last executing test programs:

17.419114511s ago: executing program 1 (id=682):
r0 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000000)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r1=>0x0}], 0x0, "6e4dc4d1aee081"})
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000001000)={r1, 0x7})
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000002000)={0x1, 'veth1\x00', {}, 0x3ff})
ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000002040)={0x22c, 0x0, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, &(0x7f0000005480)={0x2, 0x2, 0xf6, 0xbe02}, 0x10)
writev(r2, &(0x7f00000056c0)=[{&(0x7f00000054c0)="a2dcbd42b3393eca092e52fbb4f7f5545a07c812dda12cd84941a03083378a49815c896863a42fc5fe722b38cc77b5af7d0b1b3acc5a98f6a35b2e2b1ced0fe243edf446d31a568aa66f479044f86b4828a9c3a4a9f05f62578a98b8ced619f2a58dc65ed3e15f684d62bd3369e2e5b4e6b60246246e4644675e9fa27a41a58e0fa5153d7e1eeede4fb39404c7a23cbaa56ca6d121e6c61d6bf9a906fb663924ebd2f43a8a492ea70284bc54ef0b789a025aec57da49ecee36be075d55d9e3b02a0e9e98ab45be04048a510f3e5a32fac68cf20c7c9d89cfe4ff8cca5962387c4be059b8c9faab6ebaa1a41f", 0xec}, {&(0x7f00000055c0)="7cc2ebe328aa0e9a372a4c61887a1b4668184d541c58943a84a5ce19d6ded66fdab50cdb46b7de2f759b76e6b158a81d129d63e7243f37abbe88aa1300d44c550008a1c2e38dbee418efcc09e418f4806b2427c5245b2ff94109028102fe7198983cead9d4797b9b338e6ecd840611309e09544ceddea9355c1d9e625a9b69e6f4cc9b2c7085369f16b0d67bba001fc58b81dc78efed6b03e21b18f88121432501e0e99c732c3cdac0ec8a5369d410f636c04cfa5c021c243ceab9557018493c055794ed9e08983170981932b554eac1e54519cd6717a2", 0xd7}], 0x2)
r3 = bpf$ITER_CREATE(0x21, &(0x7f0000005700), 0x8)
ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000005740)=0x5)
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86)
sendmsg$IPSET_CMD_PROTOCOL(r3, &(0x7f0000005840)={&(0x7f0000005780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000005800)={&(0x7f00000057c0)={0x1c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x1)
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r3, 0x80089419, &(0x7f0000005880))
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000058c0)=0x400)
getsockopt$IP_SET_OP_GET_FNAME(r3, 0x1, 0x53, &(0x7f0000005900)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000005940)=0x2c)
write(r2, &(0x7f0000005980)="d534dc18733173db29419afd77ef14dd687c1f5786e977fa36c25e3a75fa2d8c0eb746a562e169827cfb668ba6d1662a8f0b827e9dbecee69126b3675056039015b5fc9e89db0e4731b6cf43979c1645498561a73d4943156f302568efd430708d82c68030341a976240591edf83f0a34c627e7cc683722347323be1921ef3c07f67007fd3554d9c983a9ea89c485ff1d55de66e6e503c88803b7a6f", 0x9c)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000005a40)={0x2, 'syzkaller1\x00', {0x3}, 0x8510})
socket$kcm(0x29, 0xf, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ac0), r3)
sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f0000005bc0)={&(0x7f0000005a80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000005b80)={&(0x7f0000005b00)={0x44, r4, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4040800)
getsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f0000005c00), &(0x7f0000005c40)=0x4)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000005d40)={&(0x7f0000005c80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000005d00)={&(0x7f0000005cc0)={0x34, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {{}, {}, {0x18, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'bond_slave_1\x00'}}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x24000094)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000005dc0), r2)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000005e80)={r3, 0x58, &(0x7f0000005e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0}}, 0x10)
sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f0000005fc0)={&(0x7f0000005d80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000005f80)={&(0x7f0000005ec0)={0xb8, r5, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20040000}, 0x4810)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000006000)={@cgroup=r3, r3, 0x2f, 0x8, r3, @void, @value=r3}, 0x20)
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000006100)={&(0x7f0000006040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000060c0)={&(0x7f0000006080)={0x28, r4, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x6f}}}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004091}, 0x40080b4)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000006280)={'erspan0\x00', &(0x7f0000006140)={'syztnl2\x00', <r7=>r6, 0x1, 0x20, 0x81, 0xfffff171, {{0x43, 0x4, 0x1, 0x2b, 0x10c, 0x68, 0x0, 0x0, 0x29, 0x0, @rand_addr=0x64010100, @multicast1, {[@cipso={0x86, 0x29, 0x2, [{0x2, 0x9, "fabcdece5f6588"}, {0x1, 0xf, "8297e9602b729f4734a11ded6b"}, {0x1, 0xb, "4d955945572350b50d"}]}, @timestamp={0x44, 0x1c, 0xa4, 0x0, 0x9, [0x80, 0x2, 0x80000001, 0x8, 0x4a7a, 0x1]}, @cipso={0x86, 0x40, 0x3, [{0x7, 0xf, "9833186929a1a3bbc95a359551"}, {0x7, 0x5, "58ae00"}, {0x7, 0x2}, {0x5, 0x10, "a8d19cc6ceb74daef6aeac695646"}, {0x0, 0x2}, {0xefc98e32af2bef4b, 0x12, "907e691bd06c2d6c2474e5870b2353c5"}]}, @lsrr={0x83, 0xf, 0x40, [@loopback, @empty, @remote]}, @lsrr={0x83, 0x1b, 0xd1, [@multicast1, @rand_addr=0x64010102, @remote, @broadcast, @empty, @multicast1]}, @generic={0x7, 0x8, "59ed60064b6c"}, @timestamp={0x44, 0x1c, 0x60, 0x0, 0x7, [0xef9, 0x7fff, 0x3, 0x4, 0x7ff, 0x200]}, @timestamp_prespec={0x44, 0x1c, 0xa7, 0x3, 0x4, [{@multicast1, 0x4}, {@multicast2, 0x7}, {@broadcast, 0x4}]}, @noop, @generic={0x88, 0x8, "9b7ff1a1066e"}]}}}}})
setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f00000062c0)={@private1, r7}, 0x14)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

17.308430462s ago: executing program 1 (id=684):
r0 = socket(0x2a, 0x2, 0x0) (async, rerun: 64)
r1 = socket(0x28, 0x5, 0x0) (rerun: 64)
connect$vsock_stream(r1, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0)
sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x90, r2, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcee}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6a}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xeb5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x22000005}, 0x22008101)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000380)={'ip6tnl0\x00', 0x0})

17.037340464s ago: executing program 1 (id=686):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) (async)
write$nci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="61030604f50180f26a2f01"], 0xb) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='cpu.idle\x00', 0x2, 0x0)
ioctl$BTRFS_IOC_SYNC(r5, 0x9408, 0x0) (async)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140600000000000000001400020002000000ffffffff0000000000000000aa4b20d5d06cd969962651b93df5a8b5b00581afd6a90ba1124919103124245ee32c"], 0x54}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)={0x34, r6, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000010000000000000000000000000000200000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

16.958124074s ago: executing program 1 (id=688):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan0\x00', <r2=>0x0})
r3 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_DEL_RULE(r3, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000001a40)=ANY=[@ANYBLOB="10000000eb030000000000000000000010000000f303"], 0x420}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x9}]}, 0x30}}, 0x0)

16.889273837s ago: executing program 1 (id=690):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(0xffffffffffffffff, &(0x7f0000000380)={{0x6, @default, 0x100000a}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0xffffffff}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48)
listen(r0, 0x1ad72f7)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="a8000000100003"], 0xa8}, 0x1, 0x0, 0x0, 0x40001}, 0x8000)
r3 = accept4(r0, 0x0, 0x0, 0x80000)
syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r3)

16.806347354s ago: executing program 0 (id=692):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a00000000000000000000007110b5000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

16.729462502s ago: executing program 0 (id=694):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r1, 0x0)
mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x1000)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
mmap(&(0x7f00005d5000/0x2000)=nil, 0x2000, 0x3, 0x28011, r4, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r5, 0xb4807000)
r6 = socket$phonet_pipe(0x23, 0x5, 0x2)
connect$phonet_pipe(r6, &(0x7f0000000000)={0x23, 0x10, 0x3, 0x6}, 0x10)

16.728638335s ago: executing program 2 (id=695):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000340)={0x3f, 0x3, 0x9, 0x4}, 0x10) (async)
write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807a60000a600000000000000080008001d000000", 0x24) (async)
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000380)={{<r1=>0x0, 0xffff, 0xd43, 0x8001, 0x4000000006, 0xfffffffffffff000, 0x200, 0xffff0000, 0x0, 0xfffffff7, 0x9, 0x400, 0xff, 0x7f, 0x4}})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000001380)={{r1, 0x3, 0xe0000, 0x3, 0x3, 0xf0, 0x401, 0x4, 0xfffffc00, 0x9, 0x800, 0x1, 0x10, 0xf9d, 0x7af6}, 0x10, [0x0, 0x0]}) (async)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r3 = socket(0x400000000010, 0x3, 0x0) (async)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001480)=@newtfilter={0x884, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {}, {0x7, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x2}}, @filter_kind_options=@f_route={{0xa}, {0x84c, 0x2, [@TCA_ROUTE4_POLICE={0x848, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x1, 0xd24, 0xfffffffa, 0x4, {0x1, 0x1, 0x6, 0x6, 0x6, 0x9a}, {0x8, 0x1, 0x10, 0x8, 0x7f, 0x20000000}, 0x1, 0x6, 0x43a4}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x912, 0x81, 0x3, 0x8001, 0xc4, 0x9, 0x3, 0xffffff2d, 0x4, 0x8, 0x2, 0x9, 0xff, 0xa, 0x7, 0x3, 0x2, 0x1000000, 0xffff389a, 0x0, 0x2, 0x1000, 0x5, 0xf24c, 0x7, 0x1000, 0xdab, 0xe9eb, 0x92ea, 0x3, 0x0, 0xa, 0x5, 0x8001, 0x1, 0x7fffffff, 0x4, 0x9, 0x6af6, 0x7, 0xc, 0x947, 0x8, 0x5, 0xfc, 0x3, 0xad, 0xf35, 0x9, 0xfffff801, 0xffff, 0xf880, 0x1d82, 0x6, 0xffff0000, 0x3, 0x1ff, 0x5, 0x0, 0x10000, 0x8, 0x5, 0xb4, 0x1, 0x4, 0x9, 0x2, 0x9, 0xe, 0xc, 0x2, 0x9, 0x5, 0xffffff80, 0x0, 0x8, 0x7, 0x7, 0xc000000, 0x2, 0x6, 0x78, 0xc000000, 0x3b, 0x147, 0x101, 0x6, 0x10000, 0xfff, 0x0, 0x5, 0x7f, 0x7ad, 0xe1, 0x9ea78c82, 0x1, 0xb, 0x10, 0x7, 0x4, 0xd5, 0x8, 0x7, 0x3, 0x5, 0x3, 0x6, 0xb9e5, 0x1, 0x7, 0x5e, 0x8, 0x9, 0xffff, 0x2d, 0x2, 0x1ff, 0x333d, 0x6, 0x5, 0x9, 0x3f63, 0x5, 0xf, 0xc, 0x5, 0x4, 0x6, 0x2, 0xb, 0x1, 0x2, 0x8, 0x4, 0x5, 0x7, 0xfffffffa, 0x2, 0x3, 0x0, 0xe, 0x80, 0x7fffffff, 0x80000000, 0xffffffff, 0x7, 0x0, 0x3, 0xc, 0x8, 0x5, 0xfffffffd, 0x5b, 0x9, 0x3, 0x80000000, 0x4, 0xfebd, 0x9, 0x4, 0x6, 0xe8, 0x1, 0x6a8, 0x5, 0x6, 0x4, 0x5, 0x2, 0x1, 0x2, 0x634, 0x1000, 0x10001, 0x5, 0xb52, 0x4, 0x401, 0x0, 0x0, 0x3, 0x6, 0x7fff, 0x2, 0x2, 0x8001, 0x9ae, 0x8001, 0x3, 0x0, 0xfffffff1, 0x3, 0x6aa3, 0xffffffff, 0x0, 0x5, 0x0, 0x6, 0xd912, 0x4, 0x8d2, 0x9, 0x400, 0x80000001, 0x9, 0x7, 0x1, 0x9, 0x7f, 0x9, 0x6, 0x2c, 0x8000, 0xabe6, 0x6, 0x0, 0x89b6, 0xb, 0x6, 0xf6e, 0xb89, 0xffff, 0x10000, 0x0, 0x80000000, 0x9, 0x2, 0x8, 0x2, 0x0, 0xab, 0xfffff800, 0x240, 0x3ff, 0xdcb9, 0xff, 0x4, 0x1, 0x401, 0x3, 0xd, 0x9, 0x5, 0x1, 0x0, 0x5, 0x7, 0xfffffff8, 0x1, 0x6, 0x6, 0x8, 0x9, 0x9, 0x7, 0x1]}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x8, 0xfffffff9, 0x54b3, 0x40, 0x8, 0x1, 0x1a00000, 0x5, 0x8, 0xff, 0x39b0, 0x5, 0x7ff, 0x7, 0x99, 0x2, 0x7, 0xe, 0x3, 0x10000, 0x6, 0x5, 0x0, 0x3f6f, 0x6, 0x9, 0x7, 0xc, 0xffffffff, 0x3, 0x18, 0x0, 0xfffffc90, 0x4, 0x80, 0x6, 0x6800000, 0x3, 0x401, 0x7fffffff, 0xffffffff, 0x2, 0x8, 0x6, 0xc, 0x67e, 0x6, 0x80000001, 0x4, 0x4, 0x800, 0x8, 0x4, 0x3, 0x7, 0x3, 0x1200, 0x5, 0x3, 0x3, 0x80000000, 0xb738d6f, 0x0, 0x80, 0x0, 0x7, 0xd, 0x500, 0x347, 0x1, 0x7, 0x4, 0x6, 0xf, 0x8, 0x400, 0x80000000, 0x4, 0x15b, 0x1ff, 0x758, 0x6dc9, 0x6, 0x5, 0x3, 0xce, 0x4, 0x4, 0x4, 0x3, 0x9, 0x8, 0x1000, 0x7f, 0x7fff, 0x1, 0x88000000, 0x80000000, 0x1, 0x6, 0xff, 0x2, 0x6e, 0x2, 0x5, 0xfd4, 0x10, 0x4, 0x6, 0x5, 0xd, 0x1, 0x4, 0xb8df, 0x3, 0xfffffff8, 0x8, 0x64, 0x0, 0x0, 0x0, 0x200, 0x9, 0x3e8, 0x1, 0xfff, 0x80, 0x3, 0x35, 0x9, 0x101, 0x2, 0x9, 0x0, 0x81, 0xf6, 0x8001, 0x81, 0x1c00000, 0x1, 0x2, 0x1, 0x2, 0x80000001, 0xc, 0x4, 0x3, 0xff, 0x1000, 0x1, 0x9, 0x99, 0x7, 0x10001, 0x101, 0x2, 0x3, 0x5, 0x9, 0x6, 0x2, 0x3, 0x9, 0xd, 0x401, 0x100, 0x8, 0x1b3, 0x4, 0x6, 0x8, 0x6, 0x0, 0xfffffff1, 0x0, 0x4f, 0x4, 0x80000001, 0x8, 0x18000000, 0xb, 0x101, 0x0, 0x6, 0xffffffff, 0x6, 0x8000, 0x8, 0x400, 0x4, 0x5, 0x7, 0x4, 0x100, 0x4, 0x4, 0x8, 0x8, 0xd, 0x1, 0x8000, 0x0, 0x27, 0x4, 0x40, 0x6, 0xf, 0x1ff, 0x8, 0x5, 0x3, 0x10000, 0x50000000, 0x3, 0xb3, 0x1ff, 0x5, 0xffffffff, 0xffffc000, 0x7fff, 0x6, 0x4, 0x6, 0x0, 0xd, 0x8, 0x5, 0x6, 0xab4, 0xacd, 0x6b1b, 0x200, 0x9, 0x101, 0xc75, 0x40, 0x2, 0x10, 0xd, 0x0, 0x80000001, 0x101, 0xec5c, 0x9, 0x10, 0x172, 0x80000000, 0x7, 0x9, 0x6, 0x8000, 0x6, 0x4, 0x9f31, 0x6]}]}]}}]}, 0x884}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084)
bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x12, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000640)={r7}, 0x70) (async)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000200)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) (async)
r9 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) (async)
r10 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r11=>0x0})
bind$can_j1939(r10, &(0x7f00000000c0)={0x1d, r11}, 0x18) (async)
connect$can_j1939(r10, &(0x7f0000000140)={0x1d, r11}, 0x18) (async)
sendmmsg$inet(r10, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000002640)="ef0ba606342672dabc", 0x9}], 0x1}}], 0x1, 0x20000010)
recvmmsg(r10, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002540)=""/216, 0xd8}}], 0x1, 0x0, 0x0)

16.658340983s ago: executing program 0 (id=696):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0xffc3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0xff}, @IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x44}}, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)={0x2c, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @default=0x9b4}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xc}]]}, 0x2c}}, 0x0)
r4 = accept4(r0, &(0x7f0000000000)=@xdp, &(0x7f0000000080)=0x80, 0x80000)
r5 = socket$xdp(0x2c, 0x3, 0x0)
r6 = socket(0x23, 0x5, 0x0)
setsockopt$RDS_CONG_MONITOR(r6, 0x114, 0x1d, 0x0, 0x0)
bind$inet(r5, &(0x7f0000001bc0)={0x2, 0x4e24, @local}, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r8, 0x303, 0x0, 0x0, {0x6}}, 0x14}}, 0x0)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f00000000c0)=0xa, 0x4)

16.657758675s ago: executing program 2 (id=697):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000000280)=0x1, 0x4)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004100)=ANY=[@ANYBLOB="180000004a00010a00000000000000150a"], 0x18}}, 0x4000)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6)
close(0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x2, 0x1, 0x27}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffa}, 0x94)
socket$nl_rdma(0x10, 0x3, 0x14)

16.569021803s ago: executing program 2 (id=698):
socket$inet6(0xa, 0x2, 0x3a)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0))
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001580)={0xffffffffffffffff, 0x20, &(0x7f0000001540)={&(0x7f00000014c0)=""/15, 0xf, <r1=>0x0, &(0x7f0000001500)=""/33, 0x21}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000015c0)=r1, 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20004091}, 0x0)
r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r3, &(0x7f0000001600), 0xa)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x1460, 0xffffffff, 0x12a8, 0x1a0, 0x0, 0xffffffff, 0xffffffff, 0x13a0, 0x13a0, 0x13a0, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {}, {}, 0x0, 0x0, 0x18}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@inet=@recent1={{}, {0x6, 0xb, 0x20, 0x0, 'syz1\x00', 0xfd, [0x0, 0x0, 0xff, 0xffffffff]}}]}, @REJECT={0x0, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x287, 0x10e8, 0x1110, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x1, 0x0, './cgroup.cpu/syz1\x00', 0x0, {0x2}}}, @common=@set={{}, {{0x1, [0x4, 0x6001592607931946, 0x4, 0x0, 0x2, 0x1], 0x0, 0x5}}}]}, @common=@inet=@TCPMSS={0x0, 'TCPMSS\x00', 0x0, {0xfb03}}}, {{@ip={@loopback, @broadcast, 0x0, 0xffffff00, 'dvmrp1\x00', 'dummy0\x00', {}, {}, 0xff, 0x2}, 0x0, 0x1c0, 0xfffffffffffffe39, 0x0, {}, [@common=@ttl={{}, {0x3, 0x8}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x1, 0x6, 0x5, 0x5, 0x3, 0x4], 0x6, 0x6}, {0x2, [0x0, 0x4, 0x5, 0x1, 0x2, 0x2], 0x0, 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x87)

16.568498379s ago: executing program 0 (id=699):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000c0000004208000040000000c0"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r5}, 0x38) (async)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000640), 0x16c5, r5}, 0x38) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syz_tun\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@ipv4_delroute={0x30, 0x19, 0x1, 0x70bd2d, 0x25dfdbf8, {0x2, 0x20, 0x20, 0x0, 0xff, 0x2, 0xff, 0x2, 0x1a00}, [@RTA_DST={0x8, 0x1, @local}, @RTA_MULTIPATH={0xc, 0x9, {0x8, 0x28, 0x10, r6}}]}, 0x30}, 0x1, 0x0, 0x0, 0x44050}, 0x1000) (async)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x1}, 0x8) (async)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @local}], 0x10)
setsockopt$inet_sctp_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f0000000100)={0x9, 0x296, 0xfffb, 0xffff}, 0x8)
sendmsg$inet_sctp(r7, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f00000000c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) (async)
sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0xe4, r3, 0x22, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xf82eaf856f987f3c}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x88, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async)
r8 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x6}, 0x4) (async)
setsockopt$packet_fanout_data(r8, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x2, 0xffffffff}]}, 0x10)
close(r8)

16.564628361s ago: executing program 2 (id=700):
r0 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000800)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='devices.list\x00', 0x0, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
readv(r2, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000", @ANYRES32], 0x48)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='consume_skb\x00', r3}, 0x18)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="c0018166571fe4791a0c30164455a17bf6cf150ca6e225d858f5d397393d10e733cba97e44bde8b02d042e091215ab308eb8be8b28e08479952feeda152eb524bdbc172f181303"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket(0x2, 0x3, 0x6)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000240)=0x45d8, 0x4)
setsockopt$inet_int(r4, 0x0, 0x12, &(0x7f0000000040)=0x14, 0x4)
socket$inet6_udplite(0xa, 0x2, 0x88)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r5 = socket(0x10, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="0100ffff030000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'geneve1\x00'})

16.563151845s ago: executing program 0 (id=701):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000abcad53a4930450d66a36667a031d63145bd6ad9b1041d4d39b2dc1ed8653d20990fdfea9f23a8dbfe400a532ddd8696b3d51b35af440bb640e232eeb4ec95001ecae77424ad15aae919835f32ba6c63200f1cb4f35a1ebb69d6499f554162fabc0c7e29721255f806fdcdc3ae519c156f8bf1e2f8ca4810ecc6648c"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r3)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0xfffffffffffffffd}, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004001000040122000b00000001000000", @ANYRES32, @ANYBLOB="0000008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000380), 0x2, r5}, 0x38)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=""/40, &(0x7f00000001c0), &(0x7f00000000c0), 0x1, r5}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x12, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000001000000000000008d08000071122d0000000000"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, 0x0, 0x4004)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r7, &(0x7f0000000340)="18000000010003", 0x7)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan4\x00', <r9=>0x0})
syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r8)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r10)
ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000300)={'wpan0\x00', <r12=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x84, r11, 0x1, 0x2, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_SEC_LEVEL={0x44, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x84}, 0x1, 0x0, 0x0, 0x4085}, 0x4000)
sendmsg$NL802154_CMD_SET_TX_POWER(r8, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x70, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x7}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x3}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x1a}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000001}]}, 0x70}, 0x1, 0x0, 0x0, 0x40004}, 0x40000010)
r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r8, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r13, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0xe004}, 0x895)

16.399531394s ago: executing program 2 (id=702):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e0000000000000003000000e6a6c733251460900dd01cf0f9e690d9c83a6fd0899f938ddfc82af8fe8d5d57b4b3649fdd77a3e734ba2a16f7f2d830ecd8e581b7995b"], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0d0000007f000000040000000809000000000000", @ANYRES32=r0], 0x50)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/pid\x00')
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8)
sendto$inet6(r3, &(0x7f0000000580)="81", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x80}, 0x1c)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, 0x0, &(0x7f00000000c0))
ioctl$NS_GET_PARENT(r2, 0x8004b708, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xae}}]}, &(0x7f0000000780)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x40f00, 0x38, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

16.288772918s ago: executing program 0 (id=703):
unshare(0x20000400)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
unshare(0x400) (async)
unshare(0x400)
recvmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x2022)
ioctl$SIOCSIFHWADDR(r2, 0xff04, 0x0) (async)
ioctl$SIOCSIFHWADDR(r2, 0xff04, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xb, 0x1, 0x7f) (async)
socket(0xb, 0x1, 0x7f)
socketpair(0x10, 0x4, 0x4, &(0x7f0000000040)={<r3=>0xffffffffffffffff})
socket(0x1e, 0x4, 0x0) (async)
r4 = socket(0x1e, 0x4, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x0, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe8f}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x0, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe8f}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x8, 0x1108, 0xffffffffffffffff, 0xd}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r5, &(0x7f0000000100), 0x0}, 0x20)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) (async)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c)
recvmsg$unix(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x5, 0x0) (async)
r8 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd28, 0x4, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x80}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x8, 0x7, 0x1}, {{0x3, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async)
sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_PORTS(r10, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r11, 0x1}, 0x1c}}, 0x0) (async)
sendmsg$TIPC_CMD_SHOW_PORTS(r10, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r11, 0x1}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r3)

16.009012085s ago: executing program 1 (id=704):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000100)={'wg1\x00', <r2=>0x0})
sendfile(r0, r0, &(0x7f0000000000)=0x80, 0x4)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fedbdf250100000006000600214e000008000100", @ANYRES32=r2], 0x24}}, 0x800)

15.448920405s ago: executing program 2 (id=705):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r2, &(0x7f00000000c0)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe)
setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xa}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0)
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$nci(r3, 0x0, 0xfffffeeb)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PMTUDISC={0x5}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x5}]}}}]}, 0x40}}, 0x0)
write$bt_hci(r4, &(0x7f0000000000)=ANY=[], 0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r4, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="1802000002000000000000850000402e000000850000000e00000095000000000000000000000000280282958339d6232009"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r6, 0x0, 0xe, 0x0, &(0x7f0000000140)="e0b9547ed387dbeb00009b22562e", 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_DEL_PMKSA(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x34, r8, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_PMKID={0x14, 0x55, "fba73c2908c599ca7a12b5cc422a1e96"}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x40)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r5)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x68, r10, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x3, 0x12}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_SEQ={0x14, 0xa, "6d4c8e3bdb6348310d9f66cd07bef56c"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "eb4774e2cf"}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004880}, 0x20000044)
r12 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x9, 0x3, 0x308, 0x100, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x238, 0xffffffff, 0xffffffff, 0x238, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast1, @private2, [0xff, 0xffffffff, 0x0, 0xffffffff], [0xff, 0xff000000, 0x0, 0xffffffff], 'bond_slave_1\x00', 'netpci0\x00', {0xff}, {0xff}, 0x2f, 0x0, 0x7}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x2, 0x4}, {0x1, 0x0, 0x1}, 0x7fff, 0xfffffffb}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff, 0x0, 0xff, 0xff000000], 'lo\x00', 'lo\x00', {0xff}, {0xff}, 0x2c, 0x7, 0x1, 0x18}, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x4, 0x6, 0xfffffe00, 0x2, '\x00', 'syz0\x00', {0xfff}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368)

1.046673268s ago: executing program 32 (id=703):
unshare(0x20000400)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
unshare(0x400) (async)
unshare(0x400)
recvmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x2022)
ioctl$SIOCSIFHWADDR(r2, 0xff04, 0x0) (async)
ioctl$SIOCSIFHWADDR(r2, 0xff04, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xb, 0x1, 0x7f) (async)
socket(0xb, 0x1, 0x7f)
socketpair(0x10, 0x4, 0x4, &(0x7f0000000040)={<r3=>0xffffffffffffffff})
socket(0x1e, 0x4, 0x0) (async)
r4 = socket(0x1e, 0x4, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x0, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe8f}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x0, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe8f}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x8, 0x1108, 0xffffffffffffffff, 0xd}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r5, &(0x7f0000000100), 0x0}, 0x20)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) (async)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c)
recvmsg$unix(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x5, 0x0) (async)
r8 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd28, 0x4, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x80}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x8, 0x7, 0x1}, {{0x3, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async)
sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_PORTS(r10, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r11, 0x1}, 0x1c}}, 0x0) (async)
sendmsg$TIPC_CMD_SHOW_PORTS(r10, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r11, 0x1}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r3)

29.936734ms ago: executing program 33 (id=704):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000100)={'wg1\x00', <r2=>0x0})
sendfile(r0, r0, &(0x7f0000000000)=0x80, 0x4)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fedbdf250100000006000600214e000008000100", @ANYRES32=r2], 0x24}}, 0x800)

0s ago: executing program 34 (id=705):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r2, &(0x7f00000000c0)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe)
setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xa}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0)
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$nci(r3, 0x0, 0xfffffeeb)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PMTUDISC={0x5}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x5}]}}}]}, 0x40}}, 0x0)
write$bt_hci(r4, &(0x7f0000000000)=ANY=[], 0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r4, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="1802000002000000000000850000402e000000850000000e00000095000000000000000000000000280282958339d6232009"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r6, 0x0, 0xe, 0x0, &(0x7f0000000140)="e0b9547ed387dbeb00009b22562e", 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_DEL_PMKSA(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x34, r8, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_PMKID={0x14, 0x55, "fba73c2908c599ca7a12b5cc422a1e96"}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x40)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r5)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x68, r10, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x3, 0x12}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_SEQ={0x14, 0xa, "6d4c8e3bdb6348310d9f66cd07bef56c"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "eb4774e2cf"}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004880}, 0x20000044)
r12 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x9, 0x3, 0x308, 0x100, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x238, 0xffffffff, 0xffffffff, 0x238, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast1, @private2, [0xff, 0xffffffff, 0x0, 0xffffffff], [0xff, 0xff000000, 0x0, 0xffffffff], 'bond_slave_1\x00', 'netpci0\x00', {0xff}, {0xff}, 0x2f, 0x0, 0x7}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x2, 0x4}, {0x1, 0x0, 0x1}, 0x7fff, 0xfffffffb}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff, 0x0, 0xff, 0xff000000], 'lo\x00', 'lo\x00', {0xff}, {0xff}, 0x2c, 0x7, 0x1, 0x18}, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x4, 0x6, 0xfffffe00, 0x2, '\x00', 'syz0\x00', {0xfff}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:53545' (ED25519) to the list of known hosts.
syzkaller login: [   57.598895][ T5821] cgroup: Unknown subsys name 'net'
[   57.690592][ T5821] cgroup: Unknown subsys name 'cpuset'
[   57.697439][ T5821] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   60.262711][ T5821] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   65.606821][ T5220] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   65.617206][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   65.620181][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   65.625453][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   65.628287][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   65.641137][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   65.644583][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   65.646957][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   65.650154][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   65.652731][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   65.745771][ T5220] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   65.748870][ T5220] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   65.751754][ T5220] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   65.755074][ T5220] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   65.757657][ T5220] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   65.912116][ T5840] chnl_net:caif_netlink_parms(): no params data found
[   66.010295][ T5835] chnl_net:caif_netlink_parms(): no params data found
[   66.018652][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.021551][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.025149][ T5840] bridge_slave_0: entered allmulticast mode
[   66.028585][ T5840] bridge_slave_0: entered promiscuous mode
[   66.037438][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.040254][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.042997][ T5840] bridge_slave_1: entered allmulticast mode
[   66.047106][ T5840] bridge_slave_1: entered promiscuous mode
[   66.102407][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.107672][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.152459][ T5840] team0: Port device team_slave_0 added
[   66.189002][ T5840] team0: Port device team_slave_1 added
[   66.200595][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.202832][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.205253][ T5835] bridge_slave_0: entered allmulticast mode
[   66.207967][ T5835] bridge_slave_0: entered promiscuous mode
[   66.211794][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.214234][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.216412][ T5835] bridge_slave_1: entered allmulticast mode
[   66.219135][ T5835] bridge_slave_1: entered promiscuous mode
[   66.262772][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.265180][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.272883][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.280136][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.289159][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.291869][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.301848][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.319338][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.322934][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   66.367261][ T5835] team0: Port device team_slave_0 added
[   66.397915][ T5835] team0: Port device team_slave_1 added
[   66.429665][ T5840] hsr_slave_0: entered promiscuous mode
[   66.432929][ T5840] hsr_slave_1: entered promiscuous mode
[   66.492161][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.495085][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.505543][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.528761][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.531551][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.541890][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.566854][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.569833][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.572772][ T5845] bridge_slave_0: entered allmulticast mode
[   66.577203][ T5845] bridge_slave_0: entered promiscuous mode
[   66.606476][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.609282][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.612136][ T5845] bridge_slave_1: entered allmulticast mode
[   66.616530][ T5845] bridge_slave_1: entered promiscuous mode
[   66.651828][ T5835] hsr_slave_0: entered promiscuous mode
[   66.654572][ T5835] hsr_slave_1: entered promiscuous mode
[   66.657539][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   66.660758][ T5835] Cannot create hsr debugfs directory
[   66.685884][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.708379][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.799737][ T5845] team0: Port device team_slave_0 added
[   66.811768][ T5845] team0: Port device team_slave_1 added
[   66.865074][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.867849][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.879608][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.884912][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.887627][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.899455][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.007510][ T5845] hsr_slave_0: entered promiscuous mode
[   67.009942][ T5845] hsr_slave_1: entered promiscuous mode
[   67.012066][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   67.014435][ T5845] Cannot create hsr debugfs directory
[   67.041242][ T5840] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   67.054594][ T5840] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   67.068166][ T5840] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   67.095902][ T5840] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   67.156794][ T5835] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   67.168412][ T5835] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   67.184812][ T5835] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   67.189230][ T5835] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   67.327564][ T5845] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   67.335510][ T5845] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   67.342186][ T5845] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   67.354310][ T5845] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   67.416797][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.447425][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.460913][ T5840] 8021q: adding VLAN 0 to HW filter on device team0
[   67.483415][   T69] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.486439][   T69] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.512789][   T69] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.515721][   T69] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.531519][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   67.547926][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.550828][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.570356][   T69] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.573127][   T69] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.619565][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.662306][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   67.684384][ T5220] Bluetooth: hci1: command tx timeout
[   67.684554][ T5844] Bluetooth: hci0: command tx timeout
[   67.690176][   T69] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.692954][   T69] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.726858][   T69] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.729754][   T69] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.819626][ T5845] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   67.845025][ T5844] Bluetooth: hci2: command tx timeout
[   67.909548][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.980532][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.997336][ T5840] veth0_vlan: entered promiscuous mode
[   68.028930][ T5840] veth1_vlan: entered promiscuous mode
[   68.058262][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.079908][ T5840] veth0_macvtap: entered promiscuous mode
[   68.090171][ T5835] veth0_vlan: entered promiscuous mode
[   68.092532][ T5840] veth1_macvtap: entered promiscuous mode
[   68.110003][ T5835] veth1_vlan: entered promiscuous mode
[   68.118543][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.131094][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.139670][ T5840] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.142514][ T5840] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.145808][ T5840] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.148509][ T5840] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.175944][ T5845] veth0_vlan: entered promiscuous mode
[   68.189627][ T5835] veth0_macvtap: entered promiscuous mode
[   68.194435][ T5845] veth1_vlan: entered promiscuous mode
[   68.216965][ T5835] veth1_macvtap: entered promiscuous mode
[   68.252436][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.273562][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.279805][ T5845] veth0_macvtap: entered promiscuous mode
[   68.291658][ T5845] veth1_macvtap: entered promiscuous mode
[   68.296343][ T5835] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.298977][ T5835] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.301556][ T5835] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.305359][ T5835] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.317497][ T1370] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.319937][ T1370] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.344224][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.373147][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.381667][ T3532] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.387464][ T3532] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.392114][ T5845] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.397247][ T5845] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.405054][ T5845] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.407710][ T5845] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.453858][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.457115][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.478235][ T5840] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   68.480927][ T3532] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.486872][ T3532] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.504438][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.506849][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.560969][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.565037][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.598255][ T5909] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1'.
[   68.609333][ T5909] netlink: 'syz.0.1': attribute type 11 has an invalid length.
[   68.612374][ T5909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'.
[   68.717072][ T5917] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6'.
[   68.797430][ T5923] 8021q: VLANs not supported on ipvlan1
[   68.866216][ T5925] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9'.
[   68.870936][ T5925] Set syz0 is full, maxelem 0 reached
[   69.546012][   T10] cfg80211: failed to load regulatory.db
[   69.703459][ T5941] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   69.765507][ T5844] Bluetooth: hci0: command tx timeout
[   69.774939][ T5844] Bluetooth: hci1: command tx timeout
[   69.790953][ T5951] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   69.819178][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.829693][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.926310][ T5844] Bluetooth: hci2: command tx timeout
[   69.943106][ T5959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19'.
[   69.946512][ T5959] netlink: 24 bytes leftover after parsing attributes in process `syz.0.19'.
[   70.037594][ T5963] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   70.119687][ T5970] netlink: 4 bytes leftover after parsing attributes in process `syz.0.24'.
[   70.184775][ T5975] netlink: 4 bytes leftover after parsing attributes in process `syz.2.26'.
[   70.190642][ T5975] netlink: 76 bytes leftover after parsing attributes in process `syz.2.26'.
[   70.402430][ T5982] netlink: 'syz.2.29': attribute type 83 has an invalid length.
[   70.411556][ T5983] Zero length message leads to an empty skb
[   70.601164][ T5997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.32'.
[   71.086560][ T6026] netlink: 'syz.2.41': attribute type 2 has an invalid length.
[   71.129444][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.132200][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.208009][ T6039] netlink: 'syz.1.44': attribute type 5 has an invalid length.
[   71.397042][ T6059] IPv6: Can't replace route, no match found
[   71.843450][ T5844] Bluetooth: hci1: command tx timeout
[   71.844330][ T5220] Bluetooth: hci0: command tx timeout
[   72.003421][ T5220] Bluetooth: hci2: command tx timeout
[   72.094552][ T6087] ip6t_srh: unknown srh match flags  5294
[   72.350208][ T6094] netlink: 'syz.1.59': attribute type 1 has an invalid length.
[   73.170949][ T6113] netlink: 'syz.2.65': attribute type 1 has an invalid length.
[   73.176467][ T6113] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[   73.405784][ T6125] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   73.418887][ T6125] warning: `syz.2.70' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   73.437752][ T6125] bridge_slave_0: left allmulticast mode
[   73.440202][ T6125] bridge_slave_0: left promiscuous mode
[   73.444169][ T6125] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.460866][ T6125] bridge_slave_1: left allmulticast mode
[   73.468574][ T6125] bridge_slave_1: left promiscuous mode
[   73.471713][ T6125] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.481513][ T6127] netlink: 'syz.2.70': attribute type 10 has an invalid length.
[   73.495939][ T6125] bond0: (slave bond_slave_0): Releasing backup interface
[   73.502195][ T6125] bond0: (slave bond_slave_1): Releasing backup interface
[   73.520404][ T6125] team0: Port device team_slave_0 removed
[   73.529067][ T6125] team0: Port device team_slave_1 removed
[   73.533765][ T6125] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   73.536342][ T6125] batman_adv: batadv0: Removing interface: batadv_slave_0
[   73.541014][ T6125] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   73.543918][ T6125] batman_adv: batadv0: Removing interface: batadv_slave_1
[   73.554967][ T6127] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[   73.564757][ T6127] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.571378][ T6127] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   73.602594][ T6125] syz.2.70 (6125) used greatest stack depth: 19928 bytes left
[   73.923452][ T5844] Bluetooth: hci0: command tx timeout
[   73.934311][ T5844] Bluetooth: hci1: command tx timeout
[   73.984282][ T6144] syzkaller1: entered promiscuous mode
[   73.986602][ T6144] syzkaller1: entered allmulticast mode
[   74.086213][ T5844] Bluetooth: hci2: command tx timeout
[   74.262785][ T6152] __nla_validate_parse: 16 callbacks suppressed
[   74.262801][ T6152] netlink: 4 bytes leftover after parsing attributes in process `syz.0.76'.
[   74.272504][ T6153] netlink: 4 bytes leftover after parsing attributes in process `syz.0.76'.
[   74.278410][ T6152] netlink: 28 bytes leftover after parsing attributes in process `syz.0.76'.
[   74.285028][ T6152] netlink: 28 bytes leftover after parsing attributes in process `syz.0.76'.
[   74.289027][ T6153] netlink: 28 bytes leftover after parsing attributes in process `syz.0.76'.
[   74.292173][ T6153] netlink: 28 bytes leftover after parsing attributes in process `syz.0.76'.
[   74.352631][ T6155] veth0: entered promiscuous mode
[   74.362715][ T6154] veth0: left promiscuous mode
[   74.540664][ T6172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.83'.
[   74.545085][ T6172] openvswitch: netlink: Flow actions attr not present in new flow.
[   74.687023][ T6181] pim6reg: entered allmulticast mode
[   74.690010][ T6181] pim6reg: left allmulticast mode
[   74.719121][ T6182] tipc: Started in network mode
[   74.719120][ T6184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.89'.
[   74.720774][ T6182] tipc: Node identity 2efa518f5861, cluster identity 4711
[   74.726762][ T6182] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   74.731879][ T6184] netlink: 28 bytes leftover after parsing attributes in process `syz.2.89'.
[   74.737335][ T6184] netlink: 'syz.2.89': attribute type 7 has an invalid length.
[   74.739762][ T6184] netlink: 'syz.2.89': attribute type 3 has an invalid length.
[   74.742075][ T6184] netlink: 104 bytes leftover after parsing attributes in process `syz.2.89'.
[   74.782868][ T6189] tipc: Resetting bearer <eth:syzkaller0>
[   74.820297][ T6180] tipc: Disabling bearer <eth:syzkaller0>
[   75.100031][ T6206] netlink: 'syz.1.95': attribute type 29 has an invalid length.
[   75.105338][ T6206] netlink: 'syz.1.95': attribute type 29 has an invalid length.
[   75.112214][ T6206] netlink: 'syz.1.95': attribute type 29 has an invalid length.
[   75.401833][ T6219] openvswitch: netlink: Tunnel attr 227 out of range max 16
[   75.738911][ T6235] !: renamed from dummy0 (while UP)
[   75.933992][ T6247] netlink: 'syz.0.106': attribute type 1 has an invalid length.
[   75.973574][ T6249] syz.1.107 uses obsolete (PF_INET,SOCK_PACKET)
[   76.020291][ T6251] veth1: entered promiscuous mode
[   76.025077][ T6251] batadv0: entered promiscuous mode
[   76.028603][ T6251] hsr1: entered allmulticast mode
[   76.030197][ T6251] veth1: entered allmulticast mode
[   76.031864][ T6251] batadv0: entered allmulticast mode
[   76.035753][ T6251] veth1: left promiscuous mode
[   76.038918][ T6251] batadv0: left promiscuous mode
[   76.102876][ T6257] nbd: must specify a device to reconfigure
[   76.104904][ T6256] netlink: 'syz.2.110': attribute type 1 has an invalid length.
[   76.146059][ T6256] 8021q: adding VLAN 0 to HW filter on device bond1
[   76.168821][ T6256] bond1: (slave gretap1): making interface the new active one
[   76.174474][ T5844] Bluetooth: hci2: command 0x0405 tx timeout
[   76.176220][ T6256] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   76.648070][ T6305] netlink: 'syz.1.127': attribute type 4 has an invalid length.
[   76.677011][ T6305] team0: Device gtp0 is of different type
[   76.728854][ T6309] pim6reg0: tun_chr_ioctl cmd 1074025694
[   77.017776][ T6331] wireguard0: entered promiscuous mode
[   77.019955][ T6331] wireguard0: entered allmulticast mode
[   77.175060][ T6339] netlink: 'syz.0.141': attribute type 5 has an invalid length.
[   77.217782][ T6339] syzkaller1: entered promiscuous mode
[   77.219688][ T6339] syzkaller1: entered allmulticast mode
[   77.364937][   T51] IPVS: starting estimator thread 0...
[   77.367197][ T6347] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[   77.453862][ T6348] IPVS: using max 61 ests per chain, 146400 per kthread
[   77.514802][ T6353] netlink: 'syz.0.145': attribute type 1 has an invalid length.
[   78.202226][ T6371] vlan0: entered promiscuous mode
[   79.116132][ T6419] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.119234][ T6419] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.122078][ T6419] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.125859][ T6419] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.182772][ T6422] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6)
[   79.774393][ T6446] __nla_validate_parse: 18 callbacks suppressed
[   79.774414][ T6446] netlink: 12 bytes leftover after parsing attributes in process `syz.0.174'.
[   79.822319][ T6451] Bluetooth: MGMT ver 1.23
[   79.894212][ T6451] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.931578][ T6454] netlink: 48 bytes leftover after parsing attributes in process `syz.0.175'.
[   79.956892][ T6451] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.029759][ T6451] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.102415][ T6451] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.219286][ T6451] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.237096][ T6451] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.316906][ T6451] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.341521][ T6451] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.448405][ T6459] Set syz0 is full, maxelem 0 reached
[   80.676641][ T6490] xt_policy: output policy not valid in PREROUTING and INPUT
[   80.859301][ T6497] validate_nla: 2 callbacks suppressed
[   80.859335][ T6497] netlink: 'syz.0.188': attribute type 1 has an invalid length.
[   80.901443][ T6497] 8021q: adding VLAN 0 to HW filter on device bond1
[   81.639933][ T6513] netlink: 'syz.1.191': attribute type 7 has an invalid length.
[   81.771755][ T6523] netlink: 'syz.1.193': attribute type 4 has an invalid length.
[   81.832798][ T6525] netlink: 12 bytes leftover after parsing attributes in process `syz.2.194'.
[   81.848648][ T6529] netlink: 68 bytes leftover after parsing attributes in process `syz.1.196'.
[   81.899793][ T6534] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0)
[   81.902775][ T6534] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535
[   81.913916][ T6533] x_tables: duplicate underflow at hook 2
[   81.938335][ T6536] netlink: 28 bytes leftover after parsing attributes in process `syz.2.197'.
[   81.941223][ T6536] netlink: 28 bytes leftover after parsing attributes in process `syz.2.197'.
[   81.944183][ T6536] netlink: 'syz.2.197': attribute type 6 has an invalid length.
[   82.001122][ T6544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.201'.
[   82.005366][ T6546] netlink: 'syz.0.200': attribute type 7 has an invalid length.
[   82.381505][ T6580] vlan2: entered promiscuous mode
[   82.384529][ T6580] bridge0: entered promiscuous mode
[   82.386275][ T6580] vlan2: entered allmulticast mode
[   82.388075][ T6580] bridge0: entered allmulticast mode
[   82.393964][ T6582] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (52)
[   82.430432][ T6580] bridge_slave_0: left allmulticast mode
[   82.432626][ T6580] bridge_slave_0: left promiscuous mode
[   82.459663][ T6580] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.475074][ T6580] bridge_slave_1: left allmulticast mode
[   82.476927][ T6580] bridge_slave_1: left promiscuous mode
[   82.478757][ T6580] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.492063][ T6580] bond0: (slave bond_slave_0): Releasing backup interface
[   82.501132][ T6580] bond0: (slave bond_slave_1): Releasing backup interface
[   82.501958][ T6589] netlink: 'syz.1.214': attribute type 3 has an invalid length.
[   82.516962][ T6580] team0: Port device team_slave_0 removed
[   82.522595][ T6580] team0: Port device team_slave_1 removed
[   82.525943][ T6580] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   82.529168][ T6580] batman_adv: batadv0: Removing interface: batadv_slave_0
[   82.532193][ T6580] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   82.535639][ T6580] batman_adv: batadv0: Removing interface: batadv_slave_1
[   82.740997][ T6600] netlink: 28 bytes leftover after parsing attributes in process `syz.2.217'.
[   82.757606][ T6600] netlink: 152 bytes leftover after parsing attributes in process `syz.2.217'.
[   82.823471][ T6607] netlink: 28 bytes leftover after parsing attributes in process `syz.0.219'.
[   82.981478][ T6626] netlink: 'syz.1.224': attribute type 1 has an invalid length.
[   82.988228][ T6628] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   82.998164][ T6628] syzkaller0: entered promiscuous mode
[   83.000293][ T6628] syzkaller0: entered allmulticast mode
[   83.095871][ T6626] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   83.102397][ T6626] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   83.158184][ T6626] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   83.161084][ T6626] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   83.166007][ T6626] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   83.169662][ T6626] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   83.227319][ T6627] tipc: Resetting bearer <eth:syzkaller0>
[   83.238101][ T6627] tipc: Disabling bearer <eth:syzkaller0>
[   83.347110][ T6634] syzkaller1: entered promiscuous mode
[   83.349259][ T6634] syzkaller1: entered allmulticast mode
[   83.919893][ T6649] netlink: 'syz.2.233': attribute type 13 has an invalid length.
[   84.039967][ T6653] unsupported nlmsg_type 40
[   84.332695][ T6668] netlink: 'syz.2.240': attribute type 83 has an invalid length.
[   84.488176][    T9] hid-generic 0005:0000:0005.0001: item fetching failed at offset 0/3
[   84.494808][    T9] hid-generic 0005:0000:0005.0001: probe with driver hid-generic failed with error -22
[   84.583312][ T6678] ip6tnl1: entered promiscuous mode
[   84.645844][ T6681] netlink: 'syz.2.244': attribute type 1 has an invalid length.
[   84.683004][ T6681] 8021q: adding VLAN 0 to HW filter on device bond2
[   84.810836][ T6690] __nla_validate_parse: 8 callbacks suppressed
[   84.810856][ T6690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.246'.
[   84.950497][ T6700] netlink: 64 bytes leftover after parsing attributes in process `syz.0.249'.
[   85.216280][ T6719] sctp: [Deprecated]: syz.1.256 (pid 6719) Use of struct sctp_assoc_value in delayed_ack socket option.
[   85.216280][ T6719] Use struct sctp_sack_info instead
[   85.327030][ T6725] syzkaller1: entered promiscuous mode
[   85.336377][ T6725] syzkaller1: entered allmulticast mode
[   85.347084][ T6725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.259'.
[   85.349953][ T6725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.259'.
[   85.384321][ T6729] netlink: 24 bytes leftover after parsing attributes in process `syz.1.261'.
[   85.387889][ T6729] netlink: 8 bytes leftover after parsing attributes in process `syz.1.261'.
[   85.423389][ T6730] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   85.632583][ T6737] ip6gre1: entered promiscuous mode
[   86.032950][ T6753] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.268'.
[   86.209262][ T6761] netlink: 24 bytes leftover after parsing attributes in process `syz.2.271'.
[   86.222658][ T6761] netlink: 24 bytes leftover after parsing attributes in process `syz.2.271'.
[   86.327781][ T6774] validate_nla: 1 callbacks suppressed
[   86.327802][ T6774] netlink: 'syz.1.274': attribute type 83 has an invalid length.
[   86.413935][ T6779] netlink: 4 bytes leftover after parsing attributes in process `syz.1.277'.
[   86.536502][ T6790] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   86.542371][ T6790] netlink: 'syz.1.281': attribute type 10 has an invalid length.
[   86.547097][ T6790] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[   86.693012][ T6796] netlink: 'syz.2.284': attribute type 83 has an invalid length.
[   86.812843][ T6801] netlink: zone id is out of range
[   86.831386][ T6801] netlink: zone id is out of range
[   86.836262][ T6801] netlink: zone id is out of range
[   86.838591][ T6801] netlink: zone id is out of range
[   86.840772][ T6801] netlink: zone id is out of range
[   86.843001][ T6801] netlink: zone id is out of range
[   86.851071][ T6801] netlink: zone id is out of range
[   86.853891][ T6801] netlink: zone id is out of range
[   86.857748][ T6801] netlink: zone id is out of range
[   86.861239][ T6801] netlink: zone id is out of range
[   86.985641][ T6804] netlink: 'syz.2.287': attribute type 1 has an invalid length.
[   87.012883][ T6804] 8021q: adding VLAN 0 to HW filter on device bond3
[   87.089873][ T6807] netlink: 'syz.2.288': attribute type 12 has an invalid length.
[   88.130973][ T6860] netlink: 'syz.2.303': attribute type 29 has an invalid length.
[   88.134819][ T6860] netlink: 'syz.2.303': attribute type 29 has an invalid length.
[   88.300140][ T6866] netlink: 'syz.2.305': attribute type 1 has an invalid length.
[   88.313609][ T6866] netlink: 'syz.2.305': attribute type 2 has an invalid length.
[   88.459960][ T6880] netlink: 'syz.1.309': attribute type 2 has an invalid length.
[   88.482927][ T6880] bridge: RTM_NEWNEIGH with invalid state 0x1
[   90.035318][ T6952] __nla_validate_parse: 13 callbacks suppressed
[   90.035337][ T6952] netlink: 144 bytes leftover after parsing attributes in process `syz.2.332'.
[   90.185836][ T6959] netlink: 24 bytes leftover after parsing attributes in process `syz.2.334'.
[   90.274586][ T6971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.337'.
[   90.281368][ T6973] netlink: 24 bytes leftover after parsing attributes in process `syz.1.337'.
[   90.453845][ T6982] netlink: 8 bytes leftover after parsing attributes in process `syz.2.341'.
[   90.458592][ T6988] netlink: 256 bytes leftover after parsing attributes in process `syz.1.342'.
[   90.464679][ T6982] netlink: 8 bytes leftover after parsing attributes in process `syz.2.341'.
[   90.470844][ T6988] netlink: 8 bytes leftover after parsing attributes in process `syz.1.342'.
[   90.474852][ T6982] netlink: 240 bytes leftover after parsing attributes in process `syz.2.341'.
[   90.689761][ T7003] xt_TPROXY: Can be used only with -p tcp or -p udp
[   90.889547][ T7013] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[   91.085392][ T7024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.355'.
[   91.283762][ T7032] block nbd0: server does not support multiple connections per device.
[   91.292165][ T7032] block nbd0: shutting down sockets
[   91.341603][ T7036] vlan2: entered promiscuous mode
[   91.356802][ T7036] dummy0: entered promiscuous mode
[   91.406377][ T7039] validate_nla: 5 callbacks suppressed
[   91.406388][ T7039] netlink: 'syz.2.362': attribute type 21 has an invalid length.
[   91.567074][ T7043] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.582575][ T7043] bond0: (slave rose0): Enslaving as an active interface with an up link
[   91.674330][ T7053] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[   91.875052][ T7074] netlink: 'syz.0.371': attribute type 7 has an invalid length.
[   91.906390][ T7068] netlink: 'syz.1.366': attribute type 13 has an invalid length.
[   91.969099][ T7085] 8021q: adding VLAN 0 to HW filter on device macvtap1
[   92.054735][ T7093] netlink: 'syz.2.375': attribute type 14 has an invalid length.
[   92.070960][ T7095] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20000
[   92.075708][ T7095] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20000
[   92.199712][ T7107] netlink: 'syz.2.379': attribute type 7 has an invalid length.
[   92.529045][ T7145] netlink: 'syz.0.388': attribute type 30 has an invalid length.
[   92.569878][ T7148] netlink: 'syz.1.390': attribute type 83 has an invalid length.
[   92.776968][ T7158] netlink: 'syz.1.391': attribute type 1 has an invalid length.
[   92.796747][ T7158] 8021q: adding VLAN 0 to HW filter on device bond1
[   92.857467][ T7171] netdevsim netdevsim1: Direct firmware load for .. failed with error -2
[   92.860611][ T7171] netdevsim netdevsim1: Falling back to sysfs fallback for: ..
[   92.910562][ T7176] tipc: Started in network mode
[   92.912246][ T7176] tipc: Node identity ea03cb7042, cluster identity 4711
[   92.914937][ T7176] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   92.917626][ T7176] syzkaller0: entered promiscuous mode
[   92.919445][ T7176] syzkaller0: entered allmulticast mode
[   92.929875][ T7176] tipc: Resetting bearer <eth:syzkaller0>
[   92.935601][ T7174] tipc: Resetting bearer <eth:syzkaller0>
[   92.942741][ T7174] tipc: Disabling bearer <eth:syzkaller0>
[   93.159396][ T7194] netlink: 'syz.0.400': attribute type 1 has an invalid length.
[   93.205095][ T7196] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   93.210783][ T7196] netlink: 'syz.2.401': attribute type 2 has an invalid length.
[   93.277629][ T7200] No such timeout policy "syz0"
[   93.305263][ T7202] vti0: entered promiscuous mode
[   93.310944][ T7200] syz.2.403: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   93.317282][ T7200] CPU: 1 UID: 0 PID: 7200 Comm: syz.2.403 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[   93.317295][ T7200] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   93.317301][ T7200] Call Trace:
[   93.317305][ T7200]  <TASK>
[   93.317344][ T7200]  dump_stack_lvl+0x189/0x250
[   93.317363][ T7200]  ? __pfx_dump_stack_lvl+0x10/0x10
[   93.317374][ T7200]  ? __pfx__printk+0x10/0x10
[   93.317387][ T7200]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   93.317400][ T7200]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   93.317411][ T7200]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   93.317423][ T7200]  warn_alloc+0x214/0x310
[   93.317435][ T7200]  ? __pfx_warn_alloc+0x10/0x10
[   93.317446][ T7200]  ? __get_vm_area_node+0x28f/0x300
[   93.317459][ T7200]  ? xskq_create+0xbf/0x170
[   93.317470][ T7200]  __vmalloc_node_range_noprof+0x67e/0x12f0
[   93.317495][ T7200]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   93.317510][ T7200]  ? __kasan_kmalloc+0x93/0xb0
[   93.317524][ T7200]  vmalloc_user_noprof+0xad/0xf0
[   93.317536][ T7200]  ? xskq_create+0xbf/0x170
[   93.317544][ T7200]  xskq_create+0xbf/0x170
[   93.317553][ T7200]  xsk_init_queue+0xb0/0x110
[   93.317562][ T7200]  xsk_setsockopt+0x4de/0x710
[   93.317576][ T7200]  ? __pfx_xsk_setsockopt+0x10/0x10
[   93.317590][ T7200]  ? __fget_files+0x2a/0x420
[   93.317598][ T7200]  ? aa_sock_opt_perm+0x74/0x110
[   93.317609][ T7200]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   93.317620][ T7200]  ? __pfx_xsk_setsockopt+0x10/0x10
[   93.317633][ T7200]  do_sock_setsockopt+0x17c/0x1b0
[   93.317648][ T7200]  __x64_sys_setsockopt+0x13f/0x1b0
[   93.317662][ T7200]  do_syscall_64+0xfa/0x3b0
[   93.317673][ T7200]  ? lockdep_hardirqs_on+0x9c/0x150
[   93.317686][ T7200]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   93.317695][ T7200]  ? exc_page_fault+0x9f/0xf0
[   93.317704][ T7200]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   93.317712][ T7200] RIP: 0033:0x7fa2e958e929
[   93.317721][ T7200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   93.317759][ T7200] RSP: 002b:00007fa2ea485038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   93.317769][ T7200] RAX: ffffffffffffffda RBX: 00007fa2e97b5fa0 RCX: 00007fa2e958e929
[   93.317775][ T7200] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000005
[   93.317779][ T7200] RBP: 00007fa2e9610ca1 R08: 0000000000000004 R09: 0000000000000000
[   93.317784][ T7200] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[   93.317789][ T7200] R13: 0000000000000000 R14: 00007fa2e97b5fa0 R15: 00007ffc4d662458
[   93.317802][ T7200]  </TASK>
[   93.317820][ T7200] Mem-Info:
[   93.403045][ T7200] active_anon:5460 inactive_anon:0 isolated_anon:0
[   93.403045][ T7200]  active_file:1055 inactive_file:38216 isolated_file:0
[   93.403045][ T7200]  unevictable:1768 dirty:190 writeback:0
[   93.403045][ T7200]  slab_reclaimable:9128 slab_unreclaimable:53517
[   93.403045][ T7200]  mapped:18211 shmem:2442 pagetables:917
[   93.403045][ T7200]  sec_pagetables:0 bounce:0
[   93.403045][ T7200]  kernel_misc_reclaimable:0
[   93.403045][ T7200]  free:302702 free_pcp:14508 free_cma:0
[   93.417592][ T7200] Node 0 active_anon:11880kB inactive_anon:0kB active_file:3300kB inactive_file:145540kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:47784kB dirty:408kB writeback:0kB shmem:5068kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:8800kB pagetables:1880kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   93.428750][ T7200] Node 1 active_anon:9960kB inactive_anon:0kB active_file:920kB inactive_file:7324kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:25060kB dirty:352kB writeback:0kB shmem:4700kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:3008kB pagetables:1788kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   93.439797][ T7200] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   93.449818][ T7200] lowmem_reserve[]: 0 812 812 812 812
[   93.451791][ T7200] Node 0 DMA32 free:257944kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11880kB inactive_anon:0kB active_file:3300kB inactive_file:145540kB unevictable:3536kB writepending:408kB present:1556484kB managed:831988kB mlocked:0kB bounce:0kB free_pcp:27940kB local_pcp:18636kB free_cma:0kB
[   93.463255][ T7200] lowmem_reserve[]: 0 0 0 0 0
[   93.465156][ T7200] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   93.475539][ T7200] lowmem_reserve[]: 0 0 854 854 854
[   93.477393][ T7200] Node 1 Normal free:478888kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9960kB inactive_anon:0kB active_file:920kB inactive_file:7324kB unevictable:3536kB writepending:352kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:30188kB local_pcp:11112kB free_cma:0kB
[   93.489143][ T7200] lowmem_reserve[]: 0 0 0 0 0
[   93.490691][ T7200] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   93.494791][ T7200] Node 0 DMA32: 125*4kB (UME) 346*8kB (UM) 110*16kB (UM) 177*32kB (UME) 157*64kB (UME) 51*128kB (UM) 11*256kB (UME) 3*512kB (UME) 5*1024kB (M) 6*2048kB (UME) 51*4096kB (UM) = 257924kB
[   93.500627][ T7200] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[   93.505819][ T7200] Node 1 Normal: 390*4kB (UM) 195*8kB (UM) 387*16kB (UM) 821*32kB (UM) 389*64kB (UME) 165*128kB (UME) 84*256kB (UM) 48*512kB (UM) 31*1024kB (UME) 12*2048kB (UME) 72*4096kB (UM) = 478912kB
[   93.511672][ T7200] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   93.515233][ T7200] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   93.518190][ T7200] 41716 total pagecache pages
[   93.519646][ T7200] 0 pages in swap cache
[   93.520997][ T7200] Free swap  = 124996kB
[   93.522320][ T7200] Total swap = 124996kB
[   93.524194][ T7200] 786301 pages RAM
[   93.525481][ T7200] 0 pages HighMem/MovableOnly
[   93.527057][ T7200] 241056 pages reserved
[   93.528338][ T7200] 0 pages cma reserved
[   94.057225][ T7220] 8021q: adding VLAN 0 to HW filter on device bond2
[   94.447954][ T7247] Driver unsupported XDP return value 0 on prog  (id 137) dev N/A, expect packet loss!
[   95.312991][ T7271] __nla_validate_parse: 21 callbacks suppressed
[   95.313006][ T7271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.425'.
[   95.437764][ T7278] syz_tun: entered allmulticast mode
[   95.453030][ T7277] syz_tun: left allmulticast mode
[   95.549146][ T7282] netlink: 4 bytes leftover after parsing attributes in process `syz.0.428'.
[   95.590625][ T7284] netlink: 40 bytes leftover after parsing attributes in process `syz.2.429'.
[   95.595139][ T7284] dummy0: entered promiscuous mode
[   95.600077][ T7284] bridge0: port 1(dummy0) entered blocking state
[   95.602689][ T7284] bridge0: port 1(dummy0) entered disabled state
[   95.605600][ T7284] dummy0: entered allmulticast mode
[   95.702828][ T7294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.432'.
[   95.706512][ T7294] net_ratelimit: 5 callbacks suppressed
[   95.706521][ T7294] openvswitch: netlink: push_nsh: missing base or metadata attributes
[   95.711204][ T7294] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   95.718377][ T7294] netlink: 4 bytes leftover after parsing attributes in process `syz.2.432'.
[   95.721300][ T7294] netlink: 52 bytes leftover after parsing attributes in process `syz.2.432'.
[   95.810983][ T7303] netlink: 201916 bytes leftover after parsing attributes in process `syz.0.435'.
[   95.931146][ T7320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.440'.
[   95.935546][ T7320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.440'.
[   96.100997][ T7335] xt_hashlimit: size too large, truncated to 1048576
[   96.108861][ T7335] xt_hashlimit: max too large, truncated to 1048576
[   96.184804][ T7340] netlink: 14 bytes leftover after parsing attributes in process `syz.1.446'.
[   96.207882][ T7340] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   96.211996][ T7340] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   96.228210][ T7340] bond0 (unregistering): Released all slaves
[   96.331096][ T7345] bridge_slave_0: entered promiscuous mode
[   96.465079][ T7352] veth0_to_team: entered promiscuous mode
[   96.467376][ T7352] veth0_to_team: entered allmulticast mode
[   96.489214][ T7352] batadv0: entered promiscuous mode
[   96.491524][ T7352] macsec1: entered promiscuous mode
[   96.505887][ T7352] batadv0: left promiscuous mode
[   96.531400][ T7357] validate_nla: 12 callbacks suppressed
[   96.531461][ T7357] netlink: 'syz.2.452': attribute type 7 has an invalid length.
[   96.862027][ T7381] netlink: 'syz.0.460': attribute type 7 has an invalid length.
[   96.979945][ T7388] batadv0: entered promiscuous mode
[   96.982451][ T7388] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   96.988009][ T7388] batadv0: left promiscuous mode
[   97.066713][ T7393] netlink: 'syz.1.464': attribute type 83 has an invalid length.
[   97.324512][ T7414] dvmrp0: entered allmulticast mode
[   97.327524][ T7406] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[   97.330528][ T7406] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   97.355822][ T7417] openvswitch: netlink: Unknown VXLAN extension attribute 0
[   97.544634][ T7430] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   97.798118][ T7447] Set syz0 is full, maxelem 0 reached
[   97.855620][ T7458] netlink: 'syz.2.487': attribute type 1 has an invalid length.
[   97.861845][ T7461] netlink: 'syz.1.488': attribute type 4 has an invalid length.
[   97.866352][ T7462] xt_limit: Overflow, try lower: 262144/524288
[   97.877055][ T7458] 8021q: adding VLAN 0 to HW filter on device bond6
[   98.049346][ T7468] sctp: [Deprecated]: syz.1.491 (pid 7468) Use of struct sctp_assoc_value in delayed_ack socket option.
[   98.049346][ T7468] Use struct sctp_sack_info instead
[   98.110386][ T7474] netlink: 'syz.1.493': attribute type 35 has an invalid length.
[   98.326223][ T7482] netlink: 'syz.1.496': attribute type 1 has an invalid length.
[   98.345053][ T7482] 8021q: adding VLAN 0 to HW filter on device bond0
[   98.490069][ T7488] netlink: 'syz.0.498': attribute type 7 has an invalid length.
[   99.637479][ T7534] netlink: 'syz.2.509': attribute type 1 has an invalid length.
[   99.674707][ T7534] 8021q: adding VLAN 0 to HW filter on device bond7
[   99.720182][ T7544] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   99.726177][ T7545] netlink: 'syz.0.510': attribute type 7 has an invalid length.
[   99.939331][ T7558] syzkaller1: entered promiscuous mode
[   99.941482][ T7558] syzkaller1: entered allmulticast mode
[  100.110579][ T7579] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  100.169100][ T7582] trusted_key: syz.2.523 sent an empty control message without MSG_MORE.
[  100.206200][ T7589] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  100.225783][ T7591] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  100.228139][ T7591] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  100.343087][ T7599] __nla_validate_parse: 29 callbacks suppressed
[  100.343099][ T7599] netlink: 24 bytes leftover after parsing attributes in process `syz.2.527'.
[  100.610568][ T7616] netlink: 36 bytes leftover after parsing attributes in process `syz.2.530'.
[  101.121645][ T7622] netlink: 204 bytes leftover after parsing attributes in process `syz.0.533'.
[  101.252673][ T7629] syzkaller1: tun_chr_ioctl cmd 1074025677
[  101.257450][ T7629] syzkaller1: linktype set to 6
[  101.418651][   T10] IPVS: starting estimator thread 0...
[  101.477042][ T7645] syz_tun: entered promiscuous mode
[  101.479116][ T7645] syz_tun: entered allmulticast mode
[  101.523595][ T7635] IPVS: using max 41 ests per chain, 98400 per kthread
[  101.537167][ T7650] netlink: 12 bytes leftover after parsing attributes in process `syz.2.544'.
[  101.720594][ T7660] sctp: [Deprecated]: syz.2.546 (pid 7660) Use of int in max_burst socket option deprecated.
[  101.720594][ T7660] Use struct sctp_assoc_value instead
[  101.851153][ T7665] validate_nla: 3 callbacks suppressed
[  101.851169][ T7665] netlink: 'syz.2.548': attribute type 1 has an invalid length.
[  101.857133][ T7665] netlink: 'syz.2.548': attribute type 1 has an invalid length.
[  102.051982][ T7674] netlink: 'syz.2.550': attribute type 1 has an invalid length.
[  102.082433][ T7669] x_tables: duplicate underflow at hook 1
[  102.088224][ T7674] 8021q: adding VLAN 0 to HW filter on device bond8
[  102.115418][ T7669] netlink: 28 bytes leftover after parsing attributes in process `syz.1.549'.
[  102.129184][ T7674] 8021q: adding VLAN 0 to HW filter on device bond8
[  102.132144][ T7674] bond8: (slave vxcan1): The slave device specified does not support setting the MAC address
[  102.145265][ T7674] bond8: (slave vxcan1): Error -95 calling set_mac_address
[  102.157149][ T7685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.550'.
[  102.165482][ T7685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.550'.
[  102.219148][ T7690] macvlan2: entered promiscuous mode
[  102.221197][ T7690] macvlan2: entered allmulticast mode
[  102.224485][ T7690] bond8: entered promiscuous mode
[  102.227114][ T7690] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  102.232224][ T7690] bond8: left promiscuous mode
[  102.342074][ T7698] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.554'.
[  102.436129][ T7709] netlink: 4 bytes leftover after parsing attributes in process `syz.0.557'.
[  102.458974][ T7709] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 51177 - 0
[  102.462283][ T7705] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.556'.
[  102.463723][ T7709] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 51177 - 0
[  102.468306][ T7709] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 51177 - 0
[  102.471458][ T7709] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 51177 - 0
[  102.475295][ T7709] geneve3: entered promiscuous mode
[  102.477324][ T7709] geneve3: entered allmulticast mode
[  102.839474][ T7727] netlink: 'syz.2.562': attribute type 7 has an invalid length.
[  103.127140][ T7740] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  103.130799][ T7740] syzkaller0: entered promiscuous mode
[  103.133832][ T7740] syzkaller0: entered allmulticast mode
[  103.153021][ T7740] tipc: Resetting bearer <eth:syzkaller0>
[  103.159248][ T7740] netlink: 'syz.2.566': attribute type 11 has an invalid length.
[  103.198675][ T7739] tipc: Resetting bearer <eth:syzkaller0>
[  103.218484][ T7739] tipc: Disabling bearer <eth:syzkaller0>
[  103.478592][ T7755] netlink: 'syz.1.570': attribute type 7 has an invalid length.
[  103.816525][ T7773] tun0: tun_chr_ioctl cmd 1074812117
[  104.337208][ T7799] netlink: 'syz.2.576': attribute type 10 has an invalid length.
[  104.346751][ T7799] team0: Device ipvlan1 failed to register rx_handler
[  104.384888][ T7804] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  104.950010][ T7863] set match dimension is over the limit!
[  105.068962][ T7868] netlink: 'syz.1.600': attribute type 1 has an invalid length.
[  105.072800][ T7868] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  105.125485][ T7870] netlink: 'syz.1.601': attribute type 1 has an invalid length.
[  105.141533][ T7870] 8021q: adding VLAN 0 to HW filter on device bond3
[  105.520913][ T7878] __nla_validate_parse: 24 callbacks suppressed
[  105.520929][ T7878] netlink: 96 bytes leftover after parsing attributes in process `syz.0.604'.
[  105.584847][ T7880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.605'.
[  105.589200][ T7880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.605'.
[  105.795182][ T7889] netlink: 'syz.0.608': attribute type 1 has an invalid length.
[  105.821503][ T7889] 8021q: adding VLAN 0 to HW filter on device bond2
[  105.879848][ T7896] netlink: 'syz.2.611': attribute type 7 has an invalid length.
[  106.128022][ T7908] openvswitch: netlink: Unknown key attributes 2
[  106.380253][ T7927] netlink: 228 bytes leftover after parsing attributes in process `syz.0.622'.
[  106.385792][ T7926] netlink: 228 bytes leftover after parsing attributes in process `syz.0.622'.
[  106.397498][ T7930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.623'.
[  106.400144][ T7930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.623'.
[  106.414225][ T7929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.623'.
[  106.417228][ T7929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.623'.
[  106.622920][ T7949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.630'.
[  106.678648][ T7949] veth0: entered promiscuous mode
[  106.686849][ T7948] veth0: left promiscuous mode
[  107.306569][ T8004] SET target dimension over the limit!
[  107.533662][ T8025] validate_nla: 3 callbacks suppressed
[  107.533674][ T8025] netlink: 'syz.1.644': attribute type 1 has an invalid length.
[  107.555663][ T8025] 8021q: adding VLAN 0 to HW filter on device bond4
[  107.612964][ T8036] netlink: 'syz.2.647': attribute type 29 has an invalid length.
[  107.627679][ T8040] netlink: 'syz.1.648': attribute type 1 has an invalid length.
[  107.630694][ T8039] netlink: 'syz.1.648': attribute type 1 has an invalid length.
[  107.878421][ T8063] hsr_slave_0: left promiscuous mode
[  107.880995][ T8063] hsr_slave_1: left promiscuous mode
[  108.168543][ T8081] netlink: 'syz.2.661': attribute type 1 has an invalid length.
[  108.179924][ T8081] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR
[  108.196752][ T8087] netlink: 'syz.0.662': attribute type 7 has an invalid length.
[  108.397057][ T8105] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  108.401083][ T8100] netlink: 'syz.0.665': attribute type 7 has an invalid length.
[  108.422195][ T8100] : entered promiscuous mode
[  108.551592][ T8107] netlink: 'syz.2.667': attribute type 1 has an invalid length.
[  108.574646][ T8107] 8021q: adding VLAN 0 to HW filter on device bond9
[  108.793631][ T8134] netlink: 'syz.2.674': attribute type 28 has an invalid length.
[  109.350743][ T8176] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  109.392365][ T8176] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  109.413352][ T8178] netlink: 'syz.1.681': attribute type 10 has an invalid length.
[  109.641748][ T8182] raw_sendmsg: syz.0.683 forgot to set AF_INET. Fix it!
[  110.262290][ T8220] bond3: entered promiscuous mode
[  110.267516][ T8220] bond3: entered allmulticast mode
[  110.271822][ T8220] 8021q: adding VLAN 0 to HW filter on device bond3
[  110.448524][ T8231] 8021q: adding VLAN 0 to HW filter on device bond10
[  111.550707][ T8252] x_tables: duplicate underflow at hook 3
[  126.049843][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  126.063172][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  126.067497][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  126.070778][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  126.073709][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  126.197719][ T8262] chnl_net:caif_netlink_parms(): no params data found
[  126.253475][ T8262] bridge0: port 1(bridge_slave_0) entered blocking state
[  126.255780][ T8262] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.258040][ T8262] bridge_slave_0: entered allmulticast mode
[  126.260797][ T8262] bridge_slave_0: entered promiscuous mode
[  126.264477][ T8262] bridge0: port 2(bridge_slave_1) entered blocking state
[  126.266642][ T8262] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.269057][ T8262] bridge_slave_1: entered allmulticast mode
[  126.271896][ T8262] bridge_slave_1: entered promiscuous mode
[  126.294000][ T8262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  126.300601][ T8262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  126.325942][ T8262] team0: Port device team_slave_0 added
[  126.329863][ T8262] team0: Port device team_slave_1 added
[  126.357968][ T8262] batman_adv: batadv0: Adding interface: batadv_slave_0
[  126.360693][ T8262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  126.370711][ T8262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  126.377924][ T8262] batman_adv: batadv0: Adding interface: batadv_slave_1
[  126.380584][ T8262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  126.390637][ T8262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  126.426176][ T8262] hsr_slave_0: entered promiscuous mode
[  126.429612][ T8262] hsr_slave_1: entered promiscuous mode
[  126.432187][ T8262] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  126.435666][ T8262] Cannot create hsr debugfs directory
[  127.084930][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  127.089383][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  127.092809][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  127.100147][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  127.103859][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  127.287842][ T5220] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  127.291762][ T5220] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  127.296384][ T5220] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  127.299870][ T5220] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  127.304468][ T5220] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  127.417166][ T8273] chnl_net:caif_netlink_parms(): no params data found
[  127.505430][ T8273] bridge0: port 1(bridge_slave_0) entered blocking state
[  127.508828][ T8273] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.511077][ T8273] bridge_slave_0: entered allmulticast mode
[  127.514014][ T8273] bridge_slave_0: entered promiscuous mode
[  127.532765][ T8273] bridge0: port 2(bridge_slave_1) entered blocking state
[  127.535513][ T8273] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.537732][ T8273] bridge_slave_1: entered allmulticast mode
[  127.540451][ T8273] bridge_slave_1: entered promiscuous mode
[  127.584880][ T8273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  127.591619][ T8273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  127.659898][ T8276] chnl_net:caif_netlink_parms(): no params data found
[  127.672651][ T8273] team0: Port device team_slave_0 added
[  127.681344][ T8273] team0: Port device team_slave_1 added
[  127.751612][ T8273] batman_adv: batadv0: Adding interface: batadv_slave_0
[  127.754120][ T8273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  127.762117][ T8273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  127.775619][ T8276] bridge0: port 1(bridge_slave_0) entered blocking state
[  127.778036][ T8276] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.780555][ T8276] bridge_slave_0: entered allmulticast mode
[  127.784265][ T8276] bridge_slave_0: entered promiscuous mode
[  127.787545][ T8273] batman_adv: batadv0: Adding interface: batadv_slave_1
[  127.789747][ T8273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  127.799005][ T8273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  127.802782][ T8276] bridge0: port 2(bridge_slave_1) entered blocking state
[  127.805731][ T8276] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.808582][ T8276] bridge_slave_1: entered allmulticast mode
[  127.812460][ T8276] bridge_slave_1: entered promiscuous mode
[  127.879623][ T8273] hsr_slave_0: entered promiscuous mode
[  127.882523][ T8273] hsr_slave_1: entered promiscuous mode
[  127.889245][ T8273] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  127.892291][ T8273] Cannot create hsr debugfs directory
[  127.901469][ T8276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  127.929331][ T8276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  127.998248][ T8276] team0: Port device team_slave_0 added
[  128.011749][ T8276] team0: Port device team_slave_1 added
[  128.070420][ T8276] batman_adv: batadv0: Adding interface: batadv_slave_0
[  128.073006][ T8276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  128.086385][ T8276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  128.093751][ T5844] Bluetooth: hci3: command tx timeout
[  128.118405][ T8276] batman_adv: batadv0: Adding interface: batadv_slave_1
[  128.120989][ T8276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  128.131898][ T8276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  128.212678][ T8276] hsr_slave_0: entered promiscuous mode
[  128.219471][ T8276] hsr_slave_1: entered promiscuous mode
[  128.222285][ T8276] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  128.225817][ T8276] Cannot create hsr debugfs directory
[  129.123560][ T5844] Bluetooth: hci4: command tx timeout
[  129.363935][ T5220] Bluetooth: hci5: command tx timeout
[  130.163528][ T5844] Bluetooth: hci3: command tx timeout
[  131.203573][ T5844] Bluetooth: hci4: command tx timeout
[  131.443447][ T5844] Bluetooth: hci5: command tx timeout
[  132.243429][ T5844] Bluetooth: hci3: command tx timeout
[  132.570883][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  132.574007][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  133.283391][ T5844] Bluetooth: hci4: command tx timeout
[  133.528261][ T5844] Bluetooth: hci5: command tx timeout
[  134.333683][ T5844] Bluetooth: hci3: command tx timeout
[  135.373788][ T5844] Bluetooth: hci4: command tx timeout
[  135.604084][ T5844] Bluetooth: hci5: command tx timeout
[  186.038992][ T5220] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  186.047086][ T5220] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  186.051271][ T5220] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  186.055184][ T5220] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  186.058629][ T5220] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  186.281946][ T8293] chnl_net:caif_netlink_parms(): no params data found
[  186.379122][ T8293] bridge0: port 1(bridge_slave_0) entered blocking state
[  186.381469][ T8293] bridge0: port 1(bridge_slave_0) entered disabled state
[  186.387995][ T8293] bridge_slave_0: entered allmulticast mode
[  186.392100][ T8293] bridge_slave_0: entered promiscuous mode
[  186.397209][ T8293] bridge0: port 2(bridge_slave_1) entered blocking state
[  186.399466][ T8293] bridge0: port 2(bridge_slave_1) entered disabled state
[  186.401848][ T8293] bridge_slave_1: entered allmulticast mode
[  186.407809][ T8293] bridge_slave_1: entered promiscuous mode
[  186.438257][ T8293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  186.446207][ T8293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  186.472553][ T8293] team0: Port device team_slave_0 added
[  186.477383][ T8293] team0: Port device team_slave_1 added
[  186.502503][ T8293] batman_adv: batadv0: Adding interface: batadv_slave_0
[  186.507458][ T8293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  186.516335][ T8293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  186.520968][ T8293] batman_adv: batadv0: Adding interface: batadv_slave_1
[  186.523066][ T8293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  186.535470][ T8293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  186.573046][ T8293] hsr_slave_0: entered promiscuous mode
[  186.577090][ T8293] hsr_slave_1: entered promiscuous mode
[  186.579319][ T8293] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  186.581699][ T8293] Cannot create hsr debugfs directory
[  187.043943][ T5844] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  187.047080][ T5844] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  187.049874][ T5844] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  187.054944][ T5844] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  187.058042][ T5844] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  187.217340][ T8306] chnl_net:caif_netlink_parms(): no params data found
[  187.300103][ T8306] bridge0: port 1(bridge_slave_0) entered blocking state
[  187.302477][ T8306] bridge0: port 1(bridge_slave_0) entered disabled state
[  187.309583][ T8306] bridge_slave_0: entered allmulticast mode
[  187.314245][ T8306] bridge_slave_0: entered promiscuous mode
[  187.318822][ T8306] bridge0: port 2(bridge_slave_1) entered blocking state
[  187.321566][ T8306] bridge0: port 2(bridge_slave_1) entered disabled state
[  187.327864][ T8306] bridge_slave_1: entered allmulticast mode
[  187.331797][ T8306] bridge_slave_1: entered promiscuous mode
[  187.370814][ T8306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  187.378063][ T8306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  187.421299][ T8306] team0: Port device team_slave_0 added
[  187.432042][ T8306] team0: Port device team_slave_1 added
[  187.462056][ T8306] batman_adv: batadv0: Adding interface: batadv_slave_0
[  187.465071][ T8306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  187.473994][ T8306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  187.479185][ T8306] batman_adv: batadv0: Adding interface: batadv_slave_1
[  187.481963][ T8306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  187.492723][ T8306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  187.549841][ T8306] hsr_slave_0: entered promiscuous mode
[  187.553013][ T8306] hsr_slave_1: entered promiscuous mode
[  187.561097][ T8306] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  187.565384][ T8306] Cannot create hsr debugfs directory
[  188.083972][ T5844] Bluetooth: hci6: command tx timeout
[  188.157217][ T5220] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  188.160724][ T5220] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  188.164060][ T5220] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  188.167472][ T5220] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  188.171592][ T5220] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  188.386387][ T8315] chnl_net:caif_netlink_parms(): no params data found
[  188.457998][ T8315] bridge0: port 1(bridge_slave_0) entered blocking state
[  188.460417][ T8315] bridge0: port 1(bridge_slave_0) entered disabled state
[  188.462620][ T8315] bridge_slave_0: entered allmulticast mode
[  188.466326][ T8315] bridge_slave_0: entered promiscuous mode
[  188.469740][ T8315] bridge0: port 2(bridge_slave_1) entered blocking state
[  188.471986][ T8315] bridge0: port 2(bridge_slave_1) entered disabled state
[  188.474613][ T8315] bridge_slave_1: entered allmulticast mode
[  188.478709][ T8315] bridge_slave_1: entered promiscuous mode
[  188.503113][ T8315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  188.508285][ T8315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  188.535739][ T8315] team0: Port device team_slave_0 added
[  188.539933][ T8315] team0: Port device team_slave_1 added
[  188.562384][ T8315] batman_adv: batadv0: Adding interface: batadv_slave_0
[  188.565303][ T8315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  188.573088][ T8315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  188.578747][ T8315] batman_adv: batadv0: Adding interface: batadv_slave_1
[  188.580880][ T8315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  188.590076][ T8315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  188.621502][ T8315] hsr_slave_0: entered promiscuous mode
[  188.624222][ T8315] hsr_slave_1: entered promiscuous mode
[  188.626746][ T8315] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  188.629154][ T8315] Cannot create hsr debugfs directory
[  189.123747][ T5220] Bluetooth: hci7: command tx timeout
[  190.163797][ T5220] Bluetooth: hci6: command tx timeout
[  190.243807][ T5220] Bluetooth: hci8: command tx timeout
[  190.965838][ T5220] Bluetooth: hci1: command 0x0406 tx timeout
[  191.203481][ T5220] Bluetooth: hci7: command tx timeout
[  192.244220][ T5220] Bluetooth: hci6: command tx timeout
[  192.323464][ T5220] Bluetooth: hci8: command tx timeout
[  193.283435][ T5220] Bluetooth: hci7: command tx timeout
[  194.008857][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  194.011240][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  194.323614][ T5220] Bluetooth: hci6: command tx timeout
[  194.403584][ T5220] Bluetooth: hci8: command tx timeout
[  195.363401][ T5220] Bluetooth: hci7: command tx timeout
[  196.483848][ T5220] Bluetooth: hci8: command tx timeout
[  211.443455][ T5844] Bluetooth: hci2: command 0x0405 tx timeout
[  247.178642][ T5844] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  247.184131][ T5844] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  247.188525][ T5844] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  247.193179][ T5844] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  247.197707][ T5844] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  247.402135][ T8335] chnl_net:caif_netlink_parms(): no params data found
[  247.521244][ T8335] bridge0: port 1(bridge_slave_0) entered blocking state
[  247.528826][ T8335] bridge0: port 1(bridge_slave_0) entered disabled state
[  247.531896][ T8335] bridge_slave_0: entered allmulticast mode
[  247.538383][ T8335] bridge_slave_0: entered promiscuous mode
[  247.547889][ T8335] bridge0: port 2(bridge_slave_1) entered blocking state
[  247.550756][ T8335] bridge0: port 2(bridge_slave_1) entered disabled state
[  247.556044][ T8335] bridge_slave_1: entered allmulticast mode
[  247.560034][ T8335] bridge_slave_1: entered promiscuous mode
[  247.611030][ T8335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  247.620158][ T8335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  247.650932][ T8335] team0: Port device team_slave_0 added
[  247.656856][ T8335] team0: Port device team_slave_1 added
[  247.680104][ T8335] batman_adv: batadv0: Adding interface: batadv_slave_0
[  247.682312][ T8335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  247.695685][ T8335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  247.700455][ T8335] batman_adv: batadv0: Adding interface: batadv_slave_1
[  247.703081][ T8335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  247.718827][ T8335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  247.766479][ T8335] hsr_slave_0: entered promiscuous mode
[  247.769368][ T8335] hsr_slave_1: entered promiscuous mode
[  247.771647][ T8335] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  247.779928][ T8335] Cannot create hsr debugfs directory
[  248.304396][ T5844] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  248.308580][ T5844] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  248.311905][ T5844] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  248.316791][ T5844] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  248.320204][ T5844] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  248.533685][ T8346] chnl_net:caif_netlink_parms(): no params data found
[  248.617007][ T8346] bridge0: port 1(bridge_slave_0) entered blocking state
[  248.620186][ T8346] bridge0: port 1(bridge_slave_0) entered disabled state
[  248.624028][ T8346] bridge_slave_0: entered allmulticast mode
[  248.628122][ T8346] bridge_slave_0: entered promiscuous mode
[  248.634709][ T8346] bridge0: port 2(bridge_slave_1) entered blocking state
[  248.637521][ T8346] bridge0: port 2(bridge_slave_1) entered disabled state
[  248.640481][ T8346] bridge_slave_1: entered allmulticast mode
[  248.645711][ T8346] bridge_slave_1: entered promiscuous mode
[  248.677863][ T8346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  248.684586][ T8346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  248.718599][ T8346] team0: Port device team_slave_0 added
[  248.723944][ T8346] team0: Port device team_slave_1 added
[  248.754431][ T8346] batman_adv: batadv0: Adding interface: batadv_slave_0
[  248.757184][ T8346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  248.767568][ T8346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  248.773797][ T8346] batman_adv: batadv0: Adding interface: batadv_slave_1
[  248.776546][ T8346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  248.786386][ T8346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  248.834024][ T8346] hsr_slave_0: entered promiscuous mode
[  248.837227][ T8346] hsr_slave_1: entered promiscuous mode
[  248.840111][ T8346] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  248.843105][ T8346] Cannot create hsr debugfs directory
[  249.218661][ T5844] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  249.224900][ T5844] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  249.235077][ T5844] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  249.239087][ T5844] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  249.242706][ T5844] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  249.288502][ T5220] Bluetooth: hci9: command tx timeout
[  249.463028][ T8355] chnl_net:caif_netlink_parms(): no params data found
[  249.659571][ T8355] bridge0: port 1(bridge_slave_0) entered blocking state
[  249.661929][ T8355] bridge0: port 1(bridge_slave_0) entered disabled state
[  249.675625][ T8355] bridge_slave_0: entered allmulticast mode
[  249.682650][ T8355] bridge_slave_0: entered promiscuous mode
[  249.709801][ T8355] bridge0: port 2(bridge_slave_1) entered blocking state
[  249.712473][ T8355] bridge0: port 2(bridge_slave_1) entered disabled state
[  249.730704][ T8355] bridge_slave_1: entered allmulticast mode
[  249.754964][ T8355] bridge_slave_1: entered promiscuous mode
[  249.819446][ T8355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  249.825181][ T8355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  249.887437][ T8355] team0: Port device team_slave_0 added
[  249.904405][ T8355] team0: Port device team_slave_1 added
[  249.942482][ T8355] batman_adv: batadv0: Adding interface: batadv_slave_0
[  249.945772][ T8355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  249.961017][ T8355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  249.966968][ T8355] batman_adv: batadv0: Adding interface: batadv_slave_1
[  249.969612][ T8355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  249.983694][ T8355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  250.019133][ T8355] hsr_slave_0: entered promiscuous mode
[  250.021712][ T8355] hsr_slave_1: entered promiscuous mode
[  250.025104][ T8355] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  250.028096][ T8355] Cannot create hsr debugfs directory
[  250.403560][ T8363] Bluetooth: hci10: command tx timeout
[  251.289358][ T8363] Bluetooth: hci11: command tx timeout
[  251.363982][ T8363] Bluetooth: hci9: command tx timeout
[  252.405791][ T5838] Bluetooth: hci4: command 0x0406 tx timeout
[  252.408156][ T5838] Bluetooth: hci3: command 0x0406 tx timeout
[  252.410165][ T8363] Bluetooth: hci5: command 0x0406 tx timeout
[  252.483735][ T5841] Bluetooth: hci10: command tx timeout
[  253.363763][ T5841] Bluetooth: hci11: command tx timeout
[  253.443838][ T5841] Bluetooth: hci9: command tx timeout
[  254.563573][ T5841] Bluetooth: hci10: command tx timeout
[  255.453660][ T5841] Bluetooth: hci11: command tx timeout
[  255.456782][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  255.459283][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  255.524192][ T5841] Bluetooth: hci9: command tx timeout
[  256.643668][ T5841] Bluetooth: hci10: command tx timeout
[  257.523434][ T5841] Bluetooth: hci11: command tx timeout
[  262.483903][   T34] INFO: task syz.1.704:8245 blocked for more than 143 seconds.
[  262.486258][   T34]       Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  262.518566][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  262.521728][   T34] task:syz.1.704       state:D stack:28312 pid:8245  tgid:8244  ppid:5845   task_flags:0x400040 flags:0x00004004
[  262.529774][   T34] Call Trace:
[  262.530955][   T34]  <TASK>
[  262.531956][   T34]  __schedule+0x16f5/0x4d00
[  262.544128][   T34]  ? __lock_acquire+0xab9/0xd20
[  262.546140][   T34]  ? __lock_acquire+0xab9/0xd20
[  262.548260][   T34]  ? schedule+0x165/0x360
[  262.549863][   T34]  ? __pfx___schedule+0x10/0x10
[  262.551636][   T34]  ? schedule+0x91/0x360
[  262.563027][   T34]  schedule+0x165/0x360
[  262.571700][   T34]  schedule_preempt_disabled+0x13/0x30
[  262.574391][   T34]  __mutex_lock+0x724/0xe80
[  262.576200][   T34]  ? unwind_get_return_address+0x4d/0x90
[  262.578051][   T34]  ? __mutex_lock+0x51b/0xe80
[  262.579570][   T34]  ? genl_rcv_msg+0x10d/0x790
[  262.581399][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  262.583065][   T34]  ? stack_trace_save+0x9c/0xe0
[  262.589705][   T34]  ? radix_tree_lookup+0x240/0x290
[  262.591717][   T34]  genl_rcv_msg+0x10d/0x790
[  262.593751][   T34]  ? __lock_acquire+0xab9/0xd20
[  262.595318][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  262.596888][   T34]  netlink_rcv_skb+0x208/0x470
[  262.598406][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  262.599974][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  262.601624][   T34]  ? down_read+0x1ad/0x2e0
[  262.603019][   T34]  genl_rcv+0x28/0x40
[  262.609644][   T34]  netlink_unicast+0x75c/0x8e0
[  262.611259][   T34]  netlink_sendmsg+0x805/0xb30
[  262.612772][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  262.615021][   T34]  ? aa_sock_msg_perm+0x94/0x160
[  262.616621][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  262.618319][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  262.620026][   T34]  __sock_sendmsg+0x21c/0x270
[  262.621683][   T34]  __sys_sendto+0x3bd/0x520
[  262.628543][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  262.630545][   T34]  ? count_memcg_event_mm+0x21/0x260
[  262.632601][   T34]  ? exc_page_fault+0x76/0xf0
[  262.635331][   T34]  ? do_user_addr_fault+0xc8a/0x1390
[  262.637454][   T34]  __x64_sys_sendto+0xde/0x100
[  262.639375][   T34]  do_syscall_64+0xfa/0x3b0
[  262.641181][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  262.650778][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  262.652762][   T34]  ? exc_page_fault+0x9f/0xf0
[  262.654886][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  262.656864][   T34] RIP: 0033:0x7fe3b0f907bc
[  262.658253][   T34] RSP: 002b:00007fe3b1e7bec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  262.660840][   T34] RAX: ffffffffffffffda RBX: 00007fe3b1e7bfc0 RCX: 00007fe3b0f907bc
[  262.667883][   T34] RDX: 0000000000000024 RSI: 00007fe3b1e7c010 RDI: 0000000000000004
[  262.670356][   T34] RBP: 0000000000000000 R08: 00007fe3b1e7bf14 R09: 000000000000000c
[  262.674123][   T34] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004
[  262.677155][   T34] R13: 00007fe3b1e7bf68 R14: 00007fe3b1e7c010 R15: 0000000000000000
[  262.680126][   T34]  </TASK>
[  262.681830][   T34] INFO: task syz.2.705:8248 blocked for more than 143 seconds.
[  262.689552][   T34]       Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0
[  262.692075][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  262.695315][   T34] task:syz.2.705       state:D stack:25928 pid:8248  tgid:8247  ppid:5840   task_flags:0x400140 flags:0x00004004
[  262.699408][   T34] Call Trace:
[  262.700675][   T34]  <TASK>
[  262.701869][   T34]  __schedule+0x16f5/0x4d00
[  262.708586][   T34]  ? __lock_acquire+0xab9/0xd20
[  262.710566][   T34]  ? __lock_acquire+0xab9/0xd20
[  262.712529][   T34]  ? schedule+0x165/0x360
[  262.714871][   T34]  ? __pfx___schedule+0x10/0x10
[  262.716736][   T34]  ? schedule+0x91/0x360
[  262.718034][   T34]  schedule+0x165/0x360
[  262.719342][   T34]  schedule_preempt_disabled+0x13/0x30
[  262.721022][   T34]  __mutex_lock+0x724/0xe80
[  262.722455][   T34]  ? unwind_get_return_address+0x4d/0x90
[  262.728741][   T34]  ? __mutex_lock+0x51b/0xe80
[  262.730211][   T34]  ? genl_rcv_msg+0x10d/0x790
[  262.731698][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  262.737689][   T34]  ? stack_trace_save+0x9c/0xe0
[  262.739635][   T34]  ? radix_tree_lookup+0x240/0x290
[  262.741552][   T34]  genl_rcv_msg+0x10d/0x790
[  262.749013][   T34]  ? __lock_acquire+0xab9/0xd20
[  262.750920][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  262.753015][   T34]  netlink_rcv_skb+0x208/0x470
[  262.756011][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  262.757886][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  262.759887][   T34]  ? down_read+0x1ad/0x2e0
[  262.761549][   T34]  genl_rcv+0x28/0x40
[  262.763046][   T34]  netlink_unicast+0x75c/0x8e0
[  262.770603][   T34]  netlink_sendmsg+0x805/0xb30
[  262.772489][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  262.775149][   T34]  ? aa_sock_msg_perm+0x94/0x160
[  262.777050][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  262.779074][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  262.781090][   T34]  __sock_sendmsg+0x21c/0x270
[  262.782895][   T34]  __sys_sendto+0x3bd/0x520
[  262.790740][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  262.792745][   T34]  ? count_memcg_event_mm+0x21/0x260
[  262.795286][   T34]  ? exc_page_fault+0x76/0xf0
[  262.796777][   T34]  ? do_user_addr_fault+0xc8a/0x1390
[  262.798433][   T34]  __x64_sys_sendto+0xde/0x100
[  262.799940][   T34]  do_syscall_64+0xfa/0x3b0
[  262.801357][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  262.812796][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  262.815178][   T34]  ? exc_page_fault+0x9f/0xf0
[  262.816692][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  262.818533][   T34] RIP: 0033:0x7fa2e95907bc
[  262.819888][   T34] RSP: 002b:00007fa2ea483ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  262.823118][   T34] RAX: ffffffffffffffda RBX: 00007fa2ea483fc0 RCX: 00007fa2e95907bc
[  262.830052][   T34] RDX: 0000000000000020 RSI: 00007fa2ea484010 RDI: 000000000000000b
[  262.832924][   T34] RBP: 0000000000000000 R08: 00007fa2ea483f14 R09: 000000000000000c
[  262.835924][   T34] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000b
[  262.838404][   T34] R13: 00007fa2ea483f68 R14: 00007fa2ea484010 R15: 0000000000000000
[  262.840802][   T34]  </TASK>
[  262.841869][   T34] 
[  262.841869][   T34] Showing all locks held in the system:
[  262.849528][   T34] 1 lock held by khungtaskd/34:
[  262.851083][   T34]  #0: ffffffff8e13f160 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  262.854724][   T34] 2 locks held by getty/5659:
[  262.856333][   T34]  #0: ffff888023c1e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  262.859313][   T34]  #1: ffffc900029062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  262.862391][   T34] 2 locks held by syz.0.703/8242:
[  262.868757][   T34] 2 locks held by syz.1.704/8245:
[  262.870410][   T34]  #0: ffffffff8f581df0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  262.872905][   T34]  #1: ffffffff8f581c08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  262.876151][   T34] 2 locks held by syz.2.705/8248:
[  262.877715][   T34]  #0: ffffffff8f581df0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  262.880230][   T34]  #1: ffffffff8f581c08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  262.882980][   T34] 2 locks held by syz-executor/8262:
[  262.889885][   T34]  #0: ffffffff8f581df0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  262.892450][   T34]  #1: ffffffff8f581c08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  262.895735][   T34] 2 locks held by syz-executor/8273:
[  262.897426][   T34]  #0: ffffffff8f581df0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  262.899960][   T34]  #1: ffffffff8f581c08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  262.903075][   T34] 2 locks held by syz-executor/8276:
[  262.910073][   T34]  #0: ffffffff8f581df0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  262.912631][   T34]  #1: ffffffff8f581c08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  262.916230][   T34] 2 locks held by syz-executor/8293:
[  262.917880][   T34]  #0: ffffffff8f581df0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  262.920418][   T34]  #1: ffffffff8f581c08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  262.923127][   T34] 2 locks held by syz-executor/8306:
[  262.930075][   T34]  #0: ffffffff8f581df0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  262.933811][   T34]  #1: ffffffff8f581c08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  262.937268][   T34] 2 locks held by syz-executor/8315:
[  262.939304][   T34]  #0: ffffffff8f581df0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  262.942343][   T34]  #1: ffffffff8f581c08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  262.951542][   T34] 2 locks held by syz-executor/8335:
[  262.955276][   T34]  #0: ffffffff8f581df0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  262.958065][   T34]  #1: ffffffff8f581c08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  262.960976][   T34] 2 locks held by syz-executor/8346:
[  262.962900][   T34]  #0: ffffffff8f581df0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  262.970748][   T34]  #1: ffffffff8f581c08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  262.974988][   T34] 2 locks held by syz-executor/8355:
[  262.976661][   T34]  #0: ffffffff8f581df0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  262.979198][   T34]  #1: ffffffff8f581c08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  262.982504][   T34] 
[  262.987445][   T34] =============================================
[  262.987445][   T34] 
[  262.990190][   T34] NMI backtrace for cpu 1
[  262.990201][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  262.990211][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  262.990216][   T34] Call Trace:
[  262.990221][   T34]  <TASK>
[  262.990226][   T34]  dump_stack_lvl+0x189/0x250
[  262.990263][   T34]  ? __wake_up_klogd+0xd9/0x110
[  262.990277][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  262.990287][   T34]  ? __pfx__printk+0x10/0x10
[  262.990303][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  262.990317][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  262.990328][   T34]  ? _printk+0xcf/0x120
[  262.990340][   T34]  ? __pfx__printk+0x10/0x10
[  262.990351][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  262.990361][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  262.990373][   T34]  watchdog+0xfee/0x1030
[  262.990382][   T34]  ? watchdog+0x1de/0x1030
[  262.990393][   T34]  kthread+0x711/0x8a0
[  262.990408][   T34]  ? __pfx_watchdog+0x10/0x10
[  262.990415][   T34]  ? __pfx_kthread+0x10/0x10
[  262.990427][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  262.990440][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  262.990448][   T34]  ? __pfx_kthread+0x10/0x10
[  262.990459][   T34]  ret_from_fork+0x3fc/0x770
[  262.990470][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  262.990481][   T34]  ? __switch_to_asm+0x39/0x70
[  262.990490][   T34]  ? __switch_to_asm+0x33/0x70
[  262.990500][   T34]  ? __pfx_kthread+0x10/0x10
[  262.990511][   T34]  ret_from_fork_asm+0x1a/0x30
[  262.990528][   T34]  </TASK>
[  262.990532][   T34] Sending NMI from CPU 1 to CPUs 0:
[  263.043054][    C0] NMI backtrace for cpu 0
[  263.043067][    C0] CPU: 0 UID: 0 PID: 8242 Comm: syz.0.703 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  263.043077][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  263.043082][    C0] RIP: 0010:rcu_is_watching+0x10/0xb0
[  263.043098][    C0] Code: 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 53 65 ff 05 70 70 f8 10 <e8> 0b 42 c6 09 89 c3 83 f8 08 73 65 49 bf 00 00 00 00 00 fc ff df
[  263.043104][    C0] RSP: 0018:ffffc9000472e7c0 EFLAGS: 00000282
[  263.043112][    C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffff88811900d640
[  263.043117][    C0] RDX: ffff88811900d640 RSI: 0000000000000001 RDI: 0000000000000000
[  263.043122][    C0] RBP: 0000000000000055 R08: 0000000000000000 R09: ffffffff8b0d940e
[  263.043126][    C0] R10: 0000000000000007 R11: 0000000000000000 R12: ffff88810fea9800
[  263.043130][    C0] R13: 1ffff920008e5d3c R14: 0000000000000001 R15: dffffc0000000000
[  263.043135][    C0] FS:  00007f5a702046c0(0000) GS:ffff8880b8626000(0000) knlGS:0000000000000000
[  263.043142][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  263.043146][    C0] CR2: 000055952b4b1e08 CR3: 0000000029c74000 CR4: 00000000000006f0
[  263.043170][    C0] Call Trace:
[  263.043176][    C0]  <TASK>
[  263.043182][    C0]  rcu_read_lock_held+0x15/0x50
[  263.043218][    C0]  ? net_generic+0x1e/0x240
[  263.043253][    C0]  net_generic+0x101/0x240
[  263.043266][    C0]  tipc_sk_lookup+0xa9/0x920
[  263.043276][    C0]  ? tipc_sk_lookup+0xb8/0x920
[  263.043286][    C0]  ? __pfx_tipc_sk_lookup+0x10/0x10
[  263.043295][    C0]  ? __nla_parse+0x40/0x60
[  263.043306][    C0]  tipc_nl_publ_dump+0x2af/0xc60
[  263.043318][    C0]  ? rcu_is_watching+0x15/0xb0
[  263.043326][    C0]  ? trace_irq_disable+0x37/0x110
[  263.043341][    C0]  ? __pfx_tipc_nl_publ_dump+0x10/0x10
[  263.043355][    C0]  ? tipc_sk_lookup+0xb8/0x920
[  263.043365][    C0]  __tipc_nl_compat_dumpit+0x429/0xb70
[  263.043382][    C0]  ? __pfx___tipc_nl_compat_dumpit+0x10/0x10
[  263.043396][    C0]  ? __alloc_skb+0x142/0x2d0
[  263.043407][    C0]  ? rcu_is_watching+0x15/0xb0
[  263.043418][    C0]  ? __asan_memcpy+0x40/0x70
[  263.043430][    C0]  ? nla_put+0xd0/0x150
[  263.043439][    C0]  tipc_nl_compat_sk_dump+0x625/0x810
[  263.043452][    C0]  ? __pfx_tipc_nl_publ_dump+0x10/0x10
[  263.043461][    C0]  ? __pfx___tipc_nl_compat_publ_dump+0x10/0x10
[  263.043473][    C0]  ? __pfx_tipc_nl_compat_sk_dump+0x10/0x10
[  263.043486][    C0]  ? rhashtable_walk_stop+0x260/0x290
[  263.043499][    C0]  ? __nla_parse+0x40/0x60
[  263.043509][    C0]  __tipc_nl_compat_dumpit+0x57b/0xb70
[  263.043523][    C0]  ? __pfx___tipc_nl_compat_dumpit+0x10/0x10
[  263.043537][    C0]  ? kmalloc_reserve+0xbd/0x290
[  263.043547][    C0]  ? rcu_is_watching+0x15/0xb0
[  263.043559][    C0]  ? __asan_memset+0x22/0x50
[  263.043567][    C0]  ? __nlmsg_put+0xef/0x1b0
[  263.043577][    C0]  tipc_nl_compat_dumpit+0x566/0x7b0
[  263.043590][    C0]  tipc_nl_compat_recv+0x802/0xbe0
[  263.043601][    C0]  ? __pfx_tipc_nl_compat_recv+0x10/0x10
[  263.043611][    C0]  ? __pfx_tipc_nl_sk_dump+0x10/0x10
[  263.043620][    C0]  ? __pfx_tipc_nl_compat_sk_dump+0x10/0x10
[  263.043630][    C0]  ? __mutex_trylock_common+0x153/0x260
[  263.043641][    C0]  ? __pfx___mutex_trylock_common+0x10/0x10
[  263.043650][    C0]  ? __local_bh_enable_ip+0x12d/0x1c0
[  263.043661][    C0]  ? rcu_is_watching+0x15/0xb0
[  263.043671][    C0]  genl_family_rcv_msg_doit+0x215/0x300
[  263.043681][    C0]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  263.043694][    C0]  genl_rcv_msg+0x60e/0x790
[  263.043703][    C0]  ? __pfx_genl_rcv_msg+0x10/0x10
[  263.043709][    C0]  ? ref_tracker_free+0x63a/0x7d0
[  263.043718][    C0]  ? __pfx_tipc_nl_compat_recv+0x10/0x10
[  263.043728][    C0]  ? __pfx_ref_tracker_free+0x10/0x10
[  263.043738][    C0]  netlink_rcv_skb+0x208/0x470
[  263.043748][    C0]  ? __pfx_genl_rcv_msg+0x10/0x10
[  263.043756][    C0]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  263.043769][    C0]  ? down_read+0x1ad/0x2e0
[  263.043778][    C0]  genl_rcv+0x28/0x40
[  263.043785][    C0]  netlink_unicast+0x75c/0x8e0
[  263.043796][    C0]  netlink_sendmsg+0x805/0xb30
[  263.043808][    C0]  ? __pfx_netlink_sendmsg+0x10/0x10
[  263.043819][    C0]  ? aa_sock_msg_perm+0x94/0x160
[  263.043827][    C0]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  263.043836][    C0]  ? __pfx_netlink_sendmsg+0x10/0x10
[  263.043846][    C0]  __sock_sendmsg+0x21c/0x270
[  263.043855][    C0]  ____sys_sendmsg+0x505/0x830
[  263.043867][    C0]  ? __pfx_____sys_sendmsg+0x10/0x10
[  263.043880][    C0]  ? import_iovec+0x74/0xa0
[  263.043892][    C0]  ___sys_sendmsg+0x21f/0x2a0
[  263.043903][    C0]  ? __pfx____sys_sendmsg+0x10/0x10
[  263.043926][    C0]  ? __fget_files+0x2a/0x420
[  263.043932][    C0]  ? __fget_files+0x3a0/0x420
[  263.043941][    C0]  __x64_sys_sendmsg+0x19b/0x260
[  263.043952][    C0]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  263.043965][    C0]  ? rcu_is_watching+0x15/0xb0
[  263.043975][    C0]  ? do_syscall_64+0xbe/0x3b0
[  263.043984][    C0]  do_syscall_64+0xfa/0x3b0
[  263.043992][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  263.043999][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  263.044006][    C0]  ? exc_page_fault+0x9f/0xf0
[  263.044013][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  263.044021][    C0] RIP: 0033:0x7f5a6f38e929
[  263.044030][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  263.044036][    C0] RSP: 002b:00007f5a70204038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  263.044044][    C0] RAX: ffffffffffffffda RBX: 00007f5a6f5b6160 RCX: 00007f5a6f38e929
[  263.044049][    C0] RDX: 0000000000000000 RSI: 00002000000016c0 RDI: 0000000000000004
[  263.044054][    C0] RBP: 00007f5a6f410ca1 R08: 0000000000000000 R09: 0000000000000000
[  263.044058][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  263.044062][    C0] R13: 0000000000000000 R14: 00007f5a6f5b6160 R15: 00007ffdf638de18
[  263.044071][    C0]  </TASK>
[  263.049112][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  263.049125][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  263.049137][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  263.049143][   T34] Call Trace:
[  263.049147][   T34]  <TASK>
[  263.049152][   T34]  dump_stack_lvl+0x99/0x250
[  263.049167][   T34]  ? __asan_memcpy+0x40/0x70
[  263.049178][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  263.049188][   T34]  ? __pfx__printk+0x10/0x10
[  263.049204][   T34]  panic+0x2db/0x790
[  263.049216][   T34]  ? __pfx_panic+0x10/0x10
[  263.049276][   T34]  ? __pfx_delay_tsc+0x10/0x10
[  263.049296][   T34]  ? nmi_backtrace_stall_check+0x433/0x440
[  263.049316][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  263.049338][   T34]  ? nmi_trigger_cpumask_backtrace+0x2b6/0x300
[  263.049363][   T34]  watchdog+0x102d/0x1030
[  263.049379][   T34]  ? watchdog+0x1de/0x1030
[  263.049391][   T34]  kthread+0x711/0x8a0
[  263.049405][   T34]  ? __pfx_watchdog+0x10/0x10
[  263.049412][   T34]  ? __pfx_kthread+0x10/0x10
[  263.049424][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  263.049437][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  263.049445][   T34]  ? __pfx_kthread+0x10/0x10
[  263.049457][   T34]  ret_from_fork+0x3fc/0x770
[  263.049467][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  263.049478][   T34]  ? __switch_to_asm+0x39/0x70
[  263.049489][   T34]  ? __switch_to_asm+0x33/0x70
[  263.049499][   T34]  ? __pfx_kthread+0x10/0x10
[  263.049510][   T34]  ret_from_fork_asm+0x1a/0x30
[  263.049527][   T34]  </TASK>
[  263.279624][   T34] Kernel Offset: disabled
[  263.281195][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
19:56:29  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=0000000000000001 RCX=0000000080000000 RDX=ffff88811900d640
RSI=ffffffff8db837b9 RDI=ffffffff8be28c40 RBP=00000000ffffffff RSP=ffffc9000472e770
R8 =0000000000000000 R9 =ffffffff8b0d940e R10=0000000000000007 R11=0000000000000000
R12=0000000000000246 R13=ffff88811900d640 R14=ffffffff8e13f160 R15=0000000000000002
RIP=ffffffff8b6d7263 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f5a702046c0 ffffffff 00c00000
GS =0000 ffff8880b8626000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055952b4b1e08 CR3=0000000029c74000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=000000001eb62fa3 0000000000000018 XMM01=0100010000000100 010000ffffffffff
XMM02=010008000000fe00 0f00003565736f72 XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffffff ffffff0000000000 XMM05=00000000156a63c4 00000000000000e9
XMM06=0200000000000000 00000000000080fe XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffc90007800000 RBX=1ffff11020f9425a RCX=000000000000009d RDX=ffff888107ca12d0
RSI=0000000000000000 RDI=0000000000000000 RBP=ffffc900001e0b88 RSP=ffffc900001e09e0
R8 =ffff888107ca16bf R9 =1ffff11020f942d7 R10=dffffc0000000000 R11=ffffed1020f942d8
R12=dffffc0000000000 R13=0000000000004e20 R14=0000000000000001 R15=0000000000000001
RIP=ffffffff868ccbbb RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c26000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f4532603996 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00007f4534986d00
XMM02=0000000500000007 8803000000000001 XMM03=000125dfdbfe0070 bd28000134080c8c
XMM04=0000000000000000 0000000000000016 XMM05=0000000000000000 000000000001df8a
XMM06=0160a600080003e0 0300100000000007 XMM07=100003c000000000 03b0034810000290
XMM08=030100000408060c c003000100000006 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
