last executing test programs:

795.905466ms ago: executing program 2 (id=170):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000900)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d61637365630000140002800500060001000000050007000100000008000500", @ANYRES32=r1], 0x54}}, 0x0)

641.440376ms ago: executing program 2 (id=172):
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x15, 0x0, &(0x7f0000000180))

579.772862ms ago: executing program 2 (id=174):
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@filter={'filter\x00', 0x4, 0x4, 0x398, 0xffffffff, 0x1a8, 0x1a8, 0xd0, 0xfeffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private2, [0x0, 0x0, 0x0, 0xff000000], [0xff000000], 'pim6reg0\x00', 'team_slave_1\x00', {}, {}, 0x6, 0x0, 0x1}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x0, 0x1}, {0x4, 0x5, 0x7}, 0x1, 0xf0f}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x58}}, @common=@eui64={{0x28}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRES64, @ANYRESDEC=0x0, @ANYRES16=r0], 0x50)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20a0, 0x3b104}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x45}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe, 0xb}, {0x0, 0xc}, {0x6, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x40054)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x3100, 0x11, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socketpair(0x5, 0x6, 0x7ff, &(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1f, 0xc, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x7b}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x51}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
ioctl$SIOCX25SFACILITIES(r5, 0x89e3, &(0x7f0000000100)={0x74, 0x101, 0x6, 0x7, 0x6, 0x81})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r5)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000010000000000000000000018010000", @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374000000006c000280080001400000000508000140000000090c0002"], 0x140}}, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000048000000030a010200000000000000000100000009000300735a7a320000000014000480080002400000000408000140000000000900010073797a300000000008000a400000000228000000060a010400000000000000000100000008000b40000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0xb8}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r13=>0x0})
r14 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r14, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x4, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x89, 0x0, 0x0, 0x0, @empty, @private}}}})
sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r11, @ANYBLOB, @ANYRES32=r13, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r10)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r6, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0x2c, r15, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x15}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x24000880)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r6, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0x28, r8, 0x8, 0x870bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0xfffff8fc, 0x3a}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20008000)

471.24344ms ago: executing program 0 (id=177):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, 0x0, 0x2a}, 0x28)
unshare(0x400)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000180)='syzkaller\x00', 0x1}, 0x94)

470.911478ms ago: executing program 1 (id=178):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0x16}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "09000000000000008f29d158039b90627d7b60f0d5ca47f33eed46409b7c8722ce020df6b24c2e6ac7b97dc04d01be2092874115214b1ebb764511f69cd1e9f6263346363d2c639c76000067af25166c2f0f85f36aa8867406119c010400002e31dea98204000000d560eae59ea49ef95d73202a6e3b5e1eb38244e694e7410d33bc92794ad27031f2a19698b5142ddf36e2a876a4fc871207bf12a84f1d4d132f5bb7edcf2d08d677e6a7268e106b6ced3c7f53df24092ddb9e0fac6a1153c3fc88bfd1404fef22cf3e825a6e19c6a48a5444eabb459ac3ec9a278df4011773d2f2e6529ed0ad424b47ec67522477f979360b76d1008000"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0xfffffff7, 0xc, 0xb, 0x14, 0x5}}]}}]}, 0x148}}, 0x0)

382.41746ms ago: executing program 0 (id=179):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f00000003c0)=0x401, 0x4)

382.235333ms ago: executing program 1 (id=180):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000040), 0x10)
sendmsg$netlink(r0, &(0x7f0000005d80)={&(0x7f0000000440)=@proc={0x10, 0x0, 0x27dfdbff, 0x8001}, 0xc, &(0x7f0000005cc0)=[{&(0x7f0000001380)=ANY=[], 0x38}], 0x1, 0x0, 0x0, 0x44011}, 0x0)

338.522446ms ago: executing program 0 (id=181):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0xb4, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0xb400, 0x2, 0x100000000000000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0)

317.461118ms ago: executing program 2 (id=182):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000010000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78)

309.686231ms ago: executing program 0 (id=183):
syz_emit_ethernet(0x9a, &(0x7f00000002c0)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x5, 0x8c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x1e, 0x0, 0x0, 0x0, 0xfffe, {[@md5sig={0x13, 0x12, "47a2ac9eefac70f2052d55a960d78cbd"}, @nop, @mss={0x2, 0x4, 0x5}, @md5sig={0x13, 0x12, "ab519c9940eb739563a3c52b43aee4a2"}, @sack={0x5, 0x26, [0x9, 0xffffff4c, 0x43, 0x1, 0x8, 0xfa39, 0x8000, 0x8, 0x9]}, @md5sig={0x13, 0x12, "625fbe96fc97dc524d8a397b7b38957f"}]}}}}}}}, 0x0)

306.302369ms ago: executing program 1 (id=184):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
r0 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc)
setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x24)
close(r0)

197.795464ms ago: executing program 1 (id=185):
r0 = socket$inet6(0xa, 0x2, 0x3a)
sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x40}, 0x6}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f00000001c0)=[@dstopts_2292={{0x30, 0x29, 0x32, {0x0, 0x2, '\x00', [@hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x2}}]}}}], 0x30}}], 0x1, 0x4c0c0)

197.397276ms ago: executing program 0 (id=186):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500070000001400040073"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

142.09228ms ago: executing program 1 (id=187):
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5000000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="1111020031880000280012800b0001006d61637365630000180002800c0004000300000100c2800008000500ffffffff08000500", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0)

83.617243ms ago: executing program 2 (id=188):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x29, 0x4, 0x53, 0x5, 0x7b, @rand_addr=' \x01\x00', @mcast2={0xff, 0x5}, 0x1, 0x700, 0x7d, 0x6}})

79.327948ms ago: executing program 0 (id=189):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18050000000004000000000000000000850000007a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000828bd7000fddbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="060006004e220000010000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000044}, 0x14)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000080)=r0, 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1e, 0x1e, 0x2, [@datasec={0x2, 0x0, 0x0, 0xf, 0x3, [], "44942d"}, @datasec={0x3, 0x0, 0x0, 0xf, 0x3, [], "008000"}]}}, &(0x7f00000014c0)=""/2, 0x3a, 0x2, 0x1}, 0x28)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r3 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
close(0x3)
bind$alg(r5, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
accept4(r5, 0x0, 0x0, 0x0)
sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
recvfrom$inet(r4, &(0x7f0000000000)=""/8, 0xfffffffffffffd0b, 0x400123eb, 0x0, 0x1154103478d401ea)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000007540), 0xffffffffffffffff)
socket$inet(0x10, 0x3, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@newqdisc={0xf0, 0x24, 0xe0b, 0x4070bd2b, 0x25dfdbfb, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc0, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xd, 0x1, 0x0, 0x10], 0x1, [0x5, 0x4, 0x2, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x5c, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xc}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1000}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x5}]}, {0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x793c}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x80000000}]}}]}, 0xf0}, 0x1, 0x0, 0x0, 0xc850}, 0x0)
r7 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$sock(r7, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
r8 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r8, 0x8918, 0x0)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)

1.225952ms ago: executing program 1 (id=190):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {0x0, 0x0, 0x1be}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0)

0s ago: executing program 2 (id=191):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x23)
socket$pppl2tp(0x18, 0x1, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10)
pselect6(0x40, &(0x7f0000000000)={0x400, 0x3, 0x630, 0x243, 0x2, 0x2, 0x9, 0xfb33}, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f00000003c0)={&(0x7f0000000100)={[0x6]}, 0x8})

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:7818' (ED25519) to the list of known hosts.
syzkaller login: [   55.921076][ T5837] cgroup: Unknown subsys name 'net'
[   56.077992][ T5837] cgroup: Unknown subsys name 'cpuset'
[   56.081943][ T5837] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   57.439171][ T5837] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   60.919551][ T5854] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   60.922851][ T5854] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   60.925826][ T5854] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   60.929122][ T5854] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   60.932118][ T5854] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   61.029555][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   61.033081][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   61.035858][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   61.039601][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   61.042772][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   61.072672][ T5854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   61.076490][ T5854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   61.078985][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   61.082457][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   61.085677][ T5854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   61.144217][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   61.262740][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.266677][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.269761][ T5851] bridge_slave_0: entered allmulticast mode
[   61.273260][ T5851] bridge_slave_0: entered promiscuous mode
[   61.282290][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.284906][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.287926][ T5851] bridge_slave_1: entered allmulticast mode
[   61.291159][ T5851] bridge_slave_1: entered promiscuous mode
[   61.326491][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.331857][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.369782][ T5851] team0: Port device team_slave_0 added
[   61.386427][ T5851] team0: Port device team_slave_1 added
[   61.463872][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.467009][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.476683][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.488249][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.490922][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.499442][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.512799][ T5859] chnl_net:caif_netlink_parms(): no params data found
[   61.553373][ T5851] hsr_slave_0: entered promiscuous mode
[   61.556505][ T5851] hsr_slave_1: entered promiscuous mode
[   61.559792][ T5857] chnl_net:caif_netlink_parms(): no params data found
[   61.720192][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.723038][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.725700][ T5859] bridge_slave_0: entered allmulticast mode
[   61.729033][ T5859] bridge_slave_0: entered promiscuous mode
[   61.737539][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.739791][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.742051][ T5857] bridge_slave_0: entered allmulticast mode
[   61.746932][ T5857] bridge_slave_0: entered promiscuous mode
[   61.750455][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.752678][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.755705][ T5857] bridge_slave_1: entered allmulticast mode
[   61.758975][ T5857] bridge_slave_1: entered promiscuous mode
[   61.761675][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.764303][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.767697][ T5859] bridge_slave_1: entered allmulticast mode
[   61.770316][ T5859] bridge_slave_1: entered promiscuous mode
[   61.844778][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.851180][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.858246][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.868128][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.923773][ T5859] team0: Port device team_slave_0 added
[   61.928332][ T5859] team0: Port device team_slave_1 added
[   61.931845][ T5857] team0: Port device team_slave_0 added
[   61.950789][ T5857] team0: Port device team_slave_1 added
[   61.953635][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.955895][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.967053][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.993589][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.996812][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.006069][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.026009][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.028537][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.037476][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.051447][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.054263][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.065981][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.151954][ T5859] hsr_slave_0: entered promiscuous mode
[   62.155634][ T5859] hsr_slave_1: entered promiscuous mode
[   62.158446][ T5859] debugfs: 'hsr0' already exists in 'hsr'
[   62.160760][ T5859] Cannot create hsr debugfs directory
[   62.186558][ T5857] hsr_slave_0: entered promiscuous mode
[   62.189666][ T5857] hsr_slave_1: entered promiscuous mode
[   62.192513][ T5857] debugfs: 'hsr0' already exists in 'hsr'
[   62.194801][ T5857] Cannot create hsr debugfs directory
[   62.238481][ T5851] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   62.247958][ T5851] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   62.280266][ T5851] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   62.286882][ T5851] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   62.512549][ T5857] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   62.523330][ T5857] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   62.530001][ T5857] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   62.540430][ T5857] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   62.609013][ T5859] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   62.622460][ T5859] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   62.630759][ T5859] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   62.637902][ T5859] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   62.650907][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.703080][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   62.733798][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.737082][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.742619][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.745563][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.787708][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.837304][ T5857] 8021q: adding VLAN 0 to HW filter on device team0
[   62.854258][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.857619][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.878753][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.881634][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.909706][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.945994][ T5854] Bluetooth: hci0: command tx timeout
[   62.952213][ T5859] 8021q: adding VLAN 0 to HW filter on device team0
[   62.972745][  T133] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.975923][  T133] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.984769][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.987839][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.024235][ T5859] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   63.033277][ T5859] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   63.082841][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.107026][ T5854] Bluetooth: hci2: command tx timeout
[   63.109607][ T5854] Bluetooth: hci1: command tx timeout
[   63.144274][ T5851] veth0_vlan: entered promiscuous mode
[   63.159089][ T5851] veth1_vlan: entered promiscuous mode
[   63.182877][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.191042][ T5851] veth0_macvtap: entered promiscuous mode
[   63.203992][ T5851] veth1_macvtap: entered promiscuous mode
[   63.233740][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.242355][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.255162][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.269689][ T5693] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.275897][ T5857] veth0_vlan: entered promiscuous mode
[   63.281079][ T5693] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.293890][ T5693] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.298995][ T5693] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.310923][ T5857] veth1_vlan: entered promiscuous mode
[   63.377117][ T5857] veth0_macvtap: entered promiscuous mode
[   63.404783][ T5857] veth1_macvtap: entered promiscuous mode
[   63.408828][ T5859] veth0_vlan: entered promiscuous mode
[   63.424898][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.428618][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.439516][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.442637][ T5859] veth1_vlan: entered promiscuous mode
[   63.462956][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.493460][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.497404][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.497760][ T5880] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.527064][ T5880] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.538622][ T5880] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.549176][ T5859] veth0_macvtap: entered promiscuous mode
[   63.552661][ T5851] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   63.554420][ T5880] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.576062][ T5859] veth1_macvtap: entered promiscuous mode
[   63.661564][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.683155][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.693824][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.704518][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.718081][ T5693] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.757631][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.785873][ T5693] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.789730][ T5693] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.793991][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.798478][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.964236][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.980549][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.012100][   T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.016326][   T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.063275][ T5928] tipc: Started in network mode
[   64.069200][ T5928] tipc: Node identity 7e171cdf6185, cluster identity 4711
[   64.072671][ T5928] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   64.089417][ T5928] syzkaller0: entered promiscuous mode
[   64.092005][ T5928] syzkaller0: entered allmulticast mode
[   64.152550][ T5928] tipc: Resetting bearer <eth:syzkaller0>
[   64.168902][ T5927] tipc: Resetting bearer <eth:syzkaller0>
[   64.203486][ T5927] tipc: Disabling bearer <eth:syzkaller0>
[   64.350988][ T5942] syzkaller0: entered promiscuous mode
[   64.353873][ T5942] syzkaller0: entered allmulticast mode
[   64.359760][ T5942] tipc: Started in network mode
[   64.361939][ T5942] tipc: Node identity 9ae44791de9a, cluster identity 4711
[   64.368859][ T5942] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   64.373030][ T5941] tipc: Resetting bearer <eth:syzkaller0>
[   64.404703][ T5941] tipc: Disabling bearer <eth:syzkaller0>
[   64.523100][ T5955] syz.0.15 (5955) used greatest stack depth: 18200 bytes left
[   64.602250][ T5958] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17'.
[   64.874184][ T5975] netlink: 32 bytes leftover after parsing attributes in process `syz.0.24'.
[   64.883606][ T5975] netlink: 32 bytes leftover after parsing attributes in process `syz.0.24'.
[   64.919139][ T5978] netlink: 72 bytes leftover after parsing attributes in process `syz.2.26'.
[   65.027071][   T55] Bluetooth: hci0: command tx timeout
[   65.051059][ T5985] netlink: 9 bytes leftover after parsing attributes in process `syz.1.29'.
[   65.053873][ T5985] .70: renamed from hsr0 (while UP)
[   65.083094][ T5985] .70: entered allmulticast mode
[   65.084789][ T5985] hsr_slave_0: entered allmulticast mode
[   65.090206][ T5985] hsr_slave_1: entered allmulticast mode
[   65.093881][ T5985] A link change request failed with some changes committed already. Interface .70 may have been left with an inconsistent configuration, please check.
[   65.186183][   T55] Bluetooth: hci1: command tx timeout
[   65.188153][ T5854] Bluetooth: hci2: command tx timeout
[   65.288168][ T5997] netlink: 'syz.2.35': attribute type 2 has an invalid length.
[   65.461195][ T6011] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   65.472993][ T6011] syzkaller0: entered promiscuous mode
[   65.474899][ T6011] syzkaller0: entered allmulticast mode
[   65.520856][ T6011] tipc: Resetting bearer <eth:syzkaller0>
[   65.556830][ T6010] tipc: Resetting bearer <eth:syzkaller0>
[   65.564176][ T6010] tipc: Disabling bearer <eth:syzkaller0>
[   65.834089][ T6036] team0: No ports can be present during mode change
[   66.096102][ T6054] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   66.177755][ T6060] netlink: 4 bytes leftover after parsing attributes in process `syz.1.66'.
[   66.196391][ T6064] netlink: 'syz.0.68': attribute type 1 has an invalid length.
[   66.199456][ T6064] netlink: 228 bytes leftover after parsing attributes in process `syz.0.68'.
[   66.208120][ T6060] bond_slave_0: entered promiscuous mode
[   66.209958][ T6060] bond_slave_1: entered promiscuous mode
[   66.214441][ T6060] macvlan2: entered promiscuous mode
[   66.224455][ T6060] bond0: entered promiscuous mode
[   66.240160][ T6060] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   66.338964][ T6078] netlink: 'syz.1.74': attribute type 21 has an invalid length.
[   66.344193][ T6078] netlink: 128 bytes leftover after parsing attributes in process `syz.1.74'.
[   66.358282][ T6078] netlink: 3 bytes leftover after parsing attributes in process `syz.1.74'.
[   66.537783][ T6087] netlink: 4 bytes leftover after parsing attributes in process `syz.0.79'.
[   66.713418][ T6102] netlink: 'syz.2.85': attribute type 10 has an invalid length.
[   66.749540][ T6102] team0: Device ipvlan1 failed to register rx_handler
[   66.801077][ T6107] ieee802154 phy0 wpan0: encryption failed: -22
[   66.822877][ T6108] syz.1.86 uses obsolete (PF_INET,SOCK_PACKET)
[   67.115393][ T5854] Bluetooth: hci0: command tx timeout
[   67.265761][ T5854] Bluetooth: hci2: command tx timeout
[   67.267043][   T55] Bluetooth: hci1: command tx timeout
[   68.001114][ T6192] netlink: 'syz.2.124': attribute type 83 has an invalid length.
[   68.173654][ T6210] block nbd0: not configured, cannot reconfigure
[   68.578267][ T6240] Zero length message leads to an empty skb
[   68.805498][ T6245] "syz.0.151" (6245) uses obsolete ecb(arc4) skcipher
[   69.010610][ T6265] tipc: Started in network mode
[   69.012621][ T6265] tipc: Node identity 9af690c0aaae, cluster identity 4711
[   69.019674][ T6265] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   69.023254][ T6265] syzkaller0: entered promiscuous mode
[   69.027695][ T6265] syzkaller0: entered allmulticast mode
[   69.043423][ T6265] tipc: Resetting bearer <eth:syzkaller0>
[   69.048480][ T6264] tipc: Resetting bearer <eth:syzkaller0>
[   69.060780][ T6264] tipc: Disabling bearer <eth:syzkaller0>
[   69.113041][ T6269] ieee802154 phy0 wpan0: encryption failed: -22
[   69.186121][   T55] Bluetooth: hci0: command tx timeout
[   69.273621][ T6280] sctp: [Deprecated]: syz.0.164 (pid 6280) Use of int in maxseg socket option.
[   69.273621][ T6280] Use struct sctp_assoc_value instead
[   69.334043][ T6282] netlink: 'syz.0.166': attribute type 1 has an invalid length.
[   69.349904][   T55] Bluetooth: hci1: command tx timeout
[   69.349922][ T5854] Bluetooth: hci2: command tx timeout
[   69.368918][ T6282] 8021q: adding VLAN 0 to HW filter on device bond1
[   69.392072][ T6282] 8021q: adding VLAN 0 to HW filter on device bond1
[   69.395478][ T6282] bond1: (slave vcan1): The slave device specified does not support setting the MAC address
[   69.401529][ T6282] bond1: (slave vcan1): Error -95 calling set_mac_address
[   69.444199][ T6288] gretap1: entered promiscuous mode
[   69.453156][ T6288] bond1: (slave gretap1): making interface the new active one
[   69.462314][ T6288] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   69.501043][ T6282] macvlan2: entered promiscuous mode
[   69.504681][ T6282] macvlan2: entered allmulticast mode
[   69.515862][ T6282] bond1: entered promiscuous mode
[   69.518580][ T6282] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   69.529057][ T6282] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1
[   69.535797][ T6282] bond1: left promiscuous mode
[   69.623351][ T6294] __nla_validate_parse: 10 callbacks suppressed
[   69.623365][ T6294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.170'.
[   69.827766][ T6303] netlink: 'syz.0.175': attribute type 178 has an invalid length.
[   69.888362][ T6307] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   69.977554][ T6304] netlink: 68 bytes leftover after parsing attributes in process `syz.2.174'.
[   70.204150][ T6328] netlink: 'syz.0.186': attribute type 11 has an invalid length.
[   71.207142][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.209743][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   81.457071][   T47] cfg80211: failed to load regulatory.db
[  132.635476][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.637878][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  185.995146][ T5854] Bluetooth: hci0: command 0x0406 tx timeout
[  185.997918][ T5854] Bluetooth: hci1: command 0x0406 tx timeout
[  186.000360][ T5854] Bluetooth: hci2: command 0x0406 tx timeout
[  194.106218][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  194.108271][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  255.508649][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  255.511235][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  316.949946][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  316.952425][ T1364] ieee802154 phy1 wpan1: encryption failed: -22

VM DIAGNOSIS:
03:20:21  Registers:
info registers vcpu 0

CPU#0
RAX=00007ffffffff001 RBX=dffffc0000000001 RCX=ffffffff84c81619 RDX=0000000000000001
RSI=00000000000000c0 RDI=ffffc900033ffd20 RBP=ffffc900033ffee0 RSP=ffffc900033ffc68
R8 =ffffc900033ffddf R9 =1ffff9200067ffbb R10=dffffc0000000000 R11=fffff5200067ffa4
R12=fffff5200067ffbc R13=1ffff9200067fffe R14=fffff5200067ffbc R15=1ffff9200067ffa4
RIP=ffffffff822301a0 RFL=00000a07 [-O---PC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f28131c4800 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffe8adc9000 CR3=0000000027e1c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=ffffc9000388fef0 RCX=23c6874b72fe3901 RDX=0000000000000001
RSI=ffffffff8be33660 RDI=ffffffff8be33620 RBP=ffffc9000388ff48 RSP=ffffc9000388fee0
R8 =0000000000000000 R9 =ffffffff820b7d00 R10=dffffc0000000000 R11=fffffbfff1f46f27
R12=0000000000000002 R13=000000000000000f R14=ffffc9000388ff58 R15=ffff8881066fb980
RIP=ffffffff813391e1 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555572651500 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055e144c93e58 CR3=0000000028a64000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f4fc7412e53
XMM06=0000000000000000 00007f4fc7412e4d XMM07=0000000000000000 00007f4fc7412e61
XMM08=0000000000000000 00007f4fc7412ee7 XMM09=0000000000000000 00007f4fc7412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
