last executing test programs:

2.286818115s ago: executing program 0 (id=849):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0xb20, 0x1c0, 0x43, 0xa0, 0x1c0, 0x98, 0xa88, 0x178, 0x178, 0xa88, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1a0, 0x1c0, 0x3f000000, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x3, {0x100000001}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x888, 0x8c8, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x9}, {0x3}, {0x1, 0x1}, {0x0, 0x3}, {0x4, 0x2}, {0xb1d}, {0x3}, {0x8}, {0x2, 0x3}, {0x3}, {0x103}], [{0xe8f3, 0x5}, {0x1d, 0x6}, {0x4, 0x8}, {0x0, 0x4}, {0x4, 0xc3e}, {0x1, 0x100}, {0x6, 0x7}, {0x3, 0x3}, {0xf2, 0x3}, {0x3ff, 0x8}, {0x10, 0x3}], 0x6, 0x6}, {[{0x80, 0x3}, {0x2}, {0x6, 0x1}, {0x355cbac3, 0x2}, {0x0, 0x2}, {0x0, 0x2}, {0x7}, {0xe7, 0x2}, {0x3, 0x3}, {0x5598e8fe, 0x2}, {0x6, 0x1}], [{0x9, 0x9097}, {0x7, 0x9}, {0x7, 0xa}, {0x6, 0x8}, {0x20080, 0x5}, {0x13, 0xc0000000}, {0x40, 0xb}, {0x9, 0x6}, {0x4, 0x2}, {0x6, 0x7fffffff}, {0x7fffffff, 0x400}], 0x7}, {[{0x84, 0x2}, {}, {0x0, 0x2}, {0xffffffff, 0x1}, {}, {0x5, 0x1}, {0x5, 0x2}, {0x8, 0x3}, {0x2, 0x3}, {0x8, 0x1}, {0x7, 0x1}], [{0x9, 0x5}, {0x80, 0x32}, {0x0, 0xfffffff7}, {0xff, 0x1}, {0x7, 0x6}, {0xdb9, 0xff4}, {0x6, 0x3ff}, {0x3, 0x6}, {0x5, 0x10}, {0x9, 0x6}, {0x10000, 0x2}], 0x4, 0x2a}, {[{0x3, 0x2}, {0xa, 0x1}, {0x6, 0x1}, {0x10, 0x3}, {0x2, 0x2}, {0x2, 0x2}, {0x3, 0x1}, {0x2, 0x3}, {0x3, 0x1}, {0x2, 0x2}, {0x477d, 0x1}], [{0x4, 0xffffffff}, {0x200, 0x6}, {0x4be1, 0x4044}, {0x1}, {0x5, 0xc}, {0x3, 0x4}, {0x2, 0x4}, {0x800, 0x8000}, {0x8, 0x800}, {0x3, 0x2}, {0xe, 0x8000}], 0x4, 0xb}, {[{0x7, 0x1}, {0xd, 0x3}, {0x5}, {0x61}, {0x9}, {}, {0x2}, {0x1}, {0x0, 0x2}, {0x9, 0x3}, {0x5, 0x3}], [{0x58d, 0x3ff}, {0x0, 0x7f}, {0x6}, {0xfc9b, 0x80000001}, {0x101, 0x7}, {0x7, 0x1}, {0x7, 0x8001}, {0x2, 0x1}, {0x2, 0x2}, {0x9, 0x4cf}, {0x7, 0x10000}], 0x1}, {[{0x2}, {0x9}, {0x8, 0x1}, {0x2, 0x3}, {0x71, 0x3}, {0x0, 0x2}, {0xe, 0x2}, {0x6, 0x2}, {0x5}, {0x3000000, 0x3}, {0x6, 0x1}], [{0x9, 0x3}, {0x5, 0x7fffffff}, {0xffff, 0x4}, {0x0, 0x7}, {0x8, 0xb502}, {0x1ff, 0x86}, {0x6, 0xffffffff}, {0x3, 0x4}, {0x5, 0x6}, {0xf, 0xf93}, {0x5, 0x4}], 0x3, 0x3}, {[{0x7, 0x1}, {0x3, 0x1}, {0x45d7}, {0xfff, 0x3}, {0xc4f, 0x3}, {0x0, 0x2}, {0x400, 0x1}, {0x2, 0x1}, {0x4, 0x2}, {0xfffffffd}, {0x2}], [{0x3, 0x6}, {0xed, 0xd}, {0x80, 0xb81d}, {0x2ca, 0x80000000}, {0x8, 0xff}, {0x7, 0x45a8}, {0x8, 0x6}, {0x4, 0x1}, {0x2, 0x6}, {0xfc, 0x6}, {0xd, 0x138c}], 0x6}, {[{0x4, 0x1}, {0x800}, {0x9, 0x2}, {0xf0000000, 0x2}, {0x6, 0x3}, {0x3, 0x2}, {0x8, 0x2}, {}, {0x9}, {0x400, 0x2}, {0x8, 0x3}], [{0x7, 0xfffffffd}, {0x2}, {0x2, 0x2}, {0x8f, 0x6}, {0x7, 0x5}, {0x8, 0x7}, {0xb, 0x82c6}, {0xb1b}, {0xbd5c, 0xffff}, {0x1, 0x9b8d}, {0xec, 0x5}], 0x2, 0x6}, {[{0x8}, {0x0, 0x1}, {0xac000000}, {0x6, 0x2}, {0x2d8, 0x3}, {0x7e3ea4bc}, {0x8, 0x1}, {0x4f, 0x3}, {0x4, 0x2}, {0xfffffff7}, {0x3, 0x2}], [{0x5, 0x42}, {0x76a74689, 0x4}, {0x1}, {0x8000, 0x7}, {0x400, 0xdd}, {0xfff, 0x8}, {0x76b, 0xfffffffe}, {0xa6d00, 0xfffffff7}, {0x10001, 0xfc8d}, {0x0, 0x10001}, {0x4, 0x3}], 0x1, 0x9}, {[{0x8, 0x1}, {0x3, 0x3}, {0x18, 0x3}, {0x3ff, 0x3}, {0x7fffffff}, {0x8}, {0x1}, {0x8, 0x3}, {0xf1b6}, {0x80, 0x3}, {0x4, 0x2}], [{0x2, 0x4}, {0x3, 0xf}, {0x9, 0x6}, {0x7f, 0x8}, {0x7, 0x273e1899}, {0x4, 0x1}, {0x6, 0x3}, {0x1, 0xb7}, {0x8, 0x3}, {0x3, 0x1}, {0x7ff, 0x63}], 0xb, 0x3}, {[{0x1, 0x2}, {0x6, 0x3}, {0xffff, 0x1}, {0x1}, {0x4, 0x3}, {0x4, 0x3}, {0xaa7}, {0x100, 0x3}, {0x2}, {0xfffffff7, 0xb90af65875a5dc08}, {0x4, 0x3}], [{0x3}, {0x8001, 0x7}, {0x10000, 0x7524}, {0x73d, 0x4}, {0x0, 0x280000}, {0x3, 0x3af}, {0x5, 0x2}, {0x101, 0xbf}, {0x10000, 0x6}, {0x3, 0x800}], 0x8, 0x5}], 0x3}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xb80)

2.227987783s ago: executing program 0 (id=851):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r0, 0x0)
accept(r0, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x8100, 0x0)
r1 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)}, 0x40000)
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[], 0x30}}, 0x80e1)
socket$inet6(0xa, 0x3, 0x7)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x503, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0xffc1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004804}, 0x800)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$inet6_sctp(0xa, 0x5, 0x84)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x7f}, 0x0, 0x0)

1.367110436s ago: executing program 0 (id=866):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10)
sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r0, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x6, 0x8, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xea, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x33, 0x8, 0x8, &(0x7f0000000700)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff00000000000000001801000020646c4200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000002300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$packet(0x11, 0x2, 0x300)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_TIOCINQ(r5, 0x541b, &(0x7f0000000340))
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
getpeername$netlink(r5, &(0x7f0000000080), &(0x7f0000000200)=0xc)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688474c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r7 = socket$key(0xf, 0x3, 0x2)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, r7, 0x0)

966.349309ms ago: executing program 0 (id=872):
sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4008010)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400000200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0)

917.516135ms ago: executing program 0 (id=874):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
r1 = socket(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_ADDRFORM(r1, 0x3a, 0x1, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000180)={'gre0\x00', 0x0, 0x700, 0x80, 0x6, 0x10, {{0x1b, 0x4, 0x0, 0x0, 0x6c, 0x66, 0x0, 0xe, 0x2f, 0x0, @local, @local, {[@generic={0x82, 0xc, "1ce19af4ec141446831c"}, @timestamp_addr={0x44, 0x4c, 0xd9, 0x1, 0x1, [{@private=0xa010102, 0x7fff}, {@rand_addr=0x64010102, 0x7fff}, {@empty, 0x6}, {@rand_addr=0x64010101, 0xc580}, {@multicast1, 0x6554}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x1}, {@multicast2, 0x8}, {@multicast1, 0xcf5}, {@remote}]}]}}}}})
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
epoll_create(0x0)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
socket$inet_sctp(0x2, 0x5, 0x84)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00_\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000e80)="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", 0x26f}, {&(0x7f0000000580)="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", 0x212}], 0x2, 0x0, 0x0, 0x4090}, 0x0)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000040)=0xfffffffa, 0x4)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0)
sendmsg$alg(r0, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x30, 0x3, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x30}}, 0x0)
read$alg(r0, &(0x7f0000001100)=""/4109, 0x100d)
sendmsg$nl_route_sched(r0, 0x0, 0x0)

908.010229ms ago: executing program 0 (id=876):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', <r1=>0x0})
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r2, &(0x7f0000000080)={0x1d, r1}, 0x10)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xc, 0x4, 0x268, 0xffffffff, 0x130, 0x1d0, 0x90, 0x98, 0xffffffff, 0x1d0, 0x98, 0x1d0, 0x98, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@local, @broadcast, 0x0, 0x0, 'ip6tnl0\x00', 'hsr0\x00'}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_audit(0x10, 0x3, 0x9)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$team(&(0x7f0000000540), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', <r7=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd7000fbdbdf250100000008000100", @ANYRES32=r7, @ANYBLOB="1c0002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x24000c91}, 0x24040014)
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000000)={r7, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000180)=0x4000000)
ioctl$PPPIOCSFLAGS1(r8, 0x40047459, &(0x7f0000000080)=0x6100204)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket(0x10, 0x3, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r12)
getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r13, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newtfilter={0x64, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x2}, {0xd}, {0xfff1, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x38, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_police={0x30, 0x16, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r14, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916d, 0x15}}}}}, 0x20}}, 0x4000054)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)

355.978585ms ago: executing program 1 (id=895):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x1, @loopback}, 0x10)
setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000000180)={{&(0x7f0000000080)=""/170, 0xaa}, &(0x7f0000000140), 0x7c}, 0x20)
sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0), 0x0, 0x1000000000000}}], 0x48}, 0x0)
socket$rds(0x15, 0x5, 0x0) (async)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x1, @loopback}, 0x10) (async)
setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000000180)={{&(0x7f0000000080)=""/170, 0xaa}, &(0x7f0000000140), 0x7c}, 0x20) (async)
sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0), 0x0, 0x1000000000000}}], 0x48}, 0x0) (async)

285.602601ms ago: executing program 1 (id=897):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
r1 = socket$inet(0x2, 0x1, 0x0)
getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x0, [0x4, 0x80, 0xffffffffffffffc0, 0xfff, 0xfffffffffffffff7, 0xd], 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x108)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xb9075000)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10)
recvmmsg(0xffffffffffffffff, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}, 0x2000}], 0x1, 0x162, 0x0)
sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) (async)
socket$inet(0x2, 0x1, 0x0) (async)
getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x0, [0x4, 0x80, 0xffffffffffffffc0, 0xfff, 0xfffffffffffffff7, 0xd], 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x108) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xb9075000) (async)
socket$rds(0x15, 0x5, 0x0) (async)
bind$rds(r2, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) (async)
recvmmsg(0xffffffffffffffff, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}, 0x2000}], 0x1, 0x162, 0x0) (async)
sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) (async)

195.398839ms ago: executing program 1 (id=899):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0a8b65cfae00000000040000003e0578d6eedaa202c4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r2 = socket(0x10, 0x2, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
r6 = socket(0x10, 0x80003, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "0000000000020400"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000046090100000003e71600000006000000180100002020702500000000002020207b9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b703000000000000240900000600ffff5c03000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = socket(0x2, 0x80805, 0x0)
close(0x3)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r9, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8)
sendto$inet6(r9, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x8}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x85, 0x0, &(0x7f0000000180))
sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x1903d}}], 0x48}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0) (async)
socket$rds(0x15, 0x5, 0x0) (async)
bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0a8b65cfae00000000040000003e0578d6eedaa202c4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async)
socket(0x10, 0x2, 0x0) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00'}) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) (async)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
socket(0x10, 0x80003, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'lo\x00'}) (async)
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "0000000000020400"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000046090100000003e71600000006000000180100002020702500000000002020207b9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b703000000000000240900000600ffff5c03000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
socket(0x2, 0x80805, 0x0) (async)
close(0x3) (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
setsockopt$inet_sctp6_SCTP_INITMSG(r9, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) (async)
sendto$inet6(r9, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x8}, 0x1c) (async)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x85, 0x0, &(0x7f0000000180)) (async)
sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x1903d}}], 0x48}, 0x0) (async)

105.956798ms ago: executing program 2 (id=900):
sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b9070400000073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf458aac3314007c3e35d5e4bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a677f122b7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fed9879328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e2725427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a95", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0)
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4008010)
sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r0, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400000200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0)

105.747218ms ago: executing program 2 (id=901):
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004000)=[{{&(0x7f0000000540)={0xa, 0x4e21, 0x100, @empty, 0x100}, 0x1c, &(0x7f0000000bc0)=[{&(0x7f0000000640)="e9b29ec9578247a56ae81089547bea", 0xf}, {&(0x7f0000000680)="47e9a62fa4eb6565f1b6b3f925a777fb08cc9a1e042bc5cc9a27fc26b0930a8cb8a89a4dbc17e0b964994bfa92ec2a2f163fd69caf377e2e8e34abdc04a74a0b61f24c053c36650e72b8efd3c7710c290a987cd748659247e6627350bd9eeeaac8d217a060429da792281b058a6b4890c3aa228b192ee8a07fc57585f836921e620e2ad9322b65df39a7aef96b9b8baa240151a4430f70e33de442c0d9098e523d5e7da6fe303f2c52dfa7559f86104e44c10e3b0e8009ff09034bcb45", 0xbd}, {&(0x7f0000000780)="d85018387b5b266aa471b44160766f", 0xf}, {&(0x7f0000000880)="f74769a7302ea7ae9b02da6dc62b6f35828cc25676610cd1583d7f70eb86c1a930c87647c6fcd08e7315c34f6f906191d46392a9ed6d81cfa7fae62ee82e3376b17327311a133cb3521d2752499914e057534f6c253757bb7903f8a469ba31", 0x5f}, {&(0x7f0000000980)="b5cd58dfe9109c16222ab1", 0xb}, {&(0x7f00000009c0)="b30237afac621aae97dbd2ed954a1a6a5254193645b930ce32506eebc01bfd1e95fad95f5ab010df4d24197c2d4e04db79405902fac270896f85acbb99ef3e5facfcf9df5a57d5025137dc6f979fefbb4ca94a1db22788696f254131975b38981615f4b29fd2741147d469c6771022e55863d5e65f73a20352ce87ba994c0196de368d571a1de061569a376b1e736f0e2127da6ee3ca029e383796aa2dbc262f2de5cfe57c6f154e0754a27935bb2bd6ff3110e99ab2d7408ac9a35fa57a9484e8ead5941821174c621743ef199e3a8e17b4271de8d67ed221", 0xd9}, {&(0x7f0000000ac0)="7350077ad2026fc2ab9bf7e824ccafd7401e9d9f8842cf8c39d9134b7d79d9c1e6ce64231b33885754a4f95b5d9de80b2686f98b3b3a6928bf", 0x39}], 0x7}}, {{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000001540)="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", 0x441}, {0x0}], 0x2}, 0x1200}, {{&(0x7f0000003880)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x5}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x2008080)

101.618571ms ago: executing program 1 (id=902):
r0 = socket(0x40000000015, 0x5, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4)
bind$inet(r0, &(0x7f0000000480)={0x2, 0x0, @loopback}, 0x10)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0)
sendmmsg$inet(r0, &(0x7f0000000a00)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000800)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xa}}], 0x18}}], 0x1, 0x4000040)

101.424424ms ago: executing program 2 (id=903):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002700)=ANY=[@ANYBLOB="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"], 0x74c4}, 0x1, 0x0, 0x0, 0xc004}, 0xc000)
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10) (async)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080)={0x9, [0x0, 0x0, 0x0, 0x0, <r3=>0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x28)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000100)={r3, 0x4, 0x46, "d57633b9c9d82f53af17630346e43e481574c9d24b16a65911cdba392e57cc6a4133ce117c4e1d411c3ff245587510aee3a65577f9d4f64ed3ab68038cd93fec4471b78d324b"}, 0x4e)
sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000980)}, 0x0)

22.175162ms ago: executing program 2 (id=904):
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r2, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x8d0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f0000000340)=ANY=[@ANYBLOB="5e8b6dd4a6c2bd7020100000", @ANYRES16=r0, @ANYBLOB="01002dbd7000ffdbdf25040000000c0001800600010002000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x12)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0\x00'})
r4 = socket$kcm(0x15, 0x5, 0x0)
sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000ac0)=@rc={0xa, @any, 0xef}, 0x80, 0x0, 0x2d}, 0x4001044)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000040)={0x24, r6, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0xfa}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x801)
sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r6, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @void}}}, 0x28}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x44, r6, 0x410, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x54b7915261cbd9f}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x8010}, 0x40050)

21.979822ms ago: executing program 1 (id=905):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', <r1=>0x0})
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r2, &(0x7f0000000080)={0x1d, r1}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r1, {0x10, 0x4}, {0x21}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)

20.246638ms ago: executing program 2 (id=906):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f00000000c0)="02000000020001000003be8c5ee1768810003308030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfcceb", 0x90)
r3 = epoll_create1(0x80000)
ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fddbdf2501000000080003000700000070da04000400000005000500030000000500060001000000"], 0x34}, 0x1, 0x4000000000000000, 0x0, 0x882}, 0x0)

20.017287ms ago: executing program 2 (id=907):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000010850000001d00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="5a6e41dea43e63a3f70cff11c72b", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="5a6e41dea43e63a3f70cff11c72b", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000580)={@mcast1, @remote, @dev={0xfe, 0x80, '\x00', 0x25}, 0x2000000, 0x4, 0x7d, 0x600, 0x2, 0x200}) (async)
ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000580)={@mcast1, @remote, @dev={0xfe, 0x80, '\x00', 0x25}, 0x2000000, 0x4, 0x7d, 0x600, 0x2, 0x200})
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3}, 0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r4 = socket$rds(0x15, 0x5, 0x0)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$inet_sctp(r5, &(0x7f0000000400)={&(0x7f0000000000)=@in={0x2, 0x4e23, @private=0xa010100}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000280)='+', 0x1}], 0x1, &(0x7f0000000180)=[@prinfo={0x18}, @sndrcv={0x30, 0x84, 0x1, {0x7, 0x8021, 0x1, 0x5, 0x80000000, 0x8, 0x48, 0x1}}, @sndinfo={0x20, 0x84, 0x2, {0x7, 0xb, 0xffffffff, 0xff}}], 0x68, 0x54}, 0x4040041) (async)
sendmsg$inet_sctp(r5, &(0x7f0000000400)={&(0x7f0000000000)=@in={0x2, 0x4e23, @private=0xa010100}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000280)='+', 0x1}], 0x1, &(0x7f0000000180)=[@prinfo={0x18}, @sndrcv={0x30, 0x84, 0x1, {0x7, 0x8021, 0x1, 0x5, 0x80000000, 0x8, 0x48, 0x1}}, @sndinfo={0x20, 0x84, 0x2, {0x7, 0xb, 0xffffffff, 0xff}}], 0x68, 0x54}, 0x4040041)
bind$rds(r4, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) (async)
bind$rds(r4, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10)
sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)

0s ago: executing program 1 (id=908):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4008010)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400000200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:11286' (ED25519) to the list of known hosts.
syzkaller login: [   48.898313][ T5799] cgroup: Unknown subsys name 'net'
[   49.042666][ T5799] cgroup: Unknown subsys name 'cpuset'
[   49.047472][ T5799] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.277853][ T5799] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   53.501926][ T5200] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   53.510241][ T5200] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   53.512865][ T5200] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   53.516141][ T5200] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   53.518987][ T5200] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   53.523683][ T5200] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   53.526503][ T5200] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   53.531727][ T5814] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   53.534460][ T5814] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   53.536771][ T5814] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   53.550452][   T56] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   53.553243][   T56] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   53.555954][   T56] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   53.558650][   T56] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   53.562247][   T56] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   53.767227][ T5812] chnl_net:caif_netlink_parms(): no params data found
[   53.785859][ T5815] chnl_net:caif_netlink_parms(): no params data found
[   53.845945][ T5808] chnl_net:caif_netlink_parms(): no params data found
[   53.926681][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.928992][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.931702][ T5812] bridge_slave_0: entered allmulticast mode
[   53.934292][ T5812] bridge_slave_0: entered promiscuous mode
[   53.941311][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.943518][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.945648][ T5815] bridge_slave_0: entered allmulticast mode
[   53.948166][ T5815] bridge_slave_0: entered promiscuous mode
[   53.951695][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.953995][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.956141][ T5815] bridge_slave_1: entered allmulticast mode
[   53.958761][ T5815] bridge_slave_1: entered promiscuous mode
[   53.961952][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.964064][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.966223][ T5812] bridge_slave_1: entered allmulticast mode
[   53.968835][ T5812] bridge_slave_1: entered promiscuous mode
[   54.012113][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.014334][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.016516][ T5808] bridge_slave_0: entered allmulticast mode
[   54.019616][ T5808] bridge_slave_0: entered promiscuous mode
[   54.024198][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.028079][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.032238][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.034706][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.036899][ T5808] bridge_slave_1: entered allmulticast mode
[   54.039501][ T5808] bridge_slave_1: entered promiscuous mode
[   54.043289][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.053166][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.068736][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.084690][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.095102][ T5812] team0: Port device team_slave_0 added
[   54.109594][ T5815] team0: Port device team_slave_0 added
[   54.112814][ T5815] team0: Port device team_slave_1 added
[   54.121432][ T5812] team0: Port device team_slave_1 added
[   54.139745][ T5808] team0: Port device team_slave_0 added
[   54.155456][ T5808] team0: Port device team_slave_1 added
[   54.158442][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.161184][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   54.169200][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.174322][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.176440][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   54.184412][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.188293][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.190930][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   54.198828][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.213037][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.214956][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   54.224778][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.240226][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.242398][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   54.252184][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.256744][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.258919][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   54.266789][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.307342][ T5812] hsr_slave_0: entered promiscuous mode
[   54.310642][ T5812] hsr_slave_1: entered promiscuous mode
[   54.334131][ T5808] hsr_slave_0: entered promiscuous mode
[   54.336330][ T5808] hsr_slave_1: entered promiscuous mode
[   54.338365][ T5808] debugfs: 'hsr0' already exists in 'hsr'
[   54.340450][ T5808] Cannot create hsr debugfs directory
[   54.346157][ T5815] hsr_slave_0: entered promiscuous mode
[   54.349203][ T5815] hsr_slave_1: entered promiscuous mode
[   54.352540][ T5815] debugfs: 'hsr0' already exists in 'hsr'
[   54.354840][ T5815] Cannot create hsr debugfs directory
[   54.590881][ T5812] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   54.603182][ T5812] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   54.607681][ T5812] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   54.621544][ T5812] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   54.637538][ T5808] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   54.653965][ T5808] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   54.671841][ T5808] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   54.676240][ T5808] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   54.684709][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.686901][ T5812] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.689328][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.691546][ T5812] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.707999][ T5815] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   54.714013][ T5815] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   54.718321][ T5815] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   54.731483][ T5815] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   54.739159][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.741678][ T5808] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.744081][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.746284][ T5808] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.782979][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.785141][ T5815] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.787427][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.789623][ T5815] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.804078][ T1092] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.806947][ T1092] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.809412][ T1092] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.812422][ T1092] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.815764][ T1092] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.818565][ T1092] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.828040][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.850384][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.859427][ T5812] 8021q: adding VLAN 0 to HW filter on device team0
[   54.868988][  T201] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.871267][  T201] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.875917][ T5808] 8021q: adding VLAN 0 to HW filter on device team0
[   54.889738][  T201] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.892161][  T201] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.905873][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.913379][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.915515][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.931684][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.933900][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.946150][ T5815] 8021q: adding VLAN 0 to HW filter on device team0
[   54.956333][ T5808] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   54.959461][ T5808] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   54.965997][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.968126][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.999967][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.002220][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.043400][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.097703][ T5812] veth0_vlan: entered promiscuous mode
[   55.102320][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.109580][ T5812] veth1_vlan: entered promiscuous mode
[   55.127061][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.149071][ T5808] veth0_vlan: entered promiscuous mode
[   55.155948][ T5812] veth0_macvtap: entered promiscuous mode
[   55.163034][ T5808] veth1_vlan: entered promiscuous mode
[   55.166763][ T5812] veth1_macvtap: entered promiscuous mode
[   55.187408][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.189891][ T5815] veth0_vlan: entered promiscuous mode
[   55.197919][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.207021][ T5808] veth0_macvtap: entered promiscuous mode
[   55.212362][ T5808] veth1_macvtap: entered promiscuous mode
[   55.217307][ T5838] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.221537][ T5815] veth1_vlan: entered promiscuous mode
[   55.226736][ T5838] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.231485][ T5838] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.237433][ T5838] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.246319][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.256306][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.273833][ T5838] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.277395][ T5838] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.282447][ T5838] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.286412][ T5815] veth0_macvtap: entered promiscuous mode
[   55.292823][ T5838] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.299036][ T5815] veth1_macvtap: entered promiscuous mode
[   55.322175][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.342475][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.357517][ T5838] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.357994][  T201] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.363342][ T5838] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.366831][ T5838] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.369609][ T5838] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.372501][  T201] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.392108][  T206] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.395127][  T206] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.417340][  T201] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.420011][  T201] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.449821][  T201] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.457936][  T201] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.463860][ T5812] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   55.465517][   T84] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.476746][   T84] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.504146][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.506542][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.602369][ T5814] Bluetooth: hci1: command tx timeout
[   55.604300][ T5814] Bluetooth: hci0: command tx timeout
[   55.606203][   T56] Bluetooth: hci2: command tx timeout
[   56.115881][ T5934] Cannot find del_set index 0 as target
[   56.351383][ T5952] x_tables: duplicate underflow at hook 2
[   56.442342][ T5958] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma?
[   56.575562][ T5967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.31'.
[   56.578378][ T5967] bond_slave_1: entered promiscuous mode
[   56.581415][ T5967] bond_slave_1: entered allmulticast mode
[   56.585117][ T5967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.31'.
[   56.644338][ T5971] batadv_slave_0: entered promiscuous mode
[   56.648491][ T5971] batman_adv: batadv0: Adding interface: macsec1
[   56.653848][ T5971] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   56.663196][ T5971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   56.666329][ T5971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   56.669261][ T5971] batman_adv: batadv0: Interface activated: macsec1
[   56.739050][ T5979] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   56.855671][ T5988] syz_tun: entered allmulticast mode
[   56.862525][ T5987] syz_tun: left allmulticast mode
[   57.102725][ T5994] Zero length message leads to an empty skb
[   57.152573][ T6000] bond0: Unable to set down delay as MII monitoring is disabled
[   57.282047][ T6007] warning: `syz.2.44' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   57.306867][ T6009] netlink: 88 bytes leftover after parsing attributes in process `syz.1.46'.
[   57.494896][ T6017] team0: Port device bridge1 added
[   57.680374][   T56] Bluetooth: hci2: command tx timeout
[   57.681523][ T5200] Bluetooth: hci0: command tx timeout
[   57.682095][   T56] Bluetooth: hci1: command tx timeout
[   57.959194][ T6046] netlink: 'syz.1.58': attribute type 2 has an invalid length.
[   57.962054][ T6046] netlink: 'syz.1.58': attribute type 5 has an invalid length.
[   57.991804][ T6048] netlink: 240 bytes leftover after parsing attributes in process `syz.1.59'.
[   57.995054][ T6048] netlink: 48 bytes leftover after parsing attributes in process `syz.1.59'.
[   58.028141][ T6050] batadv_slave_0: entered promiscuous mode
[   58.032063][ T6050] batman_adv: batadv0: Adding interface: macsec1
[   58.033992][ T6050] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   58.041737][ T6050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   58.044879][ T6050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.047853][ T6050] batman_adv: batadv0: Interface activated: macsec1
[   58.123149][ T6056] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   58.147618][ T6059] netlink: 52 bytes leftover after parsing attributes in process `syz.1.64'.
[   58.206239][ T6065] syz_tun: entered allmulticast mode
[   58.209626][ T6064] syz_tun: left allmulticast mode
[   58.241824][ T6067] syz.1.67 uses obsolete (PF_INET,SOCK_PACKET)
[   58.301502][ T6069] xt_connbytes: Forcing CT accounting to be enabled
[   58.624123][ T6083] atomic_op ffff888108abb998 conn xmit_atomic 0000000000000000
[   58.692301][ T6087] atomic_op ffff8881a8748998 conn xmit_atomic 0000000000000000
[   59.364421][ T6111] netlink: 'syz.0.86': attribute type 10 has an invalid length.
[   59.475555][ T6122] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[   59.485641][ T6122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.90'.
[   59.616925][ T6125] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma?
[   59.655133][ T6129] netlink: 16 bytes leftover after parsing attributes in process `syz.0.93'.
[   59.760669][   T56] Bluetooth: hci0: command tx timeout
[   59.760909][ T5814] Bluetooth: hci2: command tx timeout
[   59.762872][   T56] Bluetooth: hci1: command tx timeout
[   59.838245][ T6144] netlink: 232 bytes leftover after parsing attributes in process `syz.0.98'.
[   59.881550][ T6149] netlink: 88 bytes leftover after parsing attributes in process `syz.1.100'.
[   60.336156][ T6190] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma?
[   60.717890][ T6210] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma?
[   60.839429][ T6214] xt_connbytes: Forcing CT accounting to be enabled
[   60.972994][ T6220] wg1: entered promiscuous mode
[   60.974609][ T6220] wg1: entered allmulticast mode
[   60.981571][ T6220] netlink: 'syz.2.128': attribute type 1 has an invalid length.
[   61.028278][ T6220] netlink: 'syz.2.128': attribute type 1 has an invalid length.
[   61.311498][ T6244] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma?
[   61.406086][ T6249] netlink: 'syz.0.140': attribute type 5 has an invalid length.
[   61.484499][ T6253] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   61.750219][ T6268] netlink: 'syz.2.147': attribute type 2 has an invalid length.
[   61.752720][ T6268] netlink: 'syz.2.147': attribute type 5 has an invalid length.
[   61.834164][ T6274] rdma_op ffff88810ce0f1f0 conn xmit_rdma 0000000000000000
[   61.840495][   T56] Bluetooth: hci2: command tx timeout
[   61.840521][ T5200] Bluetooth: hci0: command tx timeout
[   61.842900][   T56] Bluetooth: hci1: command tx timeout
[   61.950374][ T6282] rdma_op ffff8881132d69f0 conn xmit_rdma 0000000000000000
[   62.500972][ T6305] syz_tun: entered allmulticast mode
[   62.504324][ T6304] syz_tun: left allmulticast mode
[   62.593410][ T6310] __nla_validate_parse: 3 callbacks suppressed
[   62.593423][ T6310] netlink: 64 bytes leftover after parsing attributes in process `syz.0.164'.
[   62.606503][ T6310] block nbd0: not configured, cannot reconfigure
[   62.633835][ T6314] netlink: 12 bytes leftover after parsing attributes in process `syz.0.165'.
[   62.769871][ T6324] netlink: 'syz.0.170': attribute type 1 has an invalid length.
[   62.839195][ T6328] geneve2: entered promiscuous mode
[   63.133756][ T6349] syzkaller1: entered promiscuous mode
[   63.135475][ T6349] syzkaller1: entered allmulticast mode
[   63.148317][ T6349] netlink: 'syz.2.180': attribute type 1 has an invalid length.
[   63.151237][ T6349] netlink: 4 bytes leftover after parsing attributes in process `syz.2.180'.
[   63.307093][ T6358] netlink: 12 bytes leftover after parsing attributes in process `syz.0.184'.
[   63.566613][   T10] IPVS: starting estimator thread 0...
[   63.585399][ T6365] netlink: 8 bytes leftover after parsing attributes in process `syz.1.187'.
[   63.589910][ T6365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.187'.
[   63.594557][ T6365] netlink: 12 bytes leftover after parsing attributes in process `syz.1.187'.
[   63.652719][ T6366] IPVS: using max 38 ests per chain, 91200 per kthread
[   63.792198][ T6371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.189'.
[   63.876968][ T6379] netlink: 'syz.1.190': attribute type 1 has an invalid length.
[   63.909546][ T6379] tipc: Started in network mode
[   63.912192][ T6379] tipc: Node identity ac14142f, cluster identity 4711
[   63.914909][ T6379] tipc: New replicast peer: 0.0.0.0
[   63.917246][ T6379] tipc: Enabled bearer <udp:syz2>, priority 10
[   63.919523][ T6379] tipc: New replicast peer: 172.30.1.2
[   64.085003][ T6385] netlink: 88 bytes leftover after parsing attributes in process `syz.2.192'.
[   64.297950][ T6397] netlink: 'syz.0.197': attribute type 5 has an invalid length.
[   64.458181][ T6405] netlink: 'syz.0.200': attribute type 1 has an invalid length.
[   64.461110][ T6405] netlink: 15974 bytes leftover after parsing attributes in process `syz.0.200'.
[   64.647292][ T6418] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma?
[   64.866593][ T6443] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma?
[   64.884008][ T6445] netlink: 'syz.1.214': attribute type 1 has an invalid length.
[   64.886497][ T6445] netlink: 'syz.1.214': attribute type 4 has an invalid length.
[   64.907254][ T6447] syzkaller0: entered promiscuous mode
[   64.909012][ T6447] syzkaller0: entered allmulticast mode
[   64.940860][ T5839] tipc: Node number set to 2886997039
[   65.037778][ T6458] netlink: 'syz.2.218': attribute type 29 has an invalid length.
[   65.928328][ T6475] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma?
[   65.937402][ T6477] Bluetooth: MGMT ver 1.23
[   66.051297][ T5259] udevd[5259]: worker [6183] terminated by signal 33 (Unknown signal 33)
[   66.092614][ T6497] veth0_macvtap: entered allmulticast mode
[   66.312678][ T6521] syzkaller0: entered promiscuous mode
[   66.314399][ T6521] syzkaller0: entered allmulticast mode
[   66.317567][ T6520] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   66.325136][ T6521] tipc: Resetting bearer <eth:syzkaller0>
[   66.345273][ T6519] tipc: Resetting bearer <eth:syzkaller0>
[   66.353930][ T6519] tipc: Disabling bearer <eth:syzkaller0>
[   66.495152][ T6535] syz_tun: entered allmulticast mode
[   66.498034][ T6534] syz_tun: left allmulticast mode
[   66.543689][ T6537] vlan2: entered allmulticast mode
[   66.545380][ T6537] bridge0: entered allmulticast mode
[   66.547218][ T6537] bridge1: port 1(vlan2) entered blocking state
[   66.549291][ T6537] bridge1: port 1(vlan2) entered disabled state
[   66.552598][ T6537] vlan2: entered promiscuous mode
[   66.554903][ T6537] bridge0: entered promiscuous mode
[   66.568038][ T6537] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[   66.679178][ T6549] netlink: 'syz.0.251': attribute type 2 has an invalid length.
[   66.681761][ T6549] netlink: 'syz.0.251': attribute type 5 has an invalid length.
[   66.847499][ T6568] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[   67.006689][ T6594] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[   67.051086][ T6599] batadv_slave_0: entered promiscuous mode
[   67.054382][ T6599] batman_adv: batadv0: Adding interface: macsec1
[   67.056347][ T6599] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   67.071357][ T6599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.075406][ T6599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.078377][ T6599] batman_adv: batadv0: Interface activated: macsec1
[   67.145328][ T6606] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma?
[   67.339793][ T6623] netlink: 'syz.2.279': attribute type 2 has an invalid length.
[   67.604170][ T6638] xt_connbytes: Forcing CT accounting to be enabled
[   67.666617][ T6642] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma?
[   67.876618][ T6651] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   67.889245][ T6659] __nla_validate_parse: 18 callbacks suppressed
[   67.889254][ T6659] netlink: 4 bytes leftover after parsing attributes in process `syz.0.292'.
[   68.048306][ T6670] netlink: 40 bytes leftover after parsing attributes in process `syz.1.296'.
[   68.051722][ T6670] netlink: 260 bytes leftover after parsing attributes in process `syz.1.296'.
[   68.115850][ T6682] syz_tun: entered allmulticast mode
[   68.118734][ T6680] syz_tun: left allmulticast mode
[   68.234284][ T6691] validate_nla: 1 callbacks suppressed
[   68.234313][ T6691] netlink: 'syz.2.302': attribute type 2 has an invalid length.
[   68.238476][ T6691] netlink: 'syz.2.302': attribute type 5 has an invalid length.
[   68.274651][ T6694] netlink: 'syz.2.303': attribute type 1 has an invalid length.
[   68.455822][ T6712] netlink: 28 bytes leftover after parsing attributes in process `syz.2.310'.
[   68.474908][ T6712] netlink: 12 bytes leftover after parsing attributes in process `syz.2.310'.
[   68.477856][ T6712] netlink: 68 bytes leftover after parsing attributes in process `syz.2.310'.
[   68.483805][ T6712] netlink: 12 bytes leftover after parsing attributes in process `syz.2.310'.
[   68.488345][ T6712] netlink: 68 bytes leftover after parsing attributes in process `syz.2.310'.
[   68.522093][ T6719] workqueue: name exceeds WQ_NAME_LEN. Truncating to: .	΁*]
[   68.566411][ T6722] syzkaller0: entered promiscuous mode
[   68.570010][ T6722] syzkaller0: entered allmulticast mode
[   68.575481][ T6724] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[   68.585728][ T6722] tipc: Started in network mode
[   68.587630][ T6722] tipc: Node identity 16885e4f82a5, cluster identity 4711
[   68.590323][ T6722] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   68.595916][ T6720] tipc: Resetting bearer <eth:syzkaller0>
[   68.614963][ T6720] tipc: Disabling bearer <eth:syzkaller0>
[   68.658772][ T6728] netlink: 'syz.1.316': attribute type 1 has an invalid length.
[   68.692244][ T6728] netlink: 16 bytes leftover after parsing attributes in process `syz.1.316'.
[   68.695165][ T6728] netlink: 44 bytes leftover after parsing attributes in process `syz.1.316'.
[   68.737253][ T6731] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma?
[   69.003575][ T6749] netlink: 'syz.1.323': attribute type 1 has an invalid length.
[   69.086237][ T6760] syz_tun: entered allmulticast mode
[   69.089385][ T6758] syz_tun: left allmulticast mode
[   69.236422][ T6775] ipvlan2: entered promiscuous mode
[   69.240767][ T6775] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   69.287026][ T6790] netlink: 'syz.2.337': attribute type 2 has an invalid length.
[   69.289376][ T6790] netlink: 'syz.2.337': attribute type 5 has an invalid length.
[   69.338415][ T6800] netlink: 'syz.1.340': attribute type 9 has an invalid length.
[   69.845024][ T6841] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   70.035400][ T6847] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma?
[   70.737501][ T6905] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma?
[   70.796433][ T6912] syz_tun: entered allmulticast mode
[   70.799318][ T6911] syz_tun: left allmulticast mode
[   71.236661][ T6930] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   71.282915][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.285007][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.683402][ T6945] sctp: [Deprecated]: syz.1.390 (pid 6945) Use of struct sctp_assoc_value in delayed_ack socket option.
[   71.683402][ T6945] Use struct sctp_sack_info instead
[   71.690773][ T6945] sctp: [Deprecated]: syz.1.390 (pid 6945) Use of struct sctp_assoc_value in delayed_ack socket option.
[   71.690773][ T6945] Use struct sctp_sack_info instead
[   71.814886][ T6960] nftables ruleset with unbound chain
[   71.895204][ T6969] macvlan2: entered promiscuous mode
[   71.897129][ T6969] vlan0: entered promiscuous mode
[   71.906355][ T6969] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   71.945254][ T6969] syzkaller0: entered promiscuous mode
[   71.946965][ T6969] syzkaller0: entered allmulticast mode
[   71.949033][ T6969] tipc: Resetting bearer <eth:syzkaller0>
[   71.956139][ T6968] tipc: Resetting bearer <eth:syzkaller0>
[   72.537878][ T6968] tipc: Disabling bearer <eth:syzkaller0>
[   72.629169][ T6971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   72.672817][ T6977] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma?
[   72.782387][ T6991] bridge0: port 3(syz_tun) entered blocking state
[   72.784686][ T6991] bridge0: port 3(syz_tun) entered disabled state
[   72.786720][ T6991] syz_tun: entered allmulticast mode
[   72.798617][ T6991] syz_tun: entered promiscuous mode
[   72.802016][ T6991] bridge0: port 3(syz_tun) entered blocking state
[   72.804398][ T6991] bridge0: port 3(syz_tun) entered forwarding state
[   72.809318][ T6991] netlink: 'syz.0.409': attribute type 10 has an invalid length.
[   72.995325][ T6999] IPVS: length: 153 != 24
[   73.019053][ T7005] __nla_validate_parse: 16 callbacks suppressed
[   73.019064][ T7005] netlink: 4 bytes leftover after parsing attributes in process `syz.2.415'.
[   73.203504][ T7028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.422'.
[   73.287998][ T7038] netlink: 'syz.2.424': attribute type 2 has an invalid length.
[   73.294237][ T7038] netlink: 4 bytes leftover after parsing attributes in process `syz.2.424'.
[   73.312177][ T7040] syz.1.425 uses old SIOCAX25GETINFO
[   73.396926][ T7046] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   73.457085][ T7048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.429'.
[   73.605458][ T7055] syz_tun: entered allmulticast mode
[   73.609029][ T7054] syz_tun: left allmulticast mode
[   73.639024][ T7057] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   73.755492][ T7064] syzkaller0: entered promiscuous mode
[   73.757205][ T7064] syzkaller0: entered allmulticast mode
[   73.773910][ T7064] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   73.778148][ T7063] tipc: Resetting bearer <eth:syzkaller0>
[   73.797059][ T7063] tipc: Disabling bearer <eth:syzkaller0>
[   73.816447][ T7068] netlink: 'syz.0.437': attribute type 1 has an invalid length.
[   73.829578][ T7068] 8021q: adding VLAN 0 to HW filter on device bond2
[   73.837887][ T7068] tipc: Started in network mode
[   73.839687][ T7068] tipc: Node identity 62f870827aa4, cluster identity 4711
[   73.843272][ T7068] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   73.850870][ T7068] syzkaller0: entered promiscuous mode
[   73.852775][ T7068] syzkaller0: entered allmulticast mode
[   73.857190][ T7068] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   73.866861][ T7068] tipc: Resetting bearer <eth:syzkaller0>
[   73.874856][ T7067] tipc: Resetting bearer <eth:syzkaller0>
[   73.882813][ T7067] tipc: Disabling bearer <eth:syzkaller0>
[   73.887758][ T7071] bridge0: port 3(syz_tun) entered blocking state
[   73.890674][ T7071] bridge0: port 3(syz_tun) entered disabled state
[   73.893365][ T7071] syz_tun: entered allmulticast mode
[   73.896228][ T7071] syz_tun: entered promiscuous mode
[   73.898061][ T7071] bridge0: port 3(syz_tun) entered blocking state
[   73.900102][ T7071] bridge0: port 3(syz_tun) entered forwarding state
[   73.905039][ T7071] netlink: 'syz.2.438': attribute type 10 has an invalid length.
[   73.928802][ T7073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.439'.
[   73.979580][ T7078] netlink: 88 bytes leftover after parsing attributes in process `syz.0.440'.
[   74.039139][ T7086] netlink: 8 bytes leftover after parsing attributes in process `syz.0.443'.
[   74.045338][ T7087] syzkaller0: entered promiscuous mode
[   74.047019][ T7087] syzkaller0: entered allmulticast mode
[   74.071269][ T7087] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   74.074438][ T7085] tipc: Resetting bearer <eth:syzkaller0>
[   74.090873][ T7085] tipc: Disabling bearer <eth:syzkaller0>
[   74.155779][ T7096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   74.867302][ T7119] netlink: 'syz.2.457': attribute type 2 has an invalid length.
[   74.951915][ T7123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.459'.
[   75.073192][ T7132] netlink: 4 bytes leftover after parsing attributes in process `syz.1.463'.
[   75.162864][ T7136] netlink: 40 bytes leftover after parsing attributes in process `syz.0.465'.
[   75.272148][ T7136] netlink: 'syz.0.465': attribute type 3 has an invalid length.
[   75.317898][ T7142] syzkaller0: entered promiscuous mode
[   75.320473][ T7142] syzkaller0: entered allmulticast mode
[   75.337157][ T7142] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   75.351009][ T7141] tipc: Resetting bearer <eth:syzkaller0>
[   75.371523][ T7141] tipc: Disabling bearer <eth:syzkaller0>
[   75.661327][ T7166] batadv0: entered promiscuous mode
[   75.672765][ T7166] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[   75.847725][ T7182] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   75.852028][ T7183] syzkaller0: entered promiscuous mode
[   75.853948][ T7183] syzkaller0: entered allmulticast mode
[   75.865703][ T7183] tipc: Resetting bearer <eth:syzkaller0>
[   75.880204][ T7183] tipc: Disabling bearer <eth:syzkaller0>
[   75.983677][ T7194] syzkaller0: entered promiscuous mode
[   75.986011][ T7194] syzkaller0: entered allmulticast mode
[   75.998715][ T7194] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   76.004526][ T7193] tipc: Resetting bearer <eth:syzkaller0>
[   76.025076][ T7193] tipc: Disabling bearer <eth:syzkaller0>
[   76.182856][ T7215] netlink: 'syz.2.494': attribute type 2 has an invalid length.
[   76.286632][ T7226] syzkaller0: entered promiscuous mode
[   76.288815][ T7226] syzkaller0: entered allmulticast mode
[   76.306012][ T7226] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   76.308976][ T7225] tipc: Resetting bearer <eth:syzkaller0>
[   76.329288][ T7225] tipc: Disabling bearer <eth:syzkaller0>
[   76.497426][ T7244] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma?
[   76.708318][ T7255] syzkaller0: entered promiscuous mode
[   76.710240][ T7255] syzkaller0: entered allmulticast mode
[   76.726612][ T7255] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   76.738173][ T7254] tipc: Resetting bearer <eth:syzkaller0>
[   76.752675][ T7254] tipc: Disabling bearer <eth:syzkaller0>
[   76.977297][ T7288] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   77.536163][ T7290] syzkaller0: entered promiscuous mode
[   77.538499][ T7290] syzkaller0: entered allmulticast mode
[   77.556141][ T7290] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   77.561906][ T7289] tipc: Resetting bearer <eth:syzkaller0>
[   77.576042][ T7289] tipc: Disabling bearer <eth:syzkaller0>
[   77.753338][ T7300] netlink: 'syz.2.527': attribute type 2 has an invalid length.
[   77.755872][ T7300] netlink: 'syz.2.527': attribute type 5 has an invalid length.
[   77.869847][ T7306] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   78.312489][ T7335] x_tables: duplicate underflow at hook 3
[   78.354057][ T7337] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma?
[   78.434380][ T7346] bridge0: port 3(syz_tun) entered disabled state
[   78.444978][ T7346] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.449169][ T7346] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.473198][ T7350] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.476141][ T7350] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.491911][ T7350] netlink: 'syz.1.547': attribute type 2 has an invalid length.
[   78.494651][ T7350] __nla_validate_parse: 10 callbacks suppressed
[   78.494659][ T7350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.547'.
[   78.499860][ T7350] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[   78.590633][ T7356] netlink: 20 bytes leftover after parsing attributes in process `syz.2.549'.
[   78.603323][ T7359] netlink: 'syz.0.550': attribute type 2 has an invalid length.
[   78.606082][ T7359] netlink: 'syz.0.550': attribute type 5 has an invalid length.
[   78.685469][ T7362] netlink: 'syz.1.551': attribute type 2 has an invalid length.
[   78.755295][ T7374] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   79.113228][ T7417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   79.397942][ T7449] netlink: 'syz.2.577': attribute type 2 has an invalid length.
[   79.402453][ T7449] netlink: 'syz.2.577': attribute type 5 has an invalid length.
[   79.465728][ T7451] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   79.507016][ T7454] netlink: 88 bytes leftover after parsing attributes in process `syz.1.579'.
[   79.855006][ T7482] netlink: 'syz.0.590': attribute type 10 has an invalid length.
[   79.969572][ T7494] netlink: 16 bytes leftover after parsing attributes in process `syz.0.594'.
[   80.019897][ T7497] netlink: 'syz.1.595': attribute type 29 has an invalid length.
[   80.036043][ T7497] netlink: 'syz.1.595': attribute type 29 has an invalid length.
[   80.161098][ T7503] netlink: 64 bytes leftover after parsing attributes in process `syz.0.597'.
[   80.164466][ T7503] netlink: 64 bytes leftover after parsing attributes in process `syz.0.597'.
[   80.223565][ T7513] Bluetooth: MGMT ver 1.23
[   80.227099][ T7514] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[   80.233336][ T7514] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[   80.237362][ T7514] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[   80.244850][ T7514] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[   80.249624][ T7514] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[   80.254201][ T7514] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[   80.257482][ T7514] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[   80.263791][ T7514] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[   80.268021][ T7514] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[   80.272034][ T7514] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[   80.343513][ T7518] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   80.502870][ T7524] dummy0: entered allmulticast mode
[   80.507389][ T7523] dummy0: left allmulticast mode
[   80.573715][ T7528] netlink: 24 bytes leftover after parsing attributes in process `syz.0.608'.
[   80.579637][ T7528] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[   80.601461][  T795] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   80.958091][ T7554] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma?
[   81.522902][   T47] cfg80211: failed to load regulatory.db
[   81.540709][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   82.007363][ T7577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.626'.
[   82.094839][ T7579] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma?
[   82.103702][ T7579] netlink: 12 bytes leftover after parsing attributes in process `syz.2.628'.
[   82.213903][ T7593] netlink: 'syz.2.632': attribute type 10 has an invalid length.
[   82.253551][ T7595] rdma_op ffff88811d2f01f0 conn xmit_rdma 0000000000000000
[   82.311565][ T7601] IPVS: ip_vs_edit_dest(): server weight less than zero
[   82.436041][ T7608] syz_tun: entered allmulticast mode
[   82.440004][ T7607] syz_tun: left allmulticast mode
[   82.698168][ T7625] netlink: 4 bytes leftover after parsing attributes in process `syz.0.644'.
[   83.185039][ T7668] bridge0: port 3(syz_tun) entered blocking state
[   83.187914][ T7668] bridge0: port 3(syz_tun) entered disabled state
[   83.190030][ T7668] syz_tun: entered allmulticast mode
[   83.194852][ T7670] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[   83.196708][ T7668] syz_tun: entered promiscuous mode
[   83.203107][ T7668] bridge0: port 3(syz_tun) entered blocking state
[   83.205098][ T7668] bridge0: port 3(syz_tun) entered forwarding state
[   83.207697][ T7668] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.210586][ T7668] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.213656][ T7668] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.216400][ T7668] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.229014][ T7668] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   83.615337][ T7695] __nla_validate_parse: 3 callbacks suppressed
[   83.615380][ T7695] netlink: 168 bytes leftover after parsing attributes in process `syz.2.670'.
[   83.646864][ T7697] validate_nla: 6 callbacks suppressed
[   83.646874][ T7697] netlink: 'syz.2.671': attribute type 27 has an invalid length.
[   83.673178][ T7697] bridge0: port 3(syz_tun) entered disabled state
[   83.687776][ T7697] batadv0: left promiscuous mode
[   83.695135][ T7697] wg1: left promiscuous mode
[   83.696634][ T7697] wg1: left allmulticast mode
[   83.719590][ T7697] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   83.729323][ T7697] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   83.809710][ T7697] batman_adv: batadv0: Interface deactivated: macsec1
[   83.839388][ T7698] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.847186][ T7698] 8021q: adding VLAN 0 to HW filter on device team0
[   83.850827][ T7698] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   83.855268][ T5838] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   83.860230][ T5838] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   83.862976][ T5838] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   83.865504][ T5838] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   83.880402][ T7700] netlink: 84 bytes leftover after parsing attributes in process `syz.2.672'.
[   83.936972][ T7701] tls_set_device_offload: netdev not found
[   84.037872][ T7703] IPv6: addrconf: prefix option has invalid lifetime
[   84.040977][    C1] IPv6: addrconf: prefix option has invalid lifetime
[   84.043827][    C1] IPv6: addrconf: prefix option has invalid lifetime
[   84.076565][ T7705] netlink: 416 bytes leftover after parsing attributes in process `syz.1.674'.
[   84.201533][ T7715] netlink: 'syz.0.677': attribute type 2 has an invalid length.
[   84.203854][ T7715] netlink: 'syz.0.677': attribute type 5 has an invalid length.
[   84.221718][ T7708] netlink: 4 bytes leftover after parsing attributes in process `syz.1.675'.
[   84.521998][ T7736] netlink: 168 bytes leftover after parsing attributes in process `syz.0.687'.
[   84.571849][ T7738] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma?
[   84.611246][ T7740] netlink: 'syz.0.689': attribute type 10 has an invalid length.
[   84.681705][ T7744] netlink: 24 bytes leftover after parsing attributes in process `syz.0.691'.
[   84.858611][ T7760] netlink: 'syz.0.697': attribute type 2 has an invalid length.
[   84.864228][ T7760] netlink: 'syz.0.697': attribute type 5 has an invalid length.
[   84.905830][ T7766] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   85.053177][ T7778] netlink: 120 bytes leftover after parsing attributes in process `syz.2.699'.
[   85.092878][ T7780] bond3: option mode: invalid value (254)
[   85.095791][ T7780] bond3 (unregistering): Released all slaves
[   85.193535][ T7786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.704'.
[   85.203232][ T7790] netlink: 4 bytes leftover after parsing attributes in process `syz.1.705'.
[   85.206557][ T7790] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   85.256266][ T7794] netlink: 168 bytes leftover after parsing attributes in process `syz.0.707'.
[   85.294762][ T7798] netlink: 'syz.1.709': attribute type 1 has an invalid length.
[   85.709433][ T7822] Illegal XDP return value 4294967294 on prog  (id 194) dev N/A, expect packet loss!
[   85.723940][ T7822] netlink: 'syz.1.720': attribute type 13 has an invalid length.
[   85.789209][ T7822] bridge0: port 3(syz_tun) entered disabled state
[   85.802121][ T7822] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.804400][ T7822] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.903912][ T7822] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   85.916582][ T7822] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   86.055790][ T7822] batman_adv: batadv0: Interface deactivated: macsec1
[   86.065392][ T7822] vlan0: left promiscuous mode
[   86.071080][ T5838] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   86.074404][ T5838] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   86.077675][ T5838] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   86.081724][ T5838] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   86.279821][ T7860] nbd: must specify at least one socket
[   86.532640][ T7878] ip6t_REJECT: ECHOREPLY is not supported
[   86.671517][ T7895] bond1: (slave ip_vti0): Device is not bonding slave
[   86.673516][ T7895] bond1: option active_slave: invalid value (ip_vti0)
[   86.681641][ T7895] bond1 (unregistering): Released all slaves
[   86.713392][ T7903] dvmrp0: entered allmulticast mode
[   86.723651][ T7904] atomic_op ffff888102376198 conn xmit_atomic 0000000000000000
[   87.055021][ T7930] syzkaller0: entered promiscuous mode
[   87.056728][ T7930] syzkaller0: entered allmulticast mode
[   87.186055][ T7946] netlink: 'syz.1.753': attribute type 27 has an invalid length.
[   87.192048][ T7946] veth0_macvtap: left allmulticast mode
[   87.194562][ T7946] macvlan2: left promiscuous mode
[   87.214867][ T7946] bridge0: port 3(syz_tun) entered blocking state
[   87.216878][ T7946] bridge0: port 3(syz_tun) entered forwarding state
[   87.221515][ T7946] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.224128][ T7946] 8021q: adding VLAN 0 to HW filter on device team0
[   87.229152][ T7946] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   87.280189][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   87.286544][ T7953] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma?
[   87.441459][ T7971] netlink: 'syz.1.763': attribute type 27 has an invalid length.
[   87.465006][ T7973] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.446941][ T8011] veth0_to_bridge: entered promiscuous mode
[   88.459587][ T8011] ip6gre1: entered promiscuous mode
[   88.462028][ T8011] ip6gre1: entered allmulticast mode
[   88.468997][ T8010] veth0_to_bridge: left promiscuous mode
[   88.478498][ T8008] batman_adv: batadv0: Adding interface: dummy0
[   88.480426][ T8008] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   88.487895][ T8008] batman_adv: batadv0: Interface activated: dummy0
[   88.522499][ T8016] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1
[   88.586539][ T8019] bridge0: port 3(syz_tun) entered disabled state
[   88.591292][ T8019] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.593772][ T8019] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.600655][ T7831] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   88.629603][ T8019] bond_slave_1: left promiscuous mode
[   88.631435][ T8019] bond_slave_1: left allmulticast mode
[   88.643104][ T8019] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   88.648576][ T8019] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   88.693806][ T8019] mac80211_hwsim hwsim6 wlan0: left allmulticast mode
[   88.698505][ T8019] batman_adv: batadv0: Interface deactivated: macsec1
[   88.703767][ T8019] geneve2: left promiscuous mode
[   88.708703][ T8019] ipvlan2: left promiscuous mode
[   88.712441][ T8019] ip6gre1: left promiscuous mode
[   88.714013][ T8019] ip6gre1: left allmulticast mode
[   88.745706][ T8021] bridge0: port 3(syz_tun) entered blocking state
[   88.747885][ T8021] bridge0: port 3(syz_tun) entered forwarding state
[   88.753501][ T8021] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.756078][ T8021] 8021q: adding VLAN 0 to HW filter on device team0
[   88.759696][ T8021] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   88.764668][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   88.769138][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   88.773155][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   88.780105][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   88.791687][ T5277] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   88.952002][ T8036] __nla_validate_parse: 11 callbacks suppressed
[   88.952011][ T8036] netlink: 168 bytes leftover after parsing attributes in process `syz.0.784'.
[   89.070726][ T5277] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   89.272961][ T8068] netlink: 168 bytes leftover after parsing attributes in process `syz.2.792'.
[   89.280872][ T5822] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   89.319199][ T8072] validate_nla: 1 callbacks suppressed
[   89.319211][ T8072] netlink: 'syz.2.794': attribute type 27 has an invalid length.
[   89.332884][ T8072] bridge0: port 3(syz_tun) entered disabled state
[   89.355804][ T8072] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.358614][ T8072] 8021q: adding VLAN 0 to HW filter on device team0
[   89.362507][ T8072] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   89.474995][ T8086] atomic_op ffff88811de8d998 conn xmit_atomic 0000000000000000
[   89.528335][ T8090] tap0: tun_chr_ioctl cmd 1074025692
[   89.834533][ T8109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.807'.
[   89.837870][ T8109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.807'.
[   90.004738][ T8113] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.320748][ T5822] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   90.324293][ T5822] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   90.331911][ T8117] netlink: 'syz.2.810': attribute type 27 has an invalid length.
[   90.338955][ T8117] bridge0: port 3(syz_tun) entered disabled state
[   90.356543][ T8117] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.359469][ T8117] 8021q: adding VLAN 0 to HW filter on device team0
[   90.363471][ T8117] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   90.612452][ T8135] netlink: 168 bytes leftover after parsing attributes in process `syz.2.818'.
[   90.764591][ T8140] netlink: 4 bytes leftover after parsing attributes in process `syz.0.820'.
[   90.885328][ T8151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.823'.
[   90.997850][ T8160] netlink: 'syz.1.826': attribute type 27 has an invalid length.
[   91.121216][ T7825] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   91.130324][ T8160] bridge0: port 3(syz_tun) entered disabled state
[   91.149038][ T8160] batman_adv: batadv0: Interface deactivated: dummy0
[   91.204989][ T8167] netlink: 8 bytes leftover after parsing attributes in process `syz.1.828'.
[   91.229210][ T8169] netlink: 36 bytes leftover after parsing attributes in process `syz.2.827'.
[   91.234579][ T8171] netlink: 'syz.0.829': attribute type 3 has an invalid length.
[   91.236861][ T8171] netlink: 'syz.0.829': attribute type 7 has an invalid length.
[   91.239427][ T8171] netlink: 'syz.0.829': attribute type 8 has an invalid length.
[   91.242044][ T8171] netlink: 132 bytes leftover after parsing attributes in process `syz.0.829'.
[   91.369934][ T8191] netlink: 'syz.1.836': attribute type 1 has an invalid length.
[   91.471432][ T8200] No such timeout policy "syz1"
[   91.534869][ T8207] rdma_op ffff88811eb371f0 conn xmit_rdma 0000000000000000
[   91.618177][ T8224] vlan2: entered allmulticast mode
[   91.753009][ T8236] netlink: 'syz.2.854': attribute type 2 has an invalid length.
[   91.756258][ T8236] netlink: 'syz.2.854': attribute type 5 has an invalid length.
[   91.781386][ T8239] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.212993][ T8253] atomic_op ffff8881744cb198 conn xmit_atomic 0000000000000000
[   92.642791][ T8277] netlink: 'syz.1.868': attribute type 2 has an invalid length.
[   93.077030][ T8303] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   93.079908][ T8303] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   93.148552][ T8310] bridge0: port 3(syz_tun) entered blocking state
[   93.150610][ T8310] bridge0: port 3(syz_tun) entered forwarding state
[   93.157054][ T8310] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.159858][ T8310] 8021q: adding VLAN 0 to HW filter on device team0
[   93.162986][ T8310] batman_adv: batadv0: Interface activated: dummy0
[   93.165767][ T8310] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   93.326332][ T5822] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   93.329067][ T5822] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   93.343401][ T5822] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   93.346264][ T5822] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   93.564159][ T8361] bridge0: port 3(syz_tun) entered disabled state
[   93.584418][ T5822] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   93.587537][ T5822] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   93.599950][ T8361] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.604906][ T8361] 8021q: adding VLAN 0 to HW filter on device team0
[   93.609081][ T8361] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   93.614287][ T5822] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   93.629081][ T5822] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   93.663588][ T8365] 8021q: adding VLAN 0 to HW filter on device bond1
[   93.669572][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.672418][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
Connection to localhost closed by remote host.
[   94.000351][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   94.030529][ T8166] udevd[8166]: failed to send result of seq 11502 to main daemon: Connection refused
[   94.085575][ T6843] ==================================================================
[   94.087977][ T6843] BUG: KASAN: slab-use-after-free in __mutex_lock+0x801/0x1350
[   94.090230][ T6843] Read of size 8 at addr ffff888114b240a0 by task khidpd_10000005/6843
[   94.093267][ T6843] 
[   94.093986][ T6843] CPU: 1 UID: 0 PID: 6843 Comm: khidpd_10000005 Not tainted syzkaller #0 PREEMPT(full) 
[   94.093996][ T6843] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   94.094001][ T6843] Call Trace:
[   94.094004][ T6843]  <TASK>
[   94.094008][ T6843]  dump_stack_lvl+0x189/0x250
[   94.094020][ T6843]  ? __kasan_check_byte+0x12/0x40
[   94.094028][ T6843]  ? __pfx_dump_stack_lvl+0x10/0x10
[   94.094037][ T6843]  ? lock_release+0x4b/0x3e0
[   94.094045][ T6843]  ? __virt_addr_valid+0x4a5/0x5c0
[   94.094055][ T6843]  print_report+0xca/0x240
[   94.094063][ T6843]  ? __mutex_lock+0x801/0x1350
[   94.094071][ T6843]  kasan_report+0x118/0x150
[   94.094078][ T6843]  ? __mutex_lock+0x801/0x1350
[   94.094088][ T6843]  __mutex_lock+0x801/0x1350
[   94.094096][ T6843]  ? __mutex_lock+0x5bb/0x1350
[   94.094105][ T6843]  ? l2cap_unregister_user+0x6a/0x1b0
[   94.094113][ T6843]  ? __pfx___mutex_lock+0x10/0x10
[   94.094121][ T6843]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   94.094132][ T6843]  l2cap_unregister_user+0x6a/0x1b0
[   94.094138][ T6843]  hidp_session_thread+0x3c9/0x410
[   94.094146][ T6843]  ? __pfx_hidp_session_thread+0x10/0x10
[   94.094152][ T6843]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   94.094159][ T6843]  ? __pfx_hidp_session_wake_function+0x10/0x10
[   94.094167][ T6843]  ? __pfx_hidp_session_wake_function+0x10/0x10
[   94.094174][ T6843]  ? __kthread_parkme+0x7b/0x200
[   94.094182][ T6843]  ? __kthread_parkme+0x1a1/0x200
[   94.094214][ T6843]  kthread+0x711/0x8a0
[   94.094225][ T6843]  ? __pfx_hidp_session_thread+0x10/0x10
[   94.094231][ T6843]  ? __pfx_kthread+0x10/0x10
[   94.094240][ T6843]  ? _raw_spin_unlock_irq+0x23/0x50
[   94.094247][ T6843]  ? lockdep_hardirqs_on+0x9c/0x150
[   94.094255][ T6843]  ? __pfx_kthread+0x10/0x10
[   94.094263][ T6843]  ret_from_fork+0x4bc/0x870
[   94.094271][ T6843]  ? __pfx_ret_from_fork+0x10/0x10
[   94.094279][ T6843]  ? __switch_to_asm+0x39/0x70
[   94.094284][ T6843]  ? __switch_to_asm+0x33/0x70
[   94.094289][ T6843]  ? __pfx_kthread+0x10/0x10
[   94.094298][ T6843]  ret_from_fork_asm+0x1a/0x30
[   94.094306][ T6843]  </TASK>
[   94.094309][ T6843] 
[   94.154710][ T6843] Allocated by task 5815:
[   94.156033][ T6843]  kasan_save_track+0x3e/0x80
[   94.157435][ T6843]  __kasan_kmalloc+0x93/0xb0
[   94.158791][ T6843]  __kmalloc_noprof+0x411/0x7f0
[   94.160252][ T6843]  hci_alloc_dev_priv+0x28/0x2060
[   94.161745][ T6843]  vhci_create_device+0x120/0x650
[   94.163300][ T6843]  vhci_write+0x3ce/0x4a0
[   94.164595][ T6843]  vfs_write+0x5c9/0xb30
[   94.165892][ T6843]  ksys_write+0x145/0x250
[   94.167262][ T6843]  do_syscall_64+0xfa/0xfa0
[   94.168652][ T6843]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.170361][ T6843] 
[   94.171075][ T6843] Freed by task 5815:
[   94.172264][ T6843]  kasan_save_track+0x3e/0x80
[   94.173629][ T6843]  __kasan_save_free_info+0x46/0x50
[   94.175148][ T6843]  __kasan_slab_free+0x5c/0x80
[   94.176552][ T6843]  kfree+0x19a/0x6d0
[   94.177696][ T6843]  bt_host_release+0x82/0x90
[   94.179139][ T6843]  device_release+0x9c/0x1c0
[   94.180670][ T6843]  kobject_put+0x22b/0x480
[   94.182127][ T6843]  vhci_release+0x15a/0x1a0
[   94.183493][ T6843]  __fput+0x44c/0xa70
[   94.184685][ T6843]  task_work_run+0x1d4/0x260
[   94.186102][ T6843]  do_exit+0x6b5/0x2300
[   94.187365][ T6843]  do_group_exit+0x21c/0x2d0
[   94.188740][ T6843]  __x64_sys_exit_group+0x3f/0x40
[   94.190247][ T6843]  x64_sys_call+0x21f7/0x2200
[   94.191653][ T6843]  do_syscall_64+0xfa/0xfa0
[   94.193072][ T6843]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.194799][ T6843] 
[   94.195519][ T6843] Last potentially related work creation:
[   94.197301][ T6843]  kasan_save_stack+0x3e/0x60
[   94.198690][ T6843]  kasan_record_aux_stack+0xbd/0xd0
[   94.200414][ T6843]  insert_work+0x3d/0x330
[   94.202068][ T6843]  __queue_work+0xbaf/0xfb0
[   94.203853][ T6843]  queue_work_on+0x181/0x270
[   94.205537][ T6843]  process_scheduled_works+0xae1/0x17b0
[   94.207181][ T6843]  worker_thread+0x8a0/0xda0
[   94.208557][ T6843]  kthread+0x711/0x8a0
[   94.209760][ T6843]  ret_from_fork+0x4bc/0x870
[   94.211168][ T6843]  ret_from_fork_asm+0x1a/0x30
[   94.212574][ T6843] 
[   94.213299][ T6843] Second to last potentially related work creation:
[   94.215207][ T6843]  kasan_save_stack+0x3e/0x60
[   94.216710][ T6843]  kasan_record_aux_stack+0xbd/0xd0
[   94.218592][ T6843]  insert_work+0x3d/0x330
[   94.220045][ T6843]  __queue_work+0xcd2/0xfb0
[   94.221584][ T6843]  call_timer_fn+0x17e/0x5f0
[   94.223213][ T6843]  __run_timer_base+0x646/0x860
[   94.224754][ T6843]  run_timer_softirq+0xb7/0x180
[   94.226324][ T6843]  handle_softirqs+0x286/0x870
[   94.227732][ T6843]  __irq_exit_rcu+0xca/0x1f0
[   94.229121][ T6843]  irq_exit_rcu+0x9/0x30
[   94.230391][ T6843]  sysvec_apic_timer_interrupt+0xa6/0xc0
[   94.232040][ T6843]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[   94.233994][ T6843] 
[   94.234752][ T6843] The buggy address belongs to the object at ffff888114b24000
[   94.234752][ T6843]  which belongs to the cache kmalloc-8k of size 8192
[   94.239562][ T6843] The buggy address is located 160 bytes inside of
[   94.239562][ T6843]  freed 8192-byte region [ffff888114b24000, ffff888114b26000)
[   94.243441][ T6843] 
[   94.244143][ T6843] The buggy address belongs to the physical page:
[   94.246330][ T6843] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x114b20
[   94.249289][ T6843] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[   94.251841][ T6843] flags: 0x17ff00000000040(head|node=0|zone=2|lastcpupid=0x7ff)
[   94.254009][ T6843] page_type: f5(slab)
[   94.255159][ T6843] raw: 017ff00000000040 ffff888100042280 ffffea0006c26200 dead000000000004
[   94.257695][ T6843] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[   94.260103][ T6843] head: 017ff00000000040 ffff888100042280 ffffea0006c26200 dead000000000004
[   94.262583][ T6843] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[   94.265029][ T6843] head: 017ff00000000003 ffffea000452c801 00000000ffffffff 00000000ffffffff
[   94.267507][ T6843] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[   94.269940][ T6843] page dumped because: kasan: bad access detected
[   94.271829][ T6843] page_owner tracks the page as allocated
[   94.273452][ T6843] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5556, tgid 5556 (dhcpcd), ts 29138038914, free_ts 29137756346
[   94.279323][ T6843]  post_alloc_hook+0x234/0x290
[   94.280717][ T6843]  get_page_from_freelist+0x2365/0x2440
[   94.282310][ T6843]  __alloc_frozen_pages_noprof+0x181/0x370
[   94.283949][ T6843]  alloc_pages_mpol+0x232/0x4a0
[   94.285349][ T6843]  allocate_slab+0x96/0x350
[   94.286954][ T6843]  ___slab_alloc+0xf56/0x1990
[   94.288781][ T6843]  __slab_alloc+0x65/0x100
[   94.290519][ T6843]  __kmalloc_node_track_caller_noprof+0x5c7/0x800
[   94.292438][ T6843]  kmalloc_reserve+0x136/0x290
[   94.293814][ T6843]  __alloc_skb+0x27e/0x430
[   94.295120][ T6843]  netlink_dump+0x167/0xe90
[   94.296504][ T6843]  netlink_recvmsg+0x676/0xa30
[   94.298042][ T6843]  sock_recvmsg+0x22c/0x270
[   94.299400][ T6843]  ____sys_recvmsg+0x1c9/0x460
[   94.300776][ T6843]  ___sys_recvmsg+0x1b5/0x510
[   94.302138][ T6843]  __x64_sys_recvmsg+0x198/0x260
[   94.303586][ T6843] page last free pid 5556 tgid 5556 stack trace:
[   94.305615][ T6843]  __free_frozen_pages+0xbc4/0xd30
[   94.307472][ T6843]  __put_partials+0x146/0x170
[   94.308924][ T6843]  put_cpu_partial+0x1f2/0x2e0
[   94.310488][ T6843]  __slab_free+0x2b9/0x390
[   94.312042][ T6843]  qlist_free_all+0x97/0x140
[   94.313840][ T6843]  kasan_quarantine_reduce+0x148/0x160
[   94.315918][ T6843]  __kasan_slab_alloc+0x22/0x80
[   94.317831][ T6843]  kmem_cache_alloc_node_noprof+0x433/0x710
[   94.320096][ T6843]  __alloc_skb+0x255/0x430
[   94.321851][ T6843]  netlink_sendmsg+0x5c6/0xb30
[   94.323710][ T6843]  __sock_sendmsg+0x21c/0x270
[   94.325540][ T6843]  __sys_sendto+0x3bd/0x520
[   94.327274][ T6843]  __x64_sys_sendto+0xde/0x100
[   94.329104][ T6843]  do_syscall_64+0xfa/0xfa0
[   94.330839][ T6843]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.332581][ T6843] 
[   94.333310][ T6843] Memory state around the buggy address:
[   94.334931][ T6843]  ffff888114b23f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   94.337272][ T6843]  ffff888114b24000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   94.339648][ T6843] >ffff888114b24080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   94.341985][ T6843]                                ^
[   94.343500][ T6843]  ffff888114b24100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   94.346365][ T6843]  ffff888114b24180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   94.349215][ T6843] ==================================================================
[   94.352073][ T6843] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   94.354206][ T6843] CPU: 1 UID: 0 PID: 6843 Comm: khidpd_10000005 Not tainted syzkaller #0 PREEMPT(full) 
[   94.357007][ T6843] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   94.359982][ T6843] Call Trace:
[   94.360982][ T6843]  <TASK>
[   94.361869][ T6843]  dump_stack_lvl+0x99/0x250
[   94.363267][ T6843]  ? __asan_memcpy+0x40/0x70
[   94.364606][ T6843]  ? __pfx_dump_stack_lvl+0x10/0x10
[   94.366106][ T6843]  ? __pfx__printk+0x10/0x10
[   94.367467][ T6843]  vpanic+0x237/0x6d0
[   94.368646][ T6843]  ? __pfx_vpanic+0x10/0x10
[   94.370291][ T6843]  panic+0xb9/0xc0
[   94.371474][ T6843]  ? __pfx_panic+0x10/0x10
[   94.373163][ T6843]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[   94.375124][ T6843]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   94.376859][ T6843]  ? __mutex_lock+0x801/0x1350
[   94.378311][ T6843]  check_panic_on_warn+0x89/0xb0
[   94.379817][ T6843]  ? __mutex_lock+0x801/0x1350
[   94.381272][ T6843]  end_report+0x78/0x160
[   94.382506][ T6843]  kasan_report+0x129/0x150
[   94.383849][ T6843]  ? __mutex_lock+0x801/0x1350
[   94.385284][ T6843]  __mutex_lock+0x801/0x1350
[   94.386680][ T6843]  ? __mutex_lock+0x5bb/0x1350
[   94.388090][ T6843]  ? l2cap_unregister_user+0x6a/0x1b0
[   94.389760][ T6843]  ? __pfx___mutex_lock+0x10/0x10
[   94.391271][ T6843]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   94.393112][ T6843]  l2cap_unregister_user+0x6a/0x1b0
[   94.395120][ T6843]  hidp_session_thread+0x3c9/0x410
[   94.396630][ T6843]  ? __pfx_hidp_session_thread+0x10/0x10
[   94.398326][ T6843]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   94.400088][ T6843]  ? __pfx_hidp_session_wake_function+0x10/0x10
[   94.401961][ T6843]  ? __pfx_hidp_session_wake_function+0x10/0x10
[   94.403797][ T6843]  ? __kthread_parkme+0x7b/0x200
[   94.405263][ T6843]  ? __kthread_parkme+0x1a1/0x200
[   94.406764][ T6843]  kthread+0x711/0x8a0
[   94.407988][ T6843]  ? __pfx_hidp_session_thread+0x10/0x10
[   94.409716][ T6843]  ? __pfx_kthread+0x10/0x10
[   94.411086][ T6843]  ? _raw_spin_unlock_irq+0x23/0x50
[   94.413069][ T6843]  ? lockdep_hardirqs_on+0x9c/0x150
[   94.415059][ T6843]  ? __pfx_kthread+0x10/0x10
[   94.416478][ T6843]  ret_from_fork+0x4bc/0x870
[   94.417867][ T6843]  ? __pfx_ret_from_fork+0x10/0x10
[   94.419806][ T6843]  ? __switch_to_asm+0x39/0x70
[   94.421696][ T6843]  ? __switch_to_asm+0x33/0x70
[   94.423520][ T6843]  ? __pfx_kthread+0x10/0x10
[   94.424975][ T6843]  ret_from_fork_asm+0x1a/0x30
[   94.426415][ T6843]  </TASK>
[   94.428037][ T6843] Kernel Offset: disabled
[   94.429537][ T6843] Rebooting in 86400 seconds..

VM DIAGNOSIS:
07:45:52  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=1ffff110242480ba RCX=0000000000000000 RDX=dffffc0000000000
RSI=ffff8881212405c0 RDI=ffffea00046d4c48 RBP=1ffff110242480bc RSP=ffffc90003197838
R8 =ffff888121240580 R9 =000000000000001f R10=dffffc0000000000 R11=fffff52000632f04
R12=0000000000000001 R13=ffff8881212405d4 R14=0000000000000000 R15=0000000000001b8a
RIP=ffffffff82179dc6 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f06fb2586c0 ffffffff 00c00000
GS =0000 ffff88818eb31000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005587183ca200 CR3=0000000115838000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00005622c0e796a8 0000000000000009 XMM01=0000000000000000 00005622e19db460
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=3f3f3f3f3f3f3f3f 3f3f3f3f3f3f3f3f
XMM06=9999999999999999 9999999999999999 XMM07=2020202020202020 2020202020202020
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90004ba7350
R8 =ffff8881092a8237 R9 =1ffff11021255046 R10=dffffc0000000000 R11=ffffffff8514faf0
R12=dffffc0000000000 R13=ffffffff997e3954 R14=ffffffff99af6f40 R15=0000000000000000
RIP=ffffffff8514fb6c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8882a9f31000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005587183c8010 CR3=000000000dd38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=636f6c737061633a 3a347475706e692f XMM03=00000000000000ff ffffffffffffffff
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000174 00006b002f346f6c
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffff0000 ffff00ff00000000 XMM09=737061633a3a3474 75706e692f347475
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
