last executing test programs:

1.25011296s ago: executing program 1 (id=291):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="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"/3222], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffec2}, 0x48)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x208441, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'pim6reg0\x00', 0x2})
ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0x3)
ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000140)=""/194)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x2, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000)
setsockopt$sock_int(r2, 0x1, 0x23, &(0x7f0000000280)=0x18, 0x4)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r4, {0x3, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x50, 0x2, [@TCA_FLOW_POLICE={0x4c, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x80000000, 0x6, 0x7ff, 0x3eb, 0x0, {0x7, 0x0, 0x22c6, 0x400, 0x6}, {0x3, 0x1, 0x1000, 0xa, 0x800, 0x80000000}, 0x65, 0x5, 0x8001}}]}]}}, @TCA_RATE={0x6, 0x5, {0xff}}]}, 0x88}}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0xffffffff, 0x1}]}]}}, &(0x7f0000000500)=""/16, 0x46, 0x10, 0x1}, 0x1f)
mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_udp_encap(r6, 0x11, 0x68, &(0x7f0000000040)=0x2, 0x4)
setsockopt$inet_udp_encap(r6, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x8001000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0x0, 0x11, 0x148, 0x0, 0x0, 0x1a8, 0x2a8, 0x2a8, 0x1a8, 0x2a8, 0x3, 0x0, {[{{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x1e}, 0xffffffff, 0x0, 'ip_vti0\x00', 'ip6_vti0\x00', {}, {0xff}, 0x73, 0x3, 0x20}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x2, 0x5, 0x9, 0x3, 0x1]}, {0xffffffffffffffff, [0x0, 0x0, 0x0, 0x6]}}}}, {{@ip={@multicast1, @private=0xa010102, 0xffffffff, 0xff, 'veth1_to_batadv\x00', 'macsec0\x00', {0xff}, {}, 0x6, 0x2, 0x8}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0)
setsockopt$inet_udp_encap(r6, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r8, 0x0)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r8, 0x1000)

955.504745ms ago: executing program 1 (id=297):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfb, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in=@broadcast, {0x0, 0x0, 0x0, 0x8, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0x2, 0x1, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0x2, 0x4e22, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x2000)

581.312551ms ago: executing program 2 (id=303):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="034886dd49032800030020000c00600000000404730081e949b93897bc3b0000070000007d01ff020000000000000000000000000001"], 0xfdef)

408.370348ms ago: executing program 1 (id=306):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x6c0452c9}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x0)

391.046232ms ago: executing program 2 (id=307):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@fwd={0x4}]}, {0x0, [0x30, 0x30, 0x2e, 0x61, 0x5f]}}, 0x0, 0x2b, 0x0, 0x1}, 0x28)

327.235721ms ago: executing program 1 (id=309):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="bc010000190001000000000001000000fe8000000000000000000000000000aaac1414bb00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000009da600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004010500ac1414aa000000000000000000000000000000003300000000000000ffffffff0000000000000000000000000000000000000000000000000000000040000000fe8000000000000000000000000000bb000000003c"], 0x1bc}, 0x1, 0x0, 0x0, 0x1}, 0x40)

252.373626ms ago: executing program 0 (id=310):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000010000004000000040"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r0, &(0x7f00000014c0), 0x0}, 0x20)

251.997524ms ago: executing program 1 (id=311):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000085000000d000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x14, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e88a8", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

251.862783ms ago: executing program 2 (id=312):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv6_newnexthop={0x2c, 0x68, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_FDB={0x4}, @NHA_OIF={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008010}, 0x0)

191.094545ms ago: executing program 0 (id=313):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@ipv4_delroute={0x30, 0x19, 0x1, 0x70bd2d, 0x25dfdbf8, {0x2, 0x20, 0x20, 0x0, 0xff, 0x2, 0xff, 0x2, 0x1a00}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x28, 0x10}}, @RTA_DST={0x8, 0x1, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x44050}, 0x1000)

190.850897ms ago: executing program 0 (id=314):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x80}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x9, &(0x7f0000000040)=""/9, 0x41100, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94)

190.634769ms ago: executing program 2 (id=315):
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time\x00')
syz_open_procfs$namespace(0x0, &(0x7f0000000000))

115.424204ms ago: executing program 1 (id=316):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x7, {{0xa, 0x4e20, 0xe0, @mcast2, 0x138e}}, {{0xa, 0x4e21, 0x9, @private2, 0x4}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000002d00)={0x9, {{0xa, 0x4e23, 0x1000, @mcast2, 0x3}}, {{0xa, 0x4e22, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0xb0}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f00000005c0)={0x8, {{0xa, 0x4e24, 0x5, @mcast2, 0x6d00}}, {{0xa, 0x4620, 0xfffffff8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000}}}, 0x108)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
getsockopt$sock_buf(r5, 0x1, 0x39, 0xffffffffffffffff, &(0x7f0000000100))
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18)
ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff)
getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000400)={<r9=>0x0, @local, @multicast2}, &(0x7f0000000440)=0xc)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000480)={'batadv0\x00', <r10=>0x0})
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xd871021}, 0xc, &(0x7f00000004c0)={&(0x7f0000000700)={0xd0, r8, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x50, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xff}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x37, 0x800000, 0x8, 0x9, 0x8000})
write$bt_hci(r2, &(0x7f0000000080)=ANY=[], 0x6)
clock_gettime(0x0, &(0x7f0000000200))
socket$inet_sctp(0x2, 0x1, 0x84)
ppoll(&(0x7f00000001c0)=[{r1, 0x200}], 0x1, 0x0, 0x0, 0x0)
write$rfkill(r1, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8)
write$rfkill(r1, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8)

115.182725ms ago: executing program 0 (id=317):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
unshare(0x26020480)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {0x2}}, 0x18)

49.281415ms ago: executing program 2 (id=318):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x5, 0x4, 0x1ff, 0x2, 0x8001, 0x3}}, {0x4}}, {{0x1c, 0x1, {0x81, 0x1, 0x0, 0x0, 0x1, 0x8, 0x9}}, {0x4}}]}]}, 0x74}}, 0x40010)

49.082063ms ago: executing program 0 (id=319):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)

293.874µs ago: executing program 0 (id=320):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)

0s ago: executing program 2 (id=321):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x1c, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="700000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0580040000000000500012800b00010067656e657665000040000280050008000000000005000d000100000005000d000200000008000b4000001e82060005004e210000140007"], 0x70}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:16496' (ED25519) to the list of known hosts.
syzkaller login: [   56.510826][ T5776] cgroup: Unknown subsys name 'net'
[   56.582013][ T5776] cgroup: Unknown subsys name 'cpuset'
[   56.586396][ T5776] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.351219][ T5776] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   68.101459][ T5235] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   68.105960][ T5235] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   68.110972][ T5235] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   68.117506][ T5235] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   68.127378][ T5235] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   68.260905][ T5881] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   70.156499][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   70.161494][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   70.173270][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   70.177547][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   70.181041][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   70.205931][ T5235] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   70.211992][ T5235] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   70.217881][ T5920] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   70.222972][ T5920] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   70.229174][ T5921] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   70.231993][ T5921] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   70.257569][ T5921] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   70.275419][ T5920] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   70.279497][ T5920] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   70.287647][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   70.659964][ T5915] chnl_net:caif_netlink_parms(): no params data found
[   70.700353][ T5917] chnl_net:caif_netlink_parms(): no params data found
[   70.777187][ T5918] chnl_net:caif_netlink_parms(): no params data found
[   70.849261][ T5915] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.852074][ T5915] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.854888][ T5915] bridge_slave_0: entered allmulticast mode
[   70.859829][ T5915] bridge_slave_0: entered promiscuous mode
[   70.898896][ T5917] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.901777][ T5917] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.904302][ T5917] bridge_slave_0: entered allmulticast mode
[   70.907102][ T5917] bridge_slave_0: entered promiscuous mode
[   70.910789][ T5915] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.913019][ T5915] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.915328][ T5915] bridge_slave_1: entered allmulticast mode
[   70.918945][ T5915] bridge_slave_1: entered promiscuous mode
[   70.932097][ T5917] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.934750][ T5917] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.937943][ T5917] bridge_slave_1: entered allmulticast mode
[   70.941454][ T5917] bridge_slave_1: entered promiscuous mode
[   71.022927][ T5915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.026353][ T5918] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.029776][ T5918] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.032568][ T5918] bridge_slave_0: entered allmulticast mode
[   71.036331][ T5918] bridge_slave_0: entered promiscuous mode
[   71.043312][ T5917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.049051][ T5915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.062148][ T5918] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.064788][ T5918] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.068311][ T5918] bridge_slave_1: entered allmulticast mode
[   71.072396][ T5918] bridge_slave_1: entered promiscuous mode
[   71.077797][ T5917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.145656][ T5917] team0: Port device team_slave_0 added
[   71.150052][ T5915] team0: Port device team_slave_0 added
[   71.154842][ T5918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.161082][ T5917] team0: Port device team_slave_1 added
[   71.164624][ T5915] team0: Port device team_slave_1 added
[   71.169890][ T5918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.228788][ T5915] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.231235][ T5915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   71.240288][ T5915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.245593][ T5917] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.248257][ T5917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   71.257626][ T5917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.277423][ T5918] team0: Port device team_slave_0 added
[   71.280260][ T5915] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.282750][ T5915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   71.292875][ T5915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.298772][ T5917] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.301240][ T5917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   71.310331][ T5917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.315749][ T5918] team0: Port device team_slave_1 added
[   71.383026][ T5918] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.385776][ T5918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   71.395807][ T5918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.396268][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.400955][ T5918] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.404369][ T5918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   71.407104][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.413016][ T5918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.422996][ T5915] hsr_slave_0: entered promiscuous mode
[   71.425602][ T5915] hsr_slave_1: entered promiscuous mode
[   71.508037][ T5917] hsr_slave_0: entered promiscuous mode
[   71.510512][ T5917] hsr_slave_1: entered promiscuous mode
[   71.512717][ T5917] debugfs: 'hsr0' already exists in 'hsr'
[   71.514922][ T5917] Cannot create hsr debugfs directory
[   71.555115][ T5918] hsr_slave_0: entered promiscuous mode
[   71.558571][ T5918] hsr_slave_1: entered promiscuous mode
[   71.561620][ T5918] debugfs: 'hsr0' already exists in 'hsr'
[   71.563875][ T5918] Cannot create hsr debugfs directory
[   71.805380][ T5915] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   71.815062][ T5915] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   71.825772][ T5915] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   71.843349][ T5915] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   71.888086][ T5917] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   71.903625][ T5917] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   71.912914][ T5917] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   71.931159][ T5917] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   71.983693][ T5918] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   71.990633][ T5918] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   72.008474][ T5918] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   72.019281][ T5918] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   72.124806][ T5915] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.134063][ T5917] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.168543][ T5917] 8021q: adding VLAN 0 to HW filter on device team0
[   72.180628][ T5915] 8021q: adding VLAN 0 to HW filter on device team0
[   72.186159][  T999] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.188895][  T999] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.205885][  T999] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.208679][  T999] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.213573][  T999] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.216382][  T999] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.240832][  T999] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.243538][  T999] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.258284][   T55] Bluetooth: hci0: command tx timeout
[   72.276446][ T5918] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.325472][ T5918] 8021q: adding VLAN 0 to HW filter on device team0
[   72.337883][ T5235] Bluetooth: hci1: command tx timeout
[   72.339949][   T55] Bluetooth: hci2: command tx timeout
[   72.356738][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.359467][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.374746][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.377056][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.580515][ T5915] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.613615][ T5917] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.661756][ T5915] veth0_vlan: entered promiscuous mode
[   72.669818][ T5918] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.696285][ T5915] veth1_vlan: entered promiscuous mode
[   72.732641][ T5917] veth0_vlan: entered promiscuous mode
[   72.751629][ T5917] veth1_vlan: entered promiscuous mode
[   72.769337][ T5915] veth0_macvtap: entered promiscuous mode
[   72.780922][ T5918] veth0_vlan: entered promiscuous mode
[   72.789089][ T5918] veth1_vlan: entered promiscuous mode
[   72.793794][ T5915] veth1_macvtap: entered promiscuous mode
[   72.829369][ T5915] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.845770][ T5915] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.853163][ T5917] veth0_macvtap: entered promiscuous mode
[   72.860432][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.872465][ T5917] veth1_macvtap: entered promiscuous mode
[   72.876838][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.881537][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.885560][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.928342][ T5917] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.936386][ T5918] veth0_macvtap: entered promiscuous mode
[   72.946922][ T5917] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.966663][ T5918] veth1_macvtap: entered promiscuous mode
[   72.980812][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.002241][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.036073][ T5918] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.044193][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.048531][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.079089][ T5918] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.101886][ T5884] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.105419][ T5884] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.110510][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.112317][ T5884] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.116904][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.133490][ T5884] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.162801][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.165773][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.223119][   T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.226194][   T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.254265][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.260973][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.321409][   T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.324280][   T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.371516][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.374535][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.591592][ T5992] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   73.931069][ T6012] netlink: 16 bytes leftover after parsing attributes in process `syz.1.40'.
[   73.976662][ T6014] netlink: zone id is out of range
[   73.984805][ T6014] netlink: zone id is out of range
[   74.010647][ T6014] netlink: zone id is out of range
[   74.012662][ T6014] netlink: zone id is out of range
[   74.014539][ T6014] netlink: zone id is out of range
[   74.016836][ T6014] netlink: zone id is out of range
[   74.031141][ T6014] netlink: zone id is out of range
[   74.038767][ T6014] netlink: zone id is out of range
[   74.046643][ T6014] netlink: zone id is out of range
[   74.055084][ T6014] netlink: zone id is out of range
[   74.063825][ T6017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.43'.
[   74.144392][    C0] vcan0: j1939_tp_txtimer: 0xffff888037f32c00: tx aborted with unknown reason: -2
[   74.149570][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880275d3800: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250)
[   74.158413][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888037f32c00: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250)
[   74.175048][ T6010] netlink: 4 bytes leftover after parsing attributes in process `syz.2.41'.
[   74.338912][   T55] Bluetooth: hci0: command tx timeout
[   74.412849][ T6036] netlink: 468 bytes leftover after parsing attributes in process `syz.1.49'.
[   74.417610][ T5235] Bluetooth: hci1: command tx timeout
[   74.419729][   T55] Bluetooth: hci2: command tx timeout
[   74.890623][ T6071] batadv_slave_0: entered promiscuous mode
[   74.895890][ T6071] batadv_slave_0: left promiscuous mode
[   75.088976][ T6080] syz.1.62 uses obsolete (PF_INET,SOCK_PACKET)
[   75.092099][ T6080] syzkaller1: entered promiscuous mode
[   75.094305][ T6080] syzkaller1: entered allmulticast mode
[   75.356014][ T6089] netlink: 'syz.0.66': attribute type 1 has an invalid length.
[   75.359637][ T6089] netlink: 224 bytes leftover after parsing attributes in process `syz.0.66'.
[   76.132141][ T6126] netlink: 12 bytes leftover after parsing attributes in process `syz.2.83'.
[   76.191888][ T6126] vlan2: entered allmulticast mode
[   76.194063][ T6126] bridge0: entered allmulticast mode
[   76.252901][ T6126] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[   76.262786][ T6126] Zero length message leads to an empty skb
[   76.419842][   T55] Bluetooth: hci0: command tx timeout
[   76.449397][ T6141] netlink: 146780 bytes leftover after parsing attributes in process `syz.0.89'.
[   76.475253][ T6143] warning: `syz.2.90' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   76.498884][   T55] Bluetooth: hci2: command tx timeout
[   76.501191][   T55] Bluetooth: hci1: command tx timeout
[   76.552364][ T6145] netlink: 40 bytes leftover after parsing attributes in process `syz.0.91'.
[   77.583274][ T6183] netlink: 'syz.1.110': attribute type 1 has an invalid length.
[   77.792707][ T6192] netlink: 'syz.1.113': attribute type 1 has an invalid length.
[   77.795745][ T6192] netlink: 4 bytes leftover after parsing attributes in process `syz.1.113'.
[   77.892797][ T6198] netlink: 'syz.1.116': attribute type 6 has an invalid length.
[   78.219326][ T6220] netlink: 'syz.0.125': attribute type 21 has an invalid length.
[   78.222176][ T6220] netlink: 156 bytes leftover after parsing attributes in process `syz.0.125'.
[   78.498847][   T55] Bluetooth: hci0: command tx timeout
[   78.530298][ T6234] xt_l2tp: missing protocol rule (udp|l2tpip)
[   78.580193][   T55] Bluetooth: hci1: command tx timeout
[   78.580218][ T5235] Bluetooth: hci2: command tx timeout
[   79.502243][ T6279] net_ratelimit: 57 callbacks suppressed
[   79.502261][ T6279] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   79.834430][ T6293] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   80.116885][ T6305] __nla_validate_parse: 4 callbacks suppressed
[   80.116903][ T6305] netlink: 16 bytes leftover after parsing attributes in process `syz.0.161'.
[   80.134833][ T6305] team0: No ports can be present during mode change
[   80.139260][ T6305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.161'.
[   80.143584][ T6305] vlan0: entered promiscuous mode
[   80.153041][ T6305] tipc: Started in network mode
[   80.167232][ T6305] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[   80.170297][ T6305] tipc: Enabled bearer <eth:team0>, priority 0
[   80.481155][ T6325] netlink: 12 bytes leftover after parsing attributes in process `syz.1.169'.
[   80.640043][ T6334] netlink: 8 bytes leftover after parsing attributes in process `syz.2.173'.
[   80.645105][ T6334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.173'.
[   80.658080][ T5235] Bluetooth: hci2: command tx timeout
[   81.169901][   T47] tipc: Node number set to 11578026
[   81.466316][ T6379] Driver unsupported XDP return value 0 on prog  (id 31) dev N/A, expect packet loss!
[   81.573797][ T6389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.199'.
[   81.590253][ T6389] netlink: 4 bytes leftover after parsing attributes in process `syz.1.199'.
[   81.594579][ T6389] netlink: 'syz.1.199': attribute type 1 has an invalid length.
[   81.620147][ T6389] netlink: 10 bytes leftover after parsing attributes in process `syz.1.199'.
[   81.657867][ T6389] nbd: socks must be embedded in a SOCK_ITEM attr
[   81.667440][ T6389] block nbd0: shutting down sockets
[   81.928435][ T6405] IPVS: Scheduler module ip_vs_sip not found
[   81.932373][ T6405] IPVS: length: 141 != 8
[   82.066633][ T6413] netlink: 8 bytes leftover after parsing attributes in process `syz.2.209'.
[   82.165693][ T6417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.211'.
[   82.534646][ T6431] netlink: 'syz.2.218': attribute type 13 has an invalid length.
[   82.540316][ T6431] netlink: 'syz.2.218': attribute type 17 has an invalid length.
[   82.636671][ T6431] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   82.732157][ T6431] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   82.790000][ T6431] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   84.214023][ T6504] syzkaller1: entered promiscuous mode
[   84.216183][ T6504] syzkaller1: entered allmulticast mode
[   84.519964][ T6515] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   84.746715][ T6529] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048)
[   84.881487][ T6533] sctp: [Deprecated]: syz.2.260 (pid 6533) Use of struct sctp_assoc_value in delayed_ack socket option.
[   84.881487][ T6533] Use struct sctp_sack_info instead
[   84.981741][ T6541] netlink: 'syz.0.263': attribute type 2 has an invalid length.
[   85.212629][ T6552] __nla_validate_parse: 2 callbacks suppressed
[   85.212645][ T6552] netlink: 12 bytes leftover after parsing attributes in process `syz.0.268'.
[   85.626433][ T6523] syz.1.255 (6523) used greatest stack depth: 19256 bytes left
[   85.664542][ T6574] netlink: 4 bytes leftover after parsing attributes in process `syz.1.276'.
[   85.680608][ T6572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.275'.
[   86.746284][  T791] cfg80211: failed to load regulatory.db
[   86.777812][ T6639] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[   86.962847][ T6651] netlink: 76 bytes leftover after parsing attributes in process `syz.0.304'.
[   86.966736][ T6651] nbd: illegal input index 65508
[   87.524813][ T6689] Bluetooth: MGMT ver 1.23
[   87.665143][ T6686] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   88.009212][ T6706] sctp: [Deprecated]: syz.2.324 (pid 6706) Use of int in max_burst socket option.
[   88.009212][ T6706] Use struct sctp_assoc_value instead
[   88.017974][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  106.577474][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  132.822480][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  144.977292][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  194.263987][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  196.347033][ T5235] Bluetooth: hci2: command 0x0406 tx timeout
[  196.349256][   T55] Bluetooth: hci0: command 0x0406 tx timeout
[  196.352080][   T55] Bluetooth: hci1: command 0x0406 tx timeout
[  224.977284][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  255.700707][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  317.140336][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  378.582032][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  388.817471][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog

VM DIAGNOSIS:
13:34:45  Registers:
info registers vcpu 0

CPU#0
RAX=1ffffffff1b7c3a2 RBX=0000000000000000 RCX=34c4cfdc173fd300 RDX=0000000000000000
RSI=ffffffff8be33ee0 RDI=ffffffff8be33ea0 RBP=ffffffff89ad9808 RSP=ffffc9000470f7a0
R8 =0000000000000001 R9 =0000000000000000 R10=dffffc0000000000 R11=fffffbfff1f471e7
R12=0000000000000002 R13=ffffffff8fa43608 R14=ffffffff8dbe1d10 R15=dffffc0000000000
RIP=ffffffff81a66034 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8613000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000559b307f9680 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000000ff XMM01=0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=82659a61a9ad2800 RBX=ffffffff819683f8 RCX=82659a61a9ad2800 RDX=0000000000000001
RSI=ffffffff8d9ba1da RDI=ffffffff8be33f00 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa38f30 R13=0000000000000001 R14=0000000000000001 R15=1ffff1102001f000
RIP=ffffffff8b7b03f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c13000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000559b307f8600 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00007f2dfdda7d20
XMM02=ffffff040680030f ffffffffffff0405 XMM03=0008000698032008 000690030fffffff
XMM04=0480040a10000601 02de00080006a003 XMM05=0102a81000048004 0a1000060102de00
XMM06=080006a003000800 0698032008000690 XMM07=030fffffffffffff 040680030fffffff
XMM08=ffffff0405f00300 080005e803000800 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
