalid length.
[  182.201937][T10606] netlink: 224 bytes leftover after parsing attributes in process `syz.0.850'.
[  182.210105][T10606] netlink: 176 bytes leftover after parsing attributes in process `syz.0.850'.
[  182.562082][T10620] IPVS: set_ctl: invalid protocol: 20 172.20.20.36:20003
[  182.566553][T10626] netlink: 12 bytes leftover after parsing attributes in process `syz.1.855'.
[  182.569407][T10626] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  182.572289][T10620] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20004
[  182.752339][T10640] netlink: 32 bytes leftover after parsing attributes in process `syz.0.857'.
[  183.372936][T10673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.863'.
[  184.462447][T10733] netlink: 'syz.2.873': attribute type 5 has an invalid length.
[  184.638874][T10741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.874'.
[  184.778491][T10747] netlink: 12 bytes leftover after parsing attributes in process `syz.2.875'.
[  184.829744][T10739] netlink: 40 bytes leftover after parsing attributes in process `syz.2.875'.
[  185.323028][T10788] netlink: 16 bytes leftover after parsing attributes in process `syz.1.883'.
[  185.884676][T10693] Bluetooth: hci1: command 0x0406 tx timeout
[  185.886784][T10693] Bluetooth: hci0: command 0x0401 tx timeout
[  186.848144][T10890] macsec1: entered promiscuous mode
[  186.854738][T10890] macsec1: entered allmulticast mode
[  187.255784][T10911] IPVS: set_ctl: invalid protocol: 113 224.0.0.1:20000
[  190.540111][T11077] netlink: 8 bytes leftover after parsing attributes in process `syz.0.935'.
[  191.856909][T11142] netlink: 96 bytes leftover after parsing attributes in process `syz.1.947'.
[  192.235609][T11157] netlink: 8 bytes leftover after parsing attributes in process `syz.0.950'.
[  192.553719][T11172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.952'.
[  194.046746][ T1359] ieee802154 phy1 wpan1: encryption failed: -22
[  194.553714][T11284] netlink: 'syz.0.971': attribute type 7 has an invalid length.
[  195.127208][T11322] netlink: 7 bytes leftover after parsing attributes in process `syz.1.980'.
[  195.287624][T11335] netlink: 20 bytes leftover after parsing attributes in process `syz.1.983'.
[  197.644927][T11467] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1006'.
[  198.365785][T11497] veth0: entered promiscuous mode
[  198.525713][T11491] veth0: left promiscuous mode
[  198.676964][T11518] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0
[  199.000146][ T5897] IPVS: stopping backup sync thread 11518 ...
[  199.584555][T11555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1024'.
[  199.620745][T11567] sock: sock_timestamping_bind_phc: sock not bind to device
[  200.491292][T11595] netlink: 'syz.0.1031': attribute type 1 has an invalid length.
[  202.545160][T11711] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1050'.
[  202.564532][T11702] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1050'.
[  202.570183][T11711] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1050'.
[  202.579991][T11702] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1050'.
[  203.020944][T11741] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1058'.
[  204.238743][T11791] netlink: 'syz.2.1067': attribute type 1 has an invalid length.
[  204.821252][T11822] syzkaller1: entered promiscuous mode
[  204.833229][T11822] syzkaller1: entered allmulticast mode
[  206.858125][T11927] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1093'.
[  206.874652][T11927] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1093'.
[  207.101340][T11938] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  207.120585][T11938] batadv_slave_0: entered promiscuous mode
[  207.127680][T11938] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1096'.
[  207.162486][T11938] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1096'.
[  207.395563][T11958] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1099'.
[  209.651349][T12070] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  209.654664][T12070] IPv6: NLM_F_CREATE should be set when creating new route
[  211.285363][T12141] netlink: 'syz.1.1131': attribute type 18 has an invalid length.
[  211.301897][T12141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1131'.
[  211.339149][T12141] netlink: 'syz.1.1131': attribute type 18 has an invalid length.
[  211.342308][T12141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1131'.
[  211.358497][   T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  211.361521][   T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  211.376771][   T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  211.401606][   T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  211.586561][T12172] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1134'.
[  211.594379][T12169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1134'.
[  211.881578][T12184] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  212.291091][T12195] netlink: 'syz.0.1141': attribute type 3 has an invalid length.
[  213.005637][T12230] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551612)
[  213.009383][T12230] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647
[  213.228392][T12232] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1148'.
[  213.231214][T12232] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1148'.
[  215.864804][T12346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1167'.
[  216.928327][T12387] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1175'.
[  221.561580][T12641] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1220'.
[  221.577337][T12641] netlink: 'syz.1.1220': attribute type 1 has an invalid length.
[  223.615794][T12744] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1238'.
[  224.024573][T12760] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1241'.
[  224.449637][T12779] bridge_slave_0: left allmulticast mode
[  224.452464][T12779] bridge_slave_0: left promiscuous mode
[  224.455260][T12779] bridge0: port 1(bridge_slave_0) entered disabled state
[  224.466853][T12779] bridge_slave_1: left allmulticast mode
[  224.473688][T12779] bridge_slave_1: left promiscuous mode
[  224.479904][T12779] bridge0: port 2(bridge_slave_1) entered disabled state
[  224.500052][T12779] bond0: (slave bond_slave_0): Releasing backup interface
[  224.516872][T12779] bond0: (slave bond_slave_1): Releasing backup interface
[  224.535768][T12779] team0: Port device team_slave_0 removed
[  224.542612][T12779] team0: Port device team_slave_1 removed
[  224.546798][T12779] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  224.549699][T12779] batman_adv: batadv0: Removing interface: batadv_slave_0
[  224.554557][T12779] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  224.557530][T12779] batman_adv: batadv0: Removing interface: batadv_slave_1
[  224.561898][T12779] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  225.823027][T12854] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  225.843810][ T5779] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  226.088889][T12868] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1261'.
[  226.092798][T12868] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1261'.
[  226.237017][ T5779] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  227.116901][T12916] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1270'.
[  230.374859][T13111] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1307'.
[  231.234036][T13162] syz_tun: entered allmulticast mode
[  231.265583][T13148] dvmrp8: entered allmulticast mode
[  231.866860][T13147] syz_tun: left allmulticast mode
[  231.869638][T13147] dvmrp8: left allmulticast mode
[  232.690757][T13243] veth2: entered promiscuous mode
[  232.692594][T13243] veth2: entered allmulticast mode
[  232.759398][T13244] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  233.617733][T13301] netlink: 'syz.1.1340': attribute type 6 has an invalid length.
[  233.979024][T13329] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1347'.
[  233.982026][T13329] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1347'.
[  234.719436][   T55] Bluetooth: hci2: link tx timeout
[  234.722145][   T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  234.754787][T13368] veth3: entered promiscuous mode
[  235.561477][T13394] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1358'.
[  236.333849][T13430] sctp: [Deprecated]: syz.1.1364 (pid 13430) Use of struct sctp_assoc_value in delayed_ack socket option.
[  236.333849][T13430] Use struct sctp_sack_info instead
[  236.457594][T13454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1363'.
[  236.763226][ T5852] Bluetooth: hci2: command 0x0406 tx timeout
[  236.786023][T13474] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1369'.
[  237.369500][T13510] tipc: Started in network mode
[  237.374489][T13510] tipc: Node identity fa2ff103fd36, cluster identity 4711
[  237.377896][T13510] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  237.417652][T13510] syzkaller0: entered promiscuous mode
[  237.419787][T13510] syzkaller0: entered allmulticast mode
[  237.487351][T13510] tipc: Resetting bearer <eth:syzkaller0>
[  237.525300][T13504] tipc: Resetting bearer <eth:syzkaller0>
[  237.536347][T13504] tipc: Disabling bearer <eth:syzkaller0>
[  239.157320][T13610] tipc: Started in network mode
[  239.159499][T13610] tipc: Node identity , cluster identity 4711
[  239.161944][T13610] tipc: Failed to obtain node identity
[  239.165802][T13610] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  240.330940][T13667] netlink: 'syz.1.1403': attribute type 1 has an invalid length.
[  240.333591][T13667] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1403'.
[  240.532588][T13675] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1404'.
[  241.406500][T13736] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  241.417376][T13736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1416'.
[  241.421179][T13736] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1416'.
[  241.834867][T13757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  241.902413][T13759] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1421'.
[  242.325688][T13781] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1426'.
[  243.928379][T13883] netlink: 'syz.1.1441': attribute type 29 has an invalid length.
[  244.031837][T13883] can: request_module (can-proto-0) failed.
[  244.171914][T13891] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1445'.
[  244.403729][T13907] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1448'.
[  245.424281][T13960] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1455'.
[  245.438919][T13960] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  245.441737][T13960] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  246.136919][T14000] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1464'.
[  246.169862][T14004] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  248.012246][T14122] netlink: 'syz.1.1485': attribute type 21 has an invalid length.
[  248.036898][T14122] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1485'.
[  248.042369][T14122] netlink: 'syz.1.1485': attribute type 1 has an invalid length.
[  251.368598][T14159] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1492'.
[  252.039734][T14199] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1499'.
[  253.089039][T14269] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1513'.
[  254.099623][T14318] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1521'.
[  254.380341][T14328] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1524'.
[  254.761884][T14349] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1528'.
[  254.762043][T14352] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1528'.
[  255.025869][T14344] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  255.057732][T14344] geneve2: left promiscuous mode
[  255.097525][ T5897] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  255.102098][ T5897] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  255.106878][ T5897] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 54065 - 0
[  255.110698][ T5897] netdevsim netdevsim1 netdevsim0: unset [1, 2] type 2 family 0 port 39104 - 0
[  255.115050][ T5897] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  255.118596][ T5897] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  255.122198][ T5897] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 54065 - 0
[  255.125540][ T5897] netdevsim netdevsim1 netdevsim1: unset [1, 2] type 2 family 0 port 39104 - 0
[  255.167271][ T5897] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  255.170297][ T5897] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  255.173158][ T5897] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 54065 - 0
[  255.176199][ T5897] netdevsim netdevsim1 netdevsim2: unset [1, 2] type 2 family 0 port 39104 - 0
[  255.179808][ T5897] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  255.184114][ T5897] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  255.187729][ T5897] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 54065 - 0
[  255.191348][ T5897] netdevsim netdevsim1 netdevsim3: unset [1, 2] type 2 family 0 port 39104 - 0
[  255.497141][ T1359] ieee802154 phy1 wpan1: encryption failed: -22
[  255.829258][T14389] bridge: RTM_NEWNEIGH with invalid state 0x10
[  272.624830][T10693] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  272.630527][T10693] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  272.634521][T10693] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  272.639166][T10693] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  272.642597][T10693] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  272.787712][T10693] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  272.791419][T10693] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  272.794568][T10693] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  272.797894][T10693] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  272.801334][T10693] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  272.820078][   T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  272.825397][   T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  272.829411][   T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  272.832078][   T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  272.834838][   T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  274.683602][   T55] Bluetooth: hci3: command tx timeout
[  274.843371][   T55] Bluetooth: hci5: command tx timeout
[  274.923519][   T55] Bluetooth: hci4: command tx timeout
[  276.763313][   T55] Bluetooth: hci3: command tx timeout
[  276.923310][   T55] Bluetooth: hci5: command tx timeout
[  277.003276][   T55] Bluetooth: hci4: command tx timeout
[  278.843265][   T55] Bluetooth: hci3: command tx timeout
[  279.003407][   T55] Bluetooth: hci5: command tx timeout
[  279.083346][   T55] Bluetooth: hci4: command tx timeout
[  280.923348][   T55] Bluetooth: hci3: command tx timeout
[  281.083539][ T5852] Bluetooth: hci5: command tx timeout
[  281.163428][   T55] Bluetooth: hci4: command tx timeout
[  316.930077][ T1359] ieee802154 phy1 wpan1: encryption failed: -22
[  333.352090][ T5852] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  333.355240][ T5852] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  333.357895][ T5852] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  333.363506][ T5852] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  333.367979][ T5852] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  333.459706][T10693] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  333.463570][T10693] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  333.467035][T10693] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  333.469786][T10693] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  333.472831][T10693] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  333.492309][T10693] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  333.496441][T10693] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  333.499086][T10693] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  333.501798][T10693] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  333.505011][T10693] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  335.403345][T10693] Bluetooth: hci6: command tx timeout
[  335.563534][   T55] Bluetooth: hci7: command tx timeout
[  335.566246][T10693] Bluetooth: hci8: command tx timeout
[  337.483617][T10693] Bluetooth: hci6: command tx timeout
[  337.643393][T10693] Bluetooth: hci8: command tx timeout
[  337.645592][T10693] Bluetooth: hci7: command tx timeout
[  339.563300][   T55] Bluetooth: hci6: command tx timeout
[  339.724027][   T55] Bluetooth: hci7: command tx timeout
[  339.725756][   T55] Bluetooth: hci8: command tx timeout
[  341.643419][T10693] Bluetooth: hci6: command tx timeout
[  341.803500][T10693] Bluetooth: hci8: command tx timeout
[  341.805809][T10693] Bluetooth: hci7: command tx timeout
[  361.313102][    C0] rcu: INFO: rcu_preempt self-detected stall on CPU
SYZFAIL: failed to recv rpc
[  361.315215][    C0] rcu: 	0-....: (1 GPs behind) idle=c59c/1/0x4000000000000000 softirq=108657/108660 fqs=5222
[  361.321273][    C0] rcu: 	         hardirqs   softirqs   csw/system
[  361.323764][    C0] rcu: 	 number:     7702          0            0
[  361.326262][    C0] rcu: 	cputime:      340          0        52068   ==> 52480(ms)
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  361.329413][    C0] rcu: 	(t=10500 jiffies g=54117 q=3786 ncpus=2)
[  361.332154][    C0] CPU: 0 UID: 0 PID: 14418 Comm: syz.1.1540 Not tainted syzkaller #0 PREEMPT(full) 
[  361.332172][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  361.332181][    C0] RIP: 0010:__sanitizer_cov_trace_cmp4+0x31/0x90
[  361.332207][    C0] Code: 24 65 48 8b 14 25 08 30 9e 92 65 8b 0d c8 80 de 10 81 e1 00 01 ff 00 74 11 81 f9 00 01 00 00 75 5b 83 ba 3c 16 00 00 00 74 52 <8b> 8a 18 16 00 00 83 f9 03 75 47 48 8b 8a 20 16 00 00 44 8b 8a 1c
[  361.332218][    C0] RSP: 0018:ffffc900045070d8 EFLAGS: 00000246
[  361.332231][    C0] RAX: ffffffff8a238f55 RBX: 0000000001000000 RCX: 0000000000000000
[  361.332240][    C0] RDX: ffff888027800000 RSI: 0000000000000000 RDI: 0000000001000000
[  361.332248][    C0] RBP: ffffc90004507230 R08: 0000000000000000 R09: ffffffff8a238e30
[  361.332255][    C0] R10: dffffc0000000000 R11: fffff520008a0e0c R12: dffffc0000000000
[  361.332264][    C0] R13: ffff8880385ec900 R14: 0000000000000000 R15: 0000000000000001
[  361.332272][    C0] FS:  00007f3adffe16c0(0000) GS:ffff8880b863d000(0000) knlGS:0000000000000000
[  361.332282][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  361.332290][    C0] CR2: 00002000000003c0 CR3: 0000000026a88000 CR4: 00000000000006f0
[  361.332319][    C0] Call Trace:
[  361.332329][    C0]  <TASK>
[  361.332335][    C0]  xfrm_alloc_spi+0x3c5/0xf30
[  361.332359][    C0]  ? xfrm_alloc_spi+0x2a0/0xf30
[  361.332386][    C0]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  361.332410][    C0]  xfrm_alloc_userspi+0x70b/0xc90
[  361.332472][    C0]  ? apparmor_capable+0x137/0x1b0
[  361.332489][    C0]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  361.332502][    C0]  ? __nla_parse+0x40/0x60
[  361.332519][    C0]  xfrm_user_rcv_msg+0x7a3/0xab0
[  361.332540][    C0]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  361.332582][    C0]  ? __pfx___mutex_trylock_common+0x10/0x10
[  361.332600][    C0]  ? rcu_is_watching+0x15/0xb0
[  361.332613][    C0]  ? trace_contention_end+0x39/0x120
[  361.332633][    C0]  ? __mutex_lock+0x335/0x1350
[  361.332650][    C0]  netlink_rcv_skb+0x208/0x470
[  361.332667][    C0]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  361.332685][    C0]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  361.332709][    C0]  ? netlink_deliver_tap+0x2e/0x1b0
[  361.332722][    C0]  ? netlink_deliver_tap+0x2e/0x1b0
[  361.332736][    C0]  xfrm_netlink_rcv+0x79/0x90
[  361.332752][    C0]  netlink_unicast+0x82f/0x9e0
[  361.332770][    C0]  ? __pfx_netlink_unicast+0x10/0x10
[  361.332783][    C0]  ? netlink_sendmsg+0x642/0xb30
[  361.332794][    C0]  ? skb_put+0x11b/0x210
[  361.332811][    C0]  netlink_sendmsg+0x805/0xb30
[  361.332830][    C0]  ? __pfx_netlink_sendmsg+0x10/0x10
[  361.332846][    C0]  ? aa_sock_msg_perm+0xf1/0x1d0
[  361.332865][    C0]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  361.332878][    C0]  ? __pfx_netlink_sendmsg+0x10/0x10
[  361.332892][    C0]  __sock_sendmsg+0x21c/0x270
[  361.332914][    C0]  ____sys_sendmsg+0x505/0x830
[  361.332934][    C0]  ? __pfx_____sys_sendmsg+0x10/0x10
[  361.332954][    C0]  ? import_iovec+0x74/0xa0
[  361.332972][    C0]  ___sys_sendmsg+0x21f/0x2a0
[  361.332989][    C0]  ? __pfx____sys_sendmsg+0x10/0x10
[  361.333025][    C0]  ? __fget_files+0x2a/0x420
[  361.333043][    C0]  ? __fget_files+0x3a0/0x420
[  361.333069][    C0]  __x64_sys_sendmsg+0x19b/0x260
[  361.333080][    C0]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  361.333104][    C0]  ? rcu_is_watching+0x15/0xb0
[  361.333120][    C0]  ? do_syscall_64+0xbe/0x3b0
[  361.333135][    C0]  do_syscall_64+0xfa/0x3b0
[  361.333146][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  361.333164][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  361.333176][    C0]  ? exc_page_fault+0x9f/0xf0
[  361.333193][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  361.333205][    C0] RIP: 0033:0x7f3adf18ec29
[  361.333218][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  361.333227][    C0] RSP: 002b:00007f3adffe1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  361.333240][    C0] RAX: ffffffffffffffda RBX: 00007f3adf3d6090 RCX: 00007f3adf18ec29
[  361.333248][    C0] RDX: 0000000000044040 RSI: 00002000000003c0 RDI: 0000000000000003
[  361.333255][    C0] RBP: 00007f3adf211e41 R08: 0000000000000000 R09: 0000000000000000
[  361.333261][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  361.333268][    C0] R13: 00007f3adf3d6128 R14: 00007f3adf3d6090 R15: 00007ffc12380128
[  361.333289][    C0]  </TASK>

VM DIAGNOSIS:
00:01:53  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900000073f0
R8 =ffff888108128237 R9 =1ffff11021025046 R10=dffffc0000000000 R11=ffffffff854fac30
R12=dffffc0000000000 R13=ffffffff99ad790c R14=ffffffff99dcc480 R15=0000000000000000
RIP=ffffffff854facac RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f3adffe16c0 ffffffff 00c00000
GS =0000 ffff8880b863d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00002000000003c0 CR3=0000000026a88000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f3adf3a7498 00007f3adf3a7470 XMM03=00007f3adf3a74a8 00007f3adf3a74a0
XMM04=00007f3adff0d100 00007f3adf3a7460 XMM05=00007f3adf3a7478 00007f3adf3a74c0
XMM06=00007f3adf3a74b8 00007f3adf3a74b0 XMM07=00007f3adf3a74a8 00007f3adf3a74a0
XMM08=0000000000000000 00007f3adf212f0f XMM09=0000000000000000 00007f3adf212fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff8211d90d RBX=ffffea0000cb4680 RCX=ffff888021f7d640 RDX=0000000000000000
RSI=ffffffff8e239bc0 RDI=0000000000000000 RBP=0000000000000001 RSP=ffffc9000318f508
R8 =ffff888021f7d640 R9 =0000000000000003 R10=0000000000000002 R11=0000000000000000
R12=ffffea0000cb4680 R13=dffffc0000000000 R14=0000000000000000 R15=ffffea0000cb4680
RIP=ffffffff81bfadc7 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c3d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f034b707d60 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007f034aba76c3 00007f034aba76c3 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=0000000000000000 000000000003bf12
XMM06=8686080001000002 0806060100000007 XMM07=0001080000000000 a9b5b9d1f59d1000
XMM08=12100009ae808010 0000040c00000006 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
