last executing test programs:

1.291755097s ago: executing program 2 (id=912):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10)
r2 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x17}}, 0x6}, 0x1c)
connect$inet6(r2, &(0x7f0000000380)={0xa, 0x4e22, 0x3, @empty}, 0x1c)
setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000140), 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
syz_genetlink_get_family_id$gtp(&(0x7f0000002180), 0xffffffffffffffff)
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, 0x0, 0x4048001)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = gettid()
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000304fdfffffffedbdf2500007400", @ANYRES32=r4, @ANYBLOB="51f003000750050008001300", @ANYRES32=r6], 0x28}, 0x1, 0x0, 0x0, 0x4802}, 0x4040010)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'ip6tnl0\x00', <r7=>0x0, 0x4, 0xa, 0x5, 0x7f, 0x12, @loopback, @loopback, 0x0, 0x8000, 0x9, 0x8000}})
write(r1, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x10, 0x0, 0xfffff00c}, {0x6}]}, 0x10)
bind$xdp(r1, &(0x7f0000000300)={0x2c, 0x5, r7, 0x21}, 0x10)

1.19224074s ago: executing program 2 (id=914):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
pwrite64(r0, &(0x7f00000002c0)="8c", 0x1, 0x7fffffffffffffff)

1.191615662s ago: executing program 2 (id=917):
preadv(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffe, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0xffff}, 0x0, 0x0)

1.131998402s ago: executing program 1 (id=918):
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100030010651fbe347b2c2b00000c00018008000100", @ANYRES16=r0], 0x20}}, 0x0)

1.1315845s ago: executing program 1 (id=919):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000600000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8905, &(0x7f0000000340)={'pim6reg0\x00', @remote})

1.040850485s ago: executing program 1 (id=920):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="680000000206011e0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a300000000020000780050003001c0000000c0001800800014008000000050014002000000005000500020000000500010006"], 0x68}}, 0x40)

1.040610233s ago: executing program 1 (id=921):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x4, 0x4)
bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x4, 0x1, 0x0, @local}, 0x10)

951.056796ms ago: executing program 1 (id=922):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x1, 0x6, 0x10}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e24, 0x3, @local, 0x9}, 0x1c)
bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
read(r5, &(0x7f00000001c0)=""/47, 0x2f)
sendmsg$IPSET_CMD_SAVE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000080601080000000000000004000000040500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10)
listen(r2, 0x204)
setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000000040)=0x1, 0x4)
r6 = socket$netlink(0x10, 0x3, 0x4)
writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r7, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

772.308291ms ago: executing program 1 (id=923):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xc, r0, 0x0, 0x500}, 0x38)
socketpair(0x1, 0x1, 0x0, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
unshare(0x6a040000)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r2 = socket$alg(0x26, 0x5, 0x0)
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x7f, &(0x7f0000001080)=""/4072, &(0x7f0000000000)=0xfe8)
unshare(0x6a040000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, 0x0, 0x240640a5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socket$inet(0x2, 0x3, 0x2)
r4 = socket(0x2b, 0x80801, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'wg1\x00', {}, {0x222cecdb0fb5a62a}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x0, "d176"}}, @common=@unspec=@state={{0x28}, {0xfffffffd}}]}, @unspec=@CT0={0x48}}, {{@ipv6={@local, @private2, [], [0xff], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x88}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380)
sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x48014}, 0x20004000)
listen(r4, 0x9)
write$bt_hci(r4, &(0x7f0000000280)=ANY=[@ANYRESDEC=r3], 0x5)
bind$alg(r2, 0x0, 0x0)

431.536737ms ago: executing program 0 (id=927):
socketpair(0x22, 0x3, 0x0, &(0x7f0000000780))

372.700608ms ago: executing program 0 (id=928):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000400)={0x1f, 0xffff, 0x3}, 0x6)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfd6c}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r4}, &(0x7f00000001c0), &(0x7f0000000400)}, 0x20)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000140)='devices.list\x00', 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x600}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff13}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x9}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write(r1, &(0x7f0000000000)="3b000000010001ada89856a8edd9a222dfc5ac08", 0x14)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)

263.168441ms ago: executing program 2 (id=929):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80800, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0x7}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8}]}}]}, 0x38}}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

262.851873ms ago: executing program 0 (id=930):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x54, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x10001}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0)

142.942864ms ago: executing program 0 (id=931):
syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x300, @empty}, {0x0, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "717c72635f3b384bdfc23b7cdbd1617d39980ae0343d91a3756391fe0a9a66d4", "0838dbc96ba13dd069ce9c1099890915a06c22e110516ac8db72cf46be8a2cd2288112c641ae96fd6321aabb617c7209", "7b8d57a7c7bce1276d915e2d6d05e53c86a47b318a3ac04c5dd38853", {"7719eecd7b1f5591c287cd8bdc5cb100", "705e0032bb769f2581b5b6ae81bd7bad"}}}}}}}, 0x0)

142.76937ms ago: executing program 0 (id=932):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x304)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a40))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"})

95.095409ms ago: executing program 2 (id=933):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000001c0)=0xb45, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r1=>0x0})
sendto$packet(r0, 0x0, 0x0, 0x20040004, &(0x7f0000000080)={0x11, 0xf8, r1, 0x1, 0x1f, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, 0x14)
setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f00000000c0)=0x7, 0x4)
recvfrom$packet(r0, 0x0, 0x0, 0x2000, 0x0, 0x0)

118.386µs ago: executing program 2 (id=934):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b030231a6080c000af32c00009dfff1fc0000f800250f02000f00e5aa000017d34460bc24cdb556bd05251e6182949a2756f475ce36c2ed100000000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e66575", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

0s ago: executing program 0 (id=935):
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x12, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000380)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:57236' (ED25519) to the list of known hosts.
syzkaller login: [   57.615432][ T5811] cgroup: Unknown subsys name 'net'
[   57.724984][ T5811] cgroup: Unknown subsys name 'cpuset'
[   57.731239][ T5811] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.666941][ T5811] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   64.914402][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   64.919036][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   64.922982][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   64.927672][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   64.931646][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   64.981198][ T5220] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   64.985016][ T5220] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   64.990415][ T5220] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   65.003123][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   65.016081][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   65.050765][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   65.056757][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   65.066086][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   65.070471][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   65.075135][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   65.223641][ T5830] chnl_net:caif_netlink_parms(): no params data found
[   65.293260][ T5836] chnl_net:caif_netlink_parms(): no params data found
[   65.368916][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.372424][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.375341][ T5830] bridge_slave_0: entered allmulticast mode
[   65.379325][ T5830] bridge_slave_0: entered promiscuous mode
[   65.404862][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.409310][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.412054][ T5830] bridge_slave_1: entered allmulticast mode
[   65.414932][ T5830] bridge_slave_1: entered promiscuous mode
[   65.493905][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.497413][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.500665][ T5836] bridge_slave_0: entered allmulticast mode
[   65.504945][ T5836] bridge_slave_0: entered promiscuous mode
[   65.527697][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.531830][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.535226][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.538653][ T5836] bridge_slave_1: entered allmulticast mode
[   65.542599][ T5836] bridge_slave_1: entered promiscuous mode
[   65.565684][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.604873][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.620560][ T5838] chnl_net:caif_netlink_parms(): no params data found
[   65.633582][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.640060][ T5830] team0: Port device team_slave_0 added
[   65.680163][ T5830] team0: Port device team_slave_1 added
[   65.695334][ T5836] team0: Port device team_slave_0 added
[   65.700732][ T5836] team0: Port device team_slave_1 added
[   65.763884][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.767047][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.779266][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.785617][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.789110][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.802036][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.808899][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.812474][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.824949][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.837617][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.840704][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.854055][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.974757][ T5830] hsr_slave_0: entered promiscuous mode
[   65.977699][ T5830] hsr_slave_1: entered promiscuous mode
[   65.980650][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.984154][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.988438][ T5838] bridge_slave_0: entered allmulticast mode
[   65.992316][ T5838] bridge_slave_0: entered promiscuous mode
[   66.014526][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.019290][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.023083][ T5838] bridge_slave_1: entered allmulticast mode
[   66.027266][ T5838] bridge_slave_1: entered promiscuous mode
[   66.035170][ T5836] hsr_slave_0: entered promiscuous mode
[   66.039617][ T5836] hsr_slave_1: entered promiscuous mode
[   66.041995][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   66.044559][ T5836] Cannot create hsr debugfs directory
[   66.106405][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.121380][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.217121][ T5838] team0: Port device team_slave_0 added
[   66.244457][ T5838] team0: Port device team_slave_1 added
[   66.311727][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.315104][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.327898][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.344729][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.348171][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.360151][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.432617][ T5838] hsr_slave_0: entered promiscuous mode
[   66.436689][ T5838] hsr_slave_1: entered promiscuous mode
[   66.439635][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   66.442752][ T5838] Cannot create hsr debugfs directory
[   66.477457][ T5830] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   66.488029][ T5830] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   66.499057][ T5830] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   66.529356][ T5830] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   66.604703][ T5836] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   66.639603][ T5836] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   66.657521][ T5836] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   66.663028][ T5836] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   66.761893][ T5838] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   66.774842][ T5838] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   66.784277][ T5838] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   66.797846][ T5838] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   66.812190][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.854004][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.861100][ T5830] 8021q: adding VLAN 0 to HW filter on device team0
[   66.879766][ T3576] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.883169][ T3576] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.895584][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[   66.907883][ T3576] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.911253][ T3576] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.920967][ T3576] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.924729][ T3576] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.948580][  T419] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.951613][  T419] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.979630][ T5220] Bluetooth: hci0: command tx timeout
[   67.056254][ T5220] Bluetooth: hci1: command tx timeout
[   67.091753][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.123571][ T5838] 8021q: adding VLAN 0 to HW filter on device team0
[   67.140312][ T5220] Bluetooth: hci2: command tx timeout
[   67.148182][ T3576] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.151457][ T3576] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.175043][ T3576] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.178962][ T3576] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.211503][ T5838] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   67.216048][ T5838] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   67.305035][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.315085][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.421064][ T5830] veth0_vlan: entered promiscuous mode
[   67.425205][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.444843][ T5830] veth1_vlan: entered promiscuous mode
[   67.465004][ T5836] veth0_vlan: entered promiscuous mode
[   67.483530][ T5836] veth1_vlan: entered promiscuous mode
[   67.507313][ T5838] veth0_vlan: entered promiscuous mode
[   67.511371][ T5830] veth0_macvtap: entered promiscuous mode
[   67.523055][ T5830] veth1_macvtap: entered promiscuous mode
[   67.532026][ T5838] veth1_vlan: entered promiscuous mode
[   67.555375][ T5836] veth0_macvtap: entered promiscuous mode
[   67.572104][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.580549][ T5836] veth1_macvtap: entered promiscuous mode
[   67.588906][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.600555][ T5830] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.603735][ T5830] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.606791][ T5830] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.609543][ T5830] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.615382][ T5838] veth0_macvtap: entered promiscuous mode
[   67.621716][ T5838] veth1_macvtap: entered promiscuous mode
[   67.637820][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.657938][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.663158][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.679921][ T5836] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.683319][ T5836] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.688664][ T5836] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.692350][ T5836] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.701711][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.722905][ T5838] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.726484][ T5838] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.729594][ T5838] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.732382][ T5838] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.746753][ T3576] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.749707][ T3576] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.817739][ T2247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.823457][ T2247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.872866][ T2247] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.879195][ T2247] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.921626][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   67.954275][  T419] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.962234][ T2247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.964994][ T2247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.969696][  T419] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.021208][  T419] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.024382][  T419] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.449028][ T5904] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.453812][ T5904] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.594712][ T5904] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   68.604151][ T5904] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   68.676669][ T5904] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.680007][ T5904] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.683097][ T5904] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.693117][ T5904] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.057240][ T5220] Bluetooth: hci0: command tx timeout
[   69.136590][ T5220] Bluetooth: hci1: command tx timeout
[   69.217135][ T5220] Bluetooth: hci2: command tx timeout
[   69.900650][ T5987] netlink: 'syz.1.40': attribute type 1 has an invalid length.
[   69.903604][ T5987] netlink: 136 bytes leftover after parsing attributes in process `syz.1.40'.
[   69.907332][ T5987] netlink: 'syz.1.40': attribute type 2 has an invalid length.
[   69.911071][ T5987] netlink: 'syz.1.40': attribute type 1 has an invalid length.
[   70.469074][ T6033] netlink: 20 bytes leftover after parsing attributes in process `syz.1.63'.
[   70.710911][ T6048] netlink: 64 bytes leftover after parsing attributes in process `syz.2.65'.
[   70.721296][ T6048] netlink: 64 bytes leftover after parsing attributes in process `syz.2.65'.
[   70.945413][ T6052] netlink: 36 bytes leftover after parsing attributes in process `syz.2.67'.
[   70.949525][ T6052] netlink: 8 bytes leftover after parsing attributes in process `syz.2.67'.
[   71.141344][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.145468][ T5220] Bluetooth: hci0: command tx timeout
[   71.217998][ T5220] Bluetooth: hci1: command tx timeout
[   71.305944][ T5220] Bluetooth: hci2: command tx timeout
[   71.334878][ T6066] Zero length message leads to an empty skb
[   71.664769][ T6096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.81'.
[   71.669338][ T6096] openvswitch: netlink: nsh attr 0 has unexpected len 7 expected 0
[   71.672108][ T6096] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   71.748650][ T6100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.83'.
[   71.821151][ T6106] netlink: 'syz.1.86': attribute type 5 has an invalid length.
[   71.859983][ T6108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.87'.
[   72.148822][ T6129] Cannot find set identified by id 0 to match
[   72.312738][ T6139] warning: `syz.2.102' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   72.423910][ T6149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.107'.
[   72.714940][ T6162] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.719048][ T6162] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.822455][ T6162] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   72.834919][ T6162] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   72.888811][ T6162] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.892638][ T6162] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.901842][ T6162] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.905112][ T6162] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.995106][ T6162] syz.1.110 (6162) used greatest stack depth: 19928 bytes left
[   73.117244][ T5860] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6
[   73.216043][ T5220] Bluetooth: hci0: command tx timeout
[   73.242307][ T6195] syz.2.123 uses obsolete (PF_INET,SOCK_PACKET)
[   73.296102][ T5220] Bluetooth: hci1: command tx timeout
[   73.376249][ T5220] Bluetooth: hci2: command tx timeout
[   73.871529][ T6240] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   74.088325][ T6251] netlink: 'syz.1.154': attribute type 11 has an invalid length.
[   74.186645][ T6259] netlink: 'syz.0.157': attribute type 5 has an invalid length.
[   74.219544][ T6263] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   74.225328][ T6265] xt_hashlimit: size too large, truncated to 1048576
[   74.284739][ T6271] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   74.298153][ T6270] netlink: 'syz.2.161': attribute type 2 has an invalid length.
[   74.491284][ T5831] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   74.494533][ T5831] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   74.515268][ T5831] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[   74.744823][ T6306] netlink: 'syz.2.172': attribute type 33 has an invalid length.
[   75.173064][ T6341] netlink: 'syz.0.184': attribute type 3 has an invalid length.
[   75.180596][ T6341] __nla_validate_parse: 7 callbacks suppressed
[   75.180610][ T6341] netlink: 132 bytes leftover after parsing attributes in process `syz.0.184'.
[   75.330378][ T6349] sctp: [Deprecated]: syz.2.188 (pid 6349) Use of int in max_burst socket option.
[   75.330378][ T6349] Use struct sctp_assoc_value instead
[   75.554764][ T6372] netlink: 4 bytes leftover after parsing attributes in process `syz.0.196'.
[   75.559446][ T6372] netlink: 4 bytes leftover after parsing attributes in process `syz.0.196'.
[   75.877486][ T6388] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[   76.008868][ T6396] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   76.013061][ T6396] batadv_slave_0: entered promiscuous mode
[   76.016259][ T6396] batadv_slave_0: entered allmulticast mode
[   76.218283][ T6412] netlink: 'syz.2.217': attribute type 2 has an invalid length.
[   76.229342][ T6414] netlink: 2 bytes leftover after parsing attributes in process `syz.0.216'.
[   76.800853][ T6446] netlink: 8 bytes leftover after parsing attributes in process `syz.1.231'.
[   78.099137][ T6485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.248'.
[   78.939364][ T6528] netlink: 4 bytes leftover after parsing attributes in process `syz.2.268'.
[   79.892208][ T6583] netlink: 8 bytes leftover after parsing attributes in process `syz.1.289'.
[   79.938196][ T6587] openvswitch: netlink: Unknown key attributes 2
[   80.270583][ T6615] netlink: 4 bytes leftover after parsing attributes in process `syz.2.304'.
[   80.700870][ T6644] netlink: 40 bytes leftover after parsing attributes in process `syz.1.318'.
[   80.717148][ T6644] netlink: 40 bytes leftover after parsing attributes in process `syz.1.318'.
[   80.848449][ T6654] netlink: 16 bytes leftover after parsing attributes in process `syz.2.323'.
[   80.885568][ T6656] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.324'.
[   81.061625][ T6665] netlink: 'syz.1.328': attribute type 2 has an invalid length.
[   81.311097][ T6683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.337'.
[   81.316785][ T6683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.337'.
[   81.442660][ T6689] netlink: 48 bytes leftover after parsing attributes in process `syz.2.340'.
[   81.714935][ T6701] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.343'.
[   82.331219][   T33] audit: type=1800 audit(1752629278.699:2): pid=6746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.366" name="blkio.bfq.time_recursive" dev="tmpfs" ino=597 res=0 errno=0
[   82.417962][ T5895] IPVS: starting estimator thread 0...
[   82.535987][ T6752] IPVS: using max 78 ests per chain, 187200 per kthread
[   82.662434][ T6778] tipc: Started in network mode
[   82.664039][ T6778] tipc: Node identity 8e98ff953f07, cluster identity 4711
[   82.668779][ T6778] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   82.672349][ T6778] syzkaller0: entered promiscuous mode
[   82.674767][ T6778] syzkaller0: entered allmulticast mode
[   82.686197][ T6778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.380'.
[   82.692747][ T6778] tipc: Resetting bearer <eth:syzkaller0>
[   82.697662][ T6777] tipc: Resetting bearer <eth:syzkaller0>
[   82.712104][ T6777] tipc: Disabling bearer <eth:syzkaller0>
[   82.860651][ T6791] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   83.310696][ T6820] netlink: 'syz.1.399': attribute type 21 has an invalid length.
[   83.314256][ T6820] netlink: 'syz.1.399': attribute type 22 has an invalid length.
[   83.320807][ T6820] netlink: 'syz.1.399': attribute type 23 has an invalid length.
[   83.323992][ T6820] netlink: 'syz.1.399': attribute type 25 has an invalid length.
[   84.866957][ T6890] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[   85.479290][ T6899] __nla_validate_parse: 1 callbacks suppressed
[   85.479302][ T6899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.436'.
[   85.485363][ T6899] netlink: 32 bytes leftover after parsing attributes in process `syz.1.436'.
[   85.523048][ T6901] netlink: 300 bytes leftover after parsing attributes in process `syz.0.435'.
[   85.678437][ T6912] netlink: 'syz.0.441': attribute type 9 has an invalid length.
[   85.806628][ T6924] netlink: 'syz.2.447': attribute type 1 has an invalid length.
[   85.810694][ T6924] netlink: 'syz.2.447': attribute type 1 has an invalid length.
[   86.179262][ T6952] syzkaller1: entered promiscuous mode
[   86.181353][ T6952] syzkaller1: entered allmulticast mode
[   86.347594][ T6960] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[   86.362039][ T6960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.465'.
[   86.498266][  T791] cfg80211: failed to load regulatory.db
[   86.619457][ T6984] netlink: 'syz.0.476': attribute type 3 has an invalid length.
[   86.622654][ T6984] netlink: 'syz.0.476': attribute type 1 has an invalid length.
[   86.628309][ T6984] netlink: 192 bytes leftover after parsing attributes in process `syz.0.476'.
[   86.632180][ T6984] NCSI netlink: No device for ifindex 0
[   86.662564][ T6986] netlink: 'syz.2.477': attribute type 1 has an invalid length.
[   86.739288][ T6992] bond1: (slave gretap1): making interface the new active one
[   86.743238][ T6992] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   86.779936][ T6996] netlink: 256 bytes leftover after parsing attributes in process `syz.0.481'.
[   86.792297][ T6996] unsupported nlmsg_type 40
[   86.900108][ T7013] netlink: 20 bytes leftover after parsing attributes in process `syz.1.489'.
[   87.090148][ T7031] netlink: 'syz.2.498': attribute type 11 has an invalid length.
[   87.145247][ T7036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.500'.
[   87.148395][ T7036] netlink: 24 bytes leftover after parsing attributes in process `syz.2.500'.
[   87.302350][ T7047] bond0: Unable to set down delay as MII monitoring is disabled
[   87.351931][ T7049] netlink: 104 bytes leftover after parsing attributes in process `syz.2.506'.
[   87.878339][ T7088] netlink: 'syz.1.525': attribute type 10 has an invalid length.
[   87.881675][ T7088] dummy0: entered promiscuous mode
[   87.884036][ T7088] dummy0: entered allmulticast mode
[   87.908600][ T7088] bridge0: port 3(dummy0) entered blocking state
[   87.912049][ T7088] bridge0: port 3(dummy0) entered disabled state
[   88.050121][ T7104] netlink: 'syz.0.533': attribute type 11 has an invalid length.
[   88.166034][ T7110] openvswitch: netlink: Flow key attr not present in new flow.
[   88.644872][ T7149] Bluetooth: MGMT ver 1.23
[   89.452182][ T7203] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[   89.452980][  T791] IPVS: starting estimator thread 0...
[   89.557888][ T7209] IPVS: using max 35 ests per chain, 84000 per kthread
[   89.791973][ T7229] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   90.803625][ T7305] xt_CT: You must specify a L4 protocol and not use inversions on it
[   90.925697][ T7313] xt_hashlimit: max too large, truncated to 1048576
[   91.297410][ T7336] xfrm1: entered promiscuous mode
[   91.299874][ T7336] xfrm1: entered allmulticast mode
[   91.319418][ T7336] xt_hashlimit: size too large, truncated to 1048576
[   91.628388][ T7356] netlink: 'syz.2.636': attribute type 1 has an invalid length.
[   91.642345][ T7356] __nla_validate_parse: 7 callbacks suppressed
[   91.642359][ T7356] netlink: 184 bytes leftover after parsing attributes in process `syz.2.636'.
[   91.656149][ T7356] netlink: 'syz.2.636': attribute type 1 has an invalid length.
[   91.898515][ T7380] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.648'.
[   91.902461][ T7380] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   91.907075][ T7380] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[   92.118415][ T7399] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[   92.128196][ T7390] nbd1: detected capacity change from 0 to 63
[   92.133008][ T7398] block nbd1: NBD_DISCONNECT
[   92.135684][ T7398] block nbd1: Disconnected due to user request.
[   92.144350][ T7398] block nbd1: shutting down sockets
[   92.145146][ T7270] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   92.154036][ T7270] Buffer I/O error on dev nbd1, logical block 0, async page read
[   92.198713][ T5297] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 0
[   92.203095][ T5297] Buffer I/O error on dev nbd1, logical block 1, async page read
[   92.207765][ T5297] Buffer I/O error on dev nbd1, logical block 2, async page read
[   92.211379][ T5297] Buffer I/O error on dev nbd1, logical block 3, async page read
[   92.215160][ T7270] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   92.234375][ T7270] Buffer I/O error on dev nbd1, logical block 0, async page read
[   92.250714][ T7270] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   92.254144][ T7270] Buffer I/O error on dev nbd1, logical block 1, async page read
[   92.264159][ T7270] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   92.278933][ T7270] Buffer I/O error on dev nbd1, logical block 2, async page read
[   92.290789][ T7270] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   92.314570][ T7270] Buffer I/O error on dev nbd1, logical block 3, async page read
[   92.319726][ T7270] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   92.331781][ T7270] Buffer I/O error on dev nbd1, logical block 0, async page read
[   92.345483][ T7270] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   92.367941][ T7270] Buffer I/O error on dev nbd1, logical block 1, async page read
[   92.376992][ T7270] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   92.393105][ T7270] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   92.418507][ T7270] ldm_validate_partition_table(): Disk read failed.
[   92.432047][ T7270] Dev nbd1: unable to read RDB block 0
[   92.442650][ T7270]  nbd1: unable to read partition table
[   92.461556][ T7270] ldm_validate_partition_table(): Disk read failed.
[   92.467077][ T7270] Dev nbd1: unable to read RDB block 0
[   92.471278][ T7270]  nbd1: unable to read partition table
[   92.537505][ T7430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.662'.
[   92.833283][ T7452] netlink: 'syz.2.669': attribute type 2 has an invalid length.
[   93.113594][ T7482] tipc: Started in network mode
[   93.117167][ T7482] tipc: Node identity fee1e625e68c, cluster identity 4711
[   93.121284][ T7482] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   93.134381][ T7482] syzkaller0: entered promiscuous mode
[   93.137902][ T7482] syzkaller0: entered allmulticast mode
[   93.165608][ T7482] tipc: Resetting bearer <eth:syzkaller0>
[   93.173681][ T7481] tipc: Resetting bearer <eth:syzkaller0>
[   93.203997][ T7481] tipc: Disabling bearer <eth:syzkaller0>
[   93.567120][ T7519] syzkaller1: entered promiscuous mode
[   93.569114][ T7519] syzkaller1: entered allmulticast mode
[   93.970677][ T7540] netlink: 'syz.2.691': attribute type 1 has an invalid length.
[   94.035153][ T7545] netlink: 332 bytes leftover after parsing attributes in process `syz.2.693'.
[   94.038595][ T7545] netlink: 'syz.2.693': attribute type 2 has an invalid length.
[   94.041289][ T7545] netlink: 'syz.2.693': attribute type 5 has an invalid length.
[   94.290098][ T7577] netlink: 'syz.1.711': attribute type 1 has an invalid length.
[   94.293057][ T7578] netlink: 60 bytes leftover after parsing attributes in process `syz.0.706'.
[   94.299468][ T7577] netlink: 224 bytes leftover after parsing attributes in process `syz.1.711'.
[   94.302533][ T7577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.711'.
[   94.308905][ T7570] netlink: 60 bytes leftover after parsing attributes in process `syz.0.706'.
[   94.409917][ T7592] netlink: 'syz.0.717': attribute type 3 has an invalid length.
[   94.684019][ T7609] netlink: 32 bytes leftover after parsing attributes in process `syz.0.725'.
[   94.953433][ T7633] netlink: 24 bytes leftover after parsing attributes in process `syz.2.736'.
[   95.043140][ T7638] netlink: 'syz.2.738': attribute type 1 has an invalid length.
[   96.229750][ T7690] tap0: tun_chr_ioctl cmd 1074025675
[   96.231824][ T7690] tap0: persist disabled
[   96.299937][ T7698] openvswitch: netlink: Missing key (keys=40, expected=100)
[   96.737925][ T7724] netlink: 'syz.2.777': attribute type 1 has an invalid length.
[   96.816109][ T7733] sch_tbf: peakrate 12 is lower than or equals to rate 6561010854487373889 !
[   97.070805][ T7753] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   97.201660][ T7761] __nla_validate_parse: 3 callbacks suppressed
[   97.201675][ T7761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.793'.
[   97.530312][ T7789] dvmrp0: entered allmulticast mode
[   97.873037][ T7818] netlink: 4 bytes leftover after parsing attributes in process `syz.1.821'.
[   98.107984][ T7839] netlink: 32 bytes leftover after parsing attributes in process `syz.1.831'.
[   98.160768][ T7843] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[   98.226829][ T7849] smc: net device bond0 applied user defined pnetid SYZ2
[   98.499766][ T7862] bridge: RTM_NEWNEIGH with invalid ether address
[   98.535260][ T7864] ipt_REJECT: ECHOREPLY no longer supported.
[   98.635125][ T7872] netlink: 240 bytes leftover after parsing attributes in process `syz.2.847'.
[   98.927127][ T7889] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   98.929723][ T7889] syzkaller0: entered promiscuous mode
[   98.932106][ T7889] syzkaller0: entered allmulticast mode
[   98.950101][ T7889] tipc: Resetting bearer <eth:syzkaller0>
[   98.955059][ T7887] tipc: Resetting bearer <eth:syzkaller0>
[   98.969406][ T7887] tipc: Disabling bearer <eth:syzkaller0>
[   99.184463][ T7906] netlink: 12 bytes leftover after parsing attributes in process `syz.1.863'.
[   99.238928][ T7912] netlink: 44 bytes leftover after parsing attributes in process `syz.0.864'.
[   99.242906][ T7904] netlink: 44 bytes leftover after parsing attributes in process `syz.0.864'.
[   99.371333][ T7917] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[   99.374621][ T7917] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   99.390245][ T7919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.871'.
[   99.664172][ T7946] tipc: Started in network mode
[   99.667387][ T7946] tipc: Node identity 9af2582b19bf, cluster identity 4711
[   99.670230][ T7946] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   99.674834][ T7946] syzkaller0: entered promiscuous mode
[   99.685695][ T7946] syzkaller0: entered allmulticast mode
[   99.726784][ T7946] tipc: Resetting bearer <eth:syzkaller0>
[   99.731842][ T7943] tipc: Resetting bearer <eth:syzkaller0>
[   99.753621][ T7943] tipc: Disabling bearer <eth:syzkaller0>
[   99.766251][ T7955] netlink: 'syz.2.887': attribute type 10 has an invalid length.
[   99.769641][ T7955] netlink: 40 bytes leftover after parsing attributes in process `syz.2.887'.
[   99.773444][ T7955] dummy0: entered promiscuous mode
[   99.780977][ T7955] dummy0: entered allmulticast mode
[   99.783989][ T7955] bridge0: port 3(dummy0) entered blocking state
[   99.787717][ T7955] bridge0: port 3(dummy0) entered disabled state
[   99.849122][ T7960] netlink: 28 bytes leftover after parsing attributes in process `syz.1.888'.
[  100.173915][ T7991] syz_tun: entered allmulticast mode
[  100.180743][ T7991] syz_tun: left allmulticast mode
[  100.383895][ T8010] macsec1: entered promiscuous mode
[  100.385921][ T8010] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  100.388746][ T8010] macsec1: entered allmulticast mode
[  100.391612][ T8010] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  100.801704][ T8028] Illegal XDP return value 4294967274 on prog  (id 120) dev N/A, expect packet loss!
[  101.151685][ T8043] ieee802154 phy0 wpan0: encryption failed: -90
[  101.319101][ T8034] xt_CT: No such helper "snmp"
[  101.395505][ T8052] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  101.400091][ T8052] syzkaller0: entered promiscuous mode
[  101.402616][ T8052] syzkaller0: entered allmulticast mode
[  101.427611][ T8052] tipc: Resetting bearer <eth:syzkaller0>
[  101.439256][ T8051] tipc: Resetting bearer <eth:syzkaller0>
[  101.466808][ T8051] tipc: Disabling bearer <eth:syzkaller0>
[  101.563717][ T8058] syzkaller0: entered allmulticast mode
[  101.678631][ T8065] 
[  101.679857][ T8065] =============================
[  101.682054][ T8065] WARNING: suspicious RCU usage
[  101.684294][ T8065] 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 Not tainted
[  101.688901][ T8065] -----------------------------
[  101.691274][ T8065] net/core/netclassid_cgroup.c:24 suspicious rcu_dereference_check() usage!
[  101.695186][ T8065] 
[  101.695186][ T8065] other info that might help us debug this:
[  101.695186][ T8065] 
[  101.700777][ T8065] 
[  101.700777][ T8065] rcu_scheduler_active = 2, debug_locks = 1
[  101.704275][ T8065] 1 lock held by syz.2.936/8065:
[  101.706576][ T8065]  #0: ffffffff8e13f340 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x38/0x80
[  101.711003][ T8065] 
[  101.711003][ T8065] stack backtrace:
[  101.713786][ T8065] CPU: 0 UID: 0 PID: 8065 Comm: syz.2.936 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  101.713807][ T8065] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  101.713817][ T8065] Call Trace:
[  101.713824][ T8065]  <TASK>
[  101.713832][ T8065]  dump_stack_lvl+0x189/0x250
[  101.713860][ T8065]  ? __pfx_dump_stack_lvl+0x10/0x10
[  101.713877][ T8065]  ? __pfx__printk+0x10/0x10
[  101.713899][ T8065]  ? print_lock_name+0xde/0x100
[  101.713922][ T8065]  lockdep_rcu_suspicious+0x140/0x1d0
[  101.713942][ T8065]  task_cls_state+0x1a5/0x1d0
[  101.713964][ T8065]  bpf_get_cgroup_classid_curr+0x18/0x60
[  101.713981][ T8065]  bpf_prog_841aec7193f618b3+0x1b/0x21
[  101.713995][ T8065]  bpf_prog_run_pin_on_cpu+0x6a/0x150
[  101.714017][ T8065]  bpf_prog_test_run_syscall+0x312/0x4b0
[  101.714037][ T8065]  ? __pfx_bpf_prog_test_run_syscall+0x10/0x10
[  101.714053][ T8065]  ? __fget_files+0x2a/0x420
[  101.714075][ T8065]  ? __pfx_bpf_prog_test_run_syscall+0x10/0x10
[  101.714094][ T8065]  bpf_prog_test_run+0x2c7/0x340
[  101.714112][ T8065]  __sys_bpf+0x4a4/0x860
[  101.714127][ T8065]  ? __pfx___sys_bpf+0x10/0x10
[  101.714151][ T8065]  ? exc_page_fault+0x76/0xf0
[  101.714176][ T8065]  ? rcu_is_watching+0x15/0xb0
[  101.714198][ T8065]  __x64_sys_bpf+0x7c/0x90
[  101.714217][ T8065]  do_syscall_64+0xfa/0x3b0
[  101.714230][ T8065]  ? lockdep_hardirqs_on+0x9c/0x150
[  101.714251][ T8065]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  101.714265][ T8065]  ? exc_page_fault+0x9f/0xf0
[  101.714287][ T8065]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  101.714300][ T8065] RIP: 0033:0x7f1edcd8e929
[  101.714353][ T8065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  101.714365][ T8065] RSP: 002b:00007f1eddce3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  101.714383][ T8065] RAX: ffffffffffffffda RBX: 00007f1edcfb5fa0 RCX: 00007f1edcd8e929
[  101.714393][ T8065] RDX: 0000000000000039 RSI: 0000200000000500 RDI: 000000000000000a
[  101.714402][ T8065] RBP: 00007f1edce10b39 R08: 0000000000000000 R09: 0000000000000000
[  101.714411][ T8065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  101.714420][ T8065] R13: 0000000000000000 R14: 00007f1edcfb5fa0 R15: 00007fff7653b6b8
[  101.714444][ T8065]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  102.518023][ T5860] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.596698][ T5860] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.659591][ T5860] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.705151][ T5860] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.075714][ T5860] bridge0: port 3(dummy0) entered disabled state
[  103.097264][ T5860] bridge_slave_1: left allmulticast mode
[  103.099373][ T5860] bridge_slave_1: left promiscuous mode
[  103.101450][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.110841][ T5860] bridge_slave_0: left allmulticast mode
[  103.113080][ T5860] bridge_slave_0: left promiscuous mode
[  103.115533][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.125638][ T5860] bridge0: port 3(dummy0) entered disabled state
[  103.132587][ T5860] bridge_slave_1: left allmulticast mode
[  103.135385][ T5860] bridge_slave_1: left promiscuous mode
[  103.138833][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.143880][ T5860] bridge_slave_0: left allmulticast mode
[  103.149449][ T5860] bridge_slave_0: left promiscuous mode
[  103.152250][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.409222][ T5860] bond1 (unregistering): (slave gretap1): Releasing active interface
[  103.576314][ T5860] smc: removing net device bond0 with user defined pnetid SYZ2
[  103.581514][ T5860] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  103.587096][ T5860] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  103.592898][ T5860] bond0 (unregistering): Released all slaves
[  103.604778][ T5860] bond1 (unregistering): Released all slaves
[  103.988527][ T5860] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  103.993107][ T5860] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  103.998048][ T5860] bond0 (unregistering): Released all slaves
[  104.088389][ T5860] tipc: Left network mode
[  104.098058][ T5860] tipc: Left network mode
[  104.405109][ T5860] mac80211_hwsim hwsim2 wlan0 (unregistering): left allmulticast mode
[  104.409010][ T5860] mac80211_hwsim hwsim2 wlan0 (unregistering): left promiscuous mode
[  104.534083][ T5860] hsr_slave_0: left promiscuous mode
[  104.537448][ T5860] hsr_slave_1: left promiscuous mode
[  104.540412][ T5860] batman_adv: batadv0: Removing interface: batadv_slave_0
[  104.544109][ T5860] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  104.547371][ T5860] batman_adv: batadv0: Removing interface: batadv_slave_1
[  104.554576][ T5860] hsr_slave_0: left promiscuous mode
[  104.559378][ T5860] hsr_slave_1: left promiscuous mode
[  104.562170][ T5860] batman_adv: batadv0: Removing interface: batadv_slave_0
[  104.566459][ T5860] batman_adv: batadv0: Removing interface: batadv_slave_1
[  104.589483][ T5860] veth1_macvtap: left promiscuous mode
[  104.592321][ T5860] veth0_macvtap: left promiscuous mode
[  104.594815][ T5860] veth1_vlan: left promiscuous mode
[  104.597695][ T5860] veth0_vlan: left promiscuous mode
[  105.013461][ T5860] team0 (unregistering): Port device team_slave_1 removed
[  105.050815][ T5860] team0 (unregistering): Port device team_slave_0 removed
[  105.709678][ T5860] team0 (unregistering): Port device team_slave_1 removed
[  105.736157][ T5860] team0 (unregistering): Port device team_slave_0 removed
[  106.521000][ T5860] IPVS: stop unused estimator thread 0...

VM DIAGNOSIS:
01:28:18  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000072 RBX=0000000000000072 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000f26 RDI=0000000000000f27 RBP=00000000000003f8 RSP=ffffc90002e1f550
R8 =ffff88801fcd8237 R9 =1ffff11003f9b046 R10=dffffc0000000000 R11=ffffffff85478780
R12=dffffc0000000000 R13=ffffffff99af989f R14=ffffffff99dfe6e0 R15=0000000000000000
RIP=ffffffff854787fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f1eddce36c0 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b3051fffc CR3=000000001ec48000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f1edcf85478 00007f1edcf85450 XMM03=00007f1edcf85488 00007f1edcf85480
XMM04=00007f1eddaed100 00007f1edcf85440 XMM05=00007f1edcf85458 00007f1edcf854a0
XMM06=00007f1edcf85498 00007f1edcf85490 XMM07=00007f1edcf85488 00007f1edcf85480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f1edce11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=0000000000000000 RCX=5be3b6a7e824e900 RDX=0000000000000000
RSI=ffffffff8db865a0 RDI=ffffffff8be29dc0 RBP=ffffffff8172aae5 RSP=ffffc900001e0570
R8 =0000000000000000 R9 =ffffffff8172aae5 R10=ffffc900001e0738 R11=ffffffff81ad03a0
R12=0000000000000002 R13=ffffffff8e13f160 R14=0000000000000000 R15=0000000000000246
RIP=ffffffff8b7212a0 RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00005555951f2500 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fd5ce5a8d68 CR3=0000000027c10000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fd5ce585478 00007fd5ce585450 XMM03=00007fd5ce585488 00007fd5ce585480
XMM04=00007fd5cf0ed100 00007fd5ce585440 XMM05=00007fd5ce585458 00007fd5ce5854a0
XMM06=00007fd5ce585498 00007fd5ce585490 XMM07=00007fd5ce585488 00007fd5ce585480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fd5ce411c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
