last executing test programs:

711.125533ms ago: executing program 2 (id=366):
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000740)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x1d}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

622.507693ms ago: executing program 1 (id=367):
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$netlink(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6(0xa, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300))
socket$inet_sctp(0x2, 0x1, 0x84)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="2400000026000100000000000000000008000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32], 0x24}], 0x1}, 0x0)

622.260253ms ago: executing program 2 (id=368):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000001c0)={0x3, 'vlan1\x00', {0x3}, 0x7})

560.724335ms ago: executing program 2 (id=369):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='ip6gre0\x00', 0x10)
setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4)

491.903472ms ago: executing program 1 (id=372):
r0 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000540)=@broute={'broute\x00', 0x20, 0x3, 0x4fa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"/1274]}, 0x572)

491.598827ms ago: executing program 2 (id=373):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x3ff, 0x7}, &(0x7f0000000240)=0x90)

407.961679ms ago: executing program 2 (id=374):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf2507"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0)

407.641298ms ago: executing program 1 (id=375):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32=r0], 0x10)

342.644855ms ago: executing program 0 (id=377):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0x0, 0xfffffffd, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x71, 0x1, {{0x1, 0x800, 0x3, 0xd, 0x6}, 0x29}}]}, {0xfffffee7}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x81}, 0x0)

342.277322ms ago: executing program 2 (id=378):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a060000)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
socket$kcm(0x2, 0xa, 0x2)
socket(0x8, 0x3, 0x0)
socket$alg(0x26, 0x5, 0x0)
socket$packet(0x11, 0x3, 0x300)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

341.834979ms ago: executing program 0 (id=379):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004040)={0x30, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x17, 0x0, 0x1, [@nested={0x4, 0x1}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x404c0c0}, 0xc000)

336.33362ms ago: executing program 1 (id=380):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x56}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)

242.528857ms ago: executing program 0 (id=381):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000001100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond_slave_1\x00'})
r2 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a325bd7000fddbdf25200f07074a264e22030000002f00000001ffffffc300000006000000000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="de00fbffa611195cc93f034708000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000)

241.878264ms ago: executing program 1 (id=382):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r2, &(0x7f0000000400)="c7", &(0x7f0000000380)=@tcp6}, 0x20)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512\x00'}, 0x58)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa8, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x80, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x48, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x14, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd, 0x1, "5060ffff122dc9e707"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x11c}}, 0x0)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendmmsg$unix(r4, &(0x7f0000002b00)=[{{&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x8000010}}, {{&(0x7f00000005c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000640)="ca3ceb0814f1", 0x6}], 0x1, 0x0, 0x0, 0x4048040}}], 0x2, 0x4884)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r2}, &(0x7f0000000d00), &(0x7f00000003c0)='%pS    \x00'}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f00000000c0)={r2, &(0x7f00000001c0), 0x0}, 0x20)
syz_emit_ethernet(0x4e, &(0x7f0000000100)=ANY=[@ANYBLOB="e33110495bfdaaaaaaaaaaaa86dd66c2eeed0018110000000000000000000000000000000000fe8000000000000000000000000000aa4e204e2200"], 0x0)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000010c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000700000024000180060005004e230000060001000200000008000300ac1414aa"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x50)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xf0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000400000100c28000050003"], 0x48}}, 0x40000)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0)
sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r7, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xa}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x240000c0}, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000940), 0x0, 0xa7c, r6}, 0x38)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000040)=0x4ddd, 0x4)
bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x0)
syz_emit_ethernet(0x39, &(0x7f0000000000)={@random="659b3dfadf01", @link_local, @void, {@generic={0x8100, "91b9d34cba69c8debe759c61645094a575bd519b8f5915976353e9eff3e859d57cdf31ebc241a0ba132e89"}}}, 0x0)

92.183783ms ago: executing program 0 (id=383):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000280)=""/24, 0x18}], 0x1}, 0x9}], 0x1, 0x400000a0, 0x0)
sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)="c049", 0x2}], 0x1, 0x0, 0x0, 0x4000004}, 0xc0)

1.494161ms ago: executing program 0 (id=384):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000002c0)="9c", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000c40)='\\', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000001800)="353a35d6094e4ee7d764b6993f65136c5d6b84d9b1324a0b25e094700c9a66f9181738098f32e3e48859c3878d53a9752474da0d6af299d849d48f2fa2c8c807d7a1521da940585790ff1e6f9da83e32b751d1af9cfac640c1361f5ae8b99c187dafe9ea854120f6eaab11e7fdeb3f2152ebdbc21520ca01f64bb821576deef4ed6696cdddc1768b5b4fbd68a687cb6ba52ecf5cc6f8f05062f26de19d6aaaeb6cbca00e46685f77d2b3e8dd9d0d099e799cd5a76c67ab283f790366f7f744508edc9e48fa", 0xc5}], 0x1}}], 0x3, 0x0)
shutdown(r0, 0x1)

1.007079ms ago: executing program 0 (id=385):
syz_emit_ethernet(0x1f, &(0x7f0000000040)={@broadcast, @empty, @void, {@llc_tr={0x11, {@llc={0x42, 0x42, "03", "00404000000062cf004ab77f8437"}}}}}, 0x0)

0s ago: executing program 1 (id=386):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:59176' (ED25519) to the list of known hosts.
syzkaller login: [   56.911936][ T5812] cgroup: Unknown subsys name 'net'
[   57.000849][ T5812] cgroup: Unknown subsys name 'cpuset'
[   57.005415][ T5812] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.869762][ T5812] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   64.215113][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   64.218517][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   64.221473][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   64.224851][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   64.227996][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   64.234461][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   64.247134][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   64.250868][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   64.253957][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   64.256862][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   64.283958][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   64.287901][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   64.291013][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   64.301597][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   64.305283][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.482782][ T5828] chnl_net:caif_netlink_parms(): no params data found
[   64.645643][ T5832] chnl_net:caif_netlink_parms(): no params data found
[   64.653159][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.655750][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.659420][ T5828] bridge_slave_0: entered allmulticast mode
[   64.663269][ T5828] bridge_slave_0: entered promiscuous mode
[   64.683575][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.685809][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.688575][ T5828] bridge_slave_1: entered allmulticast mode
[   64.691551][ T5828] bridge_slave_1: entered promiscuous mode
[   64.741653][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.752904][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.784567][ T5834] chnl_net:caif_netlink_parms(): no params data found
[   64.830263][ T5828] team0: Port device team_slave_0 added
[   64.855606][ T5828] team0: Port device team_slave_1 added
[   64.859292][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.861861][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.864729][ T5832] bridge_slave_0: entered allmulticast mode
[   64.868924][ T5832] bridge_slave_0: entered promiscuous mode
[   64.873196][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.876031][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.879851][ T5832] bridge_slave_1: entered allmulticast mode
[   64.883728][ T5832] bridge_slave_1: entered promiscuous mode
[   64.953496][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.964893][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.967655][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.975684][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.981845][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.985033][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.987453][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.996526][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.031511][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.034387][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.036841][ T5834] bridge_slave_0: entered allmulticast mode
[   65.041023][ T5834] bridge_slave_0: entered promiscuous mode
[   65.061735][ T5832] team0: Port device team_slave_0 added
[   65.066622][ T5832] team0: Port device team_slave_1 added
[   65.082754][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.085506][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.088268][ T5834] bridge_slave_1: entered allmulticast mode
[   65.090958][ T5834] bridge_slave_1: entered promiscuous mode
[   65.143494][ T5828] hsr_slave_0: entered promiscuous mode
[   65.146033][ T5828] hsr_slave_1: entered promiscuous mode
[   65.150210][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.152897][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.164749][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.173153][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.186498][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.189439][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.201315][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.208649][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.289196][ T5832] hsr_slave_0: entered promiscuous mode
[   65.292185][ T5832] hsr_slave_1: entered promiscuous mode
[   65.294953][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   65.298653][ T5832] Cannot create hsr debugfs directory
[   65.303632][ T5834] team0: Port device team_slave_0 added
[   65.313146][ T5834] team0: Port device team_slave_1 added
[   65.376022][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.378789][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.388277][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.407458][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.409656][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.418552][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.541927][ T5834] hsr_slave_0: entered promiscuous mode
[   65.545024][ T5834] hsr_slave_1: entered promiscuous mode
[   65.548471][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   65.551407][ T5834] Cannot create hsr debugfs directory
[   65.650004][ T5828] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.689021][ T5828] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.697156][ T5828] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.725502][ T5828] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.812044][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.828079][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.843723][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.851975][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   65.906584][ T5834] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   65.918162][ T5834] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   65.927111][ T5834] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   65.940417][ T5834] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   66.020239][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.080134][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   66.108659][  T187] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.111588][  T187] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.118966][  T187] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.121143][  T187] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.178479][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.190151][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.220624][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   66.237542][  T187] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.240399][  T187] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.249115][ T5834] 8021q: adding VLAN 0 to HW filter on device team0
[   66.261468][  T187] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.264315][  T187] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.278412][   T54] Bluetooth: hci0: command tx timeout
[   66.288425][  T187] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.291264][  T187] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.323997][  T187] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.326841][  T187] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.347980][   T54] Bluetooth: hci1: command tx timeout
[   66.350178][ T5836] Bluetooth: hci2: command tx timeout
[   66.461541][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.524821][ T5828] veth0_vlan: entered promiscuous mode
[   66.537069][ T5828] veth1_vlan: entered promiscuous mode
[   66.573862][ T5828] veth0_macvtap: entered promiscuous mode
[   66.582484][ T5828] veth1_macvtap: entered promiscuous mode
[   66.601044][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.616927][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.632898][ T5828] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.636449][ T5828] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.640725][ T5828] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.644126][ T5828] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.661306][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.680526][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.780251][ T5832] veth0_vlan: entered promiscuous mode
[   66.815331][ T5832] veth1_vlan: entered promiscuous mode
[   66.835164][  T187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.839842][  T187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.863456][ T5834] veth0_vlan: entered promiscuous mode
[   66.889162][ T5834] veth1_vlan: entered promiscuous mode
[   66.909586][  T149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.912620][  T149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.920760][ T5832] veth0_macvtap: entered promiscuous mode
[   66.940081][ T5832] veth1_macvtap: entered promiscuous mode
[   66.949618][ T5834] veth0_macvtap: entered promiscuous mode
[   66.956417][ T5834] veth1_macvtap: entered promiscuous mode
[   66.979612][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.005345][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   67.010475][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.021418][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.034533][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.041882][ T5834] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.045212][ T5834] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.051694][ T5834] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.055024][ T5834] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.066420][ T5832] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.078010][ T5832] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.081106][ T5832] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.084348][ T5832] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.238697][ T5898] netlink: 'syz.2.4': attribute type 1 has an invalid length.
[   67.267918][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.270974][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.302743][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.305737][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.342356][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.348870][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.374759][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.377837][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.559310][ T5902] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2'.
[   67.695876][ T5912] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8'.
[   67.819706][ T5920] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   67.880221][ T5923] syz.1.13 uses obsolete (PF_INET,SOCK_PACKET)
[   67.884516][ T5926] netlink: 'syz.2.16': attribute type 4 has an invalid length.
[   67.916340][ T5926] netlink: 'syz.2.16': attribute type 4 has an invalid length.
[   68.049390][ T5934] netlink: 'syz.0.20': attribute type 1 has an invalid length.
[   68.051830][ T5934] netlink: 784 bytes leftover after parsing attributes in process `syz.0.20'.
[   68.140561][ T5940] netlink: 44 bytes leftover after parsing attributes in process `syz.0.23'.
[   68.197609][ T5942] netlink: 104 bytes leftover after parsing attributes in process `syz.0.24'.
[   68.308492][ T5948] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[   68.314736][ T5948] Zero length message leads to an empty skb
[   68.348085][   T54] Bluetooth: hci0: command tx timeout
[   68.394970][ T5952] warning: `syz.2.29' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   68.427554][ T5836] Bluetooth: hci2: command tx timeout
[   68.429933][   T54] Bluetooth: hci1: command tx timeout
[   68.936776][ T5983] netlink: 104 bytes leftover after parsing attributes in process `syz.2.45'.
[   69.128594][ T5993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.49'.
[   69.442621][ T6010] netlink: 'syz.0.57': attribute type 1 has an invalid length.
[   69.445479][ T6010] netlink: 168 bytes leftover after parsing attributes in process `syz.0.57'.
[   69.449735][ T6010] NCSI netlink: No device for ifindex 0
[   69.740879][ T6036] pimreg: entered allmulticast mode
[   69.769566][ T6038] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   69.778410][ T6036] pimreg: left allmulticast mode
[   69.780978][ T6038] Cannot find set identified by id 0 to match
[   69.852807][ T6030] openvswitch: netlink: IP tunnel dst address not specified
[   70.006430][ T6053] netlink: 16 bytes leftover after parsing attributes in process `syz.0.77'.
[   70.066448][ T6057] netlink: 724 bytes leftover after parsing attributes in process `syz.0.79'.
[   70.293809][ T6068] xt_nat: multiple ranges no longer supported
[   70.507090][   T54] Bluetooth: hci1: command tx timeout
[   70.508910][ T5836] Bluetooth: hci2: command tx timeout
[   70.912258][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   70.914461][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.015259][ T6112] netlink: zone id is out of range
[   71.017292][ T6112] netlink: zone id is out of range
[   71.018929][ T6112] netlink: zone id is out of range
[   71.021313][ T6112] netlink: zone id is out of range
[   71.023256][ T6112] netlink: zone id is out of range
[   71.027903][ T6118] openvswitch: netlink: Port -1156311892 exceeds max allowable 65535
[   71.059713][ T6112] netlink: set zone limit has 4 unknown bytes
[   71.065113][ T6112] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   71.389984][ T6142] netlink: 'syz.0.113': attribute type 8 has an invalid length.
[   71.823877][ T6167] netlink: 'syz.2.124': attribute type 4 has an invalid length.
[   72.127933][ T6192] Driver unsupported XDP return value 0 on prog  (id 22) dev N/A, expect packet loss!
[   72.534020][ T6211] x_tables: duplicate underflow at hook 4
[   72.546068][ T6211] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   72.549733][ T6211] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   72.553247][ T6211] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   72.556066][ T6211] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   72.588258][   T54] Bluetooth: hci1: command tx timeout
[   72.590006][   T54] Bluetooth: hci2: command tx timeout
[   72.773837][ T6223] bond0: option mode: unable to set because the bond device has slaves
[   72.982456][ T6239] __nla_validate_parse: 6 callbacks suppressed
[   72.982473][ T6239] netlink: 68 bytes leftover after parsing attributes in process `syz.1.151'.
[   72.993554][ T6241] netlink: 104 bytes leftover after parsing attributes in process `syz.2.152'.
[   73.434377][ T6275] netlink: 'syz.2.169': attribute type 1 has an invalid length.
[   73.438601][ T6275] netlink: 120 bytes leftover after parsing attributes in process `syz.2.169'.
[   73.486043][ T6279] netlink: 72 bytes leftover after parsing attributes in process `syz.2.171'.
[   73.605868][ T6290] netlink: 8 bytes leftover after parsing attributes in process `syz.1.177'.
[   73.610864][ T6290] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[   73.795732][ T6303] syzkaller0: entered promiscuous mode
[   73.798881][ T6303] syzkaller0: entered allmulticast mode
[   75.161572][ T6335] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   75.165834][ T6335] batadv_slave_0: entered promiscuous mode
[   75.172741][ T6335] batadv_slave_0: entered allmulticast mode
[   75.342264][ T6346] tipc: Started in network mode
[   75.343946][ T6346] tipc: Node identity 76f97370ab04, cluster identity 4711
[   75.349127][ T6346] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   75.361818][ T6346] syzkaller0: entered promiscuous mode
[   75.363953][ T6346] syzkaller0: entered allmulticast mode
[   75.393953][ T6349] netlink: 116 bytes leftover after parsing attributes in process `syz.2.201'.
[   75.401512][ T6349] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   75.443533][ T6346] tipc: Resetting bearer <eth:syzkaller0>
[   75.456207][ T6345] tipc: Resetting bearer <eth:syzkaller0>
[   75.478839][ T6345] tipc: Disabling bearer <eth:syzkaller0>
[   75.962548][ T6389] unknown channel width for channel at 909000KHz?
[   75.965284][ T6389] unknown channel width for channel at 909000KHz?
[   76.284383][ T6407] Cannot find del_set index 1 as target
[   76.406472][ T6416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.232'.
[   76.415026][ T6416] netlink: 4 bytes leftover after parsing attributes in process `syz.1.232'.
[   76.443777][ T6416] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   76.446854][ T6416] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   76.450235][ T6416] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   76.452887][ T6416] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   76.743753][ T6438] netlink: 28 bytes leftover after parsing attributes in process `syz.2.243'.
[   76.955654][ T6454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.248'.
[   77.140151][ T6457] veth0: entered promiscuous mode
[   78.171678][ T6502] netlink: 'syz.1.270': attribute type 10 has an invalid length.
[   78.256138][ T6509] __nla_validate_parse: 1 callbacks suppressed
[   78.256157][ T6509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.274'.
[   78.280483][ T6511] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[   78.614871][ T6533] netlink: 16 bytes leftover after parsing attributes in process `syz.2.286'.
[   78.804791][ T6543] netlink: 'syz.2.290': attribute type 5 has an invalid length.
[   78.943973][ T6548] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[   78.950968][  T791] IPVS: starting estimator thread 0...
[   79.047389][ T6551] IPVS: using max 48 ests per chain, 115200 per kthread
[   79.288841][ T6570] xt_socket: unknown flags 0x8
[   79.343162][ T6572] netlink: 100 bytes leftover after parsing attributes in process `syz.0.304'.
[   79.465800][ T6583] netlink: 76 bytes leftover after parsing attributes in process `syz.1.309'.
[   79.802174][ T6602] nftables ruleset with unbound set
[   80.211207][ T6634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.328'.
[   80.710058][ T6666] sctp: [Deprecated]: syz.2.341 (pid 6666) Use of struct sctp_assoc_value in delayed_ack socket option.
[   80.710058][ T6666] Use struct sctp_sack_info instead
[   80.769356][ T6671] netlink: 22 bytes leftover after parsing attributes in process `syz.1.345'.
[   81.736295][ T6734] netlink: 260 bytes leftover after parsing attributes in process `syz.2.374'.
[   81.779457][ T6739] netlink: 28 bytes leftover after parsing attributes in process `syz.0.377'.
[   81.782323][ T6739] netlink: 28 bytes leftover after parsing attributes in process `syz.0.377'.
[   81.785066][ T6739] netlink: 28 bytes leftover after parsing attributes in process `syz.0.377'.
[   82.210546][ T6769] 
[   82.211479][ T6769] =============================
[   82.213030][ T6769] WARNING: suspicious RCU usage
[   82.214694][ T6769] 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 Not tainted
[   82.219139][ T6769] -----------------------------
[   82.221090][ T6769] net/core/netclassid_cgroup.c:24 suspicious rcu_dereference_check() usage!
[   82.224132][ T6769] 
[   82.224132][ T6769] other info that might help us debug this:
[   82.224132][ T6769] 
[   82.227453][ T6769] 
[   82.227453][ T6769] rcu_scheduler_active = 2, debug_locks = 1
[   82.230014][ T6769] 1 lock held by syz.1.386/6769:
[   82.231549][ T6769]  #0: ffffffff8e13f340 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x38/0x80
[   82.235402][ T6769] 
[   82.235402][ T6769] stack backtrace:
[   82.238103][ T6769] CPU: 0 UID: 0 PID: 6769 Comm: syz.1.386 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[   82.238121][ T6769] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   82.238130][ T6769] Call Trace:
[   82.238136][ T6769]  <TASK>
[   82.238161][ T6769]  dump_stack_lvl+0x189/0x250
[   82.238188][ T6769]  ? __pfx_dump_stack_lvl+0x10/0x10
[   82.238204][ T6769]  ? __pfx__printk+0x10/0x10
[   82.238226][ T6769]  ? print_lock_name+0xde/0x100
[   82.238246][ T6769]  lockdep_rcu_suspicious+0x140/0x1d0
[   82.238265][ T6769]  task_cls_state+0x1a5/0x1d0
[   82.238278][ T6769]  bpf_get_cgroup_classid_curr+0x18/0x60
[   82.238297][ T6769]  bpf_prog_841aec7193f618b3+0x1b/0x21
[   82.238309][ T6769]  bpf_prog_run_pin_on_cpu+0x6a/0x150
[   82.238329][ T6769]  bpf_prog_test_run_syscall+0x312/0x4b0
[   82.238349][ T6769]  ? __pfx_bpf_prog_test_run_syscall+0x10/0x10
[   82.238368][ T6769]  ? __fget_files+0x2a/0x420
[   82.238384][ T6769]  ? __pfx_bpf_prog_test_run_syscall+0x10/0x10
[   82.238406][ T6769]  bpf_prog_test_run+0x2c7/0x340
[   82.238424][ T6769]  __sys_bpf+0x4a4/0x860
[   82.238447][ T6769]  ? __pfx___sys_bpf+0x10/0x10
[   82.238479][ T6769]  ? exc_page_fault+0x76/0xf0
[   82.238498][ T6769]  ? rcu_is_watching+0x15/0xb0
[   82.238522][ T6769]  __x64_sys_bpf+0x7c/0x90
[   82.238543][ T6769]  do_syscall_64+0xfa/0x3b0
[   82.238556][ T6769]  ? lockdep_hardirqs_on+0x9c/0x150
[   82.238566][ T6769]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   82.238581][ T6769]  ? exc_page_fault+0x9f/0xf0
[   82.238595][ T6769]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   82.238608][ T6769] RIP: 0033:0x7f4fed38e9a9
[   82.238623][ T6769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   82.238656][ T6769] RSP: 002b:00007f4fee2c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   82.238670][ T6769] RAX: ffffffffffffffda RBX: 00007f4fed5b5fa0 RCX: 00007f4fed38e9a9
[   82.238681][ T6769] RDX: 0000000000000039 RSI: 0000200000000500 RDI: 000000000000000a
[   82.238691][ T6769] RBP: 00007f4fed410d69 R08: 0000000000000000 R09: 0000000000000000
[   82.238699][ T6769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   82.238707][ T6769] R13: 0000000000000000 R14: 00007f4fed5b5fa0 R15: 00007ffc4918e8b8
[   82.238751][ T6769]  </TASK>
[   86.270447][   T24] cfg80211: failed to load regulatory.db

VM DIAGNOSIS:
22:28:14  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000002d RBX=000000000000002d RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000f8e RDI=0000000000000f8f RBP=00000000000003f8 RSP=ffffc9000985f550
R8 =ffff888020f30237 R9 =1ffff110041e6046 R10=dffffc0000000000 R11=ffffffff85460db0
R12=dffffc0000000000 R13=ffffffff99aee8c0 R14=ffffffff99df32e0 R15=0000000000000000
RIP=ffffffff85460e2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f4fee2c36c0 ffffffff 00c00000
GS =0000 ffff8880b8626000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b3021fffc CR3=0000000110af2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f4fed586478 00007f4fed586450 XMM03=00007f4fed586488 00007f4fed586480
XMM04=00007f4fee0ed100 00007f4fed586440 XMM05=00007f4fed586458 00007f4fed5864a0
XMM06=00007f4fed586498 00007f4fed586490 XMM07=00007f4fed586488 00007f4fed586480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f4fed411ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffff888121312000 RBX=ffff888117bd4000 RCX=ffffffff8b6c2f45 RDX=0000000000000fc0
RSI=ffff888117bd4000 RDI=ffff888121312000 RBP=0000000000001000 RSP=ffffc900097f79f8
R8 =0000000000000000 R9 =1ffff110242625ff R10=dffffc0000000000 R11=ffffed1024262600
R12=ffffc900097f7cf8 R13=ffff888000000000 R14=ffff888121312000 R15=00007fefb51b2000
RIP=ffffffff8b6d7a29 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055557911d500 ffffffff 00c00000
GS =0000 ffff8881a3c26000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fefb51b20c0 CR3=000000002f720000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fefb5186478 00007fefb5186450 XMM03=00007fefb5186488 00007fefb5186480
XMM04=00007fefb5ced100 00007fefb5186440 XMM05=00007fefb5186458 00007fefb51864a0
XMM06=00007fefb5186498 00007fefb5186490 XMM07=00007fefb5186488 00007fefb5186480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fefb5011ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
