last executing test programs:

1.812993801s ago: executing program 0 (id=578):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xffffff78}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x5}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@nl=@proc, &(0x7f0000000080)=0x80)
sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3f5, 0x4, 0x70bd2a, 0x25dfdbff, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x50}, 0x4008001)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e20, @remote}]}, &(0x7f0000000140)=0x10)
setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x300, 0x0, 0x0)
ioctl$VHOST_GET_VRING_BASE(r1, 0x4004af61, &(0x7f0000000140))
ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f0000000240)={0x1})

1.27342256s ago: executing program 1 (id=587):
ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000040))

1.002798127s ago: executing program 1 (id=588):
r0 = socket(0x10, 0x2, 0x800)
r1 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="e0000000120001000000000000000000647262675f70725f73686133383400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a2a3b025538ab22c1fda1aae5000000000000000000000000000000002000"/237], 0xe0}}, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8993, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0}, 0x28)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x22020400)
syz_emit_ethernet(0x3a, &(0x7f0000000180)=ANY=[@ANYBLOB="0180c200000000000000000008004500002cfffd00000011817800000018e000000100000e22001890780400"/58], 0x0)
setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f00000001c0), 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'})
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$kcm(0x2d, 0x2, 0x0)
r5 = socket(0x6, 0x4, 0x0)
r6 = socket(0xa, 0x3, 0x3a)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r8, &(0x7f00000000c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0)
r9 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x4624, 0x0, @local, 0x3}, 0x1c)
syz_emit_ethernet(0x0, 0x0, 0x0)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10)
ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f1, &(0x7f0000000000))
sendmsg$NFNL_MSG_ACCT_GET(r7, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004011}, 0x24008000)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'bridge0\x00', <r10=>0x0})
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="727163113f46f702bf05d30adb2f330bb0303f4cc0852abbe7516fcdcbb265dc73be3c27ee359395ad6f6f2a6acd2872048b96be9ff74ee2c216040e7d962c0fd4582dbbef4e08ae1d03c5a79b74022851f950f0290fd2bed0e169afeff86fd48cb33fb41f1f60a181f2e98ddb912f9df5ff6b26f6c8d0b1ab057beb147de774fb31e909157d309933d3a86686b8bbf0faba2578", @ANYRESHEX=r7, @ANYBLOB="0e9ee591a7e7319bc41810d50d75b7a03502d1e287bc7b1690b66dfd0373bf4b50f609b78a57e28ba000425173f5d73d83747a9c6d6cc95360abdebe0162da81756cd3f3a8c9090071181b8d0172cea2fefa60349f2307d58b57249125b16be027cbfdc6bf", @ANYRES64=r4], 0x118}}, 0x4000054)
setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000240)={0x4, 0x0, 0x0, r10}, 0xc)
setsockopt$MRT6_ADD_MIF(r6, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0xfc, r10}, 0xc)
write(r5, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24)

1.001824473s ago: executing program 1 (id=591):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) (async)
sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000230900000100000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000000000005c91440132bb112240fcbcc3fa9d0431575f8614d3538ce09c50eecd6ac579e8e83b944b666113f3afed7123f8ff53a13532f17b33515bdd7e1be14f53b9fc9b"], 0x80}}, 0x20000091)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x8}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x4c}}, 0x0)

996.831061ms ago: executing program 1 (id=593):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711005000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)=<r2=>0x0)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001240)={{{@in=@private, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000180)=0xe8)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d40)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x28801}, 0x8000002)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000013c0)=0xc) (async)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000280)={<r7=>0x0, <r8=>0x0, <r9=>0x0}, &(0x7f00000013c0)=0xc)
sendmmsg$unix(r6, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="aa", 0x1}], 0x1, &(0x7f00000000c0)=[@cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}], 0x20, 0x40044}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="06", 0x1}], 0x1, 0x0, 0x0, 0x4004}}], 0x2, 0x4)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000001400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095", @ANYRESHEX=r8, @ANYBLOB="602cb2f2c2188b62ce96bc3dfb552760e5faf07d924a01799e773a1173864cec0c82a5dc98831052fbe051768308e96e2a02a101f2968b4f7d481d9dae8c5b6af7a50fed83b12dd4b73266d6e8d2f1aab90ec4603facbfd2094927eee26cab60630c6b9c35a2aae710f52baf69815ee1cfb4a1dfd17ccb1c6d428c983da2b2278b2d9f5d8eb5eaf36131e701880f4f334905a6202bcf516724ac015b09a0de96"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x58, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r12 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r11}, 0x18)
r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4) (async)
r14 = socket$nl_sock_diag(0x10, 0x3, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r15 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000ad69a4492927c1f75e957d66000000a30000000000acd8900000000000000000100fffe0900010073797a300000000040000000030a01020000000000000000010000000d00030073797a310000000014000480080002400000000008000140000000040900010073797a300000000054000000060a010400000000030000000000000008000b40000000000900010073797a30000000002c0004802800018008000100666962001c0002800800014000000011080003400000000108000240000000011400000011000100"], 0xdc}}, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000a80)={{{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000440)=0xe8)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000480)) (async)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000480)=<r17=>0x0)
sendmsg$netlink(r14, &(0x7f00000008c0)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)=[{&(0x7f0000000300)={0x10, 0x2b, 0x200, 0x70bd29, 0x25dfdbfc}, 0x10}, {&(0x7f0000000380)={0x90, 0x39, 0x418, 0x70bd26, 0x25dfdbff, "", [@typed={0x8, 0x84, 0x0, 0x0, @u32=0x637}, @typed={0x78, 0x41, 0x0, 0x0, @binary="06d6323e442df4a0ae7cd90d61b181e12024febe880fa92aa81ebeb6b488ea9a2f19f3a4c6d800d94501cfa5de53b035a31d75522bb0b9a5b4cebd9c468e051ddd45bc46ed3a706950f5e20c58f329d7e5ea741969a18569e93ef679d3bf5969dcab2e339e122be3555bf28743ab0cecfd28a520"}]}, 0x90}, {&(0x7f0000001580)={0x2d0, 0x2e, 0x2, 0x70bd26, 0x25dfdbfe, "", [@generic="9c488cdab9fc1211301a8097352f974b1c8c5c19149b1060303d5f2092fd2baa88124df26763789968cf16ff4c64c4c11b1f9cdd79d37e7a4ac8065b907859e912f57e5ffeb693e7eccc66b208830704211858e0839c9d9f26c0f3b35f2813b91dd0233f0b56257aa6c1cac281cfadb1154a15", @typed={0xc, 0x6f, 0x0, 0x0, @u64=0x32}, @nested={0x3c, 0xe3, 0x0, 0x1, [@nested={0x4, 0xbb}, @typed={0xa, 0x6f, 0x0, 0x0, @str='kfree\x00'}, @typed={0x14, 0x116, 0x0, 0x0, @ipv6=@mcast2}, @nested={0x4, 0x25}, @generic, @typed={0x8, 0x4b, 0x0, 0x0, @uid=r16}, @typed={0x8, 0xf7, 0x0, 0x0, @pid=r17}]}, @nested={0x14, 0xc6, 0x0, 0x1, [@typed={0x4, 0x100}, @typed={0x8, 0x5a, 0x0, 0x0, @u32=0xc4}, @nested={0x4, 0x139}]}, @generic="3b00dd69eaba635db1a688549ccfa8720158ce501cf203dd7670a602635c080a6bf646fd57e82a7911b76d86304a3b5ba353c7cdffcbee215e08f6fc2c43341e843968cec171a4c9657e2f5e69211e9b45600d79eb6e0d9aee7230ef681b5a2c553f051da349178e2cf9b72f4b1f7fdce9e085403e5eb53a9cdd861ec88731a750c82b6d3c4580a0a609ff1b74b6d36ecedcb640200535beacf43ae9d4141872acf383ad8b41af73457fabe96eb882dffcfe679c5594ab3548942b", @typed={0x5, 0x4b, 0x0, 0x0, @str='\x00'}, @typed={0x4, 0x18}, @typed={0x11f, 0x4, 0x0, 0x0, @str=')]\x00\xf6\v\x83\xb0\v\xbf\xcd\xebg\xca\xa4r\xfcu$`\x94\xcd\xa2w\x99\xf2\xa08\x13\xc5>\xe3a\x9e$j\x1a\xa2m\x890%\xbf\xac\xf1\x13\xf3\xcc\xa8\x11\xbc\x82I\xb3\'\x90=Y\xaa\xc4\xc9\xa1\xa2ia\xff\x16\xd1\xaf-\xb2\x98\\\xbe\xad\x88\x13\x0f\x03\xea\xf0\xe6Q\x95\x8e\xd3\xee\xa1\xb6\x17\xebs\xc4\xc2\xec\xb7\x8d}\xfb\xac\xaeu\xb1e\xc9\xd5\xd1\x8e\xa5\x7f\xb9T\x96f>+\x05A\xd1d\xa9}\xe1\x7f\x8f\x04\xc3B<\xff\x95\xc2\xdeD\xe7b`{\xea\xa3\x8a\xfb\xddA\xcb\x03\x04$\xe7\xbf\x05\xbbg\"\xbcC^\x02\\\xebc\xe3\xd9\x85\x8bs.\xe4\x88\xe7\x96\xf1\xed\x00E\xe4\x85\xe4mU)}\x89z\x8cJ.s\xd8\xf9\xdaP\x19\\HO\xbf\x06\xfc\x85\xa9\xc82r\xbc\xaas\x90\xcb\xc3T\xc2\xeda\xcc!\x9f\xe4\xae\"\xcf\x00\xa8\xa0\x00\x00\x00\x00\x00\x00\xc8&\xf4Oo\x99]+D\xdazj\x17r\xc2\x9f\x1a\x10\xf6\x8a\x06`\xd0\xcd\x19\xbf\xa7\x056p\xdbD\xc8\xb7\xd7\x838\v\xd1\'\xe7\r\'\xacJ\x98\x14\r\xfa\xcd,\xb0\xb7O'}, @typed={0x8, 0xa5, 0x0, 0x0, @u32=0x6a4ab2b5}]}, 0x2d0}], 0x3, &(0x7f0000001880)=[@rights={{0x20, 0x1, 0x1, [r14, r11, r12, r11]}}, @cred={{0x1c, 0x1, 0x2, {r17, r16}}}, @rights={{0x18, 0x1, 0x1, [r13, r13]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r8, r9}}}], 0x78, 0x80}, 0x40008c0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r18=>0xffffffffffffffff, <r19=>0xffffffffffffffff})
getsockopt$sock_cred(r18, 0x1, 0x11, &(0x7f0000000280)={<r20=>0x0, <r21=>0x0, <r22=>0x0}, &(0x7f0000001380)=0xc)
sendmmsg$unix(r19, &(0x7f0000000480)=[{{0x0, 0x56, &(0x7f00000019c0)=[{&(0x7f0000001a00)="001f0d4172dd19186c92a00f8b9c3dd4e3b55512ab062842e087835704c68577c656f0db6534012594eaa9053d49034306377e354670ebb52cae2afb9b0be6ca6846a710d37c7623203ef95e31f7609d4d69315b70711f1d7f3625a5d7e9bccd57ee819e371a17a43c6c0d47ea86afd2207905f674cdeec728f0dd48a3bf82009da2f531cf86919836e97b7404f86c74fad9", 0x92}, {&(0x7f0000001940)="36f9631c76ae844f733bc60ad84eff005bff13b13f5fd2baa1b46c6327befa01b16d186b5319d4d4d90a32c04c66092e4edb4c23f3865412d83e5b42b6880f6fb937fb0a375e133ce2545a4fd13597b998739b942bd03ec5e577114ab193b3ead8"}], 0x1, &(0x7f00000000c0)=[@cred={{0x1c, 0x1, 0x2, {r20, r21, r22}}}], 0xfffffffffffffe9c, 0x480c4}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="06", 0x1}], 0x1, 0x0, 0x0, 0x4004}}], 0x2, 0x4)
r23 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
r24 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r24, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="200000002d0001000018000000000000040000800c001a80e0c086"], 0x20}], 0x1, 0x0, 0x0, 0x4801}, 0x0) (async)
sendmsg$netlink(r24, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="200000002d0001000018000000000000040000800c001a80e0c086"], 0x20}], 0x1, 0x0, 0x0, 0x4801}, 0x0)
sendmsg$NFT_BATCH(r23, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r23, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440040000000900010073797a30000000000800034000000001340000001f0a03000000000000000000020000000900010073797a300000000008000340000000200c0006"], 0x98}}, 0x0) (async)
sendmsg$NFT_BATCH(r23, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440040000000900010073797a30000000000800034000000001340000001f0a03000000000000000000020000000900010073797a300000000008000340000000200c0006"], 0x98}}, 0x0)
sendmsg$unix(r1, &(0x7f0000001340)={&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000080)="2daded902f20df06242d03e53d14a9534980e0603edbebc34b0f0f452c78d146171ee830027d3b6ebdfd3a721d9192d9b73b09ca486776e74266c163d5040699791cf0cfc450c67be0deffdbd2e8fc8883897b8b39e6898e624acc885b42bfc973e7d0de9f7fc7d08f774ce77ddcbaeaf7bb2d3eeae3c0bd913df03fd99da5", 0x7f}, {&(0x7f0000000240)="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", 0x1000}], 0x2, &(0x7f00000001c0)=[@cred={{0x1c, 0x1, 0x2, {r2, r3, r9}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r16, r22}}}], 0x40, 0x4000011}, 0x0) (async)
sendmsg$unix(r1, &(0x7f0000001340)={&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000080)="2daded902f20df06242d03e53d14a9534980e0603edbebc34b0f0f452c78d146171ee830027d3b6ebdfd3a721d9192d9b73b09ca486776e74266c163d5040699791cf0cfc450c67be0deffdbd2e8fc8883897b8b39e6898e624acc885b42bfc973e7d0de9f7fc7d08f774ce77ddcbaeaf7bb2d3eeae3c0bd913df03fd99da5", 0x7f}, {&(0x7f0000000240)="5aa5eb654a032658f7f7a8c0234a25335d147aa7f8cf158452991d853b7246b4d1b23337a16c87055f6353806669b981e365e0bc52b4a7187148e000dcd454029c2bb0211270cb9268dc907367079a63f15051ddafd6993b860e6bc7584a401f5e11e6554a1eb303cba0b0d67c0c93cf3e38d861c98e586aa96c27b756ceede17dccbd2280285b73bb32ed23efea86e36a6bd25b00c64ddde49efe9eb617542062183187f9624870030dfea26e4e0ab75c2a8a56dc75d221d2f903406fc27ed8cc76130574d920117cd4058e19b2218463592894f3c8acdb958ced8c750ba6b36b7afc02e37e9b7d5ba603de13a32e20aaa9483cdfeddf50dbebbaca279de53919c83517c832aa8e463a5ef7f19d38068d73a58955f375db8f2327990d6754248cfc783cbfbd41012f1dd46e7359af8a1e11171bfd03daa3a7e63f9dc98803ba132514b10357defa5fe1e275192c3a744c8699f7fd0ccde5481b3641183fb2096a17d331dcf095ac16b71d54ec00da301ec23a721339bd55ee33d53038333d3ee4cdd3458484b5ba6ca1ffde4b580e32d073b55fa88fd2b1e9cb524fe110bd48f7bb96213ce60f465a96a4298f671ece02eb82b399c9d7949aab570b7bf80f3c17c3ee5824adececaf45def1ad26ac6a73798e0e23442513ec878aab0e47600f159379079a17f6afc0d3a097e0be8c8613aa55e8c52f8daac3881fd5242ac21750ad2683aa9cea1ac2f87c4ca3dfd8ee036230abfe0a986cf11c3f65916ab929d652c46c0535d274b6620c232291f0cfb0c5e202cb21080e898a609438e6417f69bd91dfec8c7b278a25c3fa88c14431f9fd09d46e9594ce3a397f88cf7e63941937ece4fa2465c4dcf0dc5a8c3e72101ee4bfcc00f274e845343d59c733b4ace352fadbde9b3e1db842b43c99f1b520a4c58926fa2c9c27034da1dcb3a05bab5d8194c8cf73223a8d7a3fb9577b73ae98489945f7d5229555c55efd74d0877de0e940cdd14dcda3344a81d4170ec84e74ef25b8e77d189658d6fc34c09b082937309c0f367eb8e145daab7996942bca7be7ee7acee7f5db4ebf7156ae35deee9f44314f4a0d9f91b7c22a8e232fe21e41db0303f97cbebd13c639ec0e22b8a5651667a4841e1c1440f7aa5917b3ef1d83fee6b735b1116800a4ef812fc8445c4aadc7c680669f64b48c6973376706eb29b1f970ccccdd561244efeb976efa5efa2e15d2071923da09993170250884f007bfc142d77000f4e8038aeac1e063fe0c96217e8941f3a40619a3b0b276bed2bdfa6ef8dfb93ee603f8df7ec59dacc846b8768c7dd827fc09e5c3ba09ed15a832f77892d59c596a56c4bb58f90984ddc66c7976368d81384d721a4afd4e00a6401a5b54078fa2bbd70a7bba08554cad1b4735a93c9d38843858b5488dcecdd89ded8f459f0930a1ad97298c8954dd228611082b60dd2d5072f3e800becd03e1da22f7ca1922a2393c0fcda686336bf9e1303428b0e6686e03f1b8e712bb8d2b1ef4258be9aa31089ccaa3b9a078c204b0fc0680cf2c61d23ba13bcf3fbb4f58069f958cf50e1162ecd4628e9ef97e57984f35a30db7e69f4f8f9193ca705dfec02ada13dca08515f749fec2dbdf325b43cb2cc778aae5b757f427ac7bb2af13c4ef99eca0924f7c2f66addb96f3f6278f4eda5b855be0c90cc6f2683f09cfa5c6508de52112a76236886e92396d812fe01edb72b73a61365b331e47966c19a2c285387a69ab76c66d8acbe17eb1fae3f93af63aef46ac5afd8b4615acbd76f172a56e2fd5d9c53bd1d93568e9e87a2b5931b65eb9c143bd1bec518007fd02766b2057000082738315d0f05cd0464be4ca1af0c917e6c6d783bde4e5b44f81e0e906e81ba5c87cc144ff2578821be4c45bbb035c0aa18b77e24743394dcc423eeb9f77d468c507b091adf8ea041ea9ef9d38efe09a949fc824176286bd8118bf329c532e20cc74fa66887b9fb68215c21528cf5e32f9b5c50ca1a21675cafcb55a298361788913e65b46765675c00ef9c08bb51a523ff6040998dae5429dde1fd989bfa72762b1f30efbb28ad63967c9d4db2294ff45ecb1fb67f9939abe5e89eea260b3e3b72f4a3ae61de027f96a2639e304c2bc5c4f7ce0103a7d583c84b8de6832d6f32e2daf53dd090cb25886bca9e931eb08fdd6ce2194943e56ff91ac22d1c48bfb122b9a82d7444a8a8bdbc8e2e5978d8e82bbc0f5301beeabd1ed8bff256ff858b9a29de2fe78ec3a01fc9c281fb025b9de4db419fa48b34750f382b2eb01a3653a43380f0cd3cd8e2beec850f4cad8b2961579a37aaeb7b808008311950209023ccedbd8f2bde9b9297afaef67c40314883a77eb1e708e5a43ad34b73ab4b80964015190af5a438e38ceadb260aa528dd95b4f879715b612c41915995518ab2863a2e2d96c2678dfc0f5776f0f2ccc5e0d0201829f8f7cfa333828f4aeefff34855ae3faf929d473cd19a1551b69d85dc86e863e61929992d70c2f15d3d0a4540cd97ee38eecd1714f641307b8c3b731d3f739764646481582fe4c0d37cf53fdb05f0c568f26cdabd82e71cafe447bc65d4987cda11fdab6a42e9d4e1b5f00380449294bc111999fa6b4e7c5f6605e3e0414a028291424aab1f26f41964f86fe7e191e8e4e63329cc17b4db3684aba64a8f85f25608ddbca90a15ae9a7f5cb5b25192b4a94d77efe03eccb9e025e1aefc8145299bdd772393a096401d8836acc914a7f771196f2a93f0709f0bb96be5a95dce499d4e9a80fd076ba4c293512179589edfc80811ad5bbb3b64d8836b240c82cc7f93bf2e4faf8802813c23e4d99d3076889fd3f45ff10f64d51c30c22f8ea4b67859d0f9f9e6f8273cad87ce16271aec9cdb5b8085aa0d1cdbbcbed23e44a11e317bd742f6e4f6e3e9cc660ea1ae3c6053528d01c827d4bd2282fccce99ea625a735023c18b0a611d132bb12733f6a7836deb8146d421ca688152dd1b5d87802939863f6ad5235f9250f8cc538c6cb4687d3235c67d306d9c5873825883d44d3ab3238db9322d6d9d1f78f445cd90437a3769ab1767a659843f8034834d16e60e5b65828350ec8eecf00dfab6d49266f65111a9127336d73283b2fd3c4819466379c0c4de429dc1baf4f15efbf99eceebf06ca177d4fe99c6af1701e8a82d0e2d67aa373922d53fc54b509138ef0ea305b9b725ab0e74f26f8fd8c653d6d34af386fa8c9a88ad44ad87057c1687fa3bdb17e0e09dd76d1c34d4742b0abbbec03661e26bcacc73b66a23d3761687862dea4f3d3654f064c7de4dc993bef81ce449a5c4a5cb50baa64080172f0153f3ce5d549d24968fa5abb6387d040ff0a17ce6e50084141ee151df3b52f73228370663b82657b0b93937674b13b0fe2784a52baec47b4a497b7c7bd327c77f08e3e1a3c9daf13991609f389c63f4baa21717101b564462bb9543a8a09f806c87974031d06cfe222a04d354e2506c39bae9328f1f653653c366a519c8d238fcbb6238d5b2dcf3619fbdeb75223eacc2a4f1fdf34c7e486c087658826ea4e25c0ec15858c23e29353c0fa0dec8a96a810103613dc291295ee618d8f447124392e42052c2051dec35d990b735691ec4d7ab63ded4af0189ef6e4e28695e0a87429f45abbcb6e2fc4086802a03f35985b6deb44d27254222304c708cdaa08b162c9100846e47e40aa5db4607f7048d3927eb9e5b54fa633cc3061118768fb55f67809e6b4a9b9d08dfb4efae0caa2875dc7c391a1d212c56c6002877d42eacfecae2ed89da537fe0fdc8954ea4ab9ff6606a6b3d54f4ed9c7c43f37eb3644d8b27b04a9a84fb9d9c198485fdc5fa7ebbdef408c17ab810d7d3468997234daea4f9a56f51b0c1542cb3843102fe8d4a2abcd0089cebf83f96258e0d5b0aee17847a52e76c345df895af1262fb9703a2273073f4d0b3be44c27922cbfb91ecc3603f1468fab24e6ca49d94bd4a5ba6454e8cac2b83cc82cafb2fd39b4bab26c71abe75794fcf4151795dee0715d7805ff22f70ae731267ee1c1f16c5467553859275c582b907de4aee30a53ee01bb367deed00dcf30b68d37e93521ff48ffd81a3c021267a7235da0114312246edebbac01a2540d5cc2c0668d5526a59d1df213efc62aa236a5b5880462ac707c59ec16af6e6c6372e9ff94a31b86ed5cfbcdaa0495439c891f219832b21eea9b630685d7bc82d307f8480b1bbfad5653918f2b0e315fb6c79a00fc1910d7ef0e337fdadcb7d4a9a00743c9f752f01add62554ca339fb2ac66c5e97828862d46f86ee2d127916af8888aa25a5045560a9b36840faec7b326a120bc67ec7ef51fdde258fc1b2846f71a1785c0680439d7122ede410aeee50036a9762b9bedbe116eead38abfb0736c9b4d8abe81d3468a837b63bb01f1c80735519024592eb7a40f1fbe06937926bf7c9808a9d4487d32282df6f9c30d539ef9295509582409555eaec2584f2400fb2973beca6f63598ca4f772fd5f60d0fd8cae2947ee567d6e4c2a65d81db1b0d149ac7d88cdb6b6a2a850b5eefcf76b357e13aa9e2578c065da5cf5018be8b08dc2f52fdd893c3a65396c8fd0dd1a3478cb1d8d5f66aaa8e110618dce2d1c2f188da6f6d6c1ba85521e8f35c78fb90625ee7f553a680a7da658751bb5359edc07a0536166bb1b04e0aa45f90a82712ceff32527bbded6421c0519f16204b6892ddeb1f790ad7515196c8c8751a28a7af7b96f433844990737645d589a12128ad1f9753f9bb9a949c9ff856f4edda71ca7ca93e239d1e4cede8d26a3942ff5c17cc57a130a4624294990d27ffe1afb73d90ee83ca53d9292d9d96d7c83a6ef911f21c32484dcf470b57b25c880cec873cf3d7bed1bb87778310c03eaa26d0ed3e2647bcb485eb49cf2c2d2bcdb9d9f6ab7b0949aae2d0c97d2550f2fa2efd9eb769e51913ef1456c4f635b00b623b26222c29df7440eac822850f32caaf51ef000a4d28562b2d1047ac131a08a31d7409a74e5273d0189c14bf1e0f92cae56f035c5e8c986f2d6df4c623216650a6e666ef9bad68c88aac5bb1113a275d2b0a2ab7474d7e2b5b43b7b34f7cad577ff2202ceee72899e2c66f8506a3952cfed257b6bf50eb8674547dd5db9288c3ac4bff096e3ee6721e7ef4137e25796df479fa5326cee337e28ee6a151235515ce21c639c82e1ff883c44062be9ce9a2761f38df093a8a5aa7769a508b7ae86718cefc7c897eec0729b05dea04fb0873041350f1dc7396fefff02fcad70bfec9335160934f59f24761558ab1181d95054c45fe650b83d6ff7ab3fbfff4c09f3af4278e49ff35aea62fb9acafd25b450da23ad8c96816866a768382720c3f08c0ac51b7cafce1a73b82f3f51a42709be3be1a88946f26ef4f4b82b699ca6cff623198b6e486f86effeb23cbaa95834a14dbafc2964299760c9c310fe27a0e3809007286dc801d33e8d5e954cddc2c6f7f2a718b0a9c5c53443247e85878632c90bd61213fac13077c3e5eb9f53796e5d2a16cb6044f849a98325c8998631ecda080b3693cb5a28cd09c144f38407743a08e510fb1494128f759e56b193b23b7125a158acfc34cbec3fb1afce036152c199fc5de93d0733a869bb6405630f9d8d2f4de900a2ff000a53bedd8f225004eee155b1db8347ffe649a05ee97d917ff44cc89d6ece8d5e7a028a85182c7bd0afe2416199a7c47837ded2b016f0c6a582184df2eb07839d20de209a452a0b655d9bdea87ff77a167827552202236102a75ea699581ee1a09c008b8a8179", 0x1000}], 0x2, &(0x7f00000001c0)=[@cred={{0x1c, 0x1, 0x2, {r2, r3, r9}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r16, r22}}}], 0x40, 0x4000011}, 0x0)

900.806604ms ago: executing program 0 (id=596):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_GET_VRING_BASE(r1, 0x4001af84, &(0x7f0000000140))

830.909758ms ago: executing program 1 (id=597):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
unshare(0x20000400)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000001ec0)='ns/time\x00')
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$inet6(r2, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c)
unshare(0x22020600)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x70, 0x6)
recvmmsg(r2, 0x0, 0x0, 0x60, 0x0)
ioctl$TUNSETLINK(r3, 0x400454cd, 0xfffe)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x2, [{}]}, @struct]}}, &(0x7f00000009c0)=""/4096, 0x3a, 0x1000, 0x1}, 0x20)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newlink={0x44, 0x10, 0x403, 0x0, 0x80000000, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_TLB_DYNAMIC_LB={0x5, 0x1b, 0x2d}, @IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x44}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x24, 0xb, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x48}, 0x4800)
ioctl$VHOST_GET_VRING_BASE(r0, 0x8001af85, &(0x7f0000000140))

830.418509ms ago: executing program 0 (id=598):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
socket(0x80000000000000a, 0x2, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r6, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4041}, 0x8044014)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x44, 0x10, 0x609, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x88a8ffa7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x44}}, 0x0)
r8 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r9], 0x5c}}, 0x40)

660.651325ms ago: executing program 0 (id=600):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000f7ffffff00000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073113ee4ffffff00851000000200000095000000000000009500a50500000000"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r4, &(0x7f0000000480)={0xa, 0x0, 0x0, @loopback}, 0x1c)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100))
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
close(r3)
r6 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r6, 0xfffffffd)
r7 = accept4(r6, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f0000001000), 0x581, 0x40000000, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe)
r8 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f0000000340)={0xffffffffffffffff, 0x1, 0x0, 0x0, 0x3ff}, 0xc)
sendto$inet6(r4, 0x0, 0x0, 0x80c0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000a00)={'gre0\x00', &(0x7f0000000900)={'erspan0\x00', 0x0, 0x700, 0x1, 0x3, 0x81, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x64, 0x0, 0x8, 0x2f, 0x0, @remote, @broadcast}}}})
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r9=>0x0})
r10 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r10, 0x1, 0x2, &(0x7f0000000180)=0x5, 0x4)
syz_genetlink_get_family_id$ethtool(0x0, r1)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="b851be21", @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r9, @ANYBLOB="08002600940900000800b700"], 0x2c}, 0x1, 0x0, 0x0, 0x4040080}, 0x0)

502.861132ms ago: executing program 0 (id=601):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="840100001900010000000000000000001d0109004d0012"], 0x184}, 0x1, 0x0, 0x0, 0x14}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@getqdisc={0x34, 0x26, 0x200, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x1, 0xe}, {0xffff, 0xf}, {0xc, 0xe}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
r1 = socket$caif_stream(0x25, 0x1, 0x0)
sendmmsg(r1, &(0x7f00000001c0), 0x7, 0x20044000)
bind$vsock_stream(r0, &(0x7f0000000340)={0x28, 0x0, 0xffffffff, @hyper}, 0x10)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b595000000000000000002000000", @ANYRES32=r2, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x20008824}, 0x4800)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r4=>0x0})
write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f8002400000000000000200000001000000000008", 0x1b)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000005040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)=[{0x10, 0x10b, 0xf3}], 0x10}}, {{&(0x7f0000003680)=@generic={0x15, "68e7fe44a0ca755e8236d391c24dccea5aa1b825f2fe783df0d1cdb26a09009ae90ab051545d4c7950e843f6b3c590964d6c76a4c582b4d40d1c5813987f955351d6668aab42ec752952c0d603b53b5a8ed18e15f5c568075a8b66c8487db30c65283d1ca350dc6148cd1c239884ac10b3d59f6a3133f5025947b63845ee"}, 0x80, 0x0}}, {{&(0x7f0000003780)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x4, 0x1, 0x1, {0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3c}}, 0xd2}}}, 0x80, &(0x7f0000003c00)=[{&(0x7f0000003900)="58e531f2e95f5184c95470efa0ededf17c0f8042883fd3d77525f91248d908aa3ceff056f6482d04526dd503f84814602718f5bb96226a43bb5270437feeac53df997ac58713f5f9a34bbb00e4adcf92872281edadfccf36077d40bbe38288ca0b1ee72fc90b07cd0318eac9c53fa3cc47a1cf3b411a14efb94685c4af63f315c6c592a0854e878fe086c272fc40635954013958966317270cca7e32d714de6481e8b96f7a60648ec85257a14850a7771a59b605f96a5feaf6f5db88d1d1a7ddd171a4d5578f295064b4952020fd21a17098706d0accee57306be8692092562acd6678b848c1b1badbe4628bf1744f0de7c4f67e62d1", 0xf6}, {0x0}, {&(0x7f0000003b00)="59e5ebea2e883f571c4db188981292f66b5fb73a15513aaf2f57f8f74e83ad341c59f75a38516f8340425ad8e722c97f974710a0478ab0052e1146c9a62da01abe13e7ba38c06dbc3cc709729671325219c2c021ca754d36cc905e80bfe76aa834131023bbeda5520a421be8feefa70614150ac4cd9f2e77cc3842774f468d38523cae6a51012fd3e26a5d619ce74fb0d5e6d622237240f37219400fb74bb6c4ee4612252da9736fbe2ce93ef76cbc72e4b2f34d372bb986f93e1626c3ae96a07ea96c67abf9c2a6584b8337ee053eae44a09e6bb3d4c3620517", 0xda}], 0x3, &(0x7f0000003c40)=[{0x18, 0xa, 0xc, "678cbc00c9920a28"}], 0x18}}, {{&(0x7f0000003d00)=@l2tp6={0xa, 0x0, 0x2, @remote, 0x1}, 0x80, &(0x7f0000004ec0)=[{&(0x7f0000003d80)="680fbd98750f2af509c5fb7943e255c2d2701ca93df98211eca496a0f9119fc13571d1ff77c1976609b1489924c9c6fedf113bd7eaa890e2aefb0d7c1b6f5beb7b7a1493127ae1123c8dbb666fb75686accca20c648f09ce83caff98a37852405c58b6a2b65a53be89feb301ecf0f3618880bf5972403126607d117f8bee85b9ce25868137878dc7ca50b7c7b70db0f22305bcea9a3d28f76f658a648e4bfa5acc015b41f82654dd1ebfb48aeb37f173ff5a79788655384a9924bfbd15b999096413db7ee9fce7b7f0ed13630251bbaa21e67ca8ddb646b8766bdfc986ac878c69254242b385180caa48797973526c65bdd2337921b86575531a07cf63f76f90e1207bdebea0f8a60dc45ac6589317520b7181530aa86143b8cae7c5ee9018215230f0dc91a7a1b724fcc7528e9f64aa035059cfee1ec7ab7b147515385341923621898b1d78e0e31e5d665e7e4b423d56d9dbb17b612bb7f913afded8afaac89fecdb59581a53f81596f02c4117e7116c4697ad0f72cc38707c4cea2ca577ec9f9ea6820708e0afd0cce5bd794d94dd04525d75877635d26769bc6b9c7b6fb509e806f5da25a615ddbfbcacee5c55388446b69621463cf30648d2b8ffd4325f64a4da63e7042dfb80b1752b6c71b1837016133109cb0c4f43adeddcf60c79cc36e9f869ceb79b94c51d73c156f340eec1bb88997c2c2828b0d6117c8f9633957b57bb36b1a8367a2cbb28c9b85e40e52cfd3333dc1bacfbce423e6b2ae6674c461b3ca5a456bf16e86b00589d4ca2456c4660c8c081f9f2d6651fab3ab31bdc05955048b5cc2ad11104ecbc809a231b446eb2896a0571be83acf58cb9948faa4d147250c0a557347df48cf2c12e717c38bc961953db2c409dac37ea3ee0d81d823e450e6ea6d8d6eab91670b4f2a456fedb76912a98eb8fabdd49002cd439105718e56fef6989725f22d02c23f2011b82abf56a84e3f42ae0dc575f24419cb2913be96df17504c6f1b949bfa8f335bbe024fe4ca4192b8d789230001af12a80a8f6974bb89792d79ffb75a5e9a6fe9dd1f3d392a6f7ae0bfa4f82010c514d0cef1cfd81c0d00a46e76560fcb4810a33f0f5d0428be9f3d09fec783e825167a5f8077c1d30c4d29de8e2a640bde5918933c2c3195cea0e3582c834860425d90c6aaf88134ed88ea43a4fdf93fea719d8af390f72011b417dec19d350b3f02b043cbf4c702963ac7f83dd734e20d0e69b1ccf677cf822e90fff64b97b83d950c4ad299927c1f592503d65fec589a28bdb6edb0d332d365254eb60ce4fc3f585db78876694090b7c0aec113cc74b6f128fea32ca60d11a2182860e01a9dbcdbaa1085d054d85d8dc0ac0d00998760c5309f828e9f8e0bdae75433ea4766520e0d55a87a6065584c9fb5a5d4fa94dafce2ed2056b1fc2ee69fa405b671120585c0885d8e8adb84c0d8ccab6fb715e6289d152a6b31fc7fdc3108fba1d60d0e6e06fd8ca59b747b9e573811418e4af34d5d7bb0c3885e83c13164ad6be9c4d36b2c8722c2b92d1f87ed353f58a8b7a44139ac7f348044077003f7a4bcc6f2a313d95306a6fc01a38966e3914e28caef4d6570170f2298bd65e7bc2c1499e34881d2cb758740bd3b839d17bffbc57c8251ebd0b0df259a9bae768b65c103978a47e9071be24c20057086458d81c4fe9e611c9492a10d19a7bc9ffb6e29ef55cdb1a5fa35d838a06284f9e761301c2d74d4af35d9e775828b11879b6f7ba47794f2ad5473e36589fb994982e59af59680977deb0d018d19f401474d9a45d7c7e86c02647b7745b884b61c81d11878a032274deb37a426d91ac76ed68221620b3fa141a0d3b13a495ccc3b5cad879c65406a1c193d616fdd172465d06b11533d5d9b47dce5358f11c7b13b311c07ca7424cd384bb45bfd28a80037823d6f796dcc75003b7c47409d44bbee8a4db4880f034642d8a00adfbaa0d08365bb15264de1699cf5e7d8d22ee5e73475d68010684c61150ef7b72d1f6e1edbb9ab086c07da231896c93214131385e21b896f00ee0927d2dc9813026de41d5f47d2c28d03f14eb4d88969b3a3446fb4cdd2a30bec54276362f0bda7cadef384e02308f849c2712f71df6c6384dbb0156deb4bd44e9042a98b15472638ff10d7ff8fda8724eeee4ef65176422dd1b4b0185166ca9eb9016ab5811184675a9cde7d71eba6357bec37c3cb8c8c7466eb737be71ba8d2d06040d43f634f462434207f36e4fdee635dbfb483add6c829a6da1bb565b62e2a408868239721adf8576540f78d19d009e54595ca4f3771e970cce2f1f4855f96599a3a96ae43c06975b4da2c23b1966d1a33df7e3b8f4b48f81894b73950198b3ee55db9702765f0274be1d1c044f3d368f837c1b0d44c975b541b0243b0005903cf97db59862b83178d86d84051a401e27ae9839414b5e74b00e095fb9d6c4156cecbd7ac0261092c2bd0e27c96546e26f2e8fa417ad34e6c1b34ebe8858aabbe41e050f5070f23524b8b2efed36e968959c57d61772bb97556657144d925960b72e1a76e8ff9da71b02e3240bc88406f0ba08db9c1e6ec54743fbd8e191b1a1b2201bb311f1785fe76d2f79b934dc57dc4b4c794ed3adf6db7161a2c8b8e75d148ccc600c7cad960e474519d2d9e9a3ca503df795fa65404e93669703d5bf757d07d39e128424958575f0463ffc4f0d80a6dfbd0f7909c94d26261b889020089237140ee08967fbed873b60a76adb4d30bca833881ff272b5867e9ac4469b11ba4bc93ced98c5cdeed818a7bb17c75594f4bef1be6cad76191cb4b604f64ea54bb1ae4635ec5866aa0bbf5cc497ed5ee5cb694b9dae8584d92025102d4d2c58335fa901750d8f22a15b64d47f05fadb4451b1275181a95156dd4ea2fecec867965e1d87fcf5b4918cd3937fe58ca744ad3fc5b5b01d4598f4f82c13e2d10bfb3c1fc5e2574a0ea71449748a5c7eb9c499cf17e1eb5fac7ab5c622ecbda33907ef8ea0beddddc5bb76d36f0a1516a6cc4d79a43182e998f897945db2c2be69004e2362563d0aa3322825b220fb5b9482f1b9c09b6558f2dbcc43e7abd36c03531bc39c13b271bc4cd1409475f96fc5fc04db71f17a6323d49da8dd96c38a0fe3d3b3f61a4d68a568c7c5ff5037c4e5ef6a16efbcb30c2fd19b1df760fdb47d61f83e5fa22ec40409c3bcdfefd06bc8f2e24395673bea7bdaeff57f555e5d4bdcb3c0626cc1fcb0f942f73c295f6b83bbdcb07bb7463e824563527f9fd5849637d4c106498909b3212ac46154bd3eecef152e985fd25a6a649f96324c56a9a213316bba85dcc1af0855021ff57829b47b29cbc3dc908c30cf5a6208fce307399ee29edf6852de94d13268b60f22a70bcea34664b83098751a22cde8bc9c6f765dfb67f08d302090b3fa7ab8697a47c459ba56fffe74acd0eb7623fd94b2adfd46a30c6dd28cdeb8da49fbbca0dfafc3df9f673cebe75f6898bd32e35d2de1ccd988d03b7d6e27f9321ce2c1b06fad2dd93311aa8c15b3a8f3fc2d5c0225f63a63f73db40241d8a1b4478c63375c4cc2fd07d7fc6f1c388e512fead76780f0735b2af65176f1a2e568622a5626c039aa7b995bf4eb8cb46f667fc1910070fb7c3d06a6ec694f0b0b701d7bfa3bb79dd92a2b93b3c4b63780cd3dde7a664a0be438a1c475cd4b2bc114705ff2f7e4440888de9bb75733614589287b124d42a482e8dad3cd39ea20aed22abf378701dde27eef94c530e9fb30ebae810ab4deeb0fa12dc1ce61ade52902edb54dcd4944b4249cc01ca0aa76b884ac278e9b3a86420179803957498253e434ebae5a126b729615baee593139586da16ce77a4319b7b36e40251ac8ac1bdf6b2c3df973d3ad1a532d01be67072090c67994836fd8ad7bfc9667e897b9e5d019ae4e585db9782b1db8d91a5b34b46df82e3737a35fa0ddc1a4ebaee0d8845f92c45fd1d745ec77369be8ccd91477831140c119b0cf1d7d2f90764253311c362b7f11c8c556eae653f663a0757edda78e15dbf7ef34fed2688b35e289bb4044891dce4bd112fec77c372cb0b8c706b00aefb450542f20bb4841087853e45b888064a572b8c6605e98568a13786d651124aa5e0c0c9714b740f5de4f3a9d1c5aaf10d5c7f3cbda25d0c621a1bb1749c9982002a477ec57e6905645f9625a7e0e87cc1c07c4ef016ccc3d5dcae37952ae473de791614c095434f5224137c50a8bd5577b0a224fe85bfad3f856b33dc73dac54e9da68ea31a98143ba32dff7bb1a0b7fe20fca343267d2fb95dc9467a45cf4174200055a001b388a8a66f9130ffd69b4cf17e7673f4044fe8fd20d4970429275218cb2a41f7547721957f4d2479365d2f130c6dea9518eda1c8cf5fc251864888137bfffbae22408f8a47817332433f24c3844b13206aa64fa511a170d6f2e61844e3b446d28becdad1d539d3068db6116748affabb9173d2d942cc24adb491265156d3403660485bfd91f84de838d1fe515a9e6c2404af4ba9486bb6b5a392a7620d3d7037cea46946dcd7c2cba288a17e6e88074368147ae795aa7e4a78999195fab46d7dc3f997647ea914c7c6d7fc5e96e44caf8e8fa250c3c68b0b90de00b5af531f1161cc834a63bdc3fb5f2fa22321e1d0fce699ee465a8977c6741991a1d950d35ace70c52de5fe84cd947a272556b77f016d627e3bba05181b069502f12309e1aad806a18587f2828dc6fcf6e956060be72a24931805e14630d0dfa566008735aa5e7f6c2b345dbcd3ec7b2e0dff1382bd79bfe2353d92c852c536b29ef98e48ff3aa9613db2a9f779f348e325c9428bca4c4a69a8732ca2041a89c7ac744a77cda498e7f81c549f9755a5bdb2b6c581b575d67253558fc2b6c986916d54aa7b82bcc80d64450c6fff47707754732d29f7fb316f64c34d32d37aadddb6c15093bbd7889c0015db630650c2e0cd2250ba57032caadeeb550a27126cc8bd18183fc0beec74960aa59c360c9e3a8ff25d056c1dc3e6af0be85a6d8d5f59e991e76039f25af9746c027a603335ea0de0c977a02e945d73658b19694172f34d4a175cc250bf9681b81abdd5607e55b516219f9148079c0cb954766d53158a9d78092093fb65d7c1077192e6f8def0a21953bdb2da17cd2571aea38c2550ab3e639f154646225651c67e82aeee022821157d725d4f13a6920259be10915551be500b39d0416ddfd8f5a795e861499cd41a6edf80bb4661a757deb625efddb929a2b273a3f60550c9e4c8c215f5fe4a15b877dae638fc6d2f15b5d362e56fc56b18ca0fb5d4d61344ae9653c0998c052656bc0c253faa51eedc4a8917977724479062972aaf5f1a3cd7393d330900ce235b743c447ffa95bcf1b15b3fc8a3f037cd7294c410870ab376cea3fcf63eddb871993ac84e7d328f2eea4cf2f9d4dbd4c25e473ba9c608cc2c7a42d0413dc19a3186c6eb51f3106a5843264ea3713405083532f16ddb51ffca8d5fc59d0538bc8f48f6073de9bc325a8f4807008a70da02fcbe7c33af45a313f67c37f64c85f1f5d2a082a8b46e1056ee898943f1035b3b07185a53e0992e8494e7850d984ea7b45be26404e475d5ba4bd876b816afad6b50092e00177195f514b292911debb83d356ffd63e84a9e5cbd1b874ca89d4393f167059f9a2a2fc90d2fc6abc8858ead94944c003e8e866140aa6e5a61388960de89a0ce17a26e336be1debd4539db1d12281cf111b27fbc99e", 0xfe4}, {&(0x7f0000004d80)="9a22e9ac3f5af0905550", 0xa}, {&(0x7f0000004dc0)="86a81f09db5ea91fe358ca54a5844a4f41126a1554d09ead9a2715785d7c6991b0fe47922ecee0136520da150b5447a5dd814eaed24e6feda93ef82f852275e2834d4ef8b4cea9861937a9cdd108112ab2e2d5fbdbaf999c01942a501324f46263b14c3fa07a9a6297ccaa86051effd5282fb023a9a9825b6a0e4ffddd9eca57d575d22c145b8c8b8f11912e345cd3ce3349890d7f33c4c4f47527ba62fca3a110cef5bf98964c9a2b1165eb629362c3c79872dc11bfd76d589e774d5a9e017742e07291ba7e73542e8306f34f72fcefa4cf991d1b", 0xd5}], 0x3, &(0x7f0000004f00)=[{0x110, 0x116, 0x7fffffff, "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"}], 0x110}}], 0x4, 0x40)
ioctl(r5, 0x8b2a, &(0x7f0000000040))
r6 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, 0x0, 0x0)
sendmsg$tipc(r6, &(0x7f0000000540)={&(0x7f0000000200)=@name, 0x10, 0x0}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x38, r3, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x5, 0x4f}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4800)

502.357348ms ago: executing program 0 (id=602):
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r0=>0x0})
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="27000000000004000000e8ff05000000959e000000400000"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081084e81f782db44b904021d080006067c09e8fe55a10a0015400800142603600e120800160000001001a8001600a400014003", 0x39}], 0x1, 0x0, 0x0, 0x6000}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe5538250015000600149b0000001208000313eba96240a8002b", 0x33}], 0x1}, 0x80)
r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x1c}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{0x1, <r4=>0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000340)=r1}, 0x20)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x32a, 0x0, 0x0, 0x0, 0x2}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x6, 0x1}, 0x8}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x11, 0x18, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}, @alu={0x4, 0x1, 0x9, 0x6, 0x6, 0xffffffffffffffe0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xdc73, 0x0, 0x0, 0x0, 0x9}, @ldst={0x2, 0x2, 0x2, 0x3, 0x4, 0x1, 0x8}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @jmp={0x5, 0x0, 0x9, 0x1, 0x5, 0x6, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000640)='GPL\x00', 0xffff, 0xfa, &(0x7f0000000680)=""/250, 0x41000, 0x0, '\x00', r0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000780)={0x5, 0x0, 0x2, 0x1}, 0x10, 0x0, 0x0, 0xa, &(0x7f00000007c0), &(0x7f0000000800)=[{0x3, 0x3, 0x8, 0xa}, {0x1, 0x3, 0x0, 0x2}, {0x1, 0x4, 0x0, 0x4}, {0x4, 0x3, 0x10, 0x1}, {0x1, 0x3, 0x0, 0x3}, {0x5, 0x1, 0x5}, {0x0, 0x1, 0x9, 0x5}, {0x4, 0x5, 0x0, 0x9}, {0x1, 0x5, 0xc, 0xc}, {0x5, 0x2, 0x9, 0x1}], 0x10, 0x6}, 0x94)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe33)
r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58)
r8 = accept4(r7, 0x0, 0x0, 0x800)
sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
ioctl$VHOST_GET_VRING_BASE(r6, 0xc008af12, &(0x7f0000000140))

262.371935ms ago: executing program 2 (id=606):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) (async)
ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) (async)
ioctl$TUNSETPERSIST(r0, 0x400454cb, 0xfffffffffffffffe) (async)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0xa, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
r4 = socket$isdn(0x22, 0x3, 0x22)
ioctl$IMHOLD_L1(r4, 0x80044948, &(0x7f0000000540)=0x9) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r6 = socket(0x400000000010, 0x3, 0x0) (async)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000200)=@newtaction={0x5c, 0x32, 0x12f, 0x0, 0x25dfdbff, {}, [{0x48, 0x1, [@m_police={0x44, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x15, 0x6, "a9972b1cad205dfdcf3b732a9359d8df71"}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4020804}, 0x10040000)
sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd28, 0x6000000, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfffffc00, 0x8, 0x10000000, 0x200000b, 0xff}, @broadcast, @local, 0xff, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x11, 0x8}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r3, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x8, 0x9, 0xffff5551, 0x2, 0x7, 0x24000}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4008000) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newtclass={0x70, 0x28, 0x100, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x2, 0x10}, {0xf, 0x3}, {0xd, 0x8}}, [@tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x81, 0x5}}, @TCA_RATE={0x6, 0x5, {0xa, 0x6e}}, @TCA_RATE={0x6, 0x5, {0x1, 0x80}}, @tclass_kind_options=@c_mqprio={0xb}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x3e}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) (async)
r10 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="020904020200000029bd7000fedb505f998c8e2500"], 0x10}}, 0x20000c04)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400b5000000000400000000", @ANYRES32=0x0, @ANYBLOB="00000000001400001c00128009000100626f6e64000000"], 0x3c}}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xfff3}, {0xfff4, 0xffff}}, [@qdisc_kind_options=@q_cake={{0xffffffffffffffd1}, {0xc, 0x2, [@TCA_CAKE_INGRESS={0x8}]}}]}, 0x3c}}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1a}, 0x1, 0x0, 0x0, 0xc040810}, 0xc000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r11 = socket$netlink(0x10, 0x3, 0xb)
syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r11) (async)
socket$pppl2tp(0x18, 0x1, 0x1)

173.137103ms ago: executing program 2 (id=607):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000340)="07000600010000", 0x7)

113.542899ms ago: executing program 2 (id=608):
r0 = socket(0x200000000000011, 0x2, 0xd)
bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x1000000, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0x4040}]}, 0x3c}}, 0x100)
socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @random="e5db029ea53c"})
write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd)

113.22702ms ago: executing program 2 (id=609):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x30, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80f0}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140)

63.596385ms ago: executing program 2 (id=610):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r3=>0x0})
sendto$packet(r2, &(0x7f00000000c0)='\x00\x00\x00\x00', 0x4, 0x10000b50, &(0x7f0000000080)={0x11, 0x8100, r3, 0x1, 0x80}, 0x14)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r4, @ANYBLOB="100001800400048008000100004003"], 0x28}}, 0x0)

3.053531ms ago: executing program 2 (id=611):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000ac0)={0x60, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x9}]}, 0x60}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x640, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x41f, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}], {0x14}}, 0x7c}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48)
r6 = socket(0x11, 0x3, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x18, 0x78, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\a\x00\x00'}]}, 0x18}], 0x1}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r10=>0x0})
bind$packet(r6, &(0x7f0000000180)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14)
setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4)
sendmsg$netlink(r6, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000380)=ANY=[@ANYRES8=r9, @ANYRES16=r5, @ANYRESOCT=r4], 0xdd12}], 0x1, 0x0, 0x0, 0x4008084}, 0x10)
ioctl$PTP_ENABLE_PPS(r2, 0x40043d04, 0x1)
ioctl$SIOCGSTAMP(r8, 0x8906, &(0x7f0000000040))

0s ago: executing program 1 (id=612):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r2, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000020000210d0000aaa8fa017242ba9380d440fe0000000000002900000003000000", 0xfe60)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x14, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}}, &(0x7f0000000100)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:39348' (ED25519) to the list of known hosts.
syzkaller login: [   56.436717][ T5772] cgroup: Unknown subsys name 'net'
[   56.527590][ T5772] cgroup: Unknown subsys name 'cpuset'
[   56.539076][ T5772] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.472835][ T5772] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   63.957715][ T5236] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   63.961728][ T5236] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   63.964879][ T5236] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   63.983501][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   63.987325][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   64.004215][ T5236] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   64.010743][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   64.036738][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   64.040851][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   64.046786][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   64.049582][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   64.052295][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   64.055975][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   64.061618][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   64.066902][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.265017][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   64.395360][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.398042][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.401232][ T5846] bridge_slave_0: entered allmulticast mode
[   64.406255][ T5846] bridge_slave_0: entered promiscuous mode
[   64.457385][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.460326][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.463870][ T5846] bridge_slave_1: entered allmulticast mode
[   64.467952][ T5846] bridge_slave_1: entered promiscuous mode
[   64.550219][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.556826][ T5854] chnl_net:caif_netlink_parms(): no params data found
[   64.566796][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.604835][ T5850] chnl_net:caif_netlink_parms(): no params data found
[   64.641498][ T5846] team0: Port device team_slave_0 added
[   64.658444][ T5846] team0: Port device team_slave_1 added
[   64.746696][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.749536][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.758402][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.776770][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.779256][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.787942][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.799666][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.802839][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.805856][ T5854] bridge_slave_0: entered allmulticast mode
[   64.810153][ T5854] bridge_slave_0: entered promiscuous mode
[   64.816646][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.819690][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.823373][ T5854] bridge_slave_1: entered allmulticast mode
[   64.827465][ T5854] bridge_slave_1: entered promiscuous mode
[   64.884302][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.887050][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.889897][ T5850] bridge_slave_0: entered allmulticast mode
[   64.893529][ T5850] bridge_slave_0: entered promiscuous mode
[   64.900243][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.905710][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.908050][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.910519][ T5850] bridge_slave_1: entered allmulticast mode
[   64.913604][ T5850] bridge_slave_1: entered promiscuous mode
[   64.939599][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.960805][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.007009][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.012920][ T5854] team0: Port device team_slave_0 added
[   65.018700][ T5846] hsr_slave_0: entered promiscuous mode
[   65.021965][ T5846] hsr_slave_1: entered promiscuous mode
[   65.041543][ T5854] team0: Port device team_slave_1 added
[   65.070243][ T5850] team0: Port device team_slave_0 added
[   65.086242][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.088939][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.099016][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.115342][ T5850] team0: Port device team_slave_1 added
[   65.125292][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.127551][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.136517][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.206172][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.208835][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.218630][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.231045][ T5854] hsr_slave_0: entered promiscuous mode
[   65.234041][ T5854] hsr_slave_1: entered promiscuous mode
[   65.236319][ T5854] debugfs: 'hsr0' already exists in 'hsr'
[   65.238180][ T5854] Cannot create hsr debugfs directory
[   65.245703][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.247879][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.256925][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.348772][ T5850] hsr_slave_0: entered promiscuous mode
[   65.351266][ T5850] hsr_slave_1: entered promiscuous mode
[   65.359035][ T5850] debugfs: 'hsr0' already exists in 'hsr'
[   65.360899][ T5850] Cannot create hsr debugfs directory
[   65.553218][ T5846] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.573167][ T5846] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.592367][ T5846] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.605138][ T5846] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   65.648927][ T5854] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   65.654677][ T5854] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   65.659753][ T5854] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   65.666843][ T5854] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   65.759154][ T5850] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.769145][ T5850] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.779035][ T5850] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.796796][ T5850] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.935985][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.979435][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.999733][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   66.014536][  T762] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.017088][  T762] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.026414][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.047987][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.051073][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.059370][ T5854] 8021q: adding VLAN 0 to HW filter on device team0
[   66.073096][ T5851] Bluetooth: hci0: command tx timeout
[   66.077596][  T762] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.080822][  T762] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.084795][ T5851] Bluetooth: hci1: command tx timeout
[   66.113959][ T5850] 8021q: adding VLAN 0 to HW filter on device team0
[   66.126141][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.129158][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.146180][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.149100][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.152574][ T5851] Bluetooth: hci2: command tx timeout
[   66.180947][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.184040][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.395183][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.455666][ T5846] veth0_vlan: entered promiscuous mode
[   66.465872][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.476205][ T5846] veth1_vlan: entered promiscuous mode
[   66.514587][ T5846] veth0_macvtap: entered promiscuous mode
[   66.520632][ T5846] veth1_macvtap: entered promiscuous mode
[   66.548444][ T5854] veth0_vlan: entered promiscuous mode
[   66.558177][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.570557][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.576590][ T5854] veth1_vlan: entered promiscuous mode
[   66.596101][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.600534][ T5743] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.607026][ T5743] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.621350][ T5743] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.627883][ T5743] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.679559][ T5854] veth0_macvtap: entered promiscuous mode
[   66.703986][ T5854] veth1_macvtap: entered promiscuous mode
[   66.738071][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.741386][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.741548][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.762343][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.776835][ T5850] veth0_vlan: entered promiscuous mode
[   66.791936][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.808183][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.815243][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.820854][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.825038][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.827427][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.828849][ T5850] veth1_vlan: entered promiscuous mode
[   66.915379][ T5846] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   66.928851][ T5850] veth0_macvtap: entered promiscuous mode
[   66.962987][ T5850] veth1_macvtap: entered promiscuous mode
[   66.995924][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.996460][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.003847][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.026702][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.059116][ T5911] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.079852][ T5911] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.083954][ T5911] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.086881][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.087061][ T5911] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.089488][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.109190][ T5917] tipc: Started in network mode
[   67.110922][ T5917] tipc: Node identity 42072f7669d3, cluster identity 4711
[   67.115659][ T5917] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   67.150441][ T5917] syzkaller0: entered promiscuous mode
[   67.152658][ T5917] syzkaller0: entered allmulticast mode
[   67.154848][ T5917] tipc: Resetting bearer <eth:syzkaller0>
[   67.163552][ T5916] tipc: Resetting bearer <eth:syzkaller0>
[   67.970934][ T5916] tipc: Disabling bearer <eth:syzkaller0>
[   68.037307][ T5919] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   68.054554][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.057112][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.105391][ T5923] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5'.
[   68.113312][ T5923] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   68.129253][ T5921] netlink: 'syz.0.5': attribute type 1 has an invalid length.
[   68.138623][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.141701][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.152771][ T5851] Bluetooth: hci0: command tx timeout
[   68.155707][ T5851] Bluetooth: hci1: command tx timeout
[   68.193171][ T5919] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[   68.195805][ T5919] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[   68.203418][ T5919] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   68.243108][ T5236] Bluetooth: hci2: command tx timeout
[   68.431610][ T5932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6'.
[   69.208805][ T5938] Zero length message leads to an empty skb
[   69.255930][ T5932] hsr_slave_1 (unregistering): left promiscuous mode
[   69.279000][ T5941] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9'.
[   69.587180][ T5949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11'.
[   69.594053][ T5957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12'.
[   69.598695][ T5957] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12'.
[   69.664165][ T5960] netlink: 'syz.0.13': attribute type 1 has an invalid length.
[   69.898554][ T5971] netlink: 16 bytes leftover after parsing attributes in process `syz.0.15'.
[   70.012086][ T5974] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[   70.199157][ T5992] warning: `syz.0.18' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   70.232629][ T5236] Bluetooth: hci1: command tx timeout
[   70.234559][ T5236] Bluetooth: hci0: command tx timeout
[   70.278818][ T5992] : entered promiscuous mode
[   70.281509][ T5996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19'.
[   70.285497][ T5996] netlink: 44 bytes leftover after parsing attributes in process `syz.1.19'.
[   70.322350][ T5236] Bluetooth: hci2: command tx timeout
[   70.342031][ T6001] tipc: Started in network mode
[   70.345971][ T6001] tipc: Node identity 2ec47037f235, cluster identity 4711
[   70.350105][ T6001] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   70.354435][ T6001] syzkaller0: entered promiscuous mode
[   70.356671][ T6001] syzkaller0: entered allmulticast mode
[   70.376312][ T6001] syzkaller0: mtu less than device minimum
[   70.385862][ T5999] tipc: Resetting bearer <eth:syzkaller0>
[   70.399279][ T5999] tipc: Disabling bearer <eth:syzkaller0>
[   70.409473][    C1] Illegal XDP return value 16128 on prog  (id 6) dev bond_slave_1, expect packet loss!
[   70.419295][ T6004] netlink: 'syz.0.21': attribute type 10 has an invalid length.
[   70.422618][ T6004] syz_tun: entered promiscuous mode
[   70.429186][ T6004] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   70.521265][ T6008] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   70.639424][ T6013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24'.
[   70.661019][ T6011] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   70.666339][ T6011] syzkaller0: entered promiscuous mode
[   70.668104][ T6011] syzkaller0: entered allmulticast mode
[   70.684388][ T6011] tipc: Resetting bearer <eth:syzkaller0>
[   70.690007][ T6010] tipc: Resetting bearer <eth:syzkaller0>
[   70.698833][ T6010] tipc: Disabling bearer <eth:syzkaller0>
[   70.705629][ T6016] netlink: 'syz.1.24': attribute type 13 has an invalid length.
[   70.769697][ T6021] batman_adv: batadv0: Adding interface: ipvlan2
[   70.786892][ T6021] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   70.797445][ T6021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.801490][ T6021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.805655][ T6021] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active
[   70.876637][ T6024] geneve2: entered promiscuous mode
[   70.878841][ T6024] geneve2: entered allmulticast mode
[   70.914213][ T6027] geneve2: entered promiscuous mode
[   70.915924][ T6027] geneve2: entered allmulticast mode
[   72.058108][ T6051] netlink: 'syz.0.32': attribute type 1 has an invalid length.
[   72.126454][ T6051] netlink: 'syz.0.32': attribute type 13 has an invalid length.
[   72.313973][ T5851] Bluetooth: hci1: command tx timeout
[   72.316669][ T5236] Bluetooth: hci0: command tx timeout
[   72.394746][ T5236] Bluetooth: hci2: command tx timeout
[   72.447306][ T6076] netlink: 'syz.1.37': attribute type 1 has an invalid length.
[   72.451591][ T6073] veth3: entered promiscuous mode
[   72.506337][ T6073] openvswitch: netlink: Flow actions attr not present in new flow.
[   72.563900][ T6091] netlink: 'syz.1.39': attribute type 5 has an invalid length.
[   72.597186][ T6091] netlink: 'syz.1.39': attribute type 10 has an invalid length.
[   72.624452][ T6091] 8021q: adding VLAN 0 to HW filter on device team0
[   72.628564][ T6091] bond0: (slave team0): Enslaving as an active interface with an up link
[   73.057201][ T6130] sch_tbf: burst 88 is lower than device netdevsim3 mtu (1514) !
[   73.091680][   T33] audit: type=1800 audit(1758556237.345:2): pid=6132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.49" name="memory.events" dev="tmpfs" ino=118 res=0 errno=0
[   73.101100][ T6132] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   73.107431][ T6132] openvswitch: netlink: IP tunnel dst address not specified
[   73.120351][   T33] audit: type=1804 audit(1758556237.345:3): pid=6132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.49" name="memory.events" dev="tmpfs" ino=118 res=1 errno=0
[   73.163894][ T6134] syz.0.50 uses obsolete (PF_INET,SOCK_PACKET)
[   73.460304][ T6142] __nla_validate_parse: 9 callbacks suppressed
[   73.460356][ T6142] netlink: 4 bytes leftover after parsing attributes in process `syz.1.52'.
[   74.223506][ T6152] syzkaller0: entered promiscuous mode
[   74.225412][ T6152] syzkaller0: entered allmulticast mode
[   74.232855][ T6152] tipc: New replicast peer: 255.255.255.255
[   74.235554][ T6152] tipc: Enabled bearer <udp:syz2>, priority 10
[   74.312713][ T6154] netlink: 20 bytes leftover after parsing attributes in process `syz.0.56'.
[   74.448268][ T6160] netlink: 3 bytes leftover after parsing attributes in process `syz.0.57'.
[   74.481430][ T6160] batadv1: entered promiscuous mode
[   74.483847][ T6160] batadv1: entered allmulticast mode
[   74.689364][ T6173] netlink: 4 bytes leftover after parsing attributes in process `syz.1.59'.
[   74.763410][ T6179] netlink: 20 bytes leftover after parsing attributes in process `syz.1.59'.
[   74.832816][ T6175] netlink: 4 bytes leftover after parsing attributes in process `syz.0.58'.
[   74.880772][ T6170] gtp0: entered promiscuous mode
[   75.064995][ T6193] netlink: 80 bytes leftover after parsing attributes in process `syz.0.61'.
[   75.068942][ T6196] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   75.083092][ T6196] syzkaller0: entered promiscuous mode
[   75.085086][ T6196] syzkaller0: entered allmulticast mode
[   75.125664][ T6196] tipc: Resetting bearer <eth:syzkaller0>
[   75.129689][ T6195] tipc: Resetting bearer <eth:syzkaller0>
[   75.139905][ T6195] tipc: Disabling bearer <eth:syzkaller0>
[   75.158531][ T6198] netlink: 4 bytes leftover after parsing attributes in process `syz.0.63'.
[   75.166697][ T6198] batman_adv: batadv0: Adding interface: ipvlan2
[   75.169269][ T6198] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   75.180463][ T6198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.184966][ T6198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.188749][ T6198] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active
[   75.220341][ T6200] netlink: 8 bytes leftover after parsing attributes in process `syz.1.64'.
[   75.224804][ T6200] netlink: 20 bytes leftover after parsing attributes in process `syz.1.64'.
[   75.243311][ T5965] tipc: Node number set to 735326070
[   75.249233][ T5911] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   75.255364][ T5911] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   75.258859][ T5911] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   75.267064][ T5911] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   75.389743][ T6216] bridge0: port 3(netdevsim2) entered blocking state
[   75.393996][ T6216] bridge0: port 3(netdevsim2) entered disabled state
[   75.396862][ T6216] netdevsim netdevsim1 netdevsim2: entered allmulticast mode
[   75.408024][ T6216] netdevsim netdevsim1 netdevsim2: entered promiscuous mode
[   75.411014][ T6216] bridge0: port 3(netdevsim2) entered blocking state
[   75.413664][ T6216] bridge0: port 3(netdevsim2) entered forwarding state
[   75.418370][ T6208] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   75.422938][ T6208] syzkaller0: entered promiscuous mode
[   75.425307][ T6208] syzkaller0: entered allmulticast mode
[   75.436795][ T6208] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   75.463336][ T6219] tipc: Resetting bearer <eth:syzkaller0>
[   75.469028][ T6207] tipc: Resetting bearer <eth:syzkaller0>
[   75.479060][ T6207] tipc: Disabling bearer <eth:syzkaller0>
[   75.485400][ T6221] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   75.640504][ T6232] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   75.667360][ T6232] batman_adv: batadv0: Removing interface: ipvlan2
[   75.676190][ T6232] batman_adv: batadv0: Removing interface: batadv_slave_1
[   76.214702][ T6257] veth5: entered promiscuous mode
[   76.310388][ T6261] netlink: 'syz.0.80': attribute type 10 has an invalid length.
[   76.396363][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   76.401259][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   76.571373][ T6265] veth1_macvtap: left promiscuous mode
[   76.690692][ T6280] netlink: 'syz.1.85': attribute type 39 has an invalid length.
[   76.939536][ T6286] bond0: (slave syz_tun): Releasing backup interface
[   76.997381][ T6286] ip6tnl3: entered promiscuous mode
[   76.999127][ T6286] ip6tnl3: entered allmulticast mode
[   77.002023][ T6286] team0: Device ip6tnl3 is of different type
[   77.249941][ T6289] sch_tbf: burst 88 is lower than device veth7 mtu (1514) !
[   77.295637][ T6292] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   77.298805][ T6292] syzkaller0: entered promiscuous mode
[   77.300694][ T6292] syzkaller0: entered allmulticast mode
[   77.317484][ T6292] tipc: Resetting bearer <eth:syzkaller0>
[   77.321235][ T6291] tipc: Resetting bearer <eth:syzkaller0>
[   77.333283][ T6291] tipc: Disabling bearer <eth:syzkaller0>
[   77.501104][ T6298] syzkaller0: entered promiscuous mode
[   77.503698][ T6298] syzkaller0: entered allmulticast mode
[   77.507630][ T6297] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   77.525949][ T6297] tipc: Resetting bearer <eth:syzkaller0>
[   77.536745][ T6297] tipc: Disabling bearer <eth:syzkaller0>
[   77.564250][ T6302] dummy0: entered promiscuous mode
[   77.567855][ T6302] batadv_slave_0: entered promiscuous mode
[   77.570630][ T6302] batadv_slave_0: left promiscuous mode
[   77.592756][ T6302] dummy0: left promiscuous mode
[   77.607090][ T6304] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[   77.610400][ T6304] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   78.196346][ T6341] bond0: (slave team0): Releasing backup interface
[   78.215948][ T6341] team0 (unregistering): Port device team_slave_0 removed
[   78.225214][ T6341] team0 (unregistering): Port device team_slave_1 removed
[   78.333533][ T5911] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   78.336641][ T5911] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   78.342981][ T5911] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   78.346576][ T5911] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   78.440775][ T6352] vxcan3: entered allmulticast mode
[   78.609538][ T6355] Bluetooth: MGMT ver 1.23
[   78.620786][ T6355] __nla_validate_parse: 16 callbacks suppressed
[   78.620805][ T6355] netlink: 24 bytes leftover after parsing attributes in process `syz.1.109'.
[   78.635091][ T6355] bridge0: port 4(vlan0) entered blocking state
[   78.637247][ T6355] bridge0: port 4(vlan0) entered disabled state
[   78.639593][ T6355] vlan0: entered allmulticast mode
[   78.641345][ T6355] bridge0: entered allmulticast mode
[   78.645075][ T6355] vlan0: left allmulticast mode
[   78.646693][ T6355] bridge0: left allmulticast mode
[   78.809092][ T6362] tipc: Cannot configure node identity twice
[   78.918335][ T6367] netlink: 'syz.1.112': attribute type 1 has an invalid length.
[   78.965970][ T6367] bond1: (slave geneve2): making interface the new active one
[   78.970366][ T6367] bond1: (slave geneve2): Enslaving as an active interface with an up link
[   78.974153][ T5911] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[   78.977945][ T5911] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[   78.981478][ T5911] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[   78.987216][ T5911] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[   78.988482][ T6367] netlink: 'syz.1.112': attribute type 10 has an invalid length.
[   78.996343][ T6367] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   79.323729][ T6380] netlink: 'syz.0.118': attribute type 10 has an invalid length.
[   79.331533][ T6380] 8021q: adding VLAN 0 to HW filter on device team0
[   79.336874][ T6380] bond0: (slave team0): Enslaving as an active interface with an up link
[   79.389246][ T6382] bond0: (slave team0): Releasing backup interface
[   79.405541][ T6382] bridge_slave_0: left allmulticast mode
[   79.407328][ T6382] bridge_slave_0: left promiscuous mode
[   79.412621][ T6382] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.424962][ T6382] bridge_slave_1: left allmulticast mode
[   79.427254][ T6382] bridge_slave_1: left promiscuous mode
[   79.429725][ T6382] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.430894][ T6385] openvswitch: netlink: Missing valid actions attribute.
[   79.436598][ T6385] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   79.443681][ T6382] bond0: (slave bond_slave_0): Releasing backup interface
[   79.449911][ T6382] bond0: (slave bond_slave_1): Releasing backup interface
[   79.461791][ T6382] team0: Port device team_slave_0 removed
[   79.468501][ T6382] team0: Port device team_slave_1 removed
[   79.470855][ T6382] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   79.475094][ T6382] batman_adv: batadv0: Removing interface: batadv_slave_0
[   79.479472][ T6382] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   79.515495][ T6386] syzkaller1: entered promiscuous mode
[   79.517460][ T6386] syzkaller1: entered allmulticast mode
[   79.525824][ T6382] netlink: 'syz.0.119': attribute type 10 has an invalid length.
[   79.555721][ T6382] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   79.647582][ T6390] netlink: 'syz.2.121': attribute type 10 has an invalid length.
[   79.650567][ T6390] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.653326][ T6390] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.661058][ T6390] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.663494][ T6390] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.665890][ T6390] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.669240][ T6390] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.675264][ T6390] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   79.683340][ T6390] netlink: 4 bytes leftover after parsing attributes in process `syz.2.121'.
[   79.686274][ T6390] bridge_slave_1: left allmulticast mode
[   79.687970][ T6390] bridge_slave_1: left promiscuous mode
[   79.689979][ T6390] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.695042][ T6390] bridge_slave_0: left allmulticast mode
[   79.696861][ T6390] bridge_slave_0: left promiscuous mode
[   79.698715][ T6390] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.713889][ T6390] bond0: (slave bridge0): Releasing backup interface
[   79.926546][ T6402] netlink: 24 bytes leftover after parsing attributes in process `syz.2.123'.
[   80.034261][ T6412] netlink: 28 bytes leftover after parsing attributes in process `syz.1.125'.
[   80.038050][ T6412] netlink: 24 bytes leftover after parsing attributes in process `syz.1.125'.
[   80.101771][ T6415] netlink: 256 bytes leftover after parsing attributes in process `syz.2.126'.
[   80.104793][ T6415] netlink: 72 bytes leftover after parsing attributes in process `syz.2.126'.
[   80.212504][  T795] cfg80211: failed to load regulatory.db
[   80.252836][ T6426] netlink: 'syz.2.129': attribute type 8 has an invalid length.
[   80.278201][ T6429] dvmrp1: entered allmulticast mode
[   80.281730][ T6429] dvmrp1: left allmulticast mode
[   80.353640][ T6429] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   80.450216][ T6427] tipc: Resetting bearer <eth:syzkaller0>
[   80.464155][ T6427] tipc: Disabling bearer <eth:syzkaller0>
[   80.496516][ T6440] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.133'.
[   80.506189][ T6440] netlink: 16 bytes leftover after parsing attributes in process `syz.1.133'.
[   80.512741][ T6440] netlink: 12 bytes leftover after parsing attributes in process `syz.1.133'.
[   80.603455][ T6446] netlink: 'syz.0.134': attribute type 4 has an invalid length.
[   81.107805][ T6492] netlink: 'syz.0.141': attribute type 178 has an invalid length.
[   81.318202][ T6507] 8021q: adding VLAN 0 to HW filter on device bond1
[   81.338455][ T6507] bond1: (slave veth11): Enslaving as an active interface with a down link
[   81.366264][ T6512] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.369730][ T6512] syzkaller0: entered promiscuous mode
[   81.371917][ T6512] syzkaller0: entered allmulticast mode
[   81.376458][ T6514] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   81.384758][ T6511] tipc: Resetting bearer <eth:syzkaller0>
[   81.401223][ T6511] tipc: Disabling bearer <eth:syzkaller0>
[   81.499287][ T6521] veth0_to_bond: entered allmulticast mode
[   81.958943][ T6559] tipc: Started in network mode
[   81.960634][ T6559] tipc: Node identity 423dfa86ab8b, cluster identity 4711
[   81.969017][ T6559] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.974095][ T6559] syzkaller0: entered promiscuous mode
[   81.975958][ T6559] syzkaller0: entered allmulticast mode
[   81.985085][ T6559] tipc: Resetting bearer <eth:syzkaller0>
[   82.023993][ T6557] tipc: Resetting bearer <eth:syzkaller0>
[   82.043490][ T6557] tipc: Disabling bearer <eth:syzkaller0>
[   82.467481][ T6605] validate_nla: 1 callbacks suppressed
[   82.467508][ T6605] netlink: 'syz.1.176': attribute type 1 has an invalid length.
[   82.586634][ T6605] 8021q: adding VLAN 0 to HW filter on device bond2
[   82.682614][ T6620] netlink: 'syz.1.180': attribute type 7 has an invalid length.
[   82.698159][ T6620] : entered promiscuous mode
[   82.851149][ T6620] syzkaller1: entered allmulticast mode
[   86.781321][ T6700] __nla_validate_parse: 9 callbacks suppressed
[   86.781334][ T6700] netlink: 48 bytes leftover after parsing attributes in process `syz.1.207'.
[   86.812361][ T6702] netlink: 'syz.2.208': attribute type 1 has an invalid length.
[   87.007504][ T6723] netlink: 32 bytes leftover after parsing attributes in process `syz.0.211'.
[   87.019358][ T6723] netlink: 'syz.0.211': attribute type 10 has an invalid length.
[   87.050141][ T6723] team0: Port device dummy0 added
[   87.063644][ T6723] netlink: 'syz.0.211': attribute type 10 has an invalid length.
[   87.093906][ T6723] team0: Port device dummy0 removed
[   87.107086][ T6723] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   87.359038][ T6732] batman_adv: batadv0: Adding interface: dummy0
[   87.361604][ T6732] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   87.383300][ T6732] batman_adv: batadv0: Interface activated: dummy0
[   87.517859][ T6735] 8021q: adding VLAN 0 to HW filter on device bond1
[   87.524197][ T6735] bridge0: port 1(bond1) entered blocking state
[   87.527055][ T6735] bridge0: port 1(bond1) entered disabled state
[   87.529518][ T6735] bond1: entered allmulticast mode
[   87.580702][ T6742] netlink: 'syz.2.216': attribute type 13 has an invalid length.
[   87.584753][ T6742] xfrm0: entered promiscuous mode
[   87.586379][ T6742] xfrm0: entered allmulticast mode
[   87.700995][ T6747] : renamed from wg2 (while UP)
[   87.917226][ T6749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.218'.
[   88.266861][ T6771] Bluetooth: MGMT ver 1.23
[   88.271346][ T6771] netlink: 64 bytes leftover after parsing attributes in process `syz.2.226'.
[   88.434598][ T6781] netlink: 32 bytes leftover after parsing attributes in process `syz.0.230'.
[   88.558762][ T6790] syzkaller0: entered promiscuous mode
[   88.560997][ T6790] syzkaller0: entered allmulticast mode
[   88.839812][ T6797] netlink: 4 bytes leftover after parsing attributes in process `syz.2.234'.
[   88.865895][ T6797] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   88.869208][ T6797] syzkaller0: entered promiscuous mode
[   88.871334][ T6797] syzkaller0: entered allmulticast mode
[   88.884454][ T6797] tipc: Resetting bearer <eth:syzkaller0>
[   88.897457][ T6795] tipc: Resetting bearer <eth:syzkaller0>
[   88.923534][ T6795] tipc: Disabling bearer <eth:syzkaller0>
[   89.177756][ T6814] batman_adv: batadv0: Interface deactivated: dummy0
[   89.279720][ T6814] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   89.298262][ T6814] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   89.462552][ T5743] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   89.466084][ T5743] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   89.470251][ T5743] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   89.473990][ T5743] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   89.477459][ T5743] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   89.481555][ T5743] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   89.485806][ T5743] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   89.490243][ T5743] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   89.959454][ T6853] netlink: 'syz.2.249': attribute type 1 has an invalid length.
[   89.964171][ T6854] netlink: 'syz.2.249': attribute type 1 has an invalid length.
[   90.044727][ T6857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.249'.
[   90.047651][ T6857] netlink: 4 bytes leftover after parsing attributes in process `syz.2.249'.
[   90.050536][ T6857] netlink: 'syz.2.249': attribute type 14 has an invalid length.
[   90.174009][ T6862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.252'.
[   90.258961][ T6862] netlink: 28 bytes leftover after parsing attributes in process `syz.2.252'.
[   90.729895][ T6882] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   90.740382][ T6882] syzkaller0: entered promiscuous mode
[   90.743279][ T6882] syzkaller0: entered allmulticast mode
[   90.762754][ T6882] tipc: Resetting bearer <eth:syzkaller0>
[   90.768622][ T6878] tipc: Resetting bearer <eth:syzkaller0>
[   90.779442][ T6878] tipc: Disabling bearer <eth:syzkaller0>
[   91.036435][ T6901] batman_adv: batadv0: Adding interface: ipvlan0
[   91.038985][ T6901] batman_adv: batadv0: The MTU of interface ipvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   91.050502][ T6901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.055882][ T6901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.069473][ T6901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2
[   91.076459][ T6901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.080672][ T6901] batman_adv: batadv0: Not using interface ipvlan0 (retrying later): interface not active
[   91.080839][ T6905] netlink: 'syz.0.265': attribute type 1 has an invalid length.
[   91.085807][ T6906] netlink: 'syz.0.265': attribute type 1 has an invalid length.
[   91.091652][ T6903] netlink: 'syz.2.264': attribute type 2 has an invalid length.
[   91.101213][ T6903] k*: entered promiscuous mode
[   91.137567][ T6903] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.140770][ T6903] 8021q: adding VLAN 0 to HW filter on device team0
[   91.145557][ T6903] batman_adv: batadv0: Interface activated: dummy0
[   91.149209][ T6903] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   91.761531][ T6933] bridge0: port 3(netdevsim2) entered disabled state
[   91.763860][ T6933] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.766942][ T6933] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.807512][ T6933] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   91.814007][ T6933] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   91.879599][ T5743] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   91.888354][ T5743] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   91.892821][ T5743] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0
[   91.896581][ T5743] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   91.900301][ T5743] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   91.904603][ T5743] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0
[   91.911861][ T5743] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   91.922074][ T5743] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   91.927710][ T5743] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0
[   91.933375][ T5743] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   91.942528][ T5743] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   91.945789][ T5743] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0
[   91.974646][ T6941] netlink: 'syz.1.276': attribute type 1 has an invalid length.
[   92.019897][ T6941] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   92.034822][   T12] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   92.044435][ T6941] 8021q: adding VLAN 0 to HW filter on device bond3
[   92.054378][ T6944] __nla_validate_parse: 7 callbacks suppressed
[   92.054391][ T6944] netlink: 28 bytes leftover after parsing attributes in process `syz.0.278'.
[   92.061507][ T6941] veth3: entered promiscuous mode
[   92.069313][ T6941] bond3: (slave veth3): Enslaving as a backup interface with a down link
[   92.114994][ T6946] netlink: 52 bytes leftover after parsing attributes in process `syz.1.279'.
[   92.119025][ T6944] netlink: 16 bytes leftover after parsing attributes in process `syz.0.278'.
[   92.139993][ T6946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.279'.
[   92.153499][   T12] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   92.242669][ T6950] netlink: 'syz.0.281': attribute type 1 has an invalid length.
[   92.245951][ T6950] netlink: 'syz.0.281': attribute type 2 has an invalid length.
[   92.249237][ T6950] netlink: 4 bytes leftover after parsing attributes in process `syz.0.281'.
[   92.463673][ T6965] bond4: entered promiscuous mode
[   92.465860][ T6965] bond4: entered allmulticast mode
[   92.468325][ T6965] 8021q: adding VLAN 0 to HW filter on device bond4
[   92.889910][ T6998] netlink: 'syz.0.296': attribute type 1 has an invalid length.
[   92.906373][ T6998] bond3: entered promiscuous mode
[   92.908388][ T6998] 8021q: adding VLAN 0 to HW filter on device bond3
[   92.919982][ T6998] 8021q: adding VLAN 0 to HW filter on device bond3
[   92.924852][ T6998] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address
[   92.929162][ T6998] bond3: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[   92.935907][ T6998] bond3: (slave wireguard0): making interface the new active one
[   92.938281][ T6998] wireguard0: entered promiscuous mode
[   92.944173][ T6998] bond3: (slave wireguard0): Enslaving as an active interface with an up link
[   92.949656][ T6998] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   92.952300][ T6998] IPv6: NLM_F_CREATE should be set when creating new route
[   92.954669][ T6998] IPv6: NLM_F_CREATE should be set when creating new route
[   92.958493][ T6998] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   92.967108][ T6998] bond3: (slave wireguard1): The slave device specified does not support setting the MAC address
[   92.973165][ T6998] bond3: (slave wireguard1): Enslaving as a backup interface with an up link
[   93.169265][ T7012] netlink: 24 bytes leftover after parsing attributes in process `syz.1.299'.
[   93.388497][ T7029] netlink: 'syz.1.306': attribute type 1 has an invalid length.
[   93.391436][ T7029] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[   93.699573][ T7051] syz.1.312: vmalloc error: size 16781312, failed to allocated page array size 32776, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   93.710913][ T7051] CPU: 0 UID: 0 PID: 7051 Comm: syz.1.312 Not tainted syzkaller #0 PREEMPT(full) 
[   93.710959][ T7051] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   93.710967][ T7051] Call Trace:
[   93.710974][ T7051]  <TASK>
[   93.710981][ T7051]  dump_stack_lvl+0x189/0x250
[   93.711016][ T7051]  ? __pfx_dump_stack_lvl+0x10/0x10
[   93.711031][ T7051]  ? __pfx__printk+0x10/0x10
[   93.711050][ T7051]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   93.711067][ T7051]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   93.711082][ T7051]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   93.711098][ T7051]  warn_alloc+0x214/0x310
[   93.711122][ T7051]  ? __pfx_warn_alloc+0x10/0x10
[   93.711146][ T7051]  ? __get_vm_area_node+0x28f/0x300
[   93.711163][ T7051]  ? xskq_create+0xbf/0x170
[   93.711177][ T7051]  __vmalloc_node_range_noprof+0x67e/0x12f0
[   93.711210][ T7051]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   93.711229][ T7051]  ? __kasan_kmalloc+0x93/0xb0
[   93.711248][ T7051]  vmalloc_user_noprof+0xad/0xf0
[   93.711264][ T7051]  ? xskq_create+0xbf/0x170
[   93.711275][ T7051]  xskq_create+0xbf/0x170
[   93.711290][ T7051]  xsk_init_queue+0xb0/0x110
[   93.711304][ T7051]  xsk_setsockopt+0x57b/0x8d0
[   93.711326][ T7051]  ? __pfx_xsk_setsockopt+0x10/0x10
[   93.711343][ T7051]  ? __pfx_aa_sk_perm+0x10/0x10
[   93.711366][ T7051]  ? __fget_files+0x2a/0x420
[   93.711377][ T7051]  ? aa_sock_opt_perm+0xff/0x1b0
[   93.711392][ T7051]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   93.711407][ T7051]  ? __pfx_xsk_setsockopt+0x10/0x10
[   93.711427][ T7051]  do_sock_setsockopt+0x17c/0x1b0
[   93.711450][ T7051]  __x64_sys_setsockopt+0x13f/0x1b0
[   93.711469][ T7051]  do_syscall_64+0xfa/0x3b0
[   93.711485][ T7051]  ? lockdep_hardirqs_on+0x9c/0x150
[   93.711499][ T7051]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   93.711512][ T7051]  ? exc_page_fault+0x9f/0xf0
[   93.711536][ T7051]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   93.711549][ T7051] RIP: 0033:0x7f723258ec29
[   93.711563][ T7051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   93.711573][ T7051] RSP: 002b:00007f7233373038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   93.711585][ T7051] RAX: ffffffffffffffda RBX: 00007f72327d6090 RCX: 00007f723258ec29
[   93.711593][ T7051] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000005
[   93.711599][ T7051] RBP: 00007f7232611e41 R08: 0000000000000004 R09: 0000000000000000
[   93.711605][ T7051] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[   93.711610][ T7051] R13: 00007f72327d6128 R14: 00007f72327d6090 R15: 00007ffff867d868
[   93.711629][ T7051]  </TASK>
[   93.711641][ T7051] Mem-Info:
[   93.809813][ T7051] active_anon:4788 inactive_anon:0 isolated_anon:0
[   93.809813][ T7051]  active_file:1390 inactive_file:38251 isolated_file:0
[   93.809813][ T7051]  unevictable:1768 dirty:208 writeback:0
[   93.809813][ T7051]  slab_reclaimable:9724 slab_unreclaimable:52428
[   93.809813][ T7051]  mapped:18313 shmem:2452 pagetables:887
[   93.809813][ T7051]  sec_pagetables:0 bounce:0
[   93.809813][ T7051]  kernel_misc_reclaimable:0
[   93.809813][ T7051]  free:296210 free_pcp:21046 free_cma:0
[   93.828938][ T7051] Node 0 active_anon:12540kB inactive_anon:0kB active_file:3612kB inactive_file:61796kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:40360kB dirty:412kB writeback:0kB shmem:5132kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5104kB pagetables:2340kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   93.841823][ T7051] Node 1 active_anon:6612kB inactive_anon:0kB active_file:1948kB inactive_file:91208kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:32892kB dirty:420kB writeback:0kB shmem:4676kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7152kB pagetables:1208kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   93.854596][ T7051] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   93.866234][ T7051] lowmem_reserve[]: 0 811 811 811 811
[   93.868570][ T7051] Node 0 DMA32 free:375804kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12540kB inactive_anon:0kB active_file:3612kB inactive_file:61796kB unevictable:3536kB writepending:412kB present:1556484kB managed:830852kB mlocked:0kB bounce:0kB free_pcp:30852kB local_pcp:16776kB free_cma:0kB
[   93.881893][ T7051] lowmem_reserve[]: 0 0 0 0 0
[   93.884402][ T7051] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   93.896580][ T7051] lowmem_reserve[]: 0 0 854 854 854
[   93.898930][ T7051] Node 1 Normal free:335060kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:6612kB inactive_anon:0kB active_file:1948kB inactive_file:91208kB unevictable:3536kB writepending:420kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:53328kB local_pcp:36668kB free_cma:0kB
[   93.911885][ T7051] lowmem_reserve[]: 0 0 0 0 0
[   93.914533][ T7051] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   93.919776][ T7051] Node 0 DMA32: 565*4kB (UM) 383*8kB (UME) 253*16kB (UME) 369*32kB (UME) 111*64kB (UM) 75*128kB (UM) 32*256kB (UME) 20*512kB (UME) 12*1024kB (UME) 4*2048kB (UME) 73*4096kB (UM) = 375804kB
[   93.927831][ T7051] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[   93.934834][ T7051] Node 1 Normal: 1002*4kB (UME) 824*8kB (UME) 347*16kB (UME) 282*32kB (UME) 146*64kB (UM) 52*128kB (UME) 18*256kB (UME) 9*512kB (UME) 4*1024kB (UM) 1*2048kB (M) 68*4096kB (UM) = 335064kB
[   93.942772][ T7051] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   93.946357][ T7051] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   93.950027][ T7051] 42093 total pagecache pages
[   93.951886][ T7051] 0 pages in swap cache
[   93.953872][ T7051] Free swap  = 124996kB
[   93.955829][ T7051] Total swap = 124996kB
[   93.957495][ T7051] 786301 pages RAM
[   93.958810][ T7051] 0 pages HighMem/MovableOnly
[   93.960291][ T7051] 241356 pages reserved
[   93.961609][ T7051] 0 pages cma reserved
[   93.994261][ T7057] netlink: 4 bytes leftover after parsing attributes in process `syz.1.313'.
[   94.238915][ T7070] netlink: 'syz.0.318': attribute type 1 has an invalid length.
[   94.264080][ T7070] 8021q: adding VLAN 0 to HW filter on device bond4
[   94.281866][ T7070] Bluetooth: MGMT ver 1.23
[   94.322633][ T7073] netlink: 'syz.1.319': attribute type 9 has an invalid length.
[   94.331026][ T7073] netlink: 212160 bytes leftover after parsing attributes in process `syz.1.319'.
[   94.337573][ T7070] veth13: entered promiscuous mode
[   94.342311][ T7075] nbd: must specify an index to disconnect
[   94.364739][ T7070] bond4: (slave veth13): Enslaving as an active interface with an up link
[   94.419358][ T7079] netlink: 'syz.1.321': attribute type 4 has an invalid length.
[   94.426965][ T7079] netlink: 15138 bytes leftover after parsing attributes in process `syz.1.321'.
[   94.484916][ T7079] netlink: 12 bytes leftover after parsing attributes in process `syz.1.321'.
[   94.495948][ T7077] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[   94.530341][ T7086] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[   94.698706][ T7093] bond0: (slave dummy0): Releasing backup interface
[   94.710750][ T7093] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   94.774917][ T7101] 8021q: adding VLAN 0 to HW filter on device bond2
[   94.799679][ T7101] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[   94.805743][ T7101] 8021q: adding VLAN 0 to HW filter on device macvlan0
[   94.813617][ T7101] bond2: (slave macvlan0): Enslaving as a backup interface with an up link
[   94.833674][ T7104] pim6reg1: entered promiscuous mode
[   94.835729][ T7104] pim6reg1: entered allmulticast mode
[   94.863923][ T7101] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   94.873693][ T5743] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   94.992380][ T5911] bond2: (slave macvlan0): link status up again after 0 ms
[   94.997218][ T5911] bond2: (slave macvlan0): failed to get link speed/duplex
[   95.000332][ T5911] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   95.046658][ T7122] geneve3: entered promiscuous mode
[   95.048349][ T7122] geneve3: entered allmulticast mode
[   95.092107][ T7126] netlink: 'syz.2.338': attribute type 1 has an invalid length.
[   95.119548][ T7126] 8021q: adding VLAN 0 to HW filter on device bond2
[   95.416604][ T7145] netlink: 'syz.2.344': attribute type 1 has an invalid length.
[   95.444086][ T7145] bond3: entered promiscuous mode
[   95.446647][ T7145] 8021q: adding VLAN 0 to HW filter on device bond3
[   95.473310][ T7145] 8021q: adding VLAN 0 to HW filter on device bond3
[   95.476521][ T7145] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address
[   95.480871][ T7145] bond3: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[   95.489252][ T7145] bond3: (slave wireguard0): making interface the new active one
[   95.492488][ T7145] wireguard0: entered promiscuous mode
[   95.496162][ T7145] bond3: (slave wireguard0): Enslaving as an active interface with an up link
[   95.611066][ T7151] netlink: 'syz.2.345': attribute type 1 has an invalid length.
[   95.634251][ T7151] bond4: entered promiscuous mode
[   95.636725][ T7151] 8021q: adding VLAN 0 to HW filter on device bond4
[   96.061994][ T7159] netlink: 'syz.0.348': attribute type 2 has an invalid length.
[   96.101370][ T7163] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   96.104503][ T7163] syzkaller0: entered promiscuous mode
[   96.106615][ T7163] syzkaller0: entered allmulticast mode
[   96.121127][ T7163] tipc: Resetting bearer <eth:syzkaller0>
[   96.124673][ T7163] netlink: 'syz.1.350': attribute type 12 has an invalid length.
[   96.129691][ T7162] tipc: Resetting bearer <eth:syzkaller0>
[   96.146243][ T7162] tipc: Disabling bearer <eth:syzkaller0>
[   96.161779][ T7168] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.169491][ T7168] batadv0: entered promiscuous mode
[   96.172555][ T7168] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   96.202573][ T5911] net_ratelimit: 9 callbacks suppressed
[   96.202598][ T5911] bond2: (slave macvlan0): failed to get link speed/duplex
[   96.218921][  T795] IPVS: starting estimator thread 0...
[   96.303952][ T7176] IPVS: using max 49 ests per chain, 117600 per kthread
[   96.326331][ T7179] 8021q: adding VLAN 0 to HW filter on device bond0
[   96.337777][ T7179] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   96.437921][ T7190] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[   96.451897][ T7190] netdevsim netdevsim0 netdevsim0: refused to change device tx_queue_len
[   96.502444][ T5743] bond2: (slave macvlan0): failed to get link speed/duplex
[   96.557054][ T7195] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   96.612563][   T12] bond2: (slave macvlan0): failed to get link speed/duplex
[   96.628910][ T7196] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   96.722329][   T12] bond2: (slave macvlan0): failed to get link speed/duplex
[   96.842325][   T12] bond2: (slave macvlan0): failed to get link speed/duplex
[   96.953009][ T5743] bond2: (slave macvlan0): failed to get link speed/duplex
[   97.092674][   T12] bond2: (slave macvlan0): failed to get link speed/duplex
[   97.205222][ T5911] bond2: (slave macvlan0): failed to get link speed/duplex
[   97.247278][ T7200] __nla_validate_parse: 12 callbacks suppressed
[   97.247294][ T7200] netlink: 48 bytes leftover after parsing attributes in process `syz.0.360'.
[   97.264922][ T7200] netlink: 48 bytes leftover after parsing attributes in process `syz.0.360'.
[   97.269686][ T7202] netlink: 132 bytes leftover after parsing attributes in process `syz.2.361'.
[   97.332365][ T5911] bond2: (slave macvlan0): failed to get link speed/duplex
[   97.424014][ T7212] netlink: 20 bytes leftover after parsing attributes in process `syz.1.366'.
[  100.548693][ T7238] netlink: 16 bytes leftover after parsing attributes in process `syz.2.375'.
[  100.668295][ T7245] geneve2: entered promiscuous mode
[  100.670177][ T7245] geneve2: entered allmulticast mode
[  100.675826][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 56755 - 0
[  100.682858][ T7251] netlink: 24 bytes leftover after parsing attributes in process `syz.1.380'.
[  100.686706][   T12] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 39448 - 0
[  100.689787][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 56755 - 0
[  100.698530][   T12] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 39448 - 0
[  100.704833][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 56755 - 0
[  100.707811][   T12] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 39448 - 0
[  100.765360][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 56755 - 0
[  100.770247][   T12] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 39448 - 0
[  100.783365][ T7251] netlink: 24 bytes leftover after parsing attributes in process `syz.1.380'.
[  100.792043][ T7251] netlink: 209840 bytes leftover after parsing attributes in process `syz.1.380'.
[  100.856423][ T7263] netlink: 44 bytes leftover after parsing attributes in process `syz.2.383'.
[  100.939878][ T2274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.943171][ T2274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.213488][ T7271] ieee802154 phy0 wpan0: encryption failed: -22
[  101.232309][ T5877] net_ratelimit: 9 callbacks suppressed
[  101.232330][ T5877] bond2: (slave macvlan0): failed to get link speed/duplex
[  101.342548][ T5743] bond2: (slave macvlan0): failed to get link speed/duplex
[  101.431359][ T7282] validate_nla: 6 callbacks suppressed
[  101.431376][ T7282] netlink: 'syz.1.389': attribute type 9 has an invalid length.
[  101.472546][ T5743] bond2: (slave macvlan0): failed to get link speed/duplex
[  101.528725][ T7284] netlink: 36 bytes leftover after parsing attributes in process `syz.1.390'.
[  101.551373][ T7284] dvmrp8: entered allmulticast mode
[  101.580537][ T7287] 8021q: adding VLAN 0 to HW filter on device team0
[  101.589386][ T7287] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  101.762451][ T5743] bond2: (slave macvlan0): failed to get link speed/duplex
[  101.871624][ T7291] dvmrp8: left allmulticast mode
[  101.999077][ T5911] bond2: (slave macvlan0): failed to get link speed/duplex
[  102.051756][ T7324] netlink: 'syz.1.402': attribute type 2 has an invalid length.
[  102.108417][ T5743] bond2: (slave macvlan0): failed to get link speed/duplex
[  102.129096][ T7331] syzkaller1: entered promiscuous mode
[  102.133679][ T7331] syzkaller1: entered allmulticast mode
[  102.184331][ T7332] netlink: 'syz.1.404': attribute type 10 has an invalid length.
[  102.187359][ T7332] dummy0: entered promiscuous mode
[  102.203088][ T7332] bridge0: port 4(dummy0) entered blocking state
[  102.205715][ T7332] bridge0: port 4(dummy0) entered disabled state
[  102.208279][ T7332] dummy0: entered allmulticast mode
[  102.234023][ T7332] bridge0: port 4(dummy0) entered blocking state
[  102.236195][ T7332] bridge0: port 4(dummy0) entered forwarding state
[  102.246670][ T7334] netlink: 'syz.2.406': attribute type 12 has an invalid length.
[  102.249825][ T7334] netlink: 'syz.2.406': attribute type 12 has an invalid length.
[  102.273211][ T5877] bond2: (slave macvlan0): failed to get link speed/duplex
[  102.368964][ T7339] sctp: [Deprecated]: syz.0.409 (pid 7339) Use of struct sctp_assoc_value in delayed_ack socket option.
[  102.368964][ T7339] Use struct sctp_sack_info instead
[  102.383275][ T7339] sctp: [Deprecated]: syz.0.409 (pid 7339) Use of struct sctp_assoc_value in delayed_ack socket option.
[  102.383275][ T7339] Use struct sctp_sack_info instead
[  102.387984][ T5877] bond2: (slave macvlan0): failed to get link speed/duplex
[  102.475615][ T7356] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  102.478768][ T7356] __nla_validate_parse: 4 callbacks suppressed
[  102.478778][ T7356] netlink: 28 bytes leftover after parsing attributes in process `syz.0.411'.
[  102.725503][ T7376] lo: entered promiscuous mode
[  102.826246][ T7382] netlink: 4 bytes leftover after parsing attributes in process `syz.1.425'.
[  102.830599][ T7382] netlink: 12 bytes leftover after parsing attributes in process `syz.1.425'.
[  103.010450][ T7387] netlink: 28 bytes leftover after parsing attributes in process `syz.0.426'.
[  103.287582][ T7411] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  103.304060][ T7411] netlink: 60 bytes leftover after parsing attributes in process `syz.0.432'.
[  103.307579][ T7411] netlink: 56 bytes leftover after parsing attributes in process `syz.0.432'.
[  103.316992][ T7411] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  103.321514][ T7411] gretap1: entered promiscuous mode
[  103.323769][ T7411] gretap1: entered allmulticast mode
[  103.747365][ T7416] netlink: 32 bytes leftover after parsing attributes in process `syz.1.435'.
[  103.753367][ T7416] netlink: 'syz.1.435': attribute type 1 has an invalid length.
[  103.834179][ T7422] netlink: 'syz.1.437': attribute type 1 has an invalid length.
[  103.851443][ T7422] 8021q: adding VLAN 0 to HW filter on device bond5
[  103.871111][ T7422] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6)
[  103.998404][ T7428] netlink: 4 bytes leftover after parsing attributes in process `syz.1.439'.
[  104.007713][ T7428] bridge0: port 4(dummy0) entered disabled state
[  104.029163][ T7428] dummy0 (unregistering): left allmulticast mode
[  104.031777][ T7428] bridge0: port 4(dummy0) entered disabled state
[  104.074780][ T7430] netlink: 4 bytes leftover after parsing attributes in process `syz.0.440'.
[  104.095916][ T7430] netlink: 8 bytes leftover after parsing attributes in process `syz.0.440'.
[  104.141686][ T7433] dummy0: entered promiscuous mode
[  104.148074][ T7433] dummy0: left promiscuous mode
[  104.775657][ T7493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  104.778308][ T7493] IPv6: NLM_F_CREATE should be set when creating new route
[  104.780505][ T7493] IPv6: NLM_F_CREATE should be set when creating new route
[  104.794239][ T7493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  104.856154][ T7497] netlink: 'syz.0.461': attribute type 1 has an invalid length.
[  104.883919][ T7497] bond6: entered promiscuous mode
[  104.886609][ T7497] 8021q: adding VLAN 0 to HW filter on device bond6
[  104.919362][ T7497] 8021q: adding VLAN 0 to HW filter on device bond6
[  104.922816][ T7497] bond6: (slave wireguard2): The slave device specified does not support setting the MAC address
[  104.931549][ T7497] bond6: (slave wireguard2): Setting fail_over_mac to active for active-backup mode
[  104.956800][ T7500] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  104.959201][ T7500] IPv6: NLM_F_CREATE should be set when creating new route
[  104.961647][ T7500] IPv6: NLM_F_CREATE should be set when creating new route
[  104.980690][ T7500] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  104.983775][ T7497] bond6: (slave wireguard2): making interface the new active one
[  104.988194][ T7497] wireguard2: entered promiscuous mode
[  104.991278][ T7497] bond6: (slave wireguard2): Enslaving as an active interface with an up link
[  105.127877][ T7509] wg1: entered promiscuous mode
[  105.131988][ T7509] wg1: entered allmulticast mode
[  105.134581][ T7510] netlink: 'syz.2.465': attribute type 5 has an invalid length.
[  105.514547][ T7516] bond1: left allmulticast mode
[  105.517080][ T7516] bridge0: port 1(bond1) entered disabled state
[  105.821447][ T7527] netlink: 'syz.2.468': attribute type 16 has an invalid length.
[  106.313663][ T5911] net_ratelimit: 34 callbacks suppressed
[  106.313680][ T5911] bond2: (slave macvlan0): failed to get link speed/duplex
[  106.356780][ T7557] tun0: tun_chr_ioctl cmd 1074025672
[  106.358596][ T7557] tun0: ignored: set checksum disabled
[  106.434845][ T5911] bond2: (slave macvlan0): failed to get link speed/duplex
[  106.552479][   T13] bond2: (slave macvlan0): failed to get link speed/duplex
[  106.725544][   T13] bond2: (slave macvlan0): failed to get link speed/duplex
[  106.832332][   T13] bond2: (slave macvlan0): failed to get link speed/duplex
[  107.882883][ T5911] bond2: (slave macvlan0): failed to get link speed/duplex
[  107.921785][ T7589] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  108.000490][ T5911] bond2: (slave macvlan0): failed to get link speed/duplex
[  108.112983][ T7608] block nbd0: server does not support multiple connections per device.
[  108.120493][ T7608] block nbd0: shutting down sockets
[  108.122900][ T5743] bond2: (slave macvlan0): failed to get link speed/duplex
[  108.207345][ T7626] __nla_validate_parse: 13 callbacks suppressed
[  108.207356][ T7626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.502'.
[  108.235868][ T5743] bond2: (slave macvlan0): failed to get link speed/duplex
[  108.338503][ T7637] 8021q: adding VLAN 0 to HW filter on device bond0
[  108.350944][ T7637] bond0: (slave rose0): Enslaving as an active interface with an up link
[  108.362529][ T5743] bond2: (slave macvlan0): failed to get link speed/duplex
[  108.369533][ T7640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.507'.
[  108.382510][ T7638] syzkaller1: entered promiscuous mode
[  108.384796][ T7638] syzkaller1: entered allmulticast mode
[  108.555539][ T7655] netlink: 24 bytes leftover after parsing attributes in process `syz.1.512'.
[  108.566958][ T7653] netlink: 60 bytes leftover after parsing attributes in process `syz.2.511'.
[  108.651099][ T7660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.511'.
[  108.656012][ T7660] netlink: 4 bytes leftover after parsing attributes in process `syz.2.511'.
[  108.965293][ T7685] veth0: entered promiscuous mode
[  108.971185][ T7685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.519'.
[  108.976097][ T7689] netlink: 64 bytes leftover after parsing attributes in process `syz.2.518'.
[  108.992847][ T7685] veth0 (unregistering): left promiscuous mode
[  108.993749][ T7691] netlink: 64 bytes leftover after parsing attributes in process `syz.0.521'.
[  109.104663][ T7704] netlink: 200 bytes leftover after parsing attributes in process `syz.2.526'.
[  109.269251][ T7716] validate_nla: 3 callbacks suppressed
[  109.269265][ T7716] netlink: 'syz.1.530': attribute type 1 has an invalid length.
[  109.279665][ T7723] netlink: 'syz.0.532': attribute type 1 has an invalid length.
[  109.296598][ T7716] bond6: entered promiscuous mode
[  109.298795][ T7716] 8021q: adding VLAN 0 to HW filter on device bond6
[  109.355834][ T7716] bond6: (slave bridge2): making interface the new active one
[  109.359183][ T7716] bridge2: entered promiscuous mode
[  109.366432][ T7716] bond6: (slave bridge2): Enslaving as an active interface with an up link
[  110.163382][ T7770] syzkaller1: entered promiscuous mode
[  110.165661][ T7770] syzkaller1: entered allmulticast mode
[  110.333316][ T5743] bond0: (slave bond_slave_0): link status definitely down, disabling slave
[  110.339182][ T5743] bond0: (slave bond_slave_1): link status definitely down, disabling slave
[  110.349279][ T5743] bond0: (slave wlan1): link status definitely down, disabling slave
[  110.357313][ T5743] bond0: now running without any active interface!
[  110.374876][ T7779] bond0: Device is already in use.
[  110.581774][ T7788] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  110.854984][ T7807] bridge0: entered promiscuous mode
[  110.860858][ T7807] bridge0: entered allmulticast mode
[  111.316700][ T7825] tc_dump_action: action bad kind
[  111.332577][   T13] net_ratelimit: 22 callbacks suppressed
[  111.332594][   T13] bond2: (slave macvlan0): failed to get link speed/duplex
[  111.477814][ T7836] netlink: 'syz.1.568': attribute type 1 has an invalid length.
[  111.481050][ T7836] netlink: 'syz.1.568': attribute type 1 has an invalid length.
[  111.490737][ T7831] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  111.494166][ T7830] syzkaller0: entered promiscuous mode
[  111.496317][ T7830] syzkaller0: entered allmulticast mode
[  111.502406][ T5911] bond2: (slave macvlan0): failed to get link speed/duplex
[  111.549988][ T7829] tipc: Resetting bearer <eth:syzkaller0>
[  111.556006][ T7834] netlink: 'syz.2.567': attribute type 29 has an invalid length.
[  111.581251][ T7829] tipc: Disabling bearer <eth:syzkaller0>
[  111.612457][ T5911] bond2: (slave macvlan0): failed to get link speed/duplex
[  111.638885][ T7841] netlink: 'syz.2.570': attribute type 1 has an invalid length.
[  111.671972][ T7841] 8021q: adding VLAN 0 to HW filter on device bond5
[  111.693234][ T7841] bond5: (slave gretap1): making interface the new active one
[  111.696623][ T7841] bond5: (slave gretap1): Enslaving as an active interface with an up link
[  111.722372][ T5911] bond2: (slave macvlan0): failed to get link speed/duplex
[  111.788107][ T7849] netlink: 'syz.0.573': attribute type 1 has an invalid length.
[  111.817822][ T7849] 8021q: adding VLAN 0 to HW filter on device bond8
[  111.832753][   T13] bond2: (slave macvlan0): failed to get link speed/duplex
[  111.848232][ T7849] bond8: entered promiscuous mode
[  111.850835][ T7849] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  111.855913][ T7849] bond8: left promiscuous mode
[  111.919258][ T7857] netlink: 'syz.2.577': attribute type 1 has an invalid length.
[  111.963067][ T5743] bond2: (slave macvlan0): failed to get link speed/duplex
[  112.073210][   T13] bond2: (slave macvlan0): failed to get link speed/duplex
[  112.182573][ T5743] bond2: (slave macvlan0): failed to get link speed/duplex
[  112.302561][ T5743] bond2: (slave macvlan0): failed to get link speed/duplex
[  112.422525][ T5743] bond2: (slave macvlan0): failed to get link speed/duplex
[  112.970838][ T7923] netlink: 'syz.0.598': attribute type 1 has an invalid length.
[  113.007675][ T7923] 8021q: adding VLAN 0 to HW filter on device bond9
[  113.019030][ T7923] vlan1: entered promiscuous mode
[  113.020928][ T7923] bond9: entered promiscuous mode
[  113.023003][ T7923] vlan1: entered allmulticast mode
[  113.025055][ T7923] bond9: entered allmulticast mode
[  113.028581][ T7926] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1)
[  113.049908][ T7927] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 56755 - 0
[  113.054327][ T7927] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 39448 - 0
[  113.071005][ T7923] bond9: (slave gretap3): making interface the new active one
[  113.073842][ T7923] gretap3: entered promiscuous mode
[  113.075587][ T7923] gretap3: entered allmulticast mode
[  113.078340][ T7923] bond9: (slave gretap3): Enslaving as an active interface with an up link
[  113.095684][ T7923] syz.0.598 (7923) used greatest stack depth: 19400 bytes left
[  113.125345][ T7927] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 56755 - 0
[  113.129865][ T7927] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 39448 - 0
[  113.198013][ T7927] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 56755 - 0
[  113.203061][ T7927] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 39448 - 0
[  113.259070][ T7927] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 56755 - 0
[  113.263639][ T7927] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 39448 - 0
[  113.273550][ T7934] __nla_validate_parse: 19 callbacks suppressed
[  113.273561][ T7934] netlink: 288 bytes leftover after parsing attributes in process `syz.0.601'.
[  113.281068][ T7934] netlink: 'syz.0.601': attribute type 1 has an invalid length.
[  113.339481][ T5743] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 39448 - 0
[  113.343263][ T5743] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 56755 - 0
[  113.354450][ T5877] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 39448 - 0
[  113.357332][ T5877] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 56755 - 0
[  113.369998][ T5877] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 39448 - 0
[  113.375529][ T5877] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 56755 - 0
[  113.387801][ T5877] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 39448 - 0
[  113.391214][ T5877] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 56755 - 0
[  113.401043][ T7925] delete_channel: no stack
[  113.655235][ T7952] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  113.657982][ T7952] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  113.794978][ T7960] nftables ruleset with unbound chain
[  113.860206][ T7964] netlink: 48 bytes leftover after parsing attributes in process `syz.2.613'.
Connection to localhost closed by remote host.
[  114.172491][ T6009] ==================================================================
[  114.175051][ T6009] BUG: KASAN: slab-use-after-free in __mutex_lock+0x801/0x1350
[  114.177400][ T6009] Read of size 8 at addr ffff8880206000a0 by task khidpd_15c25886/6009
[  114.180621][ T6009] 
[  114.181729][ T6009] CPU: 1 UID: 0 PID: 6009 Comm: khidpd_15c25886 Not tainted syzkaller #0 PREEMPT(full) 
[  114.181741][ T6009] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  114.181747][ T6009] Call Trace:
[  114.181753][ T6009]  <TASK>
[  114.181758][ T6009]  dump_stack_lvl+0x189/0x250
[  114.181772][ T6009]  ? __kasan_check_byte+0x12/0x40
[  114.181786][ T6009]  ? __pfx_dump_stack_lvl+0x10/0x10
[  114.181795][ T6009]  ? lock_release+0x4b/0x3e0
[  114.181808][ T6009]  ? __virt_addr_valid+0x4a5/0x5c0
[  114.181819][ T6009]  print_report+0xca/0x240
[  114.181828][ T6009]  ? __mutex_lock+0x801/0x1350
[  114.181838][ T6009]  kasan_report+0x118/0x150
[  114.181849][ T6009]  ? __mutex_lock+0x801/0x1350
[  114.181858][ T6009]  __mutex_lock+0x801/0x1350
[  114.181867][ T6009]  ? __mutex_lock+0x5bb/0x1350
[  114.181876][ T6009]  ? l2cap_unregister_user+0x6a/0x1b0
[  114.181885][ T6009]  ? __pfx___mutex_lock+0x10/0x10
[  114.181893][ T6009]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  114.181903][ T6009]  l2cap_unregister_user+0x6a/0x1b0
[  114.181912][ T6009]  hidp_session_thread+0x3c9/0x410
[  114.181925][ T6009]  ? __pfx_hidp_session_thread+0x10/0x10
[  114.181932][ T6009]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  114.181939][ T6009]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  114.181948][ T6009]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  114.181956][ T6009]  ? __kthread_parkme+0x7b/0x200
[  114.181965][ T6009]  ? __kthread_parkme+0x1a1/0x200
[  114.181974][ T6009]  kthread+0x711/0x8a0
[  114.181984][ T6009]  ? __pfx_hidp_session_thread+0x10/0x10
[  114.181992][ T6009]  ? __pfx_kthread+0x10/0x10
[  114.182000][ T6009]  ? _raw_spin_unlock_irq+0x23/0x50
[  114.182012][ T6009]  ? lockdep_hardirqs_on+0x9c/0x150
[  114.182020][ T6009]  ? __pfx_kthread+0x10/0x10
[  114.182028][ T6009]  ret_from_fork+0x439/0x7d0
[  114.182037][ T6009]  ? __pfx_ret_from_fork+0x10/0x10
[  114.182045][ T6009]  ? __switch_to_asm+0x39/0x70
[  114.182055][ T6009]  ? __switch_to_asm+0x33/0x70
[  114.182064][ T6009]  ? __pfx_kthread+0x10/0x10
[  114.182073][ T6009]  ret_from_fork_asm+0x1a/0x30
[  114.182086][ T6009]  </TASK>
[  114.182089][ T6009] 
[  114.246795][ T6009] Allocated by task 5854:
[  114.248478][ T6009]  kasan_save_track+0x3e/0x80
[  114.250313][ T6009]  __kasan_kmalloc+0x93/0xb0
[  114.252131][ T6009]  __kmalloc_noprof+0x27a/0x4f0
[  114.254055][ T6009]  hci_alloc_dev_priv+0x28/0x2060
[  114.255841][ T6009]  vhci_create_device+0x120/0x650
[  114.257477][ T6009]  vhci_write+0x3ce/0x4a0
[  114.259313][ T6009]  vfs_write+0x5c9/0xb30
[  114.260937][ T6009]  ksys_write+0x145/0x250
[  114.262493][ T6009]  do_syscall_64+0xfa/0x3b0
[  114.264317][ T6009]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.266513][ T6009] 
[  114.267488][ T6009] Freed by task 7965:
[  114.268877][ T6009]  kasan_save_track+0x3e/0x80
[  114.270379][ T6009]  kasan_save_free_info+0x46/0x50
[  114.272084][ T6009]  __kasan_slab_free+0x5b/0x80
[  114.274012][ T6009]  kfree+0x18e/0x440
[  114.275567][ T6009]  bt_host_release+0x82/0x90
[  114.277404][ T6009]  device_release+0x9c/0x1c0
[  114.278992][ T6009]  kobject_put+0x22b/0x480
[  114.280600][ T6009]  vhci_release+0x15a/0x1a0
[  114.282382][ T6009]  __fput+0x44c/0xa70
[  114.283884][ T6009]  task_work_run+0x1d4/0x260
[  114.285636][ T6009]  do_exit+0x6b5/0x2300
[  114.287253][ T6009]  do_group_exit+0x21c/0x2d0
[  114.288946][ T6009]  get_signal+0x1286/0x1340
[  114.290633][ T6009]  arch_do_signal_or_restart+0x9a/0x750
[  114.292716][ T6009]  exit_to_user_mode_loop+0x75/0x110
[  114.294702][ T6009]  do_syscall_64+0x2bd/0x3b0
[  114.296459][ T6009]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.298674][ T6009] 
[  114.299626][ T6009] Last potentially related work creation:
[  114.301708][ T6009]  kasan_save_stack+0x3e/0x60
[  114.303445][ T6009]  kasan_record_aux_stack+0xbd/0xd0
[  114.305396][ T6009]  insert_work+0x3d/0x330
[  114.307067][ T6009]  __queue_work+0xcd2/0xfb0
[  114.308789][ T6009]  queue_work_on+0x181/0x270
[  114.310567][ T6009]  l2cap_chan_send+0x1110/0x2790
[  114.312393][ T6009]  l2cap_sock_sendmsg+0x32e/0x4a0
[  114.314035][ T6009]  __sock_sendmsg+0x21c/0x270
[  114.315535][ T6009]  ____sys_sendmsg+0x52d/0x830
[  114.317047][ T6009]  ___sys_sendmsg+0x21f/0x2a0
[  114.318912][ T6009]  __sys_sendmmsg+0x227/0x430
[  114.320775][ T6009]  __x64_sys_sendmmsg+0xa0/0xc0
[  114.322713][ T6009]  do_syscall_64+0xfa/0x3b0
[  114.324525][ T6009]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.326809][ T6009] 
[  114.327723][ T6009] Second to last potentially related work creation:
[  114.330185][ T6009]  kasan_save_stack+0x3e/0x60
[  114.331983][ T6009]  kasan_record_aux_stack+0xbd/0xd0
[  114.334062][ T6009]  insert_work+0x3d/0x330
[  114.335824][ T6009]  __queue_work+0xbaf/0xfb0
[  114.337624][ T6009]  queue_work_on+0x181/0x270
[  114.339478][ T6009]  process_scheduled_works+0xae1/0x17b0
[  114.341675][ T6009]  worker_thread+0x8a0/0xda0
[  114.343459][ T6009]  kthread+0x711/0x8a0
[  114.345031][ T6009]  ret_from_fork+0x439/0x7d0
[  114.346810][ T6009]  ret_from_fork_asm+0x1a/0x30
[  114.348650][ T6009] 
[  114.349603][ T6009] The buggy address belongs to the object at ffff888020600000
[  114.349603][ T6009]  which belongs to the cache kmalloc-8k of size 8192
[  114.354957][ T6009] The buggy address is located 160 bytes inside of
[  114.354957][ T6009]  freed 8192-byte region [ffff888020600000, ffff888020602000)
[  114.360331][ T6009] 
[  114.361304][ T6009] The buggy address belongs to the physical page:
[  114.363774][ T6009] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20600
[  114.367027][ T6009] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  114.370274][ T6009] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  114.373271][ T6009] page_type: f5(slab)
[  114.374869][ T6009] raw: 00fff00000000040 ffff88801a442280 ffffea0000a3c000 dead000000000003
[  114.378232][ T6009] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  114.381596][ T6009] head: 00fff00000000040 ffff88801a442280 ffffea0000a3c000 dead000000000003
[  114.385024][ T6009] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  114.388296][ T6009] head: 00fff00000000003 ffffea0000818001 00000000ffffffff 00000000ffffffff
[  114.391788][ T6009] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  114.394923][ T6009] page dumped because: kasan: bad access detected
[  114.397312][ T6009] page_owner tracks the page as allocated
[  114.399502][ T6009] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5592, tgid 5592 (dhcpcd), ts 43257244157, free_ts 40116185514
[  114.407203][ T6009]  post_alloc_hook+0x240/0x2a0
[  114.409122][ T6009]  get_page_from_freelist+0x21e4/0x22c0
[  114.411304][ T6009]  __alloc_frozen_pages_noprof+0x181/0x370
[  114.413547][ T6009]  alloc_pages_mpol+0x232/0x4a0
[  114.415398][ T6009]  allocate_slab+0x8a/0x370
[  114.417105][ T6009]  ___slab_alloc+0xbeb/0x1420
[  114.418931][ T6009]  __kmalloc_node_track_caller_noprof+0x2f8/0x4e0
[  114.421451][ T6009]  kmalloc_reserve+0x136/0x290
[  114.423330][ T6009]  __alloc_skb+0x142/0x2d0
[  114.425059][ T6009]  netlink_dump+0x167/0xe90
[  114.426819][ T6009]  __netlink_dump_start+0x5cb/0x7e0
[  114.428808][ T6009]  rtnetlink_rcv_msg+0x9eb/0xb70
[  114.430724][ T6009]  netlink_rcv_skb+0x208/0x470
[  114.432603][ T6009]  netlink_unicast+0x82f/0x9e0
[  114.434477][ T6009]  netlink_sendmsg+0x805/0xb30
[  114.436317][ T6009]  __sock_sendmsg+0x21c/0x270
[  114.438025][ T6009] page last free pid 5302 tgid 5302 stack trace:
[  114.440959][ T6009]  __free_frozen_pages+0xbc4/0xd30
[  114.442881][ T6009]  __slab_free+0x303/0x3c0
[  114.444569][ T6009]  qlist_free_all+0x97/0x140
[  114.446371][ T6009]  kasan_quarantine_reduce+0x148/0x160
[  114.448485][ T6009]  __kasan_slab_alloc+0x22/0x80
[  114.450395][ T6009]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  114.452521][ T6009]  getname_flags+0xb8/0x540
[  114.454267][ T6009]  vfs_fstatat+0x43/0x170
[  114.455918][ T6009]  __x64_sys_newfstatat+0x116/0x190
[  114.457896][ T6009]  do_syscall_64+0xfa/0x3b0
[  114.459573][ T6009]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.461795][ T6009] 
[  114.462739][ T6009] Memory state around the buggy address:
[  114.464873][ T6009]  ffff8880205fff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  114.467891][ T6009]  ffff888020600000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  114.470949][ T6009] >ffff888020600080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  114.473923][ T6009]                                ^
[  114.475888][ T6009]  ffff888020600100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  114.478765][ T6009]  ffff888020600180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  114.481772][ T6009] ==================================================================
[  114.485627][ T6009] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  114.488457][ T6009] CPU: 1 UID: 0 PID: 6009 Comm: khidpd_15c25886 Not tainted syzkaller #0 PREEMPT(full) 
[  114.491994][ T6009] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  114.495839][ T6009] Call Trace:
[  114.497166][ T6009]  <TASK>
[  114.498330][ T6009]  dump_stack_lvl+0x99/0x250
[  114.500141][ T6009]  ? __asan_memcpy+0x40/0x70
[  114.501911][ T6009]  ? __pfx_dump_stack_lvl+0x10/0x10
[  114.503926][ T6009]  ? __pfx__printk+0x10/0x10
[  114.505717][ T6009]  vpanic+0x281/0x750
[  114.507279][ T6009]  ? __pfx_vpanic+0x10/0x10
[  114.509036][ T6009]  ? irqentry_exit+0x74/0x90
[  114.510830][ T6009]  panic+0xb9/0xc0
[  114.512301][ T6009]  ? __pfx_panic+0x10/0x10
[  114.514027][ T6009]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  114.516289][ T6009]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  114.518523][ T6009]  ? __mutex_lock+0x801/0x1350
[  114.520372][ T6009]  check_panic_on_warn+0x89/0xb0
[  114.522276][ T6009]  ? __mutex_lock+0x801/0x1350
[  114.524155][ T6009]  end_report+0x78/0x160
[  114.525790][ T6009]  kasan_report+0x129/0x150
[  114.527548][ T6009]  ? __mutex_lock+0x801/0x1350
[  114.529402][ T6009]  __mutex_lock+0x801/0x1350
[  114.531174][ T6009]  ? __mutex_lock+0x5bb/0x1350
[  114.533027][ T6009]  ? l2cap_unregister_user+0x6a/0x1b0
[  114.535068][ T6009]  ? __pfx___mutex_lock+0x10/0x10
[  114.536875][ T6009]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  114.539455][ T6009]  l2cap_unregister_user+0x6a/0x1b0
[  114.541517][ T6009]  hidp_session_thread+0x3c9/0x410
[  114.543567][ T6009]  ? __pfx_hidp_session_thread+0x10/0x10
[  114.545777][ T6009]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  114.548065][ T6009]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  114.550491][ T6009]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  114.552888][ T6009]  ? __kthread_parkme+0x7b/0x200
[  114.554776][ T6009]  ? __kthread_parkme+0x1a1/0x200
[  114.556714][ T6009]  kthread+0x711/0x8a0
[  114.558295][ T6009]  ? __pfx_hidp_session_thread+0x10/0x10
[  114.560437][ T6009]  ? __pfx_kthread+0x10/0x10
[  114.562425][ T6009]  ? _raw_spin_unlock_irq+0x23/0x50
[  114.564476][ T6009]  ? lockdep_hardirqs_on+0x9c/0x150
[  114.566489][ T6009]  ? __pfx_kthread+0x10/0x10
[  114.568287][ T6009]  ret_from_fork+0x439/0x7d0
[  114.570037][ T6009]  ? __pfx_ret_from_fork+0x10/0x10
[  114.572032][ T6009]  ? __switch_to_asm+0x39/0x70
[  114.573893][ T6009]  ? __switch_to_asm+0x33/0x70
[  114.575769][ T6009]  ? __pfx_kthread+0x10/0x10
[  114.577572][ T6009]  ret_from_fork_asm+0x1a/0x30
[  114.579443][ T6009]  </TASK>
[  114.581287][ T6009] Kernel Offset: disabled
[  114.582985][ T6009] Rebooting in 86400 seconds..

VM DIAGNOSIS:
15:51:18  Registers:
info registers vcpu 0

CPU#0
RAX=a77005c6add07900 RBX=ffffffff819683f8 RCX=a77005c6add07900 RDX=0000000000000001
RSI=ffffffff8d9ba1da RDI=ffffffff8be33f00 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa38f30 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7b03f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8613000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055559209a808 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f22a1412e7b
XMM06=0000000000000000 00007f22a1412e75 XMM07=0000000000000000 00007f22a1412e89
XMM08=0000000000000000 00007f22a1412f0f XMM09=0000000000000000 00007f22a1412fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000036 RBX=0000000000000036 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90004f17370
R8 =ffff888106f18237 R9 =1ffff11020de3046 R10=dffffc0000000000 R11=ffffffff854fac30
R12=dffffc0000000000 R13=ffffffff99b028d2 R14=ffffffff99df7480 R15=0000000000000000
RIP=ffffffff854facac RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c13000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fb1bad07d60 CR3=0000000106ed6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00000000ff000000 0000000000000000 XMM05=3f3f3f3f3f3f3f3f 3f3f3f3f3f3f3f3f
XMM06=9999999999999999 9999999999999999 XMM07=2020202020202020 2020202020202020
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
