last executing test programs:

5.908384131s ago: executing program 0 (id=110):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)

5.720513271s ago: executing program 0 (id=112):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xf789cbab584558de, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000200000085000000b2000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f00000005c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
socket$unix(0x1, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300030c00000000070000000000000200090010000000e925000000000000030006000000000002000000000000000000000000000000020001000000000000fd000300000000030005000000000002"], 0x60}, 0x1, 0x7}, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0x1, @mcast1, 0x400}]}, &(0x7f0000000080)=0x10)
getpeername$packet(r4, 0x0, 0x0)
syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x11, 0x3, 0x3a)
r8 = socket$igmp(0x2, 0x3, 0x2)
sendmmsg$inet(r8, &(0x7f00000053c0)=[{{&(0x7f0000000180)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f00000001c0), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="5800000000000000000000000700000086160000000305105ddb38a892a795d64cf2b1cded95820c0cac63d30adc5d6505a0892308e4ffffffab1414bbac14013b0000000064010101e0000002ffffffffac14143800000014000000000000000000002f0005d1"], 0x70}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x4)
socket$kcm(0x10, 0x0, 0x4)
sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="b36297232100210189f1dca18a4fd9e3b530f05305000000000c00180032cdd30e012e10f49ed74d7d5382e4eeb6b337b65315fe6c567aa56abe789a267b4ed99c91f19e06a73c3620b4f3d94a8480cd1a2375ca3b3575e1fcc5c7d004b4a4da761325373a5a869fa9bfaa54134bce28e428971aa05d9e4c367e3c3c6727ead8970ea811e1b2bda660cc4e7ff3c84f8d35d2c671d255c0e60dbbc551ddb4e0d4c47889cdfe45ae690658b6610f217c9c3871759a32f30665b9426f6c90ad2b11b66bcdc7cbbdf63672789747aba50140550b161daca28b75a9cd", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x28}}, 0x0)
connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000280)={r6, r6, 0x1, 0x2, &(0x7f00000000c0)="944e", 0x9, 0x1, 0x16bf, 0x5505, 0xc3b8, 0x1, 0x0, 'syz1\x00'})
socket$alg(0x26, 0x5, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0)

5.200549378s ago: executing program 0 (id=116):
socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x6020400)
r0 = socket(0x10, 0x3, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x1f00)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x96}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000001000)={'syztnl2\x00', <r2=>0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @broadcast, @loopback}}}})
sendmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="922161db8b0a66792563943bf5cd345263b9d4080bb413aa2d89cbaea17db649fef84011daef2f05cae908", 0x2b}, {&(0x7f0000000040)="a570cffa66b3b3b58b691255e351b93a45273e221216102126786bfbe709a7f5be91cce45cd87c899a3d10e39b57273a25f649481659248ca9699293f30c0bff035195884ac9556871bbc838aae4942773aa24f9201c960de68147a621df22fd1ad278e426d10002b04838c8e5", 0x6d}, {&(0x7f0000000100)="c0c810f457fe9f7d726efb8f4e54af09bf1a9019020444894e4656cb54086441cd87ffd70a10481386567d2240c6842b99ecc8ac411f34cfea92b97e9f4498eba4d71bf9689817b402f35177b439ddb52faba291f790a51b10178034a17d17", 0x5f}, {&(0x7f0000000180)="4ae74babe7703b4831c1c265f3db630b1dfa13f4bf2a83e7e424aaf76a90fbad25741d30555b8c5cdb64fe4ebee84f94084eb60624544b4b5867469411ee58416928322c3bb05a605b6644042d3b159dc2c5057ba8ab4da8e1b5116afda7645aacc09544c7fa429792da766350ecb51ce2afa8cedb9cb6634449d207291d2c9a9bce24c63daea123c2328ad2cdb1e408959d6082b97406c77e49c3c4b03c9ebac110bb5be0596dde59f021abb3c9539245f476f4b6dbd38642283be73b88c7674b1b1639018ac9bec4e61b54ad2bef7ec48eab6d39657387431d04954c5e04961e66c78ee26c65b769", 0xe9}, {&(0x7f0000000280)="fdb219825715cf80575259dbe11e19b90a149daf92fa88587b0a79fc75c53c9f3bae3061ec1eb4640c77fe9d26a0577cad4035b942743659589473f13ccaeb1989c6af554621f54caf9f19399cae07fe3f29714a3f39932c91ff0c090146ba5a65489564ecec415d8cd71673dbde7b47d9aa66a7be24a190860f24720b75f0073732fac81380c8a1f8daa56f205e8917e10635b31422c182be0ba2814d4c9f3974cf8efb950181d77cc817b479a684430d13d8232aa7b471a3e0ed71c265536bba6ece6a9f1ee838e47a977dc1f54848e5d8c09cdb5c4d9a806045661a", 0xdd}, {&(0x7f0000000380)="e73fd95cef96e46ca2734591f76fcbaf7c21d61478e5ab417b20e7bb2d65fd279367317c7b4438c79193b59e7f4f32cc3dbe7b2976ae136ffdcac1556b3072c9c3ca2f2dc995ff", 0x47}], 0x6}}, {{&(0x7f0000000480)=@pppoe={0x18, 0x0, {0x1, @empty, 'veth1_macvtap\x00'}}, 0x80, &(0x7f0000000500), 0x0, &(0x7f00000007c0)=[{0x78, 0x113, 0x1, "84946b2942272d70db0e83042d9ecb4eafb90c01b1936bb151e7e5b46fd514db36c93948a1168d3ea2c4d17c1731e04b379728cec71f47359d436f223cb684a2d21860bb09f60897b66d5b9733df1f3d31b01dfc843780d31fad47ff319b3e02cb28e6d70956"}, {0x38, 0x108, 0x2, "c72ebd87d729721abdaab17e23b09be830235c1cf089cf27d4cf51131fc97a2b3562b032"}, {0x40, 0x1, 0xdde4d06d, "3737c389afed3d5e6513d9742a135c221a449607c481429960612a6bb1d96765b681e76505f129ad64"}, {0x88, 0x10e, 0x4, "0f8ea1fae5969050c11eeda3ca4bd151037da718ae518a317a49e0cf0157ab8715b6e31e7bccd087fabee3646761ea1a129ac4fcb33babdd4b652d1376d88ffa901c82b90b361db0f5e11e2f105f5b8d7589ca0bf2f9521e680f648e4443c29e8b527b42ff7fac781efe009ba4a0cc6446"}, {0xf0, 0x10a, 0x3, "2c70f52efb32d383cff62147892640327e60bd16bdd32edb1eec71717bda7795f8bae5e3135741a3ed46f9bd31fce36525ba959e4a04519604835ce5cb6fc089c0a96b4063954517db06830de8dcfbf3d65a8ad7963288e1503a9f6a4f0ac50d05ea35d9b810d54f26b22df30f6e76acebd9ea32f80fad48c44fac39845413654a0b45a3f3a9ca585ce41c329cc110756f8493b97c3304d6e9e0bd572d2b1d6c87232a90376b3ab1eeffed2be620112e4c71749c3c7f8482929a9da3e400df6925df8848a6477797eb901b6c2859909df5a50a8d2d7adf4e4f"}, {0xc0, 0x1, 0x81, "f8a5fc93cebc287fe8fd0e32700e94916655201b2308b5dcb1142dfc13376e4924ac4f69c137dc575c7d8c4555b31c5b6b0de206d423c012d7d5fa3f801251816f2416c0d35b4686571141ce405cfc7152fa06746a5e2b9d7d347b8ef381b4e580a2950527bf12696e42d8e97cb36149fb4bb2737239632c250eab11d3dec25869513529506b3aa851d5eef3dcf48cd5a1a4b6004d7f3eea3336a46973b013a513cc57fa43725dd56c8437c267fbcf73"}], 0x328}}], 0x2, 0x4000)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f00000000c0)={'tunl0\x00', r2, 0x40, 0x1, 0x2, 0x9, {{0x5, 0x4, 0x1, 0x3b, 0x14, 0x65, 0x0, 0xea, 0x2f, 0x0, @loopback, @loopback}}}})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0)
unshare(0x20000)

4.939845107s ago: executing program 0 (id=120):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x21018}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x50}}, 0x80)
r1 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f0000000240)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000300)=0x2c)
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
getsockname(r2, 0x0, &(0x7f0000000a80))
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r4=>0x0})
r5 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}}, 0x24}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x2, 0x8, 0xff1, 0x41000, 0xffffffffffffffff, 0x82f, '\x00', r4, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000001280)=@mangle={'mangle\x00', 0x8, 0x6, 0x520, 0x120, 0x0, 0x1f0, 0x1f0, 0x120, 0x510, 0x510, 0x510, 0x510, 0x510, 0x6, 0x0, {[{{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff000000, 0x0, 0xffffff00, 0xff000000], [0xff, 0xff, 0xff000000, 0xffffffff], 'ipvlan1\x00', 'ipvlan1\x00', {}, {}, 0x0, 0x9, 0x2, 0x2}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x5002}}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty, @ipv4=@private=0xa010100, 0x0, 0x32, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0xff}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r6)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r6)
pipe(&(0x7f0000000000))
r8 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r8, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c)
connect$inet6(r8, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(r8, &(0x7f00000092c0), 0x4ff, 0x2000000)

1.850566273s ago: executing program 0 (id=194):
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r1], 0x20}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="000000e8ff07000014000300000000000000000000000000000000001800128008000100707070000c00028008000100", @ANYRESOCT=r5], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x10)

1.650889319s ago: executing program 0 (id=197):
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1ecb0c7b3e6182d2454dd42800000081deff00020000000010000000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000003000000050000000c00"/28], 0x50) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1ecb0c7b3e6182d2454dd42800000081deff00020000000010000000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000003000000050000000c00"/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYRES16=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000780)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec85000000750000008500000008000000957fc970c06826b5adf84bb4b1460268f277bcaf8187ffcbf7d403127b389758103522098aef24e3b19385359ecff0331f9dd545dbe212e401b61dd55c3a43e9b4b6cee7e02f21af2e1063d7f98e9c221e9bf9ff7f6a183460b73fb8d85b1098c55a3291dafcd30832c885d5e741572a04e89099559e97038cbffe18d658463807ea02928940e611883d432996cec2db75f722960745f74c0e058616044436d8c132897f15e69590b2ebac9a711dda611ee8a56a2d2d0b28"], &(0x7f0000000100)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xffffffe5, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='signal_generate\x00', r3}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="180200000700000000000000da8000008500000075000000958100000000000092e0a79fc9d346dfd819a7b3375fda6837e48200a082028cf7c4910c9cdb42af43734e628fb05b2189"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r4, 0x0, 0x0}, 0x10) (async)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r4, 0x0, 0x0}, 0x10)
close(r1)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r5)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3cf6ffffff0701010000000000000000010000070c00048008000144fffffffe06000240000600000900010073790005000300010000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0xc080)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x210200, 0x0) (async)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x210200, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00', <r9=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfff7fdfc, {0x0, 0x0, 0x0, r9, {0xb}, {0xffff}, {0x4, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfff7fdfc, {0x0, 0x0, 0x0, r9, {0xb}, {0xffff}, {0x4, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000500)={'wg1\x00', <r10=>0x0})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000540)={'wg1\x00', <r11=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="300000001100200026bd7000ffdbdf2500000000", @ANYRES32=r10, @ANYBLOB="59dfc56b5ad73e78104aaf0f06002803e900", @ANYRES32=r11, @ANYRES64=0x0], 0x30}, 0x1, 0x0, 0x0, 0x24004890}, 0x4)
close(r8)
r12 = socket$unix(0x1, 0x1, 0x0)
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r14=>0x0})
sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r14, {0x0, 0xb}, {0xffff, 0xffff}, {0xb, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008001}, 0x0)
sendmsg$nl_route_sched(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, 0x0, {0xf, 0x9}, {0xffe6, 0xb}, {0xffe0, 0x3}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x8001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) (async)
sendmsg$nl_route_sched(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, 0x0, {0xf, 0x9}, {0xffe6, 0xb}, {0xffe0, 0x3}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x8001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async)
ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

350.14833ms ago: executing program 1 (id=217):
socket$nl_crypto(0x10, 0x3, 0x15)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3b00}, [@RTA_IP_PROTO={0x5, 0x1b, 0x11}]}, 0x24}}, 0x4)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast})
close(0x4)

291.062355ms ago: executing program 1 (id=218):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
r3 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000ffff0000000000008a0eb0e0036ade2075dcb097dcac0425026269c9d0c368f1c5dbe267653288bb7dd7c14a1b3898406dbf4192868c824b9b79dbeb9a1103cbc5b9f8301301c81914fcb91682dbee4c31a281a0737b0000000000000000000000dbe2e685e92ecc5905a8c6e7b3499b40dd7c1ef093c05d62ade4574c944800"/148], &(0x7f0000001f80)=""/226, 0x26, 0x81, 0x2}, 0x20)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x88}]}, 0x34}}, 0x0)
connect$can_bcm(r0, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="050000000300000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000000000009dfc47318ccc3455"], 0x48}}, 0x0)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000040)={0x8}, 0x4)

289.212795ms ago: executing program 1 (id=220):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="12000000080000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000014c0)={0x8, 0x0, [{0x1000, 0x20, &(0x7f0000000100)=""/32}, {0xeeee0000, 0x1, &(0x7f0000000140)=""/1}, {0x80a0000, 0x91, &(0x7f0000000180)=""/145}, {0x6000, 0x80000, &(0x7f0000000240)}, {0x100000, 0x41, &(0x7f0000000300)=""/65}, {0x4, 0xd6, &(0x7f0000000380)=""/214}, {0xd000, 0x31, &(0x7f0000000480)=""/49}, {0xeeee0000, 0x1000, &(0x7f00000004c0)=""/4096}]})
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='pwc_handler_enter\x00', r3, 0x0, 0x101}, 0x18)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0)
ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x10000, 0x6})
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="000000e8ff07000014000300000000000000000000000000000000001800128008000100707070000c00028008000100", @ANYRESOCT=r1], 0x4c}}, 0x0)

219.312346ms ago: executing program 1 (id=221):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10)
r0 = socket$can_j1939(0x1d, 0x2, 0x7) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x15, 0x301, 0x0, 0x25dfdbf8, {0x5}}, 0x14}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r2}, 0x18) (async)
connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r2}, 0x18) (async)
sendmmsg(r0, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000c00)="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", 0x1fc}, {&(0x7f0000000400)="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", 0x62c}, {0x0}], 0x3, &(0x7f0000002480)}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x2, 0x1, 0x2, 0x4, {0xa, 0x4e23, 0x300, @remote, 0xb}}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000280)="b69d973efd6c5f4dd5f35b963ac9e7e3b605a8f8c6fa4a6ddb2469554d613c12ca183339fd38bde63b7f3a9712ba", 0x2e}, {&(0x7f0000000380)="4d28874b99421d11980f5ab60af4b9ed5d0c80be2e611857d4798b36faae304eb1d993225e32a218302880", 0x2b}], 0x2, &(0x7f0000000ac0)=[{0xf8, 0x10a, 0x5, "0dfa90a384ca7b01056723232b2a007109246312655d3a1f0ae614fbb98f69c9b5a276e15ed3a0c390413fadabb7e93fa4c2dc96a2ec78bb229f36df5c3645f9e634c3a81adadcf8900976c9399e32d29160bfdfb2c3c91e5dc3b38f9813169a4ce5747a348f4d5a0c19e092b56a92a906c4ac8c0acc204d248d59e82ed11b9bc394a4907163164f634bc5417849d710fb53bf05d2bd8da0bc3b7674f1ba0e249b7dbf399d5942cc8f9f038f91316b8709afcd8d424b4a2d7922ad43ad149a5c20f0045b88e5c3187297531322c10c38d8a5f1334c09e4e8f4ea5bdbfa664ebc6b7dd423"}], 0xf8}}], 0x3, 0x60000800)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$igmp6(0xa, 0x3, 0x2)
getpeername$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000180)=0x1c) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, 0x0, 0x40) (async)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x41, &(0x7f0000000200)={0xa, 0x4e23, 0x10001, @loopback, 0xe}, 0x1c) (async)
ioctl$BTRFS_IOC_SEND(r5, 0x40489426, &(0x7f00000004c0)={{}, 0x0, &(0x7f0000000480), 0x2, 0x0, 0x1}) (async)
shutdown(0xffffffffffffffff, 0x0) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) (async)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001000)={&(0x7f0000000ec0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x6, [@union={0x2, 0x5, 0x0, 0x5, 0x1, 0x80000001, [{0x0, 0x4, 0x338}, {0xd, 0x1, 0x1}, {0x8, 0x5, 0x8}, {0xf, 0x1, 0xe}, {0x2, 0x5, 0xfffffffa}]}, @fwd={0x5}, @restrict={0x2, 0x0, 0x0, 0xb, 0x4}, @typedef={0x7, 0x0, 0x0, 0x8, 0x1}, @decl_tag={0x5, 0x0, 0x0, 0x11, 0x1, 0x1}]}, {0x0, [0xea, 0x61, 0x61, 0x0]}}, &(0x7f0000000f80)=""/80, 0x9a, 0x50, 0x1, 0x4}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="188500000000000000"], &(0x7f00000001c0)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x42) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) (async)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) (async)
connect$inet6(r4, &(0x7f0000000a40)={0xa, 0x4e20, 0x400, @loopback, 0x7fffffff}, 0x1c)

217.596494ms ago: executing program 2 (id=223):
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000006c0)={'wlan0\x00', &(0x7f0000000880)=@ethtool_stats={0x11}}) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000f00000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="9e36d448b388dd965f7a3312779a", 0x0, 0x0, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (rerun: 32)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000080)={0x4001, 0x1, 0x0, 0x9}, 0x10) (async)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=ANY=[@ANYBLOB="180000001600e34680057000fedbdf250a0004fd8a112c400fb9bf5e7b13df516fb5e94b145ef9878f465ace2ebec14658bdde2d6cdf6cb6ff1a75c50a2232b5b77e316521972e93ef310e957d06d6a318dde17a23453307a40582adf9c171862dc63a84d3f0bc8f042146266d65fa75b15819de7724ae97ef9f8c5bf9864fc3146eed470572d08eb097453ad40e711e5a4d", @ANYRES32=0x0], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x896)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x401, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}}}]}, 0x38}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x8c}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xe}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x93}]}}}]}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x8080}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000180)=ANY=[@ANYRESDEC=r4], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[], 0xa8}, 0x1, 0x0, 0x0, 0x40044}, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async, rerun: 32)
socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32)
pipe(&(0x7f00000000c0)) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
socket$inet(0x2, 0x2, 0x1)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

145.679016ms ago: executing program 1 (id=224):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x6e, &(0x7f00000010c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb08004500006000000010000190780a010112ac1414aa05009078e000000241000200ffff0000006c00000a0101027f000001440c0001e00000014e21000044240001e000000100010000fffffffe00000000ac14141e00"/110], 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x44, r2, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfeffffff}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x44}}, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0)
socket$inet6(0xa, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000018000000000000003000000950000000000000086287c6eafbb6ea893e0f72f7cfb4c8e9e6749c9b8001a639167878c2bdcfb7346d5e988a818f0a6c903c810c7e69f9f362c2f72f3eb9e4de75237d90b4ff0dc6ee27d4636587367fa802296e6db86d0c77d110d4b295c5a7556308bce02c6a360357699741c143ead55aaecdd04cb2f6dd05567f630e8bde5dd6040f4b88b7154b110ae88ce5b10dba714acfbc4d0e68945c9890661c758a7ac69410b768a8331ae88f6baa729b0715a4e7135a7bbfcc1b1ed431c7c983df34f8d7cf47aaeafc0a3f9f7ad8a297926f7d16e3c158b742549aff5729af589eb"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x2b, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10)
unshare(0x62040200)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$int_in(r4, 0x5421, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xb, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa10000951234d35864aa628023ce005f3d367c00000701fefff7ffffffb702000008000000b703003e6d000083850054308de8c7749781c53da224ccde11e158"], &(0x7f0000000200)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a03f0fff0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c8500000061000000b70000004000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
socket$l2tp6(0xa, 0x2, 0x73)
r6 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@gettaction={0x14, 0x32, 0x1, 0x70bd29, 0x25dfdbfc}, 0x14}}, 0x20000000)
getsockname$packet(r6, &(0x7f0000000540)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x5, 0xa, 0x10002}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xfffa, 0x4}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0x4}}]}}]}, 0x40}}, 0x24000000)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0f00000004090000000000000000000002000000511f346723586331652fd72ce1aee84a9b93471f2f7dac079b089dce9b8167ec81282b", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r9, 0x0, 0x0}, 0x20)
close(0x3)

145.015108ms ago: executing program 2 (id=225):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000000)={<r1=>0x0, 0x6139, 0x20, 0x0, 0x401}, &(0x7f0000000040)=0x18)
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
getsockopt$llc_int(r2, 0x10c, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000100)=0x90c1, 0x4)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', <r5=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffffe, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r4, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1b}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x80000001}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2a}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xc}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0, <r7=>0x0}}, {{@in=@broadcast}, 0x0, @in6=@ipv4={""/10, ""/2, @broadcast}}}, &(0x7f00000003c0)=0xe8)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000400)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e21, 0x2, 0x4e21, 0x0, 0x2, 0x0, 0xa0, 0x2f, r5, r7}, {0x4c75, 0x6, 0x800, 0x40, 0x2, 0x4, 0x7fffffff, 0x9}, {0xb2, 0x8, 0x1, 0x9}, 0x800, 0x6e6bbc, 0x2, 0x0, 0x3, 0x3}, {{@in=@private=0xa010101, 0x4d5, 0x2b}, 0x0, @in=@broadcast, 0x3504, 0x1, 0x0, 0x7, 0x0, 0x1, 0xff}}, 0xe8)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000500)={r1, 0xa1, "73bc464ff17f4e80ed94f3ebcaec1a232878c05cc8d281caaf015996c95803af448f36a30b62b8adf6cfabb4794b41e10f8658dc78ba0a3093695ba688d365341e09498f80a775a4d99fe11408b2b507f008b999a156607b49d46cceafcb10ed51cfae1e2f01c613e9155eee4f25b1271d27edbd862bd0a3da35abae089030b2a618c5dde0248575a3fcb94347d74d6bb0f6fc97f31211c073cae07a77e61dfdfd"}, &(0x7f00000005c0)=0xa9)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000000600)=[@in6={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xe10}, @in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e24, @local}, @in={0x2, 0x4e22, @multicast1}], 0x6c)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r9, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, r10, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x2}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x3}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x5)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000800)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_SET_QOS_MAP(r9, &(0x7f00000009c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000840)={0x110, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x0, 0x4b}}}}, [@NL80211_ATTR_QOS_MAP={0x2a, 0xc7, {[{0x80, 0x1}, {0x3, 0x3}, {0x3}, {0x7}, {0xd, 0x3}, {0xb0, 0x2}, {0x4, 0x2}, {0x1, 0x2}, {0xe, 0x3}, {0x8, 0x6}, {0x8, 0x3}, {0x7, 0x6}, {0x4, 0x6}, {0x9, 0x3}, {0x73}], "fb12fc0a1fde9542"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x7, 0x5}, {0x81, 0x3}, {0x82, 0x6}], "bb9ed3e6b6d9c177"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x7, 0x5}, {0x6, 0x1}, {0x3, 0x5}, {0x18}, {0x3, 0x5}, {0x6, 0x4}, {0x3, 0x3}, {0x7, 0x5}, {0x7, 0x6}], "4c01021722453a62"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x7, 0x5}, {0xe5, 0x5}, {0x6, 0x3}, {0x9, 0x5}, {0xfc}, {0x9, 0x2}, {0x0, 0x5}, {0x2, 0x7}, {0x9, 0x5}, {0x12, 0x3}, {0xa3, 0x6}, {0xbb, 0x2}, {0x1, 0x6}, {0x45, 0x5}, {0xe, 0x3}, {0x8, 0x2}, {0x81, 0x7}, {0xe, 0x3}], "6cfa2488535eca53"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "08675bf48a8776bc"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x5, 0x1}, {0x8, 0x5}, {0x68, 0x5}, {0x7, 0x7}, {0x5, 0x7}, {0x9, 0x5}, {0x2, 0x5}, {0xad, 0x5}], "cfb7c5a9402df92d"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{}, {0x0, 0x6}, {0x2, 0x6}, {0x0, 0x7}, {0x0, 0x5}, {0xce}, {0x40, 0x3}, {0x0, 0x6}, {0x1, 0x6}, {0x6, 0x7}, {0x6, 0x3}, {0x5}, {0x1, 0x5}, {0x9, 0x6}, {0x1c, 0x4}, {0x9, 0x4}, {0x1, 0x3}, {0x7f, 0x2}], "5bec2caac15822e4"}}]}, 0x110}, 0x1, 0x0, 0x0, 0x48010}, 0x40801)
socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000a00)={'vcan0\x00'})
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000b40)={@fallback=<r12=>r2, 0x34, 0x1, 0x3, &(0x7f0000000a40)=[0x0], 0x1, 0x0, &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000ac0)=[0x0, 0x0, 0x0], &(0x7f0000000b00)=[0x0, 0x0], <r13=>0x0}, 0x40)
r14 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000bc0)={0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000b80)={@ifindex=r6, 0xffffffffffffffff, 0x21, 0x40, 0x0, @void, @value=r14, @void, @void, r13}, 0x20)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r12, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x48, 0x140d, 0x400, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x4080)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r12, 0x29, 0x37, &(0x7f0000000d40)={0x4, 0xe, '\x00', [@pad1, @padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x1, 0xc, 0xb, 0x2, [0x2, 0x6, 0x3, 0xc2, 0x3, 0x8f84]}}, @calipso={0x7, 0x10, {0x1, 0x2, 0x1, 0x4, [0xffff]}}, @ra, @pad1, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x1d}]}, 0x80)
sendmsg$nl_route(r12, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)=@ipmr_getroute={0x1c, 0x1a, 0x100, 0x70bd28, 0x25dfdbfe, {0x80, 0x14, 0x0, 0x1, 0xff, 0x2, 0xfe, 0x3, 0x400}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008040}, 0x4008005)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000ec0)={'vcan0\x00'})
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000f00)=0x5, 0x4)
openat$cgroup_procs(r12, &(0x7f0000000f40)='cgroup.threads\x00', 0x2, 0x0)

80.851885ms ago: executing program 2 (id=226):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, 0x0, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r1, &(0x7f00000005c0)={&(0x7f0000000180), 0x10, &(0x7f00000001c0)={&(0x7f0000000cc0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0xfe, 0x1, 0x0, 0x0, "c6e83912ce2150c0"}}, 0x48}, 0x2}, 0x20000080)
r2 = socket(0x1, 0xa, 0xfffffffe)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x4}}}, 0x108)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xa4ffffff, @rand_addr=' \x01\x00'}}}, 0x15a)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0)

80.275495ms ago: executing program 2 (id=227):
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
r0 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=@delchain={0x12, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0x0, 0xffe0}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008200000018070000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a60000008500000050"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x72, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x8000}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x3c, 0x1e, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_KEY_END={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0xc0}}, 0x0) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xcc}}, 0x0) (async)
r3 = socket$can_j1939(0x1d, 0x2, 0x7) (async)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f0000000200)={0x3, 0xd99, 0x1, 0x0, 0x0, [{{r1}, 0x8}]}) (async, rerun: 32)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000380)={'vlan0\x00', @local}) (async, rerun: 32)
socket$inet6_icmp(0xa, 0x2, 0x3a) (async)
bind$can_j1939(r3, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async)
socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async)
socket$unix(0x1, 0x1, 0x0) (async)
r5 = socket(0x2, 0x80805, 0x0) (async)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r6, 0x0)
close(0x3) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={<r7=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) (async)
sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) (async)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000c00)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x24004800) (async)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r9=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000100)={0xfffc, 0x2, 0x5, 0x5, r9}, 0x10)
socket$tipc(0x1e, 0x5, 0x0)

79.531496ms ago: executing program 1 (id=228):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="050000000300000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRESHEX=r0], 0x48}}, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r1, 0x1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r3, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f)
r4 = openat$cgroup_pressure(r2, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0)
ppoll(&(0x7f0000000180)=[{r3}], 0x1, 0x0, 0x0, 0x0)
write$cgroup_pressure(r4, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f)
close(r3)
close(r4)
getsockopt$bt_hci(r1, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
connect$inet6(r5, 0x0, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000080)=0x5)
sendmmsg$inet6(r5, &(0x7f0000002ac0)=[{{&(0x7f00000002c0)={0xa, 0x4e22, 0x6a3e3663, @rand_addr=' \x01\x00', 0x1}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000480)="96", 0x1}], 0x1}}], 0x1, 0x4020)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000240)={r7, 0x1}, 0x8)
getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000040)={r7, 0x9}, &(0x7f0000000080)=0x8)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="3100000002000000", @ANYRES32, @ANYBLOB='C'], 0x20)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[], 0xa4}}, 0x0)
socket$inet6_icmp(0xa, 0x2, 0x3a)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'erspan0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0x8000, 0x80, 0x4, 0x2, {{0x9, 0x4, 0x2, 0x1, 0x24, 0x64, 0x0, 0x0, 0x4, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0xf, 0x9b, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}]}}}}})
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000a06daa8dcc4df387000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010008000900010073797a30000000000900030073797a320000000088000000060a010400000000000000000100000008000bed1600000000000080240001800b0001006f626a72656600001400028008000140000000020800014000000003380001800c0001006269747769736500280002800800034000000002080001400000001408000240000000120400058008000640000000030900010073797a3000000000140000001100010000000000000000000700000a"], 0xfc}}, 0x0)

864.761µs ago: executing program 2 (id=229):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r1, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r2, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60)
bind$inet(r0, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000140)=0xdf6, 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_NOACK_MAP(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r5, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfff2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000002c00090027bd7000000000004400000004ad8256c499b30000f549ee646953d5914858da9e90eb849c2a2a8b794f00002de00f1f22fc5fcadacec099339164255dd314f6cc683e1123486d84b9"], 0x34}, 0x1, 0x0, 0x0, 0x42804}, 0x84)

0s ago: executing program 2 (id=230):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}}, 0x20008004)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r2, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x3, 0x4, 0x7}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0xd, 0xc, &(0x7f0000002b80)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x59}}]}, &(0x7f0000002b40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}, 0x90)
connect$netrom(r3, &(0x7f0000000300)={{0x6, @rose, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48)
listen(r2, 0x1ad72f7)
accept4(r2, 0x0, 0x0, 0x80000)
r5 = accept4$netrom(r2, 0x0, 0x0, 0x80000)
writev(r5, &(0x7f0000001b40)=[{&(0x7f0000000600)="16f68b2017beba386312104a1458eb86de", 0x11}, {&(0x7f0000000640)="bb23d9aa9dc40dbda08b06498139a31c4f1c5202930204fe2753dce105cc368976704bdd8275a54b9e939e443d622e78e5439015948fd277697a658dc8c76c5959ad12de9154952a498d61cbb8cf12437e0ef2614fd255c6c693627de0fa2f34c9bf6e8a3be6b5da4be70ae70ec2b2260d489d5dac9b2c3036ccb499dced69a8bc299b00cbf4dbd272d537d37a6769080528c014317ff4baa17ae4e35063a811b32a63f899f529c0b51e8edcbf2a18bbdb4a984fe33ea3a274b6285f3e719d78d1bebe550aaad86c012535d0a9e61ef78d18a460ce413b44bbdcd02f7761d41a7d67cadf49c5d1166d3ee77859dc023fed01e331e3e64d7d9d1754e9588078d5efbb4317aa504360d8d68e9856943fd672a66f8dfd562602d958b858f4d4a9afd1eac5f8c83e4d001ced818fa1680fe9127e850df33b6a03dec960737a093a1468ee83126b3570ab40aa4c059313d78573cdf5e6293ccc0c2a882b22692c1c03fa699aeeb31229d99d49d8785ac6cc37c6e50ecdd445a7d4e2420dce1beb8dda1f76b965433e5ee3d90f530c828586f178b94107ca976458f5e6d93f44e3b7abd9f0d42297311ae37c080a666d1280e4033094555e87b32921769007d2576b18b300a3c1249f9d8ece5b813831f03dd42813a1dc95832e6636b2b1e5e87340d225ca6d5600f15b34af57061e9d9eb12945b30a5c31a9d2a6589a81e50e2eeb6a5a495cb3bf6de80da64c3ee898bcda4c02074067ddb645ac7749e7f295e33ae98a400c688eedbf2ebcb9390b26dc9f0a53c8f45c314c4ed16b5826e025ea519860de858ca5fa709fb15fdb776a062a51d32327e6247b8085042c302ae3efef93a94d7793aa37f96d9831d2ac5b0c496b1f4c6b2df1b711502c7a2bde44904f43a812c291437a90456880864a314a63721eaf8b4ef415b6c85d3f9c1bd4eedee09f8a98d25b5fc2aee556b2910f572736b9cc5124", 0x2b4}], 0x2)
writev(r5, &(0x7f0000000180)=[{&(0x7f0000000000)="9b", 0x1}], 0x1)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r7}, 0x10)
sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x14, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0)
r8 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x5, 0x0, 0x2, 0x1, 0x100}})
sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010028bd7000f4dbdf25020000000800090002000000"], 0x1c}}, 0x40)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'bond0\x00', <r10=>0x0})
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r11=>0x0})
sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r10], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:40840' (ED25519) to the list of known hosts.
syzkaller login: [   48.056525][ T5834] cgroup: Unknown subsys name 'net'
[   48.164616][ T5834] cgroup: Unknown subsys name 'cpuset'
[   48.168552][ T5834] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.480755][ T5834] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   52.975336][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   52.979385][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   52.983133][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   52.986822][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   52.990164][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   53.063146][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   53.066666][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   53.070228][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   53.074622][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   53.078354][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   53.096708][ T5235] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   53.102633][ T5235] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   53.106113][ T5235] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   53.110464][ T5235] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   53.114212][ T5235] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   53.239586][ T5842] chnl_net:caif_netlink_parms(): no params data found
[   53.378898][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.382444][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.385682][ T5842] bridge_slave_0: entered allmulticast mode
[   53.389567][ T5842] bridge_slave_0: entered promiscuous mode
[   53.396581][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.399796][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.403254][ T5842] bridge_slave_1: entered allmulticast mode
[   53.405951][ T5842] bridge_slave_1: entered promiscuous mode
[   53.435105][ T5847] chnl_net:caif_netlink_parms(): no params data found
[   53.465010][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.472739][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.489581][ T5849] chnl_net:caif_netlink_parms(): no params data found
[   53.511398][ T5842] team0: Port device team_slave_0 added
[   53.538330][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.541203][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.544384][ T5847] bridge_slave_0: entered allmulticast mode
[   53.547862][ T5847] bridge_slave_0: entered promiscuous mode
[   53.553649][ T5842] team0: Port device team_slave_1 added
[   53.565666][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.568557][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.571421][ T5847] bridge_slave_1: entered allmulticast mode
[   53.577113][ T5847] bridge_slave_1: entered promiscuous mode
[   53.630390][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.633000][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.642292][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.660778][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.663387][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.671946][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.676426][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.678903][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.681294][ T5849] bridge_slave_0: entered allmulticast mode
[   53.684318][ T5849] bridge_slave_0: entered promiscuous mode
[   53.690185][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.699484][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.702546][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.704994][ T5849] bridge_slave_1: entered allmulticast mode
[   53.707690][ T5849] bridge_slave_1: entered promiscuous mode
[   53.713305][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.773793][ T5842] hsr_slave_0: entered promiscuous mode
[   53.776347][ T5842] hsr_slave_1: entered promiscuous mode
[   53.779912][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.785059][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.789629][ T5847] team0: Port device team_slave_0 added
[   53.808206][ T5847] team0: Port device team_slave_1 added
[   53.853649][ T5849] team0: Port device team_slave_0 added
[   53.873052][ T5849] team0: Port device team_slave_1 added
[   53.875593][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.878689][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.890203][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.910365][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.913610][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.925043][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.963735][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.966110][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.975149][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.002230][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.004548][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.013530][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.039999][ T5847] hsr_slave_0: entered promiscuous mode
[   54.043290][ T5847] hsr_slave_1: entered promiscuous mode
[   54.046304][ T5847] debugfs: 'hsr0' already exists in 'hsr'
[   54.048878][ T5847] Cannot create hsr debugfs directory
[   54.123297][ T5849] hsr_slave_0: entered promiscuous mode
[   54.126627][ T5849] hsr_slave_1: entered promiscuous mode
[   54.129594][ T5849] debugfs: 'hsr0' already exists in 'hsr'
[   54.132576][ T5849] Cannot create hsr debugfs directory
[   54.159178][ T5842] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   54.188071][ T5842] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   54.210698][ T5842] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   54.240543][ T5842] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   54.357560][ T5847] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   54.367613][ T5847] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   54.376981][ T5847] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   54.386006][ T5847] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   54.456506][ T5849] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   54.464662][ T5849] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   54.477401][ T5849] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   54.487218][ T5849] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   54.520483][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.558659][ T5842] 8021q: adding VLAN 0 to HW filter on device team0
[   54.577575][ T3981] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.580967][ T3981] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.605597][ T3981] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.608561][ T3981] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.647685][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.681538][ T5847] 8021q: adding VLAN 0 to HW filter on device team0
[   54.706713][ T3981] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.709742][ T3981] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.731038][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.737155][ T3981] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.740250][ T3981] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.764855][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   54.788724][ T3981] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.791890][ T3981] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.799183][ T3981] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.801521][ T3981] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.841104][ T5849] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   54.849999][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.913425][ T5842] veth0_vlan: entered promiscuous mode
[   54.919706][ T5842] veth1_vlan: entered promiscuous mode
[   54.952097][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.965827][ T5842] veth0_macvtap: entered promiscuous mode
[   54.969684][ T5842] veth1_macvtap: entered promiscuous mode
[   54.986351][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0
[   54.995594][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.004717][ T5845] Bluetooth: hci0: command tx timeout
[   55.013537][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.016499][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.019689][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.028573][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.034115][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.039964][ T5849] veth0_vlan: entered promiscuous mode
[   55.063606][ T5849] veth1_vlan: entered promiscuous mode
[   55.095666][ T5847] veth0_vlan: entered promiscuous mode
[   55.116043][ T5847] veth1_vlan: entered promiscuous mode
[   55.121284][ T3981] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.128514][ T5849] veth0_macvtap: entered promiscuous mode
[   55.134522][ T3981] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.151301][ T5849] veth1_macvtap: entered promiscuous mode
[   55.170930][ T3981] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.171318][ T5847] veth0_macvtap: entered promiscuous mode
[   55.174046][ T3981] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.176270][ T5845] Bluetooth: hci2: command tx timeout
[   55.180846][ T5845] Bluetooth: hci1: command tx timeout
[   55.190663][ T5847] veth1_macvtap: entered promiscuous mode
[   55.197672][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.203415][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.220593][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.226241][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.230193][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   55.239937][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.243729][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.247970][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.261885][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.282458][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.296090][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.299196][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.310759][ T5906] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1'.
[   55.315537][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.326282][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.333526][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.370134][ T3981] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.374416][ T3981] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.395186][ T3981] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.400250][ T3981] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.435375][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.438149][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.484168][ T5913] netlink: 'syz.2.3': attribute type 2 has an invalid length.
[   55.517094][ T5914] netlink: 'syz.1.2': attribute type 10 has an invalid length.
[   55.526648][ T5914] team0: Port device dummy0 added
[   55.772599][ T5929] nbd: couldn't find device at index 536870912
[   55.775344][ T5929] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4'.
[   56.114770][    T9] cfg80211: failed to load regulatory.db
[   56.165433][ T5946] tipc: Started in network mode
[   56.167538][ T5946] tipc: Node identity deb797f13aed, cluster identity 4711
[   56.170528][ T5946] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   56.174361][ T5946] syzkaller0: entered promiscuous mode
[   56.176537][ T5946] syzkaller0: entered allmulticast mode
[   56.191426][ T5946] tipc: Resetting bearer <eth:syzkaller0>
[   56.197042][ T5945] tipc: Resetting bearer <eth:syzkaller0>
[   56.203379][ T5945] tipc: Disabling bearer <eth:syzkaller0>
[   56.522791][ T5950] netlink: 'syz.2.7': attribute type 13 has an invalid length.
[   56.526205][ T5950] netlink: 'syz.2.7': attribute type 17 has an invalid length.
[   56.556873][ T5950] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   56.936011][ T5963] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[   56.939427][ T5964] netlink: 'syz.1.9': attribute type 142 has an invalid length.
[   56.963852][ T5963] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   57.000234][ T5966] netlink: 256 bytes leftover after parsing attributes in process `syz.2.10'.
[   57.083268][ T5845] Bluetooth: hci0: command tx timeout
[   57.149735][ T5970] team0: Port device dummy0 removed
[   57.156119][ T5970] bridge_slave_0: left allmulticast mode
[   57.158216][ T5970] bridge_slave_0: left promiscuous mode
[   57.160697][ T5970] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.168457][ T5970] bridge_slave_1: left allmulticast mode
[   57.170927][ T5970] bridge_slave_1: left promiscuous mode
[   57.177406][ T5970] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.189205][ T5970] bond0: (slave bond_slave_0): Releasing backup interface
[   57.199567][ T5970] bond0: (slave bond_slave_1): Releasing backup interface
[   57.208850][ T5970] team0: Port device team_slave_0 removed
[   57.215828][ T5970] team0: Port device team_slave_1 removed
[   57.218496][ T5970] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   57.221211][ T5970] batman_adv: batadv0: Removing interface: batadv_slave_0
[   57.225372][ T5970] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   57.227952][ T5970] batman_adv: batadv0: Removing interface: batadv_slave_1
[   57.242759][ T5845] Bluetooth: hci2: command tx timeout
[   57.242818][ T5235] Bluetooth: hci1: command tx timeout
[   57.286550][ T5970] tipc: Started in network mode
[   57.288196][ T5970] tipc: Node identity 521120f16b0f, cluster identity 4711
[   57.290570][ T5970] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   57.299472][ T5970] syzkaller0: entered promiscuous mode
[   57.303733][ T5970] syzkaller0: entered allmulticast mode
[   57.317013][ T5970] tipc: Resetting bearer <eth:syzkaller0>
[   57.326094][ T5970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11'.
[   57.331077][ T5969] tipc: Resetting bearer <eth:syzkaller0>
[   57.338704][ T5969] tipc: Disabling bearer <eth:syzkaller0>
[   57.414205][ T5985] sock: sock_timestamping_bind_phc: sock not bind to device
[   57.421212][ T5986] batman_adv: batadv0: Adding interface: ip6gretap1
[   57.423947][ T5986] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.435741][ T5986] batman_adv: batadv0: Interface activated: ip6gretap1
[   57.538841][ T5989] netlink: 'syz.0.15': attribute type 13 has an invalid length.
[   57.542218][ T5989] netlink: 'syz.0.15': attribute type 17 has an invalid length.
[   57.577979][ T5989] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   57.961056][ T5992] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[   57.974705][ T5992] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   58.030296][ T5994] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   58.034814][ T5994] netlink: 36 bytes leftover after parsing attributes in process `syz.0.17'.
[   58.191478][ T5997] netlink: 192 bytes leftover after parsing attributes in process `syz.0.18'.
[   58.203309][ T5997] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18'.
[   58.226331][ T5996] netlink: 'syz.0.18': attribute type 2 has an invalid length.
[   58.235997][ T6011] netlink: 'syz.2.21': attribute type 1 has an invalid length.
[   58.319519][ T6018] netlink: 'syz.0.23': attribute type 4 has an invalid length.
[   58.327221][ T6018] netlink: 48 bytes leftover after parsing attributes in process `syz.0.23'.
[   58.410635][ T6026] syz.2.27 uses obsolete (PF_INET,SOCK_PACKET)
[   58.526569][ T6037] team0 (unregistering): Port device team_slave_0 removed
[   58.532615][ T6037] team0 (unregistering): Port device team_slave_1 removed
[   58.547535][ T6038] batman_adv: batadv0: Adding interface: ip6gretap1
[   58.550119][ T6038] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.560090][ T6038] batman_adv: batadv0: Interface activated: ip6gretap1
[   58.567128][ T6039] tipc: Started in network mode
[   58.569027][ T6039] tipc: Node identity 52cec68b372b, cluster identity 4711
[   58.574325][ T6039] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   58.584665][ T6039] syzkaller0: entered promiscuous mode
[   58.586864][ T6039] syzkaller0: entered allmulticast mode
[   58.595374][ T6037] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   58.605735][ T6037] tipc: Resetting bearer <eth:syzkaller0>
[   58.609237][ T6036] tipc: Resetting bearer <eth:syzkaller0>
[   58.615285][ T6036] tipc: Disabling bearer <eth:syzkaller0>
[   58.710683][ T6041] netlink: 132 bytes leftover after parsing attributes in process `syz.2.30'.
[   58.753478][ T6041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.30'.
[   58.778676][ T6041] tipc: Can't bind to reserved service type 1
[   59.147451][ T6073] Zero length message leads to an empty skb
[   59.162027][ T5235] Bluetooth: hci0: command tx timeout
[   59.288270][ T6083] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   59.300125][ T6085] bridge_slave_0: left allmulticast mode
[   59.305323][ T6085] bridge_slave_0: left promiscuous mode
[   59.307699][ T6085] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.314021][ T6085] bridge_slave_1: left allmulticast mode
[   59.316332][ T6085] bridge_slave_1: left promiscuous mode
[   59.318684][ T6085] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.322000][ T5235] Bluetooth: hci2: command tx timeout
[   59.324226][ T5845] Bluetooth: hci1: command tx timeout
[   59.330454][ T6085] bond0: (slave bond_slave_0): Releasing backup interface
[   59.336954][ T6085] bond0: (slave bond_slave_1): Releasing backup interface
[   59.347195][ T6085] team0: Port device team_slave_0 removed
[   59.354617][ T6085] team0: Port device team_slave_1 removed
[   59.357493][ T6085] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   59.360465][ T6085] batman_adv: batadv0: Removing interface: batadv_slave_0
[   59.364611][ T6085] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   59.367618][ T6085] batman_adv: batadv0: Removing interface: batadv_slave_1
[   59.377273][ T6085] batman_adv: batadv0: Interface deactivated: ip6gretap1
[   59.380027][ T6085] batman_adv: batadv0: Removing interface: ip6gretap1
[   59.394040][ T6083] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   59.405679][ T6083] syzkaller0: entered promiscuous mode
[   59.407797][ T6083] syzkaller0: entered allmulticast mode
[   59.419077][ T6083] tipc: Resetting bearer <eth:syzkaller0>
[   59.421510][ T6083] tipc: Resetting bearer <eth:syzkaller0>
[   59.427191][ T6083] tipc: Disabling bearer <eth:syzkaller0>
[   59.432597][ T6085] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   59.436994][ T6085] syzkaller0: entered promiscuous mode
[   59.438986][ T6085] syzkaller0: entered allmulticast mode
[   59.447572][ T6085] tipc: Resetting bearer <eth:syzkaller0>
[   59.455526][ T6084] tipc: Resetting bearer <eth:syzkaller0>
[   59.460553][ T6084] tipc: Disabling bearer <eth:syzkaller0>
[   59.516418][ T6091] IPv6: addrconf: prefix option has invalid lifetime
[   59.569555][ T6093] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   59.646273][ T6102] warning: `syz.0.42' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   59.667413][ T6102] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[   59.672248][ T6102] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.677056][ T6102] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   59.690894][ T6102] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   59.694298][ T6102] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   60.039269][ T6107] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.110758][ T6107] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.175385][ T6107] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.230206][ T6107] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.316998][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.330509][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.341168][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.354089][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.405837][ T6109] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   60.422047][ T6110] syzkaller0: entered promiscuous mode
[   60.424237][ T6110] syzkaller0: entered allmulticast mode
[   60.437588][ T6113] __nla_validate_parse: 7 callbacks suppressed
[   60.437599][ T6113] netlink: 15 bytes leftover after parsing attributes in process `syz.0.50'.
[   60.440308][ T6114] netlink: 36 bytes leftover after parsing attributes in process `syz.1.51'.
[   60.450850][ T6115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.51'.
[   60.509218][ T6108] tipc: Resetting bearer <eth:syzkaller0>
[   60.515927][ T6124] netlink: 15 bytes leftover after parsing attributes in process `syz.0.50'.
[   60.527781][ T6108] tipc: Disabling bearer <eth:syzkaller0>
[   60.587559][ T6133] validate_nla: 10 callbacks suppressed
[   60.587568][ T6133] netlink: 'syz.1.54': attribute type 1 has an invalid length.
[   60.601543][ T6135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.56'.
[   60.610702][ T6135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.56'.
[   60.767821][ T6152] netlink: 'syz.0.61': attribute type 39 has an invalid length.
[   61.025733][ T6161] netlink: 148 bytes leftover after parsing attributes in process `syz.0.63'.
[   61.028692][ T6161] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   61.033337][ T6162] netlink: 168 bytes leftover after parsing attributes in process `syz.1.62'.
[   61.039182][ T6156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.62'.
[   61.089246][ T6164] ip6tnl1: entered promiscuous mode
[   61.091546][ T6164] ip6tnl1: entered allmulticast mode
[   61.146703][ T6166] bond1 (unregistering): Released all slaves
[   61.242472][ T5235] Bluetooth: hci0: command tx timeout
[   61.403528][ T5235] Bluetooth: hci2: command tx timeout
[   61.405003][ T5845] Bluetooth: hci1: command tx timeout
[   61.859627][ T6177] netlink: 'syz.1.67': attribute type 2 has an invalid length.
[   61.920407][ T6178] netlink: 'syz.1.67': attribute type 1 has an invalid length.
[   61.985274][ T6177] : entered promiscuous mode
[   62.050165][ T6181] netlink: 44 bytes leftover after parsing attributes in process `syz.0.68'.
[   62.063142][ T6181] lo: entered allmulticast mode
[   62.072773][ T6181] dvmrp1: entered allmulticast mode
[   62.083309][ T6180] lo: left allmulticast mode
[   62.193971][ T6190] netlink: 'syz.1.71': attribute type 2 has an invalid length.
[   62.198519][ T6192] macvlan0: entered allmulticast mode
[   62.205802][ T6192] veth1_vlan: entered allmulticast mode
[   62.210616][ T6192] team0: Port device macvlan0 added
[   62.220174][ T6190] k*]: entered promiscuous mode
[   62.289687][ T6199] netlink: 'syz.1.74': attribute type 1 has an invalid length.
[   62.360665][ T6204] netlink: 'syz.0.75': attribute type 1 has an invalid length.
[   62.498190][ T6214] netlink: 'syz.0.78': attribute type 1 has an invalid length.
[   62.501554][ T6215] netlink: 'syz.0.78': attribute type 1 has an invalid length.
[   62.518546][ T6214] 8021q: adding VLAN 0 to HW filter on device bond1
[   62.523749][ T6217] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[   62.524082][ T6213] IPVS: stopping backup sync thread 6217 ...
[   62.539942][ T6214] bond1: (slave bridge3): making interface the new active one
[   62.545669][ T6214] bond1: (slave bridge3): Enslaving as an active interface with an up link
[   62.559578][ T6214] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   62.707320][ T6223] 8021q: adding VLAN 0 to HW filter on device bond1
[   62.711468][ T6223] bond0: (slave bond1): Enslaving as an active interface with an up link
[   62.799589][ T6235] netlink: 'syz.1.84': attribute type 9 has an invalid length.
[   62.958238][ T6247] bond2: (slave ip6gretap2): Enslaving as a backup interface with an up link
[   62.975668][ T6247] veth3: entered promiscuous mode
[   62.979818][ T6247] bond2: (slave veth3): Enslaving as a backup interface with a down link
[   63.037052][ T6257] batadv_slave_0: entered promiscuous mode
[   63.110242][ T6261] 8021q: adding VLAN 0 to HW filter on device bond3
[   63.116090][ T6261] bond0: (slave bond3): Enslaving as an active interface with an up link
[   63.155558][ T6268] pim6reg1: entered promiscuous mode
[   63.158266][ T6268] pim6reg1: entered allmulticast mode
[   63.292785][ T6282] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   63.297474][   T12] bond0: (slave wlan1): interface is now down
[   63.299434][ T6278] syzkaller0: entered promiscuous mode
[   63.307698][ T6278] syzkaller0: entered allmulticast mode
[   63.308720][ T6282] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   63.316820][   T12] bond0: (slave wlan1): interface is now down
[   63.319592][   T12] bond0: now running without any active interface!
[   63.336184][ T6278] team0: Port device dummy0 added
[   63.470613][ T6296] vlan3: entered promiscuous mode
[   63.473191][ T6296] macvtap0: entered promiscuous mode
[   63.709921][ T6317] 8021q: adding VLAN 0 to HW filter on device bond4
[   63.716022][ T6317] bond0: (slave bond4): Enslaving as an active interface with an up link
[   63.857080][ T6324] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.117932][   T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   64.122363][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   64.125885][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   64.129355][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   64.146424][ T6324] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.218590][ T6324] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.244201][ T6324] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.323548][ T5884] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.331093][ T5884] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.339396][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.367393][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.415241][ T6344] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   64.726957][   T47] hid-generic 0005:16BF:5505.0001: item fetching failed at offset 1/2
[   64.744638][   T47] hid-generic 0005:16BF:5505.0001: probe with driver hid-generic failed with error -22
[   65.162495][ T6384] 8021q: adding VLAN 0 to HW filter on device bond1
[   65.390738][ T6399] Bluetooth: MGMT ver 1.23
[   65.451965][ T6407] __nla_validate_parse: 14 callbacks suppressed
[   65.451980][ T6407] netlink: 4 bytes leftover after parsing attributes in process `syz.0.120'.
[   65.697389][ T6420] netlink: 12 bytes leftover after parsing attributes in process `syz.2.124'.
[   65.794755][ T6429] macvlan0: entered allmulticast mode
[   65.796597][ T6429] veth1_vlan: entered allmulticast mode
[   65.811477][ T6429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.128'.
[   65.814511][ T6429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.128'.
[   65.916975][ T6433] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[   66.000932][ T6436] netlink: 6 bytes leftover after parsing attributes in process `syz.2.131'.
[   66.008607][ T6436] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   66.043098][ T6438] vlan3: entered allmulticast mode
[   66.044936][ T6438] bridge_slave_0: entered allmulticast mode
[   66.111260][ T6442] validate_nla: 7 callbacks suppressed
[   66.111269][ T6442] netlink: 'syz.2.134': attribute type 1 has an invalid length.
[   66.144400][ T6446] 8021q: adding VLAN 0 to HW filter on device bond5
[   66.147451][ T6446] bond0: (slave bond5): Enslaving as an active interface with an up link
[   66.155506][ T6443] gretap1: entered promiscuous mode
[   66.159142][ T6443] bond2: (slave gretap1): making interface the new active one
[   66.164574][ T6443] bond2: (slave gretap1): Enslaving as an active interface with an up link
[   66.278895][ T6462] netlink: 'syz.1.139': attribute type 13 has an invalid length.
[   66.300692][ T6462] veth1_vlan: left allmulticast mode
[   66.368678][ T6467] netlink: 'syz.2.141': attribute type 13 has an invalid length.
[   66.371477][ T6467] netlink: 'syz.2.141': attribute type 17 has an invalid length.
[   66.384282][ T6467] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   66.425670][ T6474] 8021q: adding VLAN 0 to HW filter on device bond6
[   66.428608][ T6474] bond0: (slave bond6): Enslaving as an active interface with an up link
[   66.443785][ T6477] netlink: 'syz.2.144': attribute type 1 has an invalid length.
[   66.470109][ T6477] bond3: (slave ip6gretap2): Enslaving as a backup interface with an up link
[   66.498553][ T6477] veth3: entered promiscuous mode
[   66.503779][ T6477] bond3: (slave veth3): Enslaving as a backup interface with a down link
[   66.513741][ T6477] netlink: 28 bytes leftover after parsing attributes in process `syz.2.144'.
[   66.518360][ T5884] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   66.519164][ T6477] 8021q: adding VLAN 0 to HW filter on device bond3
[   66.539754][ T6483] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   66.611557][ T6488] batadv_slave_0: entered promiscuous mode
[   66.617698][ T6483] netlink: 12 bytes leftover after parsing attributes in process `syz.1.146'.
[   66.632499][   T13] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   66.878508][ T6514] netlink: 'syz.1.156': attribute type 2 has an invalid length.
[   66.881007][ T6514] netlink: 1184 bytes leftover after parsing attributes in process `syz.1.156'.
[   66.933253][ T6522] netlink: 128 bytes leftover after parsing attributes in process `syz.1.160'.
[   66.938200][ T3981] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.940782][ T3981] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.945630][ T6522] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   66.950018][ T6522] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   66.973184][ T6524] 8021q: adding VLAN 0 to HW filter on device bond5
[   66.976318][ T6524] bond0: (slave bond5): Enslaving as an active interface with an up link
[   67.003075][ T6528] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   67.006796][ T6528] ieee802154 phy0 wpan0: encryption failed: -22
[   67.015579][ T6528] netlink: 28 bytes leftover after parsing attributes in process `syz.2.162'.
[   67.236311][ T6536] netlink: 'syz.2.165': attribute type 12 has an invalid length.
[   67.239079][ T6536] netlink: 'syz.2.165': attribute type 11 has an invalid length.
[   67.279514][ T6538] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[   67.510927][ T6544] 8021q: adding VLAN 0 to HW filter on device bond6
[   67.514132][ T6544] bond0: (slave bond6): Enslaving as an active interface with an up link
[   67.766923][ T6561] trusted_key: syz.2.174 sent an empty control message without MSG_MORE.
[   67.993833][ T6573] 8021q: adding VLAN 0 to HW filter on device bond7
[   67.997030][ T6573] bond0: (slave bond7): Enslaving as an active interface with an up link
[   68.036251][ T6576] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   68.039508][ T6576] syzkaller0: entered promiscuous mode
[   68.041915][ T6576] syzkaller0: entered allmulticast mode
[   68.048475][ T6576] tipc: Resetting bearer <eth:syzkaller0>
[   68.053266][ T6575] tipc: Resetting bearer <eth:syzkaller0>
[   68.065180][ T6575] tipc: Disabling bearer <eth:syzkaller0>
[   68.247062][ T6599] 8021q: adding VLAN 0 to HW filter on device bond8
[   68.250119][ T6599] bond0: (slave bond8): Enslaving as an active interface with an up link
[   68.314933][ T6611] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   68.432903][ T6618] dummy0: entered promiscuous mode
[   68.435924][ T6618] bond0: entered promiscuous mode
[   68.438002][ T6618] bond_slave_0: entered promiscuous mode
[   68.440413][ T6618] bond_slave_1: entered promiscuous mode
[   68.450761][ T6618] bond5: entered promiscuous mode
[   68.454006][ T6618] bond6: entered promiscuous mode
[   68.456035][ T6618] bond7: entered promiscuous mode
[   68.457927][ T6618] bond8: entered promiscuous mode
[   68.464883][ T6618] hsr1: entered allmulticast mode
[   68.466683][ T6618] dummy0: entered allmulticast mode
[   68.468531][ T6618] bond0: entered allmulticast mode
[   68.470344][ T6618] bond_slave_0: entered allmulticast mode
[   68.473688][ T6618] bond_slave_1: entered allmulticast mode
[   68.475954][ T6618] bond5: entered allmulticast mode
[   68.479113][ T6618] bond6: entered allmulticast mode
[   68.482422][ T6618] bond7: entered allmulticast mode
[   68.486113][ T6618] bond8: entered allmulticast mode
[   68.497744][ T6620] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[   68.579394][ T6623] batadv_slave_0: left promiscuous mode
[   68.604473][ T6623] veth1_vlan: left allmulticast mode
[   68.606336][ T6623] macvlan0: left allmulticast mode
[   68.627271][ T6623] ip6tnl1: left promiscuous mode
[   68.628993][ T6623] ip6tnl1: left allmulticast mode
[   68.637517][ T6623] veth3: left promiscuous mode
[   68.647794][ T5870] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.650674][ T5870] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.655495][ T5870] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.658241][ T5870] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.697172][ T6632] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   68.699900][ T6633] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   68.704089][ T6632] syzkaller0: entered promiscuous mode
[   68.705970][ T6632] syzkaller0: entered allmulticast mode
[   68.710620][ T6631] tipc: Resetting bearer <eth:syzkaller0>
[   68.719696][ T6631] tipc: Disabling bearer <eth:syzkaller0>
[   68.805958][ T6636] 8021q: adding VLAN 0 to HW filter on device bond7
[   68.808960][ T6636] bond0: (slave bond7): Enslaving as an active interface with an up link
[   68.859769][ T6641] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   68.863059][ T6641] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[   68.867097][ T6641] mac80211_hwsim hwsim5 syzkaller0: Caught tx_queue_len zero misconfig
[   68.879458][ T6641] tipc: Resetting bearer <eth:syzkaller0>
[   68.960092][ T6645] netlink: 'syz.1.202': attribute type 10 has an invalid length.
[   68.965615][ T6645] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[   69.113682][ T5870] nci: nci_add_new_protocol: the target found does not have the desired protocol
[   69.852286][   T24] tipc: Node number set to 958275825
[   70.007288][ T6692] pim6reg1: entered promiscuous mode
[   70.009112][ T6692] pim6reg1: entered allmulticast mode
[   70.092771][ T6696] netlink: 'syz.2.219': attribute type 3 has an invalid length.
[   70.137388][ T6702] 8021q: adding VLAN 0 to HW filter on device bond9
[   70.140447][ T6702] bond9: entered promiscuous mode
[   70.143491][ T6702] bond9: entered allmulticast mode
[   70.145530][ T6702] bond0: (slave bond9): Enslaving as an active interface with an up link
[   70.169610][ T6703] tipc: Resetting bearer <eth:syzkaller0>
[   70.548316][ T6731] __nla_validate_parse: 13 callbacks suppressed
[   70.548325][ T6731] netlink: 4 bytes leftover after parsing attributes in process `syz.2.230'.
[   70.924876][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   70.927108][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
Connection to localhost closed by remote host.
[   71.240518][ T6362] ==================================================================
[   71.243228][ T6362] BUG: KASAN: slab-use-after-free in __mutex_lock+0x7fc/0x1360
[   71.245705][ T6362] Read of size 8 at addr ffff8880282e80a0 by task khidpd_16bf5505/6362
[   71.249129][ T6362] 
[   71.249945][ T6362] CPU: 1 UID: 0 PID: 6362 Comm: khidpd_16bf5505 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[   71.249955][ T6362] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   71.249959][ T6362] Call Trace:
[   71.249963][ T6362]  <TASK>
[   71.249966][ T6362]  dump_stack_lvl+0x189/0x250
[   71.249975][ T6362]  ? __kasan_check_byte+0x12/0x40
[   71.249985][ T6362]  ? __pfx_dump_stack_lvl+0x10/0x10
[   71.249992][ T6362]  ? lock_release+0x4b/0x3e0
[   71.250002][ T6362]  ? __virt_addr_valid+0x4a5/0x5c0
[   71.250011][ T6362]  print_report+0xca/0x240
[   71.250018][ T6362]  ? __mutex_lock+0x7fc/0x1360
[   71.250026][ T6362]  kasan_report+0x118/0x150
[   71.250035][ T6362]  ? __mutex_lock+0x7fc/0x1360
[   71.250044][ T6362]  __mutex_lock+0x7fc/0x1360
[   71.250053][ T6362]  ? __mutex_lock+0x5b6/0x1360
[   71.250062][ T6362]  ? l2cap_unregister_user+0x6a/0x1b0
[   71.250070][ T6362]  ? __pfx___mutex_lock+0x10/0x10
[   71.250078][ T6362]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   71.250089][ T6362]  l2cap_unregister_user+0x6a/0x1b0
[   71.250096][ T6362]  hidp_session_thread+0x3c9/0x410
[   71.250105][ T6362]  ? __pfx_hidp_session_thread+0x10/0x10
[   71.250112][ T6362]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   71.250119][ T6362]  ? __pfx_hidp_session_wake_function+0x10/0x10
[   71.250128][ T6362]  ? __pfx_hidp_session_wake_function+0x10/0x10
[   71.250135][ T6362]  ? __kthread_parkme+0x7b/0x200
[   71.250142][ T6362]  ? __kthread_parkme+0x1a1/0x200
[   71.250149][ T6362]  kthread+0x711/0x8a0
[   71.250157][ T6362]  ? __pfx_hidp_session_thread+0x10/0x10
[   71.250164][ T6362]  ? __pfx_kthread+0x10/0x10
[   71.250171][ T6362]  ? _raw_spin_unlock_irq+0x23/0x50
[   71.250178][ T6362]  ? lockdep_hardirqs_on+0x9c/0x150
[   71.250187][ T6362]  ? __pfx_kthread+0x10/0x10
[   71.250194][ T6362]  ret_from_fork+0x3fc/0x770
[   71.250202][ T6362]  ? __pfx_ret_from_fork+0x10/0x10
[   71.250209][ T6362]  ? __switch_to_asm+0x39/0x70
[   71.250216][ T6362]  ? __switch_to_asm+0x33/0x70
[   71.250223][ T6362]  ? __pfx_kthread+0x10/0x10
[   71.250231][ T6362]  ret_from_fork_asm+0x1a/0x30
[   71.250241][ T6362]  </TASK>
[   71.250243][ T6362] 
[   71.321551][ T6362] Allocated by task 5849:
[   71.323413][ T6362]  kasan_save_track+0x3e/0x80
[   71.325331][ T6362]  __kasan_kmalloc+0x93/0xb0
[   71.327219][ T6362]  __kmalloc_noprof+0x27a/0x4f0
[   71.329181][ T6362]  hci_alloc_dev_priv+0x28/0x2060
[   71.331219][ T6362]  vhci_create_device+0x120/0x6e0
[   71.333260][ T6362]  vhci_write+0x3ce/0x4a0
[   71.335018][ T6362]  vfs_write+0x5c9/0xb30
[   71.336763][ T6362]  ksys_write+0x145/0x250
[   71.338528][ T6362]  do_syscall_64+0xfa/0x3b0
[   71.340377][ T6362]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   71.342766][ T6362] 
[   71.343769][ T6362] Freed by task 6725:
[   71.345442][ T6362]  kasan_save_track+0x3e/0x80
[   71.347397][ T6362]  kasan_save_free_info+0x46/0x50
[   71.349480][ T6362]  __kasan_slab_free+0x5b/0x80
[   71.351461][ T6362]  kfree+0x18e/0x440
[   71.353079][ T6362]  bt_host_release+0x82/0x90
[   71.355077][ T6362]  device_release+0x9c/0x1c0
[   71.356619][ T6362]  kobject_put+0x22b/0x480
[   71.358116][ T6362]  vhci_release+0x88/0xd0
[   71.359556][ T6362]  __fput+0x44c/0xa70
[   71.360913][ T6362]  task_work_run+0x1d4/0x260
[   71.362454][ T6362]  do_exit+0x6b5/0x2300
[   71.363835][ T6362]  do_group_exit+0x21c/0x2d0
[   71.365374][ T6362]  get_signal+0x1286/0x1340
[   71.366886][ T6362]  arch_do_signal_or_restart+0x9a/0x750
[   71.368818][ T6362]  exit_to_user_mode_loop+0x75/0x110
[   71.370799][ T6362]  do_syscall_64+0x2bd/0x3b0
[   71.372583][ T6362]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   71.374584][ T6362] 
[   71.375410][ T6362] Last potentially related work creation:
[   71.377285][ T6362]  kasan_save_stack+0x3e/0x60
[   71.378912][ T6362]  kasan_record_aux_stack+0xbd/0xd0
[   71.380764][ T6362]  insert_work+0x3d/0x330
[   71.382280][ T6362]  __queue_work+0xbaf/0xfb0
[   71.383803][ T6362]  queue_work_on+0x181/0x270
[   71.385383][ T6362]  process_scheduled_works+0xae1/0x17b0
[   71.387334][ T6362]  worker_thread+0x8a0/0xda0
[   71.389008][ T6362]  kthread+0x711/0x8a0
[   71.390366][ T6362]  ret_from_fork+0x3fc/0x770
[   71.391914][ T6362]  ret_from_fork_asm+0x1a/0x30
[   71.393495][ T6362] 
[   71.394309][ T6362] Second to last potentially related work creation:
[   71.396463][ T6362]  kasan_save_stack+0x3e/0x60
[   71.398036][ T6362]  kasan_record_aux_stack+0xbd/0xd0
[   71.399796][ T6362]  insert_work+0x3d/0x330
[   71.401259][ T6362]  __queue_work+0xcd2/0xfb0
[   71.402822][ T6362]  call_timer_fn+0x17e/0x5f0
[   71.404402][ T6362]  __run_timer_base+0x646/0x860
[   71.406051][ T6362]  run_timer_softirq+0xb7/0x180
[   71.407667][ T6362]  handle_softirqs+0x286/0x870
[   71.409273][ T6362]  __irq_exit_rcu+0xca/0x1f0
[   71.410825][ T6362]  irq_exit_rcu+0x9/0x30
[   71.412253][ T6362]  sysvec_apic_timer_interrupt+0xa6/0xc0
[   71.414131][ T6362]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[   71.416180][ T6362] 
[   71.416997][ T6362] The buggy address belongs to the object at ffff8880282e8000
[   71.416997][ T6362]  which belongs to the cache kmalloc-8k of size 8192
[   71.421513][ T6362] The buggy address is located 160 bytes inside of
[   71.421513][ T6362]  freed 8192-byte region [ffff8880282e8000, ffff8880282ea000)
[   71.426053][ T6362] 
[   71.426865][ T6362] The buggy address belongs to the physical page:
[   71.428964][ T6362] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x282e8
[   71.431815][ T6362] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[   71.434554][ T6362] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[   71.437142][ T6362] page_type: f5(slab)
[   71.438483][ T6362] raw: 00fff00000000040 ffff88801a442280 dead000000000122 0000000000000000
[   71.441341][ T6362] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[   71.444209][ T6362] head: 00fff00000000040 ffff88801a442280 dead000000000122 0000000000000000
[   71.447716][ T6362] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[   71.451297][ T6362] head: 00fff00000000003 ffffea0000a0ba01 00000000ffffffff 00000000ffffffff
[   71.454812][ T6362] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[   71.457661][ T6362] page dumped because: kasan: bad access detected
[   71.459794][ T6362] page_owner tracks the page as allocated
[   71.461686][ T6362] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5849, tgid 5849 (syz-executor), ts 53090247000, free_ts 53083666710
[   71.469101][ T6362]  post_alloc_hook+0x240/0x2a0
[   71.470708][ T6362]  get_page_from_freelist+0x21e4/0x22c0
[   71.472564][ T6362]  __alloc_frozen_pages_noprof+0x181/0x370
[   71.474500][ T6362]  alloc_pages_mpol+0x232/0x4a0
[   71.476138][ T6362]  allocate_slab+0x8a/0x370
[   71.477652][ T6362]  ___slab_alloc+0xbeb/0x1410
[   71.479226][ T6362]  __kmalloc_noprof+0x305/0x4f0
[   71.480856][ T6362]  hci_alloc_dev_priv+0x28/0x2060
[   71.482533][ T6362]  vhci_create_device+0x120/0x6e0
[   71.484187][ T6362]  vhci_write+0x3ce/0x4a0
[   71.485754][ T6362]  vfs_write+0x5c9/0xb30
[   71.487201][ T6362]  ksys_write+0x145/0x250
[   71.488642][ T6362]  do_syscall_64+0xfa/0x3b0
[   71.490160][ T6362]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   71.492138][ T6362] page last free pid 5840 tgid 5840 stack trace:
[   71.494217][ T6362]  __free_frozen_pages+0xbc4/0xd30
[   71.496171][ T6362]  __slab_free+0x303/0x3c0
[   71.498003][ T6362]  qlist_free_all+0x97/0x140
[   71.499891][ T6362]  kasan_quarantine_reduce+0x148/0x160
[   71.501725][ T6362]  __kasan_slab_alloc+0x22/0x80
[   71.503363][ T6362]  __kmalloc_node_track_caller_noprof+0x216/0x4e0
[   71.505476][ T6362]  memdup_user+0x2b/0xd0
[   71.506894][ T6362]  kcov_ioctl+0xe7/0x640
[   71.508300][ T6362]  __se_sys_ioctl+0xfc/0x170
[   71.509843][ T6362]  do_syscall_64+0xfa/0x3b0
[   71.511349][ T6362]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   71.513296][ T6362] 
[   71.514265][ T6362] Memory state around the buggy address:
[   71.516128][ T6362]  ffff8880282e7f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   71.518765][ T6362]  ffff8880282e8000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   71.521470][ T6362] >ffff8880282e8080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   71.524135][ T6362]                                ^
[   71.525891][ T6362]  ffff8880282e8100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   71.528517][ T6362]  ffff8880282e8180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   71.531146][ T6362] ==================================================================
[   71.534089][ T6362] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   71.536482][ T6362] CPU: 1 UID: 0 PID: 6362 Comm: khidpd_16bf5505 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[   71.540652][ T6362] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   71.543951][ T6362] Call Trace:
[   71.545037][ T6362]  <TASK>
[   71.546041][ T6362]  dump_stack_lvl+0x99/0x250
[   71.547592][ T6362]  ? __asan_memcpy+0x40/0x70
[   71.549101][ T6362]  ? __pfx_dump_stack_lvl+0x10/0x10
[   71.550821][ T6362]  ? __pfx__printk+0x10/0x10
[   71.552352][ T6362]  vpanic+0x281/0x750
[   71.553686][ T6362]  ? __pfx_vpanic+0x10/0x10
[   71.555197][ T6362]  ? irqentry_exit+0x74/0x90
[   71.556727][ T6362]  panic+0xb9/0xc0
[   71.557989][ T6362]  ? __pfx_panic+0x10/0x10
[   71.559468][ T6362]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[   71.561424][ T6362]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   71.563392][ T6362]  ? __mutex_lock+0x7fc/0x1360
[   71.564994][ T6362]  check_panic_on_warn+0x89/0xb0
[   71.566610][ T6362]  ? __mutex_lock+0x7fc/0x1360
[   71.568199][ T6362]  end_report+0x78/0x160
[   71.569634][ T6362]  kasan_report+0x129/0x150
[   71.571146][ T6362]  ? __mutex_lock+0x7fc/0x1360
[   71.572730][ T6362]  __mutex_lock+0x7fc/0x1360
[   71.574263][ T6362]  ? __mutex_lock+0x5b6/0x1360
[   71.575867][ T6362]  ? l2cap_unregister_user+0x6a/0x1b0
[   71.577639][ T6362]  ? __pfx___mutex_lock+0x10/0x10
[   71.579447][ T6362]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   71.581418][ T6362]  l2cap_unregister_user+0x6a/0x1b0
[   71.583165][ T6362]  hidp_session_thread+0x3c9/0x410
[   71.584870][ T6362]  ? __pfx_hidp_session_thread+0x10/0x10
[   71.586713][ T6362]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   71.588664][ T6362]  ? __pfx_hidp_session_wake_function+0x10/0x10
[   71.590732][ T6362]  ? __pfx_hidp_session_wake_function+0x10/0x10
[   71.592744][ T6362]  ? __kthread_parkme+0x7b/0x200
[   71.594380][ T6362]  ? __kthread_parkme+0x1a1/0x200
[   71.596053][ T6362]  kthread+0x711/0x8a0
[   71.597426][ T6362]  ? __pfx_hidp_session_thread+0x10/0x10
[   71.599301][ T6362]  ? __pfx_kthread+0x10/0x10
[   71.600865][ T6362]  ? _raw_spin_unlock_irq+0x23/0x50
[   71.602608][ T6362]  ? lockdep_hardirqs_on+0x9c/0x150
[   71.604352][ T6362]  ? __pfx_kthread+0x10/0x10
[   71.605915][ T6362]  ret_from_fork+0x3fc/0x770
[   71.607459][ T6362]  ? __pfx_ret_from_fork+0x10/0x10
[   71.609168][ T6362]  ? __switch_to_asm+0x39/0x70
[   71.610764][ T6362]  ? __switch_to_asm+0x33/0x70
[   71.612396][ T6362]  ? __pfx_kthread+0x10/0x10
[   71.613942][ T6362]  ret_from_fork_asm+0x1a/0x30
[   71.615535][ T6362]  </TASK>
[   71.617217][ T6362] Kernel Offset: disabled
[   71.618672][ T6362] Rebooting in 86400 seconds..

VM DIAGNOSIS:
21:03:56  Registers:
info registers vcpu 0

CPU#0
RAX=1ffff110096065f3 RBX=ffff88804b032f98 RCX=d28d7dfa8a5d5d00 RDX=ffffc90007027601
RSI=ffffffff8be333e0 RDI=ffffffff8be333a0 RBP=dffffc0000000000 RSP=ffffc900070274b0
R8 =ffffc90007027ec0 R9 =0000000000000000 R10=ffffc90007027658 R11=fffff52000e04ecd
R12=ffffc90007027ed0 R13=ffffffff8172c195 R14=ffffffff8dbded10 R15=dffffc0000000000
RIP=ffffffff81a65dd5 RFL=00000a06 [-O---P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fd9edfa06c0 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fd9edf9ffc8 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00ff000000000000 ff00000000000000 XMM05=0000000000000076 000000000062032e
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffffff000000 XMM09=00000000000000b1 000000000062642e
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000073 RBX=0000000000000073 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90006467370
R8 =ffff888020150237 R9 =1ffff1100402a046 R10=dffffc0000000000 R11=ffffffff854efeb0
R12=dffffc0000000000 R13=ffffffff99af9905 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854eff2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f27e62e7d60 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00ff000000000000 ff00000000000000 XMM05=0000000000000000 00000000004d492e
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffffff ffffffffff000000 XMM09=0000000000000021 000000000062642e
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
