last executing test programs:

5m30.501932177s ago: executing program 2 (id=153):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x1b}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0xf, 0x1006, &(0x7f0000000980)=""/4102, 0x40f00, 0x4d}, 0x94)

5m30.501602231s ago: executing program 2 (id=154):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast})
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a2a1}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000, 0x80000001, 0x7}, 0x21}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4895}, 0x2)
r7 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x8, r6, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000024c1020000ff88", 0x14}], 0x1}, 0x4005)
socket$nl_netfilter(0x10, 0x3, 0xc)

5m26.635272639s ago: executing program 1 (id=174):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xfff2}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080)

5m26.108945906s ago: executing program 2 (id=182):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x24, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xdc}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2239}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

5m25.993090762s ago: executing program 2 (id=183):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x10)

5m25.658478574s ago: executing program 0 (id=189):
r0 = socket(0x10, 0x80003, 0x0)
write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14)
setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000040)={@remote}, 0x14)

5m25.574108617s ago: executing program 0 (id=190):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x19, 0x4, 0x4, 0x2}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000800000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000001000000850000003300000095"], &(0x7f00000004c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)

5m25.573860388s ago: executing program 0 (id=191):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)=0x80)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)

5m25.501528329s ago: executing program 0 (id=192):
socketpair(0x15, 0x5, 0x0, &(0x7f0000000080))

5m25.500959219s ago: executing program 0 (id=193):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x48, 0x30, 0x871a15abc695fb3d, 0xffffffff, 0x25dfdc02, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x48050}, 0x20004800)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="6800000042000100000000000000000003010000060000002600010000112233445566778899aabb0200000088a80000000001170000010203040100070800000c00020006002000080000000c"], 0x68}, 0x1, 0x0, 0x0, 0x880}, 0x20000400)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e000000040000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
r5 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r5, &(0x7f0000000800)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @remote, 0x5}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000300)="e2", 0x1}], 0x1}}, {{&(0x7f0000000580)={0xa, 0x4e24, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xb}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000005c0)='j', 0x1}], 0x1}}], 0x2, 0x14)
shutdown(r5, 0x1)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@int=0x9, 0x4)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r4], 0x3c}}, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x8000)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff)
getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f00000003c0), &(0x7f0000000400)=0x4)
sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r9, 0x1, 0x0, 0x0, {0x13}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x3c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x5, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000104000000200000020000003c000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}, {0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x2f, 0x9, 0x70bd2a, 0x0, {0x4}, [@nested={0x6, 0x11, 0x0, 0x1, [@generic="2ff9"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="68000000300005060000000d000000000000010054000100500001000900010067617465"], 0x68}], 0x1}, 0x0)

5m24.890470898s ago: executing program 1 (id=194):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x0, 0x2000a, 0x9})
write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6)

5m24.821385302s ago: executing program 1 (id=195):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="911051000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)

5m24.740959854s ago: executing program 1 (id=196):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2, 0x20}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @restrict={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x4a}, 0x20)

5m24.659116535s ago: executing program 1 (id=197):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
writev(r0, &(0x7f0000000600)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000000300)="1100f8ae", 0x4}, {&(0x7f0000000400)="00050090b4", 0x5}, {&(0x7f0000000340)="237f7c", 0x3}], 0x4)

5m24.131738229s ago: executing program 2 (id=198):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
shutdown(r0, 0x1)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000580)=0x4, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
listen(r0, 0x89)

5m11.851385115s ago: executing program 0 (id=199):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="b8000000190001000000000000000100e00000020000000000000000000000000000000000000000000000000000000000000000000000000a0020000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0800000000000000100000000000000002000000010000000000000000000000ff64d3000000000073b4ffffffffffffffffffffffffffff0000000000000000000000001000000000000000000000200200000000000000fffffffffffffffffeffffff0000000000000003"], 0xb8}}, 0x4004)

5m8.344547348s ago: executing program 1 (id=200):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20)
r1 = socket$igmp(0x2, 0x3, 0x2)
sendmsg$inet(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0)

5m7.377772287s ago: executing program 2 (id=201):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6c69f68dc1cf3e78, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xdc0, 0x4f, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

4m51.48521531s ago: executing program 32 (id=199):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="b8000000190001000000000000000100e00000020000000000000000000000000000000000000000000000000000000000000000000000000a0020000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0800000000000000100000000000000002000000010000000000000000000000ff64d3000000000073b4ffffffffffffffffffffffffffff0000000000000000000000001000000000000000000000200200000000000000fffffffffffffffffeffffff0000000000000003"], 0xb8}}, 0x4004)

4m34.269065207s ago: executing program 33 (id=200):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20)
r1 = socket$igmp(0x2, 0x3, 0x2)
sendmsg$inet(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0)

4m29.112326694s ago: executing program 34 (id=201):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6c69f68dc1cf3e78, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xdc0, 0x4f, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

3m43.279682021s ago: executing program 5 (id=204):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000006a0001002abd7000fedbdf25020000000000000008"], 0x28}, 0x1, 0x0, 0x0, 0x2400c881}, 0x40008d2)

15.847300502s ago: executing program 4 (id=203):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
getsockname(r0, 0x0, &(0x7f00000001c0))

0s ago: executing program 5 (id=204):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000006a0001002abd7000fedbdf25020000000000000008"], 0x28}, 0x1, 0x0, 0x0, 0x2400c881}, 0x40008d2)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:29062' (ED25519) to the list of known hosts.
syzkaller login: [   47.771306][ T5546] cgroup: Unknown subsys name 'net'
[   47.877715][ T5546] cgroup: Unknown subsys name 'cpuset'
[   47.884648][ T5546] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.283532][ T5546] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   60.283529][ T5635] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   60.288458][ T5638] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   60.292460][ T5638] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   60.295423][ T5638] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   60.297103][ T5635] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   60.298618][ T5638] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   60.302096][ T5635] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   60.303004][ T5638] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   60.309861][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   60.318411][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   60.350821][ T4989] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   60.356903][ T4989] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   60.360539][ T4989] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   60.364058][ T4989] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   60.368264][ T4989] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   60.998456][ T5633] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.002147][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.005117][ T5633] bridge_slave_0: entered allmulticast mode
[   61.008808][ T5633] bridge_slave_0: entered promiscuous mode
[   61.014201][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.016713][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.019164][ T5633] bridge_slave_1: entered allmulticast mode
[   61.022896][ T5633] bridge_slave_1: entered promiscuous mode
[   61.091949][ T5633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.109114][ T5633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.112812][ T5641] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.116005][ T5641] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.118939][ T5641] bridge_slave_0: entered allmulticast mode
[   61.122549][ T5641] bridge_slave_0: entered promiscuous mode
[   61.127913][ T5641] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.130322][ T5641] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.133161][ T5641] bridge_slave_1: entered allmulticast mode
[   61.135983][ T5641] bridge_slave_1: entered promiscuous mode
[   61.192803][ T5632] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.195902][ T5632] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.199006][ T5632] bridge_slave_0: entered allmulticast mode
[   61.202625][ T5632] bridge_slave_0: entered promiscuous mode
[   61.208768][ T5633] team0: Port device team_slave_0 added
[   61.214311][ T5641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.218365][ T5632] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.221285][ T5632] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.224374][ T5632] bridge_slave_1: entered allmulticast mode
[   61.228171][ T5632] bridge_slave_1: entered promiscuous mode
[   61.233187][ T5633] team0: Port device team_slave_1 added
[   61.236643][ T5641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.291149][ T5641] team0: Port device team_slave_0 added
[   61.296340][ T5641] team0: Port device team_slave_1 added
[   61.304112][ T5632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.308718][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.311874][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   61.320585][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.335760][ T5632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.339337][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.341608][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   61.350238][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.365465][ T5641] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.368037][ T5641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   61.378081][ T5641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.402645][ T5641] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.405517][ T5641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   61.414283][ T5641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.424429][ T5632] team0: Port device team_slave_0 added
[   61.445783][ T5632] team0: Port device team_slave_1 added
[   61.454512][ T5633] hsr_slave_0: entered promiscuous mode
[   61.457379][ T5633] hsr_slave_1: entered promiscuous mode
[   61.505785][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.508244][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   61.516426][ T5632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.524269][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.526588][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   61.535648][ T5632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.544284][ T5641] hsr_slave_0: entered promiscuous mode
[   61.546849][ T5641] hsr_slave_1: entered promiscuous mode
[   61.549251][ T5641] debugfs: 'hsr0' already exists in 'hsr'
[   61.551273][ T5641] Cannot create hsr debugfs directory
[   61.610900][ T5632] hsr_slave_0: entered promiscuous mode
[   61.614306][ T5632] hsr_slave_1: entered promiscuous mode
[   61.616794][ T5632] debugfs: 'hsr0' already exists in 'hsr'
[   61.618735][ T5632] Cannot create hsr debugfs directory
[   61.806939][ T5633] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   61.820689][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   61.824351][ T5633] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   61.828237][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   61.831164][ T5633] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   61.838812][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   61.844923][ T5633] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   61.851454][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   61.902789][ T5641] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   61.907928][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   61.911128][ T5641] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   61.915403][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   61.924949][ T5641] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   61.934130][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   61.937633][ T5641] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   61.942487][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   62.016811][ T5632] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   62.022719][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   62.031273][ T5632] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   62.039032][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   62.042895][ T5632] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   62.047588][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   62.057616][ T5632] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   62.063055][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   62.114585][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.136682][ T5633] 8021q: adding VLAN 0 to HW filter on device team0
[   62.149475][ T5641] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.158352][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.161483][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.174463][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.176763][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.201430][ T5641] 8021q: adding VLAN 0 to HW filter on device team0
[   62.210332][ T5632] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.220491][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.222772][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.249230][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.251663][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.257245][ T5632] 8021q: adding VLAN 0 to HW filter on device team0
[   62.286853][   T69] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.289890][   T69] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.300280][   T69] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.302472][   T69] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.343560][ T4989] Bluetooth: hci0: command tx timeout
[   62.345628][   T55] Bluetooth: hci1: command tx timeout
[   62.424127][ T4989] Bluetooth: hci2: command tx timeout
[   62.548430][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.617623][ T5633] veth0_vlan: entered promiscuous mode
[   62.631150][ T5632] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.636693][ T5633] veth1_vlan: entered promiscuous mode
[   62.653870][ T5641] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.692982][ T5633] veth0_macvtap: entered promiscuous mode
[   62.709900][ T5633] veth1_macvtap: entered promiscuous mode
[   62.714081][ T5632] veth0_vlan: entered promiscuous mode
[   62.731782][ T5632] veth1_vlan: entered promiscuous mode
[   62.735185][ T5641] veth0_vlan: entered promiscuous mode
[   62.739293][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.748105][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.769028][ T5641] veth1_vlan: entered promiscuous mode
[   62.796419][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.817883][ T5632] veth0_macvtap: entered promiscuous mode
[   62.838349][ T5632] veth1_macvtap: entered promiscuous mode
[   62.839734][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.847023][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.873404][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.896370][ T3359] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.900083][ T3359] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.900156][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.909225][ T5641] veth0_macvtap: entered promiscuous mode
[   62.918268][ T5641] veth1_macvtap: entered promiscuous mode
[   62.924737][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.949287][ T5633] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   62.953171][ T5641] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.954061][ T5489] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.966797][ T5641] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.044261][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.050185][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.097520][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.102433][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.103757][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.168046][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.172442][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.193770][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.202254][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.221439][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.225091][ T5489] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.230010][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.234264][ T5489] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.245271][ T5749] netlink: 36 bytes leftover after parsing attributes in process `syz.1.31'.
[   63.272099][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.286689][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.306651][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.321367][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.453071][ T5763] Illegal XDP return value 4294967274 on prog  (id 2) dev syz_tun, expect packet loss!
[   63.592918][ T5775] netlink: 16 bytes leftover after parsing attributes in process `syz.0.41'.
[   63.999548][ T5811] lo: entered allmulticast mode
[   64.003020][ T5810] lo: left allmulticast mode
[   64.081643][ T5819] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[   64.090719][ T5817] Bluetooth: MGMT ver 1.23
[   64.099944][ T5817] Bluetooth: hci0: invalid length 0, exp 2 for type 20
[   64.105789][ T5818] veth0: entered promiscuous mode
[   64.109229][ T5818] vlan2: entered promiscuous mode
[   64.289420][ T5835] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[   64.296098][ T5835] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   64.370665][ T5839] syzkaller1: entered promiscuous mode
[   64.377861][ T5839] syzkaller1: entered allmulticast mode
[   64.414065][ T4989] Bluetooth: hci1: command tx timeout
[   64.487508][ T5850] netlink: 'syz.2.79': attribute type 11 has an invalid length.
[   64.491058][ T5850] netlink: 4312 bytes leftover after parsing attributes in process `syz.2.79'.
[   64.496918][ T4989] Bluetooth: hci2: command tx timeout
[   64.721229][ T5865] syz.0.86 uses obsolete (PF_INET,SOCK_PACKET)
[   65.003081][ T5879] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[   65.336964][ T5898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.102'.
[   65.695098][ T5927] xt_limit: Overflow, try lower: 0/0
[   65.707621][ T5929] netlink: 20 bytes leftover after parsing attributes in process `syz.0.115'.
[   65.961798][ T5944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.122'.
[   66.495085][ T4989] Bluetooth: hci1: command tx timeout
[   66.574115][ T4989] Bluetooth: hci2: command tx timeout
[   66.653376][ T5992] syzkaller0: entered promiscuous mode
[   66.665684][ T5992] syzkaller0: entered allmulticast mode
[   67.252294][ T6025] sctp: [Deprecated]: syz.0.155 (pid 6025) Use of int in maxseg socket option.
[   67.252294][ T6025] Use struct sctp_assoc_value instead
[   67.529116][ T6026] syzkaller0: entered promiscuous mode
[   67.545987][ T6026] syzkaller0: entered allmulticast mode
[   67.737860][ T6045] netlink: 16 bytes leftover after parsing attributes in process `syz.0.161'.
[   68.588962][ T4989] Bluetooth: hci1: command tx timeout
[   68.656061][ T4989] Bluetooth: hci2: command tx timeout
[   70.892907][ T6088] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.171'.
[   70.911175][ T6088] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.171'.
[   71.020974][ T6095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.173'.
[   71.698230][ T1372] ieee802154 phy0 wpan0: encryption failed: -22
[   71.701587][ T1372] ieee802154 phy1 wpan1: encryption failed: -22
[   72.142372][ T6139] sctp: [Deprecated]: syz.0.193 (pid 6139) Use of int in max_burst socket option deprecated.
[   72.142372][ T6139] Use struct sctp_assoc_value instead
[   72.151094][ T6139] netlink: 'syz.0.193': attribute type 1 has an invalid length.
[   72.163924][ T6139] bond1: option mode: invalid value (8)
[   72.172952][ T6139] bond1 (unregistering): Released all slaves
[   72.348745][ T6142] netlink: 64 bytes leftover after parsing attributes in process `syz.0.193'.
[   73.465492][ T6139] syz.0.193 (6139) used greatest stack depth: 20640 bytes left
[   83.740390][   T10] cfg80211: failed to load regulatory.db
[   91.756555][    C1] sched: DL replenish lagged too much
[  134.653728][ T1372] ieee802154 phy0 wpan0: encryption failed: -22
[  134.727396][ T1372] ieee802154 phy1 wpan1: encryption failed: -22
[  148.991053][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  149.033139][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  149.959896][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  150.566099][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  150.717055][ T5638] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  151.051913][ T5638] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  151.264924][ T4989] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  151.641858][ T4989] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  152.066345][ T4989] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  152.150285][ T4989] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  153.852278][   T55] Bluetooth: hci0: command tx timeout
[  156.015409][   T55] Bluetooth: hci0: command tx timeout
[  158.265950][   T55] Bluetooth: hci1: command tx timeout
[  158.268129][   T55] Bluetooth: hci0: command tx timeout
[  161.407363][ T4989] Bluetooth: hci0: command tx timeout
[  161.409607][ T4989] Bluetooth: hci1: command tx timeout
[  163.498738][ T4989] Bluetooth: hci1: command tx timeout
[  165.016168][   T55] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  165.577449][   T55] Bluetooth: hci1: command tx timeout
[  167.179717][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  167.750660][ T6177] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  194.688885][ T1372] ieee802154 phy0 wpan0: encryption failed: -22
[  194.700010][ T1372] ieee802154 phy1 wpan1: encryption failed: -22
[  229.248994][ T5633] syz-executor (5633) used greatest stack depth: 20608 bytes left
[  256.107359][ T1372] ieee802154 phy0 wpan0: encryption failed: -22
[  256.116931][ T1372] ieee802154 phy1 wpan1: encryption failed: -22
[  281.700476][ T5638] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  281.711290][ T5635] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  281.780557][ T5638] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  281.808493][ T5638] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  281.868350][ T5638] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  282.027561][ T5638] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  282.045580][ T5638] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  282.123519][ T5638] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  282.279800][ T5635] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  283.238779][ T5635] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  286.605824][ T5635] Bluetooth: hci0: command tx timeout
[  286.945152][ T5635] Bluetooth: hci1: command tx timeout
[  288.673672][ T5635] Bluetooth: hci0: command tx timeout
[  289.044553][ T5635] Bluetooth: hci1: command tx timeout
[  290.707836][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  291.215875][ T5635] Bluetooth: hci0: command tx timeout
[  291.217634][ T5635] Bluetooth: hci1: command tx timeout
[  292.045094][ T5638] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  292.048141][ T5638] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  292.148353][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  292.164237][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  292.228092][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  292.284421][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  292.475727][ T5635] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  292.950344][ T5635] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  293.005727][ T5635] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  293.294872][   T55] Bluetooth: hci0: command tx timeout
[  293.296588][ T5635] Bluetooth: hci1: command tx timeout
[  293.350078][ T5635] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  294.470716][ T5635] Bluetooth: hci2: command tx timeout
[  295.847350][ T5635] Bluetooth: hci3: command tx timeout
[  296.515984][ T5635] Bluetooth: hci2: command tx timeout
[  297.770958][ T4989] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  297.904979][   T55] Bluetooth: hci3: command tx timeout
[  298.420296][ T4989] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  298.445533][ T4989] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  298.613415][ T4989] Bluetooth: hci2: command tx timeout
[  299.061031][ T4989] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  299.183620][ T4989] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  299.936160][ T4989] Bluetooth: hci3: command tx timeout
[  300.682478][ T4989] Bluetooth: hci2: command tx timeout
[  301.724509][ T4989] Bluetooth: hci4: command tx timeout
[  302.062807][ T4989] Bluetooth: hci3: command tx timeout
[  303.889416][ T4989] Bluetooth: hci4: command tx timeout
[  306.145201][ T4989] Bluetooth: hci4: command tx timeout
[  308.247315][ T4989] Bluetooth: hci4: command tx timeout
[  317.726659][ T1372] ieee802154 phy0 wpan0: encryption failed: -22
[  317.734432][ T1372] ieee802154 phy1 wpan1: encryption failed: -22
[  317.900022][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  339.846850][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  364.176464][ T5635] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  364.514987][ T5635] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  364.837326][ T5635] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  365.797248][ T5635] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  366.187928][ T5635] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  370.264911][ T4989] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  370.506850][ T4989] Bluetooth: hci0: command tx timeout
[  371.847883][ T4989] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  372.576437][ T4989] Bluetooth: hci0: command tx timeout
[  374.029059][ T6242] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  374.669122][ T5635] Bluetooth: hci0: command tx timeout
[  375.465118][ T4989] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  375.880725][ T4989] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  376.739005][ T4989] Bluetooth: hci0: command tx timeout
[  377.803561][ T6243] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  379.003930][ T1372] ieee802154 phy0 wpan0: encryption failed: -22
[  379.017069][ T1372] ieee802154 phy1 wpan1: encryption failed: -22
[  380.045058][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  403.076662][ T5635] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  404.048415][ T5635] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  404.091538][ T5635] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  404.581094][   T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  404.709198][   T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  404.805388][   T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  405.465128][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  405.520542][   T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  406.010183][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  406.953759][   T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  408.819273][ T5635] Bluetooth: hci2: command tx timeout
[  409.798714][   T55] Bluetooth: hci3: command tx timeout
[  410.902004][ T4989] Bluetooth: hci2: command tx timeout
[  411.859361][   T55] Bluetooth: hci1: command 0x0406 tx timeout
[  411.867724][ T4989] Bluetooth: hci3: command tx timeout
[  412.993615][ T5635] Bluetooth: hci2: command tx timeout
[  414.047362][ T5635] Bluetooth: hci3: command tx timeout
[  415.101089][ T5635] Bluetooth: hci2: command tx timeout
[  416.135349][ T5635] Bluetooth: hci3: command tx timeout
[  418.979776][   T12] bridge_slave_1: left allmulticast mode
[  419.009823][   T12] bridge_slave_1: left promiscuous mode
[  419.639682][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  419.990941][   T12] bridge_slave_0: left allmulticast mode
[  420.009479][   T12] bridge_slave_0: left promiscuous mode
[  420.358413][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  440.516138][ T1372] ieee802154 phy0 wpan0: encryption failed: -22
[  440.523809][ T1372] ieee802154 phy1 wpan1: encryption failed: -22
[  493.678264][ T4989] Bluetooth: hci0: command 0x0406 tx timeout
[  501.998045][ T1372] ieee802154 phy0 wpan0: encryption failed: -22
[  502.004832][ T1372] ieee802154 phy1 wpan1: encryption failed: -22
[  530.008886][ T4989] Bluetooth: hci2: command 0x0406 tx timeout
[  534.684147][   T55] Bluetooth: hci3: command 0x0406 tx timeout
[  562.038815][   T35] INFO: task kworker/u9:5:751 blocked for more than 144 seconds.
[  562.041790][   T35]       Not tainted syzkaller #0
[  562.556929][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  562.559966][   T35] task:kworker/u9:5    state:D stack:22600 pid:751   tgid:751   ppid:2      task_flags:0x4208060 flags:0x00080000
[  562.825522][   T35] Workqueue: events_unbound linkwatch_event
[  562.833533][   T35] Call Trace:
[  562.837850][   T35]  <TASK>
[  562.839049][   T35]  __schedule+0x17d4/0x5630
[  562.840820][   T35]  ? trace_pelt_se_tp+0x3b/0x150
[  562.842717][   T35]  ? __pfx___schedule+0x10/0x10
[  563.636017][ T1372] ieee802154 phy0 wpan0: encryption failed: -22
[  563.867311][ T1372] ieee802154 phy1 wpan1: encryption failed: -22
[  564.400545][   T35]  ? schedule+0x90/0x2b0
[  564.402399][   T35]  schedule+0x164/0x2b0
[  564.419957][   T35]  schedule_preempt_disabled+0x13/0x30
[  564.678566][   T35]  __mutex_lock+0x7c1/0x1550
[  564.680288][   T35]  ? __mutex_lock+0x5d4/0x1550
[  564.681868][   T35]  ? linkwatch_event+0xe/0x60
[  565.207024][   T35]  ? __pfx___mutex_lock+0x10/0x10
[  565.208838][   T35]  ? rcu_is_watching+0x16/0xb0
[  565.478422][   T35]  ? process_scheduled_works+0xa1a/0x14c0
[  565.480820][   T35]  linkwatch_event+0xe/0x60
[  565.482694][   T35]  process_scheduled_works+0xa88/0x14c0
[  565.494363][   T35]  ? __pfx_process_scheduled_works+0x10/0x10
[  565.496831][   T35]  ? assign_work+0x3cf/0x5d0
[  565.498759][   T35]  worker_thread+0xa47/0xfb0
[  565.500691][   T35]  ? __kthread_parkme+0x71/0x1f0
[  565.502746][   T35]  kthread+0x38b/0x480
[  565.755036][   T35]  ? __pfx_worker_thread+0x10/0x10
[  565.757164][   T35]  ? __pfx_kthread+0x10/0x10
[  566.995361][   T35]  ret_from_fork+0x514/0xb70
[  566.997370][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  566.999435][   T35]  ? __switch_to+0xc89/0x1420
[  567.001238][   T35]  ? __pfx_kthread+0x10/0x10
[  567.003143][   T35]  ret_from_fork_asm+0x1a/0x30
[  567.594738][   T35]  </TASK>
[  567.595783][   T35] INFO: task dhcpcd:5334 blocked for more than 149 seconds.
[  567.603341][   T35]       Not tainted syzkaller #0
[  567.610245][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  567.612983][   T35] task:dhcpcd          state:D stack:21384 pid:5334  tgid:5334  ppid:5333   task_flags:0x400140 flags:0x00080800
[  570.696585][   T35] Call Trace:
[  570.697809][   T35]  <TASK>
[  570.699010][   T35]  __schedule+0x17d4/0x5630
[  570.700806][   T35]  ? lockdep_hardirqs_on+0x7b/0x110
[  570.702763][   T35]  ? __pfx___schedule+0x10/0x10
[  570.714456][   T35]  ? schedule+0x90/0x2b0
[  570.716153][   T35]  schedule+0x164/0x2b0
[  570.717799][   T35]  schedule_preempt_disabled+0x13/0x30
[  570.719928][   T35]  __mutex_lock+0x7c1/0x1550
[  570.721742][   T35]  ? __mutex_lock+0x5d4/0x1550
