last executing test programs:

2.31086119s ago: executing program 1 (id=311):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000100))
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x0, 0x9}, 0x8)
sendto$inet6(r4, &(0x7f0000000140)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x0, 0xffffffff, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xa}, 0x1c)
setsockopt(r4, 0x84, 0x82, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
r7 = socket(0x2, 0x80805, 0x0)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r8, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={<r9=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x7a, &(0x7f0000000340)={r9, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x82, &(0x7f0000000000)=@assoc_value, &(0x7f00000001c0)=0x8)
close(r6)
r10 = socket$unix(0x1, 0x1, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x7, 0x9, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x10000}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

1.53541826s ago: executing program 2 (id=313):
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff)
r1 = socket$netlink(0x10, 0x3, 0x15)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl1\x00', <r3=>0x0, 0x1, 0x8000, 0x1000, 0x0, {{0x2f, 0x4, 0x3, 0x7, 0xbc, 0x64, 0x0, 0x3, 0x4, 0x0, @broadcast, @private=0xa010100, {[@generic={0x89, 0x12, "8092af8a1a138032c91b34cd9cd14820"}, @cipso={0x86, 0x18, 0x3, [{0x6, 0x12, "ae9d730edb36bde67b1d5706a3872885"}]}, @ssrr={0x89, 0xf, 0xf8, [@loopback, @multicast1, @local]}, @lsrr={0x83, 0x13, 0x66, [@broadcast, @local, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0x44, 0x37, 0x1, 0x6, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@dev={0xac, 0x14, 0x14, 0x15}, 0x3}, {@broadcast, 0x8}, {@broadcast, 0x9}, {@empty, 0x8}, {@rand_addr=0x64010102, 0x1000}, {@private=0xa010102, 0x4}, {@remote, 0xffffffff}]}, @timestamp={0x44, 0x18, 0x66, 0x0, 0x6, [0x1b, 0x0, 0x2, 0x1000, 0xe4]}]}}}}})
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={<r4=>0x0, @loopback}, &(0x7f0000000240)=0xc)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xbc, r2, 0xe04, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x8000}, 0x44010)
sendmsg$nl_route_sched(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@deltfilter={0x24, 0x2d, 0x10, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xffff, 0x1}, {0xc, 0xe}, {0x1c, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000084}, 0x4040)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)={<r5=>r1})
sendmsg$IPSET_CMD_RENAME(r5, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x58, 0x5, 0x6, 0x101, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000800}, 0x14)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f00000006c0)={'ip6tnl0\x00', &(0x7f0000000640)={'syztnl1\x00', r3, 0x2f, 0x7, 0x81, 0xf, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, 0x40, 0x1af13652168b168f, 0x7fffffff, 0xffffffff}})
r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000940)={&(0x7f0000000780)={0x198, r6, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x184, 0xc, 0x0, 0x1, [{0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbc5a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3d318851}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x79c340ac}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4baf3f6a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5935409e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3a6c699b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5df65b84}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a78da13}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xe5ddc89}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6dd76e08}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2426}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9ce9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x730f2abc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x83fe}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x529cf1a5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x95cc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8905}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61870a8}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x66c6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x49c0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x38269b77}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x47f2f47e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xda4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7b56306c}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3a29}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd314}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa542}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x473a8d90}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2eaf}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xec9819a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1eb7}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5e04}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd664}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7c5c4ce6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7aa71839}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x65300fb9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6c19560}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3822242f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x695ddc39}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x275802a2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2164b451}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5e4dabf}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xb449d7}]}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x24000000}, 0x406c075)
sendmsg$nl_route_sched(r5, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)=@gettfilter={0x4c, 0x2e, 0x800, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xa, 0x5}, {0x7, 0xfff1}, {0x9, 0xe}}, [{0x8, 0xb, 0x7f}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x2f1e}, {0x8, 0xb, 0xfffffffb}, {0x8, 0xb, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000800}, 0x81)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000b40)=<r8=>0x0)
sendmsg$NFC_CMD_FW_DOWNLOAD(r7, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x40, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_FIRMWARE_NAME={0xe, 0x14, '-\\/\\:}\xfc)\'{'}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, ']'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_FIRMWARE_NAME={0x9, 0x14, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000000}, 0x8800)
ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000c40)={'wpan1\x00', <r9=>0x0})
splice(r1, &(0x7f0000000c80)=0xfffffffffffffffe, 0xffffffffffffffff, &(0x7f0000000cc0)=0x2, 0x9, 0x2)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000d00), r7)
setsockopt$CAN_RAW_LOOPBACK(r5, 0x65, 0x3, &(0x7f0000000d40)=0x1, 0x4)
socket$inet_mptcp(0x2, 0x1, 0x106)
r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000dc0), r7)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r7, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x2c, r10, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x9}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x40c0)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000f00)={0x8, &(0x7f0000000ec0)=[{0x0, 0x7f, 0x1, 0x80000001}, {0x511c, 0xc9, 0x1, 0x9}, {0x0, 0x1, 0x4, 0xfffffffe}, {0x4, 0xb4, 0xe2, 0x4}, {0x1, 0x60, 0x9, 0x2}, {0x9, 0xc, 0x3, 0x5}, {0x6000, 0x6, 0x6, 0x7}, {0x8, 0x4, 0x9, 0x5}]}, 0x10)
connect$pppl2tp(r5, &(0x7f0000000f40)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e23, @rand_addr=0x64010100}, 0x3, 0x4, 0x1, 0x4}}, 0x26)
sendmsg$NL802154_CMD_SET_TX_POWER(r7, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x24, r0, 0x10c, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x80}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x40)
socket$inet_udp(0x2, 0x2, 0x0)
r11 = syz_genetlink_get_family_id$devlink(&(0x7f00000010c0), r5)
sendmsg$DEVLINK_CMD_GET(r1, &(0x7f0000001240)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001200)={&(0x7f0000001100)={0xc8, r11, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20000000}, 0x10)
socket$kcm(0x29, 0x7, 0x0)

1.457344425s ago: executing program 2 (id=314):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x20, 0x16, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@nested={0xc, 0x12, 0x0, 0x1, [@typed={0x8, 0xbf, 0x0, 0x0, @u32=0x7fffffff}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x200090c0)

1.456948512s ago: executing program 0 (id=315):
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x112, 0x2, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000002000014a00000000000000000200"/28], 0x1c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000791000000000000095"], &(0x7f0000000080)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x691, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0)
unshare(0x6a040000) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async)
getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x112, 0x2, 0x0, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000002000014a00000000000000000200"/28], 0x1c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000791000000000000095"], &(0x7f0000000080)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x691, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) (async)

1.391197234s ago: executing program 2 (id=316):
r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r5, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r5}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x2, 0x3, 0x4)
setsockopt$inet_msfilter(r7, 0x0, 0x23, &(0x7f0000004b00)=ANY=[@ANYBLOB="e0000808ac1414aa"], 0x10)
r8 = socket(0x29, 0x803, 0x400001)
sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x24}}, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={<r10=>0x0, 0x0, &(0x7f00000002c0)}, &(0x7f0000000440)=0x10)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000080)={r10, 0x1}, &(0x7f0000000100)=0x8)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={<r11=>r1, 0x8, 0x9, 0x3ff})
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_PEER_GET(r12, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="0d030000000000000000130000001c000980080002"], 0x30}}, 0x0)
sendmsg$TIPC_NL_BEARER_ENABLE(r11, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000580)={0xe4, r13, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x100}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2fb}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xff}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4805}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x405c2226}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x21}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x20000000}, 0x60004040)
r14 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r14, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r15=>0x0})
r16 = socket$nl_generic(0x10, 0x3, 0x10)
r17 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x11, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r17}}, {}, [@map_idx={0x18, 0x7, 0x5, 0x0, 0x80000010}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x52, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x0, 0x10, 0x10000}, 0x94)
sendmsg$BATADV_CMD_SET_MESH(r16, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x24, r0, 0x1, 0x70bd2d, 0x2000004, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r15}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x0)

1.384045257s ago: executing program 1 (id=317):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
write(0xffffffffffffffff, &(0x7f0000000040)="2700000014000707030e0000120f0a", 0xf)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2], 0x14}, 0x1, 0x0, 0x0, 0x20000054}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01060000000000000000090000002400048013000100"], 0x38}}, 0x0)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x7c, r5, 0x811, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x786}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x75}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6b1647a4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xe6}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4084)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r6, &(0x7f0000000380), 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000003f80)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r7, 0x27, 0xe, 0x0, &(0x7f00000002c0)="f8ad00c5fce2b5cbaaadc5829fda", 0x0, 0x9, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmmsg$inet(r6, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x208000, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000300)={'ip6erspan0\x00', 0x8000})
unshare(0x6a040000)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x41, 0x107, 0x0, 0x25dfdbfb, {0x3, 0x7c}, [@nested={0x4, 0xfc}, @nested={0x4, 0x1}]}, 0x1c}}, 0x4010)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socket(0x10, 0x3, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13101}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}}, 0x0)

1.299584093s ago: executing program 2 (id=318):
r0 = socket$netlink(0x10, 0x3, 0x4)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r3, 0x2, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x29}, @void, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x3d, 0xc5, "dce51fdf52b0ad34b9061f25f8d11b0ababdce15b27123e8db236248afa37609f1fb1dcd0d20e3ba17707e28f014f06baafcbfac5c9bb65c2a"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000040}, 0x24000805)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000001c0)={<r5=>0x0, @dev, @dev}, &(0x7f0000000200)=0xc)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'syztnl1\x00', r5, 0x2f, 0x1, 0x8, 0xdfe, 0x4, @loopback, @local, 0x20, 0x40, 0x1, 0x2}})
ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000300)={<r6=>0x0, 0x7fff, 0x1, [0x4, 0xffff, 0x7, 0x9], [0x6, 0x3, 0x4db, 0x3, 0x0, 0x2, 0x7, 0xffffffffffffffff, 0x7, 0xe, 0x5, 0xe3, 0x6, 0x7, 0x400, 0x80, 0x1, 0x40, 0x1, 0x3, 0x3985a950, 0x1, 0x4b, 0x20000000, 0x0, 0x4, 0x8000000000000001, 0x0, 0x7, 0x101, 0xffffffffffffffff, 0x5, 0x9, 0x4, 0x17, 0x1, 0x2, 0x1, 0x5, 0x472c, 0x8, 0x0, 0x6, 0xcb, 0x6, 0x8, 0x5, 0x81, 0x3e, 0xfffffffffffffffb, 0x8, 0x5, 0x1, 0x68, 0x5, 0x4, 0x7, 0x7, 0x5, 0x81, 0x5e, 0x9, 0x200, 0x2, 0x99a, 0x80, 0x9, 0x8000000000000001, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x6, 0x0, 0xd3, 0x4, 0x0, 0x4, 0x8, 0x8a, 0x800, 0x1000, 0x10, 0x9, 0x4, 0x7f, 0x0, 0xc, 0x0, 0xd, 0x3ff, 0x9, 0x4, 0x7, 0x3, 0x480000000, 0x238, 0x7f, 0x4, 0x2, 0x7, 0x3, 0x1, 0x7, 0x1ff, 0x8, 0x8, 0x3, 0x6, 0x454fe7de, 0x9, 0x7, 0x6, 0x81, 0x8000000000000000, 0x1, 0x7]})
ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000000740)={r6, 0x3, 0xffffffff})
ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r4, 0x8002f515, &(0x7f0000000b40))
splice(r4, &(0x7f0000000b80)=0x7, r0, &(0x7f0000000bc0)=0x3, 0x683, 0x1)
r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000c40), r0)
sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x80, r7, 0x602, 0x70bd28, 0x25dfdbfb, {}, [@WGDEVICE_A_PEERS={0x2c, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x40010)
vmsplice(r4, &(0x7f0000000f00)=[{&(0x7f0000000d80)="acffc1125c36db5a2ae9aa80910273727ced72e14ec47fe1d0b9d4778e603dd4c3ff1baaf052563fb6c5cf693ca5c841b0b8348bf79728535bb25885d8f0ed34b31ac745098e9c589a6fb5b989f2ea844466bfb2991cc96ca0ea6b63c5d4a8b1a34504a81403058317d7ba33f6a9fd0a129d8749a4", 0x75}, {&(0x7f0000000e00)="1727370190f360fea04df2256bb35c49b90cc821d6a2a3e69542a8871b8786091fc61ea36631a5320cd4e45380bde554e0b60ee1b992befdc26001d72076bdaca12207a8cfab020cf3b6d095466747c67350601dc59575447fb600594ffe9f0ee15aced4095df08caf97b1ff4ef6421a12c5c1aa34411f0b1a8da28e5df956b28d178a157717c047ea339dae40e3dc211dcb9f99c6bbaf4b188480901328d294b9a949e056039a4da7a3c6eda3b942ef44574e6bbda6acfc472af49370069797eabefb311f0a66c7a8998c5bb8f1efdd18af9b6b4bc5313c58", 0xd9}], 0x2, 0x2)
r8 = socket$inet6_sctp(0xa, 0xc2687b8b532a125d, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000f40)={0x6, [<r9=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000f80)=0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000fc0)={r9, @in={{0x2, 0x4e22, @rand_addr=0x64010101}}, 0x5, 0x1, 0x14, 0x7, 0x0, 0xd008, 0x7}, &(0x7f0000001080)=0x9c)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x3c, r1, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3ff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x76af}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004014}, 0x80)
getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f00000011c0)=""/129, &(0x7f0000001280)=0x81)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f00000012c0)=0xe2bc, 0x8)
sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x20, r3, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x7e}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x48891}, 0x20000001)
r10 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000001400)='io.latency\x00', 0x2, 0x0)
tee(r2, r10, 0x7, 0x0)
r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001440)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4, '\x00', r5, 0xffffffffffffffff, 0x3, 0x0, 0x5}, 0x50)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000014c0)=r11, 0x4)
r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001500)={0x1b, 0x0, 0x0, 0x400, 0x0, r11, 0xa6b, '\x00', r5, 0xffffffffffffffff, 0x3, 0x3, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x7, 0x1e, &(0x7f0000001580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r12}}, {}, [@alu={0x4, 0x0, 0xd, 0xa, 0x7, 0x6, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x91}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x6}, @map_fd={0x18, 0x4, 0x1, 0x0, r11}, @call={0x85, 0x0, 0x0, 0xa2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001680)='GPL\x00', 0x800, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, &(0x7f00000016c0)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001700)=[r11, r11, r11, r11], 0x0, 0x10, 0x51}, 0x94)
sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000001900)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x4c, r1, 0x2, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000100}, 0x8000)
sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000001a80)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001a40)={&(0x7f00000019c0)={0x54, 0x0, 0xb7cc8a3f227fad2c, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x4}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x2}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0xc}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x9}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x19}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x6}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x1}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048000)

1.191204747s ago: executing program 2 (id=319):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', <r3=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@getnexthop={0x20, 0x76, 0xb0d, 0x4000, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}}, 0x0)
unshare(0x68040200)
socket$inet(0x2, 0x3, 0x7)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
epoll_create1(0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="cd1242bdc9ea000000000000080049000040000800000001907864010102ffffffff01940401009404000094048fcbd9118507be5db652aa53c800000000000308b07800067f4345170fff0065b9f9f5290008ac1e0001ac141404"], 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r6 = socket(0x1e, 0x4, 0x0)
r7 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r7, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a1c0ffff000039a9029e2d34161c0000", 0x10}, {0x0, 0x2e}], 0x2}}], 0x1, 0x0)
setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
recvmmsg$unix(r6, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
setsockopt$SO_J1939_FILTER(r7, 0x6b, 0x1, &(0x7f00000003c0)=[{0x2, 0x0, {0x2, 0x1}, {0x0, 0x1}, 0xfd}, {0x0, 0x0, {0x1, 0x1, 0x1}, {0x1, 0xff, 0x3}, 0x2, 0xfe}, {0x2, 0x0, {0x1, 0xf0, 0x3}, {0x1, 0x1, 0x4}, 0xff, 0xfd}, {0x0, 0xffffffffffffffff, {0x1, 0xf0, 0x2}, {0x1, 0x0, 0x3}, 0x0, 0xff}, {0x2, 0x2, {0x2, 0xf0, 0x4}, {0x2, 0x1, 0x3}, 0xfe, 0xff}, {0x1, 0x3, {0x2, 0xf0, 0x3}, {0x0, 0xf0, 0x1}, 0xfe, 0xfe}, {0x1, 0x1, {0x0, 0x1, 0x3}, {0x1, 0x0, 0x3}, 0x1, 0x2}, {0x3, 0x3, {0x0, 0xf0, 0x3}, {0x1, 0xf0}, 0x2}], 0x100)
close(0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x12, 0xffffffffffffffff, 0xfffff000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
writev(r8, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea1100000005000000", 0x29}], 0x0)

661.134374ms ago: executing program 0 (id=320):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
listen(r1, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x54, 0x10, 0x401, 0x4000, 0x101, {0x0, 0x0, 0x0, 0x0, 0x20009, 0x1}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private1}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4014}, 0x0)

458.048766ms ago: executing program 1 (id=321):
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x7, 0x8000, 0x1}, 0x50) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x7, 0x4, 0x10, 0x3, 0x20, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x5, 0x8, 0x40, 0x42}, 0x48) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0x53, &(0x7f0000000000)=0x2, 0x4)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x6}, 0x1c) (async)
listen(r1, 0x3)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$bt_hci(r3, 0x84, 0x1f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) (async)
syz_emit_ethernet(0x65, &(0x7f00000004c0)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@llc={0x4, {@llc={0x4fb6184d5de723b1, 0xf0, '|', "f87b67c4292e3d863a78d19015b573d196969e93785ac9780a857a813092e791a61c74e28c7b4077e29c29866f0e4ba5c30b9d0b5ed922a0758c7c12add31a8e66d21f58039bc3ecc200ade500812a592746c8b5"}}}}}, 0x0) (async)
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x800)
r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r4, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) (async)
write$rfkill(r4, &(0x7f0000000000)={0x0, 0x2, 0xff, 0x0, 0x1}, 0x8) (async)
syz_emit_ethernet(0x71, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x63, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x0, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x4}]}}, {"83c28bcb1ad8b8d36292345e51d7592f06063c3723788e3752d56c88a684d46b5445f44c1e54760000000000000000"}}}}}}, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
write$rfkill(r4, 0x0, 0x0) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000300), r5) (async)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x14, 0x3, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) (async)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000240)="a83555adf58ea0e7ec0152e043d00f6900d1a3bb4dd2109199aedf2e3bf1861b23f5380a3d7d70ddc5029de303442453b74c844e3373e09a406b2ebd73ade9bf0fa5998149802c2e8794b188289074e0755b7944c9618f5bf8bf88cafc223486a3d4779af2a9f2eec0ba9701dec67ac14a0aba756f3bdbb8e81ba755d7a2a1", 0x1006, r0, 0x4}, 0x38)

457.529931ms ago: executing program 0 (id=322):
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0x1, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0}}, 0x10)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x14)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth0_to_hsr\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0xfffffffd, 0x203, {0x60, 0x0, 0x0, r5, {0x0, 0x3}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x800000003b9aca00}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x44040)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'ip6tnl0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001e000100000000000400000002000000", @ANYRES32=0x0, @ANYBLOB="66b511eae95cd1e76ddf53a021dc66d815bedc85edf6c1840bdf71e64f1c3b94940d8adb65a69c1c1dd16a117174624082ca55dd4be773fa890e20e8596fda3d7cd1cce4f4a571a2f958af4b7e22b2776a824c62cf487164ac1b5a176db04cb1f2a3a8b752865724718136ee9deed4298306a39fff66b21fcb1e9aaeb991a529825198ff3b49996587ac083fd0200244b476125ded9a7511efd7555e152afaca2636b25fbba9068cac1e9390aa27c571ee9154f749719fffde79b5f830d32314"], 0x1c}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}, @TCA_RATE={0x6, 0x5, {0x1, 0x80}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r11, 0x65, 0x2, &(0x7f0000000000)=0x9, 0x4)
setsockopt$CAN_RAW_FILTER(r11, 0x65, 0x1, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000180)={'vxcan1\x00'})
bind$can_raw(r11, &(0x7f0000000200)={0x1d, r2}, 0xff36)
sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@deltaction={0x80, 0x31, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x6c, 0x1, [{0xc, 0x31, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x200}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x800}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0xa0080}, 0x80)
getpeername$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000005c0)=0x55)
r12 = socket(0x400000000010, 0x3, 0x0)
r13 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r14=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x2070bd2a, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x10, 0xd}, {0xffff, 0xffff}, {0xfff2, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtclass={0x24, 0x28, 0x1, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r14, {0xffe0, 0x5}, {0xffff, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x24000880)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000002c0)={0x0, @loopback}, &(0x7f0000000300)=0xc)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vxcan0\x00'})
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="1800000054002000266e00"/20, @ANYRES32=r1], 0x18}, 0x1, 0x0, 0x0, 0x4014}, 0x4051)

321.001443ms ago: executing program 1 (id=323):
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18)
syz_genetlink_get_family_id$smc(&(0x7f00000003c0), 0xffffffffffffffff)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0), 0x4)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$inet(r4, 0x0, 0x8040)
close(r4)
getsockopt$llc_int(r3, 0x10c, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a300000000040000380080001400000000008000240000000002c0003801400010063616966300000000000000000000000140001006d6163766c616e3100000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001007465616d30000000000000000000"], 0x110}}, 0x800)
sendmsg$NFT_BATCH(r5, 0x0, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
sendmsg$NFT_BATCH(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8002}, 0xc, &(0x7f0000000280)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x18c, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HOOK={0x7c, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'wg0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'virt_wifi0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2664dc01}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6gretap0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'pim6reg\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4853ccd3}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x52660e6e}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5fbdeb0a}]}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7ca4629e}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x800}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x101}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x101}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffff7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1c92}]}, @NFTA_CHAIN_HOOK={0x60, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x13594866}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_DEV={0x14, 0x3, 'vcan0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'batadv_slave_1\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x465ea344}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6gretap0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x1b4}, 0x1, 0x0, 0x0, 0x11}, 0xcecc82d854d5e0e6)
r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000000100)={r2, r2, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x9, 'syz0\x00'})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
shutdown(r2, 0x1)
r8 = socket(0x15, 0x5, 0x0)
getsockopt(r8, 0x200000000114, 0x2717, 0x0, &(0x7f00000000c0))
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a00034002c3000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044884)

320.238901ms ago: executing program 0 (id=324):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3)
sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001c80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40800)
write$nci(r1, &(0x7f0000000240)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x9, {0x1, 0x8, "d9d1c49cdfc14c5e"}}, 0xd)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80001, 0x80, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000000)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000a00), r6)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x20, r7, 0xd0b, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r7, 0x2, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000040)
r8 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000200), 0x4)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x9c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x9c}}, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r7, 0x208, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x800)
socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_MAKE_EQUIV(r10, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x28, 0x3f7, 0x20, 0x70bd2c, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000815}, 0x4000080)
socket$nl_route(0x10, 0x3, 0x0)

180.665748ms ago: executing program 1 (id=325):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r1=>0x0})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)
syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000040003000b0000000600500000000304006c"], 0x68}}, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x50, r7, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="418cb04d5101"}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x2}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

178.149148ms ago: executing program 2 (id=326):
r0 = socket(0x2, 0x3, 0x9)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xffe5}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x40}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014)
vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="77690addcfbe1fbb66ec", 0xfd9c}], 0x1, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
readv(r7, &(0x7f0000001b00)=[{&(0x7f00000008c0)=""/4096, 0x1000}], 0x1)
r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0))
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10)
sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYRESDEC=r1, @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40800)
write$nci(r9, &(0x7f0000000040)=ANY=[@ANYBLOB="410305a1b727039dab30ac06db7f457fac5a"], 0x12)
splice(r7, 0x0, r2, 0x0, 0x10000008ebc, 0xd)
splice(r1, 0x0, r8, 0x0, 0x25a5, 0x0)
write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x28}}, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040))
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r13, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)

110.997675ms ago: executing program 0 (id=327):
sendmsg$alg(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)="85c3367ed817fd6e62caacfca674b59a1fa1d024776e2aff4bfe2fdcb9ef01f724ae5d1070fa407696965574f4bbab0ff157f0e57d9a6153d8452112fcb779e09c7853bc837802724c1beb458d381f305b0218061bc5f0d81217411f607d36ccd4c22e454e922afc8ff9417044a20cca8bda55073d1e681a8b7dcdaf1d0af3472f0bb71de8a4cabe282f19fd", 0x8c}, {&(0x7f0000000440)="617743ad523e4f92ed930409eca0d0a9a283fb03d9a373610aa741f19b5b795dfa28e70653d9340ce1b2d231fc951074ad44d69a017ff4edff0e379bf307905dd57cdd0249df94d3e1ef064f3d12c65875a8976410a0c71b7abb03e57a9e32d6bc344f35ef6eeeaf37d8190e2ce687d9d2dc5f3cdd26417cc61720c7a908de12792b2718dccda333306605053de190959206083da6b61e55764547ef2354c6cafc02a4188757b2633dacdfe900a7", 0xae}, {&(0x7f00000000c0)="3fbda4025554be9f1fdb3510ed56f17a60a34825b3c02d6d84551286c69890c6687e2d4b5a583d4d2e34a760dd7de5b2527074494c7f0163e062f1d3f8cad827915f0f9e14", 0x45}], 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000010000030000000100000000000000180000000000000017010000030000000100000000000000980000000000000017010000020000007e000000c365562a3fa8e0b983bcdf881a5fc672146bcdc6003c5f7dda6084b0fd8862f47ec71fe467cc040000006741d0562cbffb9b29659e96b4a8dcca3b0e5eaf3a01cf0a0b4e2eca631d960ee484669bb88bea3a8872fb8aeca300e507d4ad5a841050987a64435390e791af4ec39cd6d9b65c316779d3f56a072b00"/200], 0xc8, 0x20000000}, 0x80)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth0_to_team\x00', <r1=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3300000}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x5d}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
bind$packet(r0, &(0x7f0000000080)={0x11, 0x4, r1, 0x1, 0x6}, 0x14)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@getchain={0x4c, 0x11, 0x1, 0x70bd27, 0x25dedbfc, {0x0, 0x0, 0x0, r1, {0x9, 0xa}, {0xfff3, 0xc}, {0xfff2}}, [{0x8, 0xb, 0x2}, {0x8, 0xb, 0x87ac}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r3)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r5)
sendmsg$DEVLINK_CMD_RATE_SET(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c5e1bba50de740a0000006882458c38760a9344889d8cdd88e02e4a8b92089f8135b27116843619d9b418e1a0207b8b63ed7ee5081f9cdcb3a63546de43e7f51f7a561825d711e747ba864196d7944b281527a6334db3be9c24fa46c67b97decb8d323a682c0773cbf78628", @ANYRES16=r6, @ANYBLOB="010000000000000000002a00000008005800000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000000000002e0000000a0001007770616e3100000005002e007f0000000c0005000201aada92afc3aa05002b"], 0x3c}}, 0x0)

1.094102ms ago: executing program 0 (id=328):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) (async)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
r4 = socket$netlink(0x10, 0x3, 0x2)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'veth0\x00', &(0x7f0000000000)=@ethtool_test={0x1a, 0x1ff, 0x200}}) (async, rerun: 64)
setsockopt$packet_int(r3, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) (async, rerun: 64)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000002c0)={'wg2\x00'}) (async)
getsockname$packet(r3, &(0x7f0000000300)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000340)=0x14) (async)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000440)={'gretap0\x00', &(0x7f0000000940)={'gre0\x00', 0x0, 0x7, 0x8, 0x4, 0x2, {{0x2c, 0x4, 0x1, 0x8, 0xb0, 0x68, 0x0, 0xe, 0x29, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x1d, 0x0, [{0x0, 0x2}, {0x6, 0x12, "f6ed04eaca7c98780807cb58cf29cf82"}, {0x7, 0x3, "c3"}]}, @cipso={0x86, 0x23, 0x3, [{0x2, 0x7, '#oP?\\'}, {0x5, 0x8, "8614a20dc46b"}, {0x2, 0xe, "84d7108a87b96bc408b06747"}]}, @cipso={0x86, 0x49, 0x2, [{0x5, 0x7, "cf98be9649"}, {0x2, 0xd, "bf05546921ff685a5f9dfa"}, {0x0, 0x5, "ad780c"}, {0x1, 0x6, "87aba960"}, {0x2, 0x12, "1df15f120a5cd4f1c532e819a7233010"}, {0x1, 0x9, "39f95761d460f6"}, {0x7, 0x9, "a1b695c66e31d0"}]}, @cipso={0x86, 0x11, 0x2, [{0x1, 0xb, "200fc25f2fbdf382ff"}]}, @end]}}}}}) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000006c0)={'ip6tnl0\x00', &(0x7f0000000480)={'ip6gre0\x00', <r7=>0x0, 0x4, 0x3d, 0x8, 0x101, 0x32, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x1, 0xfffffffe, 0xfffff4b0}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$inet(r9, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000900)='T', 0x1}], 0x1}, 0x4048841)
recvmsg(r8, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001)
sendmsg$inet(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5e54d5", 0x3}], 0x1}, 0x1) (async, rerun: 64)
recvmsg(r8, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x2000) (async, rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000700)={'batadv_slave_0\x00', <r10=>0x0}) (async)
r11 = socket$inet6_sctp(0xa, 0x5, 0x84)
r12 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r12, 0x0) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) (async, rerun: 32)
r13 = socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 32)
getsockopt$inet_sctp_SCTP_MAX_BURST(r13, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r14=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r11, 0x84, 0x76, &(0x7f0000000000)={r14, 0x3}, &(0x7f0000000080)=0x8)
sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="40010000", @ANYRES16=r5, @ANYBLOB="010026bd7000fddbdf250b0000007ffe0180540001801400020069703665727370616e3000000000000008000100", @ANYRES32=r6, @ANYBLOB="1400020076657468315f6d6163767461700000000800030000000000000002006e696376663000000000000000000000080003000300000008000300020000001c0001800800030000000000080003000100000008000100", @ANYRES32=r7, @ANYBLOB="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", @ANYRES32=r10, @ANYBLOB="1400020070696d726567300000000000000000001400018008000300030000000800030000000000"], 0x140}, 0x1, 0x0, 0x0, 0x40000}, 0x1080)

0s ago: executing program 1 (id=329):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084"], 0x48}, 0x1, 0x0, 0x0, 0x10010}, 0x4000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0x7}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x38, 0x3e, 0x107, 0x70bd2d, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4, 0x6e}, @nested={0x20, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x14, 0x15, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @local}}]}]}, 0x38}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084"], 0x48}, 0x1, 0x0, 0x0, 0x10010}, 0x4000000) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0x7}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x38, 0x3e, 0x107, 0x70bd2d, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4, 0x6e}, @nested={0x20, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x14, 0x15, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @local}}]}]}, 0x38}}, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:55715' (ED25519) to the list of known hosts.
syzkaller login: [   49.131277][ T5771] cgroup: Unknown subsys name 'net'
[   49.237158][ T5771] cgroup: Unknown subsys name 'cpuset'
[   49.243033][ T5771] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.866677][ T5771] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.836914][   T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.852974][   T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.858120][   T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.861669][   T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.864719][   T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.897328][   T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.901066][   T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.906255][   T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.923515][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.927734][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.930760][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.959618][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.963621][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.968336][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.971958][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   56.178434][ T5841] chnl_net:caif_netlink_parms(): no params data found
[   56.292242][ T5848] chnl_net:caif_netlink_parms(): no params data found
[   56.327296][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.330207][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.334145][ T5841] bridge_slave_0: entered allmulticast mode
[   56.338742][ T5841] bridge_slave_0: entered promiscuous mode
[   56.364707][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.367144][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.369967][ T5841] bridge_slave_1: entered allmulticast mode
[   56.373454][ T5841] bridge_slave_1: entered promiscuous mode
[   56.376884][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   56.408071][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.421943][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.478662][ T5841] team0: Port device team_slave_0 added
[   56.481024][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.484021][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.486654][ T5848] bridge_slave_0: entered allmulticast mode
[   56.489395][ T5848] bridge_slave_0: entered promiscuous mode
[   56.506149][ T5841] team0: Port device team_slave_1 added
[   56.509155][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.512140][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.516795][ T5848] bridge_slave_1: entered allmulticast mode
[   56.519649][ T5848] bridge_slave_1: entered promiscuous mode
[   56.536618][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.539724][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.543111][ T5846] bridge_slave_0: entered allmulticast mode
[   56.547053][ T5846] bridge_slave_0: entered promiscuous mode
[   56.571790][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.574651][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.577088][ T5846] bridge_slave_1: entered allmulticast mode
[   56.579877][ T5846] bridge_slave_1: entered promiscuous mode
[   56.590713][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.593394][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.601806][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.624301][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.638320][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.640708][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.649631][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.656448][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.665646][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.705098][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.710297][ T5848] team0: Port device team_slave_0 added
[   56.714938][ T5848] team0: Port device team_slave_1 added
[   56.768064][ T5846] team0: Port device team_slave_0 added
[   56.785089][ T5846] team0: Port device team_slave_1 added
[   56.787554][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.790054][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.800263][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.808218][ T5841] hsr_slave_0: entered promiscuous mode
[   56.810953][ T5841] hsr_slave_1: entered promiscuous mode
[   56.823290][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.826418][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.836260][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.865438][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.868073][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.878847][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.912304][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.914840][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.924516][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.945971][ T5848] hsr_slave_0: entered promiscuous mode
[   56.948306][ T5848] hsr_slave_1: entered promiscuous mode
[   56.950828][ T5848] debugfs: 'hsr0' already exists in 'hsr'
[   56.953561][ T5848] Cannot create hsr debugfs directory
[   57.057214][ T5846] hsr_slave_0: entered promiscuous mode
[   57.060736][ T5846] hsr_slave_1: entered promiscuous mode
[   57.064444][ T5846] debugfs: 'hsr0' already exists in 'hsr'
[   57.066648][ T5846] Cannot create hsr debugfs directory
[   57.226937][ T5841] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   57.243651][ T5841] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   57.257095][ T5841] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   57.276396][ T5841] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   57.307110][ T5848] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   57.313768][ T5848] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   57.327579][ T5848] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   57.336688][ T5848] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   57.410605][ T5846] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   57.418703][ T5846] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   57.425396][ T5846] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   57.440374][ T5846] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   57.562139][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.574589][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.601294][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   57.610182][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[   57.626249][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.629087][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.634843][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.637617][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.644681][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.647127][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.655498][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.670550][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.674156][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.691258][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   57.718055][ T5848] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   57.721808][ T5848] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   57.731115][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.733647][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.746935][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.749575][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.800613][ T5841] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   57.815260][ T5841] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   57.903287][ T5851] Bluetooth: hci0: command tx timeout
[   57.945716][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.977569][ T5848] veth0_vlan: entered promiscuous mode
[   57.985329][ T5851] Bluetooth: hci1: command tx timeout
[   57.985835][   T53] Bluetooth: hci2: command tx timeout
[   57.997967][ T5848] veth1_vlan: entered promiscuous mode
[   58.020156][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.068196][ T5848] veth0_macvtap: entered promiscuous mode
[   58.076722][ T5848] veth1_macvtap: entered promiscuous mode
[   58.089578][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.108575][ T5846] veth0_vlan: entered promiscuous mode
[   58.117102][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.129145][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.150305][ T5846] veth1_vlan: entered promiscuous mode
[   58.157972][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.170165][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.176139][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.180090][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.231788][ T5841] veth0_vlan: entered promiscuous mode
[   58.259257][ T5846] veth0_macvtap: entered promiscuous mode
[   58.268549][ T5846] veth1_macvtap: entered promiscuous mode
[   58.274658][ T5841] veth1_vlan: entered promiscuous mode
[   58.312378][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.319276][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.327078][ T5740] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.340801][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.349802][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.352922][  T142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.355687][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.364179][  T142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.392028][ T5841] veth0_macvtap: entered promiscuous mode
[   58.396959][ T5841] veth1_macvtap: entered promiscuous mode
[   58.399072][  T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.401845][  T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.410392][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.430531][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.466500][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.469548][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.472415][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.479548][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.485478][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.488300][ T5848] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   58.495239][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.544053][ T5910] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   58.572232][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.581139][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.608960][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.612175][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.655699][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.658370][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.759324][ T5912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'.
[   58.770590][ T5912] syz_tun: entered promiscuous mode
[   58.778489][ T5919] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET)
[   58.807529][ T5922] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5'.
[   58.815662][ T5919] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1'.
[   58.830195][ T5922] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5'.
[   58.837789][ T5919] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.841088][ T5919] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.853538][ T5922] netlink: 'syz.1.5': attribute type 10 has an invalid length.
[   58.889777][ T5922] 8021q: adding VLAN 0 to HW filter on device team0
[   58.895658][ T5924] Zero length message leads to an empty skb
[   58.900182][ T5922] bond0: (slave team0): Enslaving as an active interface with an up link
[   58.987508][ T5936] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8'.
[   59.018057][   T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   59.034088][   T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   59.037250][   T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   59.040119][   T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   59.101266][ T5933] "syz.1.7" (5933) uses obsolete ecb(arc4) skcipher
[   59.110102][ T5939] delete_channel: no stack
[   59.118244][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.121614][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.208952][ T5937] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   59.219332][ T5937] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   59.318011][ T5943] vlan2: entered promiscuous mode
[   59.319938][ T5943] vlan2: entered allmulticast mode
[   59.321982][ T5943] hsr_slave_1: entered allmulticast mode
[   59.325949][   T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.339091][   T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.375905][   T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.384367][   T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.409416][ T5958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12'.
[   59.458823][ T5962] netlink: 36 bytes leftover after parsing attributes in process `syz.1.14'.
[   59.765539][ T5974] bond0: (slave team0): Releasing backup interface
[   59.769574][ T5974] bridge_slave_0: left allmulticast mode
[   59.772255][ T5974] bridge_slave_0: left promiscuous mode
[   59.776701][ T5974] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.782308][ T5974] bridge_slave_1: left allmulticast mode
[   59.785672][ T5974] bridge_slave_1: left promiscuous mode
[   59.788130][ T5974] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.794669][ T5974] bond0: (slave bond_slave_0): Releasing backup interface
[   59.800202][ T5974] bond0: (slave bond_slave_1): Releasing backup interface
[   59.809388][ T5974] team0: Port device team_slave_0 removed
[   59.815467][ T5974] team0: Port device team_slave_1 removed
[   59.818291][ T5974] batman_adv: batadv0: Removing interface: batadv_slave_0
[   59.827586][ T5975] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16'.
[   59.831035][ T5974] batman_adv: batadv0: Removing interface: batadv_slave_1
[   59.948978][ T5977] netlink: 'syz.2.17': attribute type 10 has an invalid length.
[   59.950953][ T5979] netlink: 'syz.2.17': attribute type 10 has an invalid length.
[   59.955475][ T5979] netlink: 40 bytes leftover after parsing attributes in process `syz.2.17'.
[   59.959457][ T5977] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.969573][ T5977] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   59.974870][ T5979] batadv0: entered promiscuous mode
[   59.977465][ T5979] batadv0: entered allmulticast mode
[   59.980442][ T5979] bond0: (slave batadv0): Releasing backup interface
[   59.988362][ T5979] bridge0: port 3(batadv0) entered blocking state
[   59.990721][ T5979] bridge0: port 3(batadv0) entered disabled state
[   59.993599][ T5851] Bluetooth: hci0: command tx timeout
[   60.040146][    T9] IPVS: starting estimator thread 0...
[   60.063547][ T5851] Bluetooth: hci2: command tx timeout
[   60.073315][ T5851] Bluetooth: hci1: command tx timeout
[   60.132904][ T5982] IPVS: using max 80 ests per chain, 192000 per kthread
[   60.242513][ T5988] netlink: 'syz.2.20': attribute type 3 has an invalid length.
[   60.246975][ T5988] netlink: 'syz.2.20': attribute type 1 has an invalid length.
[   60.249870][ T5988] netlink: 220 bytes leftover after parsing attributes in process `syz.2.20'.
[   60.279361][ T5989] syzkaller0: entered promiscuous mode
[   60.281908][ T5989] syzkaller0: entered allmulticast mode
[   60.289703][ T5988] tipc: Started in network mode
[   60.291611][ T5988] tipc: Node identity 520acdec5658, cluster identity 4711
[   60.295001][ T5988] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   60.305820][ T5988] tipc: Resetting bearer <eth:syzkaller0>
[   60.310884][ T5992] tipc: Started in network mode
[   60.313916][ T5992] tipc: Node identity ba229c008d65, cluster identity 4711
[   60.317383][ T5992] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   60.324211][ T5992] syzkaller0: entered promiscuous mode
[   60.326602][ T5992] syzkaller0: entered allmulticast mode
[   60.331686][ T5989] tipc: Resetting bearer <eth:syzkaller0>
[   60.344761][ T5989] tipc: Disabling bearer <eth:syzkaller0>
[   60.350523][ T5991] tipc: Resetting bearer <eth:syzkaller0>
[   60.364527][ T5991] tipc: Disabling bearer <eth:syzkaller0>
[   60.482835][ T5954] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[   60.488816][ T5954] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[   61.009095][ T5995] netlink: 'syz.2.22': attribute type 6 has an invalid length.
[   61.098779][ T6000] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   61.101567][ T6000] syzkaller0: entered promiscuous mode
[   61.104315][ T6000] syzkaller0: entered allmulticast mode
[   61.119714][ T6000] tipc: Resetting bearer <eth:syzkaller0>
[   61.174945][ T5999] tipc: Resetting bearer <eth:syzkaller0>
[   61.188320][ T5999] tipc: Disabling bearer <eth:syzkaller0>
[   61.409248][ T6006] syzkaller1: entered promiscuous mode
[   61.411679][ T6006] syzkaller1: entered allmulticast mode
[   61.540977][ T6008] warning: `syz.2.27' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   61.555151][ T6012] netlink: 'syz.1.28': attribute type 5 has an invalid length.
[   61.566226][ T6012] geneve2: entered promiscuous mode
[   61.568548][ T6012] geneve2: entered allmulticast mode
[   61.574941][ T5954] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0
[   61.583451][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0
[   61.588867][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0
[   61.592432][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0
[   61.695610][ T6021] netlink: 'syz.1.30': attribute type 2 has an invalid length.
[   61.709309][ T6021] k*]: entered promiscuous mode
[   61.741980][ T6021] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.748947][ T6021] 8021q: adding VLAN 0 to HW filter on device team0
[   61.761567][ T6021] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   62.007250][ T6032] netlink: 'syz.2.36': attribute type 1 has an invalid length.
[   62.063049][ T5851] Bluetooth: hci0: command tx timeout
[   62.067590][ T6032] bridge0: port 3(batadv0) entered disabled state
[   62.076372][ T6032] bridge_slave_0: left allmulticast mode
[   62.078870][ T6032] bridge_slave_0: left promiscuous mode
[   62.081420][ T6032] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.087588][ T6032] bridge_slave_1: left allmulticast mode
[   62.089574][ T6032] bridge_slave_1: left promiscuous mode
[   62.092018][ T6032] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.099338][ T6032] bond0: (slave bond_slave_0): Releasing backup interface
[   62.105303][ T6032] bond0: (slave bond_slave_1): Releasing backup interface
[   62.116577][ T6032] team0: Port device team_slave_0 removed
[   62.125950][ T6032] team0: Port device team_slave_1 removed
[   62.128698][ T6032] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   62.131621][ T6032] batman_adv: batadv0: Removing interface: batadv_slave_0
[   62.135710][ T6032] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   62.138184][ T6032] batman_adv: batadv0: Removing interface: batadv_slave_1
[   62.143432][ T5851] Bluetooth: hci2: command 0x040f tx timeout
[   62.143464][ T5235] Bluetooth: hci1: command tx timeout
[   62.421465][ T6047] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.424739][ T6047] bridge0: port 2(bridge_slave_1) entered listening state
[   62.427961][ T6047] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.431051][ T6047] bridge0: port 1(bridge_slave_0) entered listening state
[   62.440300][ T6047] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   62.521435][ T6054] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   62.534648][ T6054] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   62.539285][ T6054] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   62.544957][ T6054] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   62.548885][ T6054] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   62.553488][ T6054] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   62.558605][ T6054] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   62.564872][ T6054] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   62.609717][ T6051] geneve2: left promiscuous mode
[   62.611959][ T6051] geneve2: left allmulticast mode
[   62.619144][   T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 256 - 0
[   62.623118][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 256 - 0
[   62.626580][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 256 - 0
[   62.639244][ T6052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   62.640798][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 256 - 0
[   62.712066][ T6063] geneve2: entered promiscuous mode
[   62.958253][    C0] vcan0: j1939_tp_rxtimer: 0xffff88803bc63800: rx timeout, send abort
[   62.962182][    C0] vcan0: j1939_tp_rxtimer: 0xffff88803bc63c00: rx timeout, send abort
[   62.965455][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88803bc63800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   62.971364][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88803bc63c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   63.047011][   T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   63.051870][   T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   63.056651][ T6090] sctp: [Deprecated]: syz.1.53 (pid 6090) Use of int in max_burst socket option.
[   63.056651][ T6090] Use struct sctp_assoc_value instead
[   63.066136][   T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   63.069894][   T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   63.131293][ T6090] IPv6: sit1: Disabled Multicast RS
[   63.140345][ T6090] sit1: entered allmulticast mode
[   63.228078][ T6100] syzkaller1: entered allmulticast mode
[   63.475250][ T6109] batadv0: left promiscuous mode
[   63.477204][ T6109] batadv0: left allmulticast mode
[   63.764277][ T6109] vlan2: left promiscuous mode
[   63.766561][ T6109] vlan2: left allmulticast mode
[   63.768522][ T6109] hsr_slave_1: left allmulticast mode
[   63.792831][   T12] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   63.795995][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   63.801216][   T12] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   63.805223][   T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   63.808057][   T12] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   63.811591][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   63.815025][   T12] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   63.818144][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   63.878874][ T6129] __nla_validate_parse: 15 callbacks suppressed
[   63.878885][ T6129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.63'.
[   63.911628][ T6126] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   63.920966][ T6136] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   63.925789][ T6136] syzkaller0: entered promiscuous mode
[   63.927858][ T6136] syzkaller0: entered allmulticast mode
[   63.971124][ T6136] tipc: Resetting bearer <eth:syzkaller0>
[   63.977183][ T6135] tipc: Resetting bearer <eth:syzkaller0>
[   63.988045][ T6135] tipc: Disabling bearer <eth:syzkaller0>
[   64.142925][ T5235] Bluetooth: hci0: command tx timeout
[   64.222999][ T5235] Bluetooth: hci1: command tx timeout
[   64.225530][   T53] Bluetooth: hci2: command 0x040f tx timeout
[   64.328665][ T6162] netlink: 80 bytes leftover after parsing attributes in process `syz.0.68'.
[   64.341126][ T6162] ip6tnl1: entered promiscuous mode
[   64.343238][ T6162] ip6tnl1: entered allmulticast mode
[   64.457454][ T6169] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   64.460582][ T6169] syzkaller0: entered promiscuous mode
[   64.466082][ T6169] syzkaller0: entered allmulticast mode
[   64.475085][ T6168] tipc: Resetting bearer <eth:syzkaller0>
[   64.489796][ T6168] tipc: Disabling bearer <eth:syzkaller0>
[   64.715717][ T6183] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   64.726735][ T6183] team0: Device gtp0 is up. Set it down before adding it as a team port
[   64.779790][ T6185] netlink: 28 bytes leftover after parsing attributes in process `syz.1.71'.
[   65.006848][ T6194] netlink: 32 bytes leftover after parsing attributes in process `syz.1.74'.
[   65.043874][ T6196] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   65.047386][ T6196] syzkaller0: entered promiscuous mode
[   65.049812][ T6196] syzkaller0: entered allmulticast mode
[   65.057446][ T6196] tipc: Resetting bearer <eth:syzkaller0>
[   65.060457][ T6196] veth0: entered promiscuous mode
[   65.064154][ T6195] veth0: left promiscuous mode
[   65.069156][ T6195] tipc: Resetting bearer <eth:syzkaller0>
[   65.080763][ T6195] tipc: Disabling bearer <eth:syzkaller0>
[   65.613898][ T6221] openvswitch: netlink: Flow actions attr not present in new flow.
[   65.676944][ T6224] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   65.749950][ T6226] netlink: 'syz.2.84': attribute type 4 has an invalid length.
[   65.770991][ T6230] netlink: 'syz.0.86': attribute type 10 has an invalid length.
[   65.787166][ T6230] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.790703][ T6230] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   65.856290][ T6234] netlink: 4 bytes leftover after parsing attributes in process `syz.0.88'.
[   65.861755][ T6235] netlink: 'syz.2.87': attribute type 23 has an invalid length.
[   65.918751][ T6236] netlink: 'syz.2.87': attribute type 23 has an invalid length.
[   66.046431][ T6247] bond0: (slave batadv0): Releasing backup interface
[   66.074928][ T6247] bridge_slave_0: left allmulticast mode
[   66.077413][ T6247] bridge_slave_0: left promiscuous mode
[   66.084728][ T6247] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.089861][ T6247] bridge_slave_1: left allmulticast mode
[   66.091961][ T6247] bridge_slave_1: left promiscuous mode
[   66.095634][ T6247] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.111179][ T6247] bond0: (slave bond_slave_0): Releasing backup interface
[   66.121712][ T6247] bond0: (slave bond_slave_1): Releasing backup interface
[   66.135638][ T6247] team0: Port device team_slave_0 removed
[   66.145278][ T6247] team0: Port device team_slave_1 removed
[   66.148355][ T6247] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   66.152958][ T6247] batman_adv: batadv0: Removing interface: batadv_slave_0
[   66.163473][ T6247] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   66.166599][ T6247] batman_adv: batadv0: Removing interface: batadv_slave_1
[   66.203659][ T6261] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   66.211979][    C1] Illegal XDP return value 16128 on prog  (id 20) dev lo, expect packet loss!
[   66.242702][ T6265] netlink: 'syz.1.95': attribute type 13 has an invalid length.
[   66.303020][ T5235] Bluetooth: hci2: command 0x040f tx timeout
[   66.528892][ T6284] netlink: 348 bytes leftover after parsing attributes in process `syz.1.99'.
[   66.788491][ T6294] Bluetooth: MGMT ver 1.23
[   66.791970][ T6294] veth0_to_batadv: entered promiscuous mode
[   66.795659][ T6294] veth0_to_batadv: entered allmulticast mode
[   66.959623][ T6304] netlink: 4 bytes leftover after parsing attributes in process `syz.2.105'.
[   67.276965][ T6312] netlink: 12 bytes leftover after parsing attributes in process `syz.0.107'.
[   67.812067][ T6336] netlink: 'syz.1.109': attribute type 4 has an invalid length.
[   68.042475][ T6355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.112'.
[   68.204413][ T6371] netlink: 'syz.2.115': attribute type 9 has an invalid length.
[   68.207277][ T6371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.115'.
[   68.216912][ T6371] macvlan2: entered promiscuous mode
[   68.219011][ T6371] hsr0: entered promiscuous mode
[   68.220869][ T6371] macvlan2: entered allmulticast mode
[   68.231475][ T6371] hsr0: entered allmulticast mode
[   68.236418][ T6371] hsr_slave_0: entered allmulticast mode
[   68.238856][ T6371] hsr_slave_1: entered allmulticast mode
[   68.242194][ T6374] batadv_slave_0: entered promiscuous mode
[   68.328834][ T6379] IPv6: sit1: Disabled Multicast RS
[   68.498830][ T6395] netlink: 'syz.0.120': attribute type 2 has an invalid length.
[   68.501577][ T6395] netlink: 'syz.0.120': attribute type 2 has an invalid length.
[   68.510846][ T6395] netlink: 'syz.0.120': attribute type 2 has an invalid length.
[   68.955489][ T6419] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   68.962714][ T6419] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.008040][ T6421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.128'.
[   69.011894][ T6421] netlink: 32 bytes leftover after parsing attributes in process `syz.1.128'.
[   69.020411][ T6419] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   69.025158][ T6419] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.038326][ T6421] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[   69.044799][ T6421] gretap1: entered promiscuous mode
[   69.078144][ T6419] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   69.082094][ T6419] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.148249][ T6419] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   69.151653][ T6419] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.211962][ T6433] 8021q: adding VLAN 0 to HW filter on device team0
[   69.213710][ T6430] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   69.217902][ T6433] bond0: (slave team0): Enslaving as an active interface with an up link
[   69.218345][ T6430] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   69.271821][ T5954] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   69.286776][ T5954] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.290850][ T6436] pim6reg1: entered promiscuous mode
[   69.293549][ T6436] pim6reg1: entered allmulticast mode
[   69.307884][ T6438] ksmbd: Unknown IPC event: 3, ignore.
[   69.316703][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   69.319789][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.337250][ T6438] ip6tnl1: entered promiscuous mode
[   69.339002][ T6438] ip6tnl1: entered allmulticast mode
[   69.349378][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   69.353078][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.361192][ T5954] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   69.365335][ T5954] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.430913][ T6439] netlink: 32 bytes leftover after parsing attributes in process `syz.1.132'.
[   69.463310][ T6439] 8021q: adding VLAN 0 to HW filter on device bond1
[   69.467712][ T6439] team0: Port device bond1 added
[   69.488499][ T6443] netlink: 32 bytes leftover after parsing attributes in process `syz.2.135'.
[   69.494353][ T6441] : entered promiscuous mode
[   69.590987][ T6457] netlink: 28 bytes leftover after parsing attributes in process `syz.2.139'.
[   69.595098][ T6457] netlink: 4 bytes leftover after parsing attributes in process `syz.2.139'.
[   69.757076][ T6464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.141'.
[   70.037871][ T6469] vlan3: entered promiscuous mode
[   70.140490][ T6471] netlink: 40 bytes leftover after parsing attributes in process `syz.2.143'.
[   70.148430][ T6471] team0: Port device geneve0 added
[   70.170302][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.178463][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.182072][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.193399][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.225317][ T6478] 8021q: adding VLAN 0 to HW filter on device bond0
[   70.229982][ T6478] team0: Port device bond0 added
[   70.255032][ T6480] netlink: 10 bytes leftover after parsing attributes in process `syz.1.146'.
[   70.278380][ T6482] netlink: 12 bytes leftover after parsing attributes in process `syz.1.148'.
[   70.457167][ T6493] team0: Port device bond0 removed
[   70.468458][ T6493] team0: Port device geneve0 removed
[   70.471102][ T6495] hsr0: entered promiscuous mode
[   70.476248][ T5954] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.479932][ T5954] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.486604][ T6495] hsr_slave_0: left promiscuous mode
[   70.491503][ T6495] hsr_slave_1: left promiscuous mode
[   70.503053][ T6495] hsr0 (unregistering): left promiscuous mode
[   70.508634][ T5882] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.511932][ T5882] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.142329][ T5882] nci: nci_add_new_protocol: the target found does not have the desired protocol
[   71.155928][ T6530] geneve3: entered promiscuous mode
[   71.159424][ T5882] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.162944][ T5882] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.166096][ T5882] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.169477][ T5882] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.267615][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.269917][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   71.974307][ T6541] veth0_to_batadv: left promiscuous mode
[   71.977160][ T6541] veth0_to_batadv: left allmulticast mode
[   71.990328][ T6541] gretap1: left promiscuous mode
[   71.996229][ T6541] geneve3: left promiscuous mode
[   72.006290][ T5954] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.010183][ T5954] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.015874][ T5954] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.021030][ T5954] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.059953][ T6545] tipc: Started in network mode
[   72.062219][ T6545] tipc: Node identity 5e837fa8c0ae, cluster identity 4711
[   72.068214][ T6545] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   72.079374][ T6545] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   72.085776][ T6548] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   72.091162][ T6548] syzkaller0: entered promiscuous mode
[   72.095320][ T6548] syzkaller0: entered allmulticast mode
[   72.103096][ T6548] tipc: Resetting bearer <eth:syzkaller0>
[   72.106946][ T6545] tipc: Disabling bearer <eth:syzkaller0>
[   72.114946][ T6547] tipc: Resetting bearer <eth:syzkaller0>
[   72.125924][ T6547] tipc: Disabling bearer <eth:syzkaller0>
[   72.249058][ T5954] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   72.252396][ T5954] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   72.256840][ T5954] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   72.261395][ T5954] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   72.365405][ T6567] vlan2: entered allmulticast mode
[   72.367608][ T6567] macvtap0: entered allmulticast mode
[   72.601691][ T6571] team0: Mode changed to "loadbalance"
[   72.952978][ T6586] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[   73.774912][ T6591] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   73.778546][ T6591] syzkaller0: entered promiscuous mode
[   73.780997][ T6591] syzkaller0: entered allmulticast mode
[   73.791667][ T6591] tipc: Resetting bearer <eth:syzkaller0>
[   73.795885][ T6590] tipc: Resetting bearer <eth:syzkaller0>
[   73.804917][ T6590] tipc: Disabling bearer <eth:syzkaller0>
[   73.947081][ T6598] validate_nla: 9 callbacks suppressed
[   73.947092][ T6598] netlink: 'syz.1.178': attribute type 13 has an invalid length.
[   73.951854][ T6598] netlink: 'syz.1.178': attribute type 27 has an invalid length.
[   74.008036][ T6598] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.011354][ T6598] 8021q: adding VLAN 0 to HW filter on device team0
[   74.016001][ T6598] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   74.128906][ T6606] netlink: 'syz.1.180': attribute type 3 has an invalid length.
[   74.265360][ T6615] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma?
[   74.270505][ T6615] __nla_validate_parse: 12 callbacks suppressed
[   74.270516][ T6615] netlink: 256 bytes leftover after parsing attributes in process `syz.0.182'.
[   74.276097][ T6615] netlink: 48 bytes leftover after parsing attributes in process `syz.0.182'.
[   74.281747][ T6615] netlink: 12 bytes leftover after parsing attributes in process `syz.0.182'.
[   74.344818][ T6615] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   74.556656][ T6625] netlink: 12 bytes leftover after parsing attributes in process `syz.0.184'.
[   74.559466][ T6626] netlink: 12 bytes leftover after parsing attributes in process `syz.0.184'.
[   74.565777][ T6625] netlink: 4 bytes leftover after parsing attributes in process `syz.0.184'.
[   74.867583][ T6636] IPVS: Scheduler module ip_vs_sip not found
[   74.956542][ T1272] IPVS: starting estimator thread 0...
[   75.029841][ T6656] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   75.042742][ T6652] IPVS: using max 82 ests per chain, 196800 per kthread
[   75.079253][ T6656] syzkaller0: entered promiscuous mode
[   75.081960][ T6656] syzkaller0: entered allmulticast mode
[   75.087807][ T6659] netlink: 'syz.0.192': attribute type 4 has an invalid length.
[   75.087814][ T6660] netlink: 'syz.0.192': attribute type 4 has an invalid length.
[   75.127948][ T6656] tipc: Resetting bearer <eth:syzkaller0>
[   75.134075][ T6654] tipc: Resetting bearer <eth:syzkaller0>
[   75.152248][ T6654] tipc: Disabling bearer <eth:syzkaller0>
[   75.384263][    C0] vcan0: j1939_tp_rxtimer: 0xffff88803a9d8000: rx timeout, send abort
[   75.387800][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88803a9d8000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[   75.406504][ T6677] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   75.414404][ T6677] syzkaller0: entered promiscuous mode
[   75.417423][ T6677] syzkaller0: entered allmulticast mode
[   75.421526][ T6677] netlink: 16 bytes leftover after parsing attributes in process `syz.0.196'.
[   75.447626][ T6677] tipc: Resetting bearer <eth:syzkaller0>
[   75.476889][ T6676] tipc: Resetting bearer <eth:syzkaller0>
[   75.480475][ T6681] netlink: 256 bytes leftover after parsing attributes in process `syz.1.197'.
[   75.484994][ T6681] netlink: 48 bytes leftover after parsing attributes in process `syz.1.197'.
[   75.497567][ T6676] tipc: Disabling bearer <eth:syzkaller0>
[   75.515024][ T6681] lo speed is unknown, defaulting to 1000
[   75.520067][ T6681] lo speed is unknown, defaulting to 1000
[   75.527914][ T6681] lo speed is unknown, defaulting to 1000
[   75.603085][ T6687] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   75.669452][ T6692] pim6reg1: entered allmulticast mode
[   75.712407][ T6681] infiniband syz0: set active
[   75.715131][ T5896] lo speed is unknown, defaulting to 1000
[   75.716082][ T6681] infiniband syz0: added lo
[   75.770706][ T6681] RDS/IB: syz0: added
[   75.777588][ T6681] smc: adding ib device syz0 with port count 1
[   75.780849][ T6681] smc:    ib device syz0 port 1 has pnetid 
[   75.786153][ T1272] lo speed is unknown, defaulting to 1000
[   75.791513][ T6697] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   75.801018][ T6681] lo speed is unknown, defaulting to 1000
[   75.806083][ T6697] syzkaller0: entered promiscuous mode
[   75.813515][ T6697] syzkaller0: entered allmulticast mode
[   75.819126][ T6697] tipc: Resetting bearer <eth:syzkaller0>
[   75.970251][ T6696] tipc: Resetting bearer <eth:syzkaller0>
[   75.993528][ T6696] tipc: Disabling bearer <eth:syzkaller0>
[   76.014702][ T6681] lo speed is unknown, defaulting to 1000
[   76.143633][ T6700] netlink: 'syz.2.201': attribute type 1 has an invalid length.
[   76.212902][ T6700] bond1: (slave gretap1): making interface the new active one
[   76.216939][ T6700] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   76.232357][ T6681] lo speed is unknown, defaulting to 1000
[   76.249505][ T6703] syzkaller0: entered promiscuous mode
[   76.251986][ T6703] syzkaller0: entered allmulticast mode
[   76.269218][ T6703] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   76.285616][ T6703] tipc: Resetting bearer <eth:syzkaller0>
[   76.309462][ T6702] tipc: Resetting bearer <eth:syzkaller0>
[   76.337096][ T6702] tipc: Disabling bearer <eth:syzkaller0>
[   76.409345][ T6709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.204'.
[   76.531546][ T6720] lo speed is unknown, defaulting to 1000
[   76.611029][ T6723] vlan0: entered promiscuous mode
[   76.625548][ T6723] vlan0: entered allmulticast mode
[   76.628163][ T6723] hsr_slave_1: entered allmulticast mode
[   76.755992][ T6728] veth0_to_hsr: entered promiscuous mode
[   76.761361][ T6728] veth0_to_hsr: entered allmulticast mode
[   76.877268][ T6727] netlink: 'syz.2.210': attribute type 16 has an invalid length.
[   76.880199][ T6727] netlink: 'syz.2.210': attribute type 17 has an invalid length.
[   76.912820][ T6727] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.916163][ T6727] 8021q: adding VLAN 0 to HW filter on device team0
[   76.926856][ T6727] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   77.003112][ T6738] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   77.011138][ T6738] syzkaller0: entered promiscuous mode
[   77.013381][ T6738] syzkaller0: entered allmulticast mode
[   77.156603][ T6737] tipc: Resetting bearer <eth:syzkaller0>
[   77.174611][ T6737] tipc: Disabling bearer <eth:syzkaller0>
[   77.330691][ T6742] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc᥻
[   77.573191][ T6752] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   77.638817][ T6752] syzkaller0: entered promiscuous mode
[   77.641135][ T6752] syzkaller0: entered allmulticast mode
[   77.693617][ T6766] netlink: 'syz.2.216': attribute type 13 has an invalid length.
[   77.696948][ T6766] netlink: 'syz.2.216': attribute type 17 has an invalid length.
[   77.908455][ T6773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   78.583810][  T793] tipc: Node number set to 2653781928
[   78.649816][ T6766] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   78.659499][ T6768] tipc: Resetting bearer <eth:syzkaller0>
[   78.673584][ T6777] 0{X: renamed from gretap0 (while UP)
[   78.677423][ T6777] 0{X: entered allmulticast mode
[   78.679356][ T6777] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[   78.687593][ T6750] tipc: Resetting bearer <eth:syzkaller0>
[   78.699421][ T6750] tipc: Disabling bearer <eth:syzkaller0>
[   78.712231][ T6754] lo speed is unknown, defaulting to 1000
[   79.135104][ T6814] netlink: 'syz.1.227': attribute type 4 has an invalid length.
[   79.144932][  T793] lo speed is unknown, defaulting to 1000
[   79.156985][ T6809] syz.0.225: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   79.165516][ T6809] CPU: 0 UID: 0 PID: 6809 Comm: syz.0.225 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[   79.165535][ T6809] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   79.165542][ T6809] Call Trace:
[   79.165548][ T6809]  <TASK>
[   79.165553][ T6809]  dump_stack_lvl+0x189/0x250
[   79.165577][ T6809]  ? __pfx_dump_stack_lvl+0x10/0x10
[   79.165591][ T6809]  ? __pfx__printk+0x10/0x10
[   79.165607][ T6809]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   79.165622][ T6809]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   79.165637][ T6809]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   79.165653][ T6809]  warn_alloc+0x214/0x310
[   79.165677][ T6809]  ? __pfx_warn_alloc+0x10/0x10
[   79.165701][ T6809]  ? __get_vm_area_node+0x28f/0x300
[   79.165718][ T6809]  ? xskq_create+0xbf/0x170
[   79.165738][ T6809]  __vmalloc_node_range_noprof+0x67e/0x12f0
[   79.165777][ T6809]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   79.165799][ T6809]  ? __kasan_kmalloc+0x93/0xb0
[   79.165818][ T6809]  vmalloc_user_noprof+0xad/0xf0
[   79.165834][ T6809]  ? xskq_create+0xbf/0x170
[   79.165850][ T6809]  xskq_create+0xbf/0x170
[   79.165868][ T6809]  xsk_init_queue+0xb0/0x110
[   79.165885][ T6809]  xsk_setsockopt+0x57b/0x8d0
[   79.165902][ T6809]  ? __pfx_xsk_setsockopt+0x10/0x10
[   79.165917][ T6809]  ? __pfx_aa_sk_perm+0x10/0x10
[   79.165937][ T6809]  ? __fget_files+0x2a/0x420
[   79.165947][ T6809]  ? aa_sock_opt_perm+0xff/0x1b0
[   79.165961][ T6809]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   79.165973][ T6809]  ? __pfx_xsk_setsockopt+0x10/0x10
[   79.165989][ T6809]  do_sock_setsockopt+0x17c/0x1b0
[   79.166006][ T6809]  __x64_sys_setsockopt+0x13f/0x1b0
[   79.166021][ T6809]  do_syscall_64+0xfa/0x3b0
[   79.166038][ T6809]  ? lockdep_hardirqs_on+0x9c/0x150
[   79.166053][ T6809]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   79.166065][ T6809]  ? exc_page_fault+0x9f/0xf0
[   79.166093][ T6809]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   79.166104][ T6809] RIP: 0033:0x7f0a42f8ebe9
[   79.166116][ T6809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   79.166127][ T6809] RSP: 002b:00007f0a43d7e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   79.166170][ T6809] RAX: ffffffffffffffda RBX: 00007f0a431b5fa0 RCX: 00007f0a42f8ebe9
[   79.166178][ T6809] RDX: 0000000000000003 RSI: 000000000000011b RDI: 000000000000000d
[   79.166185][ T6809] RBP: 00007f0a43011e19 R08: 0000000000000004 R09: 0000000000000000
[   79.166193][ T6809] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[   79.166200][ T6809] R13: 00007f0a431b6038 R14: 00007f0a431b5fa0 R15: 00007fffa6724ee8
[   79.166223][ T6809]  </TASK>
[   79.166228][ T6809] Mem-Info:
[   79.230843][ T6820] netlink: 'syz.1.229': attribute type 4 has an invalid length.
[   79.285825][ T6809] active_anon:5509 inactive_anon:0 isolated_anon:0
[   79.285825][ T6809]  active_file:1290 inactive_file:38214 isolated_file:0
[   79.285825][ T6809]  unevictable:1768 dirty:112 writeback:0
[   79.285825][ T6809]  slab_reclaimable:9706 slab_unreclaimable:97073
[   79.285825][ T6809]  mapped:20277 shmem:2447 pagetables:984
[   79.285825][ T6809]  sec_pagetables:0 bounce:0
[   79.285825][ T6809]  kernel_misc_reclaimable:0
[   79.285825][ T6809]  free:248932 free_pcp:21232 free_cma:0
[   79.287193][ T6821] netlink: 'syz.1.229': attribute type 4 has an invalid length.
[   79.307622][ T6809] Node 0 active_anon:15620kB inactive_anon:0kB active_file:2612kB inactive_file:142828kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:42364kB dirty:148kB writeback:0kB shmem:5260kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6116kB pagetables:2360kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   79.316865][ T6821] netlink: 'syz.1.229': attribute type 4 has an invalid length.
[   79.323631][ T6809] Node 1 active_anon:6416kB inactive_anon:0kB active_file:2548kB inactive_file:10028kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:38744kB dirty:300kB writeback:0kB shmem:4528kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5448kB pagetables:1576kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   79.323708][ T6809] Node 0 DMA free:14528kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:832kB local_pcp:396kB free_cma:0kB
[   79.323746][ T6809] lowmem_reserve[]: 0 811 811 811 811
[   79.323775][ T6809] Node 0 DMA32 free:91772kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15620kB inactive_anon:0kB active_file:2612kB inactive_file:142828kB unevictable:3536kB writepending:148kB present:1556484kB managed:830940kB mlocked:0kB bounce:0kB free_pcp:40968kB local_pcp:16060kB free_cma:0kB
[   79.323809][ T6809] lowmem_reserve[]: 0 0 0 0 0
[   79.323836][ T6809] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[   79.362890][ T6822] netlink: 'syz.1.229': attribute type 4 has an invalid length.
[   79.367591][ T6809] lowmem_reserve[]: 0 0 854 854 854
[   79.381759][ T5895] lo speed is unknown, defaulting to 1000
[   79.383547][ T6809] Node 1 Normal free:430936kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:6416kB inactive_anon:0kB active_file:2548kB inactive_file:10028kB unevictable:3536kB writepending:300kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:43148kB local_pcp:19932kB free_cma:0kB
[   79.383593][ T6809] lowmem_reserve[]: 0 0 0 0 0
[   79.383618][ T6809] Node 0 DMA: 2*4kB (U) 1*8kB (U) 
[   79.385996][ T5895] syz0: Port: 1 Link DOWN
[   79.396990][ T6809] 1*16kB (U) 1*32kB (U) 2*64kB (U) 2*128kB (U) 1*256kB (U) 3*512kB (U) 4*1024kB (U) 2*2048kB (UM) 1*4096kB (U) = 14528kB
[   79.406747][ T6809] Node 0 DMA32: 615*4kB (M) 319*8kB (UME) 215*16kB (UM) 326*32kB (UM) 80*64kB (UME) 33*128kB (UME) 26*256kB (UME) 13*512kB (UME) 5*1024kB 
[   79.406819][ T1272] lo speed is unknown, defaulting to 1000
[   79.406823][ T6809] (M) 
[   79.406833][ T1272] syz0: Port: 1 Link ACTIVE
[   79.411666][ T6809] 2*2048kB (U) 10*4096kB (U) = 91716kB
[   79.422230][ T6809] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[   79.428818][ T6809] Node 1 Normal: 331*4kB (UME) 147*8kB (UM) 104*16kB (UME) 286*32kB (UME) 107*64kB (UME) 41*128kB (UM) 26*256kB (UM) 15*512kB (UM) 16*1024kB (UME) 5*2048kB (UM) 89*4096kB (UM) = 430916kB
[   79.434501][    T9] lo speed is unknown, defaulting to 1000
[   79.435757][ T6809] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB
[   79.441262][ T6809] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[   79.444590][ T6809] 41951 total pagecache pages
[   79.457119][ T6809] 0 pages in swap cache
[   79.458890][ T6809] Free swap  = 124996kB
[   79.460324][ T6809] Total swap = 124996kB
[   79.461752][ T6809] 786301 pages RAM
[   79.467659][ T6809] 0 pages HighMem/MovableOnly
[   79.469671][ T6809] 241334 pages reserved
[   79.471980][ T6809] 0 pages cma reserved
[   79.554297][ T6827] lo speed is unknown, defaulting to 1000
[   79.710659][ T6834] ipvlan2: entered promiscuous mode
[   79.717492][ T6834] bridge0: port 1(ipvlan2) entered blocking state
[   79.720476][ T6834] bridge0: port 1(ipvlan2) entered disabled state
[   79.724304][ T6834] ipvlan2: entered allmulticast mode
[   79.730530][ T6834] erspan0: entered allmulticast mode
[   79.735105][ T6834] ipvlan2: left allmulticast mode
[   79.736924][ T6834] erspan0: left allmulticast mode
[   79.789154][ T6828] __nla_validate_parse: 11 callbacks suppressed
[   79.789167][ T6828] netlink: 248 bytes leftover after parsing attributes in process `syz.1.231'.
[   79.841443][ T6842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.236'.
[   80.051452][ T6864] netlink: 'syz.0.237': attribute type 1 has an invalid length.
[   80.057046][ T6840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   80.068742][ T6864] netlink: 232 bytes leftover after parsing attributes in process `syz.0.237'.
[   80.269802][ T6871] 0{X: left allmulticast mode
[   80.404417][ T6871] batadv_slave_0: left promiscuous mode
[   80.425893][ T6871] veth0_to_hsr: left promiscuous mode
[   80.428219][ T6871] veth0_to_hsr: left allmulticast mode
[   80.547817][ T6871] geneve2: left promiscuous mode
[   80.585220][ T5882] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[   80.591998][ T5882] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.598592][ T5882] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[   80.602229][ T5882] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.614060][ T5882] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[   80.617509][ T5882] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.632956][ T5882] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[   80.636638][ T5882] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.666391][ T6877] netlink: 'syz.2.240': attribute type 16 has an invalid length.
[   80.669852][ T6877] netlink: 'syz.2.240': attribute type 17 has an invalid length.
[   80.794734][ T6877] hsr0: left allmulticast mode
[   80.796951][ T6877] hsr_slave_0: left allmulticast mode
[   80.799374][ T6877] hsr_slave_1: left allmulticast mode
[   80.801687][ T6877] hsr0: left promiscuous mode
[   80.918070][ T6886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.242'.
[   80.923896][ T6886] netlink: 4 bytes leftover after parsing attributes in process `syz.2.242'.
[   80.928707][ T6886] netlink: 'syz.2.242': attribute type 1 has an invalid length.
[   80.932362][ T6886] netlink: 10 bytes leftover after parsing attributes in process `syz.2.242'.
[   80.937976][ T6886] block nbd0: Unsupported socket: shutdown callout must be supported.
[   80.953835][ T6886] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[   80.958086][ T6886] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   80.976334][   T51] cfg80211: failed to load regulatory.db
[   81.041953][ T6888] netlink: 'syz.1.244': attribute type 1 has an invalid length.
[   81.093484][ T6888] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   81.102539][ T6888] 8021q: adding VLAN 0 to HW filter on device bond2
[   81.103917][ T5882] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   81.139696][ T6888] veth3: entered promiscuous mode
[   81.149494][ T6888] bond2: (slave veth3): Enslaving as a backup interface with a down link
[   81.160689][ T6888] bond0: (slave team0): Releasing backup interface
[   81.168868][ T6893] netlink: 44 bytes leftover after parsing attributes in process `syz.2.245'.
[   81.178072][ T6888] team0: Port device bond1 removed
[   81.182766][ T6888] bond2: (slave ip6gretap1): Removing an active aggregator
[   81.189784][ T6888] bond2: (slave ip6gretap1): Releasing backup interface
[   81.193357][ T6888] bond2: (slave ip6gretap1): the permanent HWaddr of slave - 5a:2d:78:fb:7d:86 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[   81.206374][ T6888] bond2: (slave veth3): Releasing backup interface
[   81.267467][ T6895] netlink: 20 bytes leftover after parsing attributes in process `syz.1.246'.
[   81.271433][ T6895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.246'.
[   81.385183][ T6896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   81.520029][ T6904] netlink: 32 bytes leftover after parsing attributes in process `syz.1.249'.
[   81.526951][ T6904] tipc: Invalid UDP bearer configuration
[   81.527001][ T6904] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   81.956815][ T6914] lo speed is unknown, defaulting to 1000
[   82.139962][ T6928] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[   82.818203][ T6970] syzkaller0: entered promiscuous mode
[   82.820296][ T6970] syzkaller0: entered allmulticast mode
[   83.220906][  T793] hid-generic 0005:0C45:1010.0001: hidraw0: BLUETOOTH HID v0.c7 Device [syz1] on aa:aa:aa:aa:aa:aa
[   83.460483][ T6987] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   83.467722][ T6987] syzkaller0: entered promiscuous mode
[   83.470506][ T6987] syzkaller0: entered allmulticast mode
[   83.495296][ T6987] tipc: Resetting bearer <eth:syzkaller0>
[   83.515661][ T6986] tipc: Resetting bearer <eth:syzkaller0>
[   83.528119][ T6986] tipc: Disabling bearer <eth:syzkaller0>
[   83.566917][ T6995] ipvlan0: entered promiscuous mode
[   83.570970][ T6995] bridge0: port 1(ipvlan0) entered blocking state
[   83.575193][ T6995] bridge0: port 1(ipvlan0) entered disabled state
[   83.577734][ T6995] ipvlan0: entered allmulticast mode
[   83.579743][ T6995] 0{X: entered allmulticast mode
[   83.585922][ T6995] ipvlan0: left allmulticast mode
[   83.588110][ T6995] 0{X: left allmulticast mode
[   83.835667][ T7017] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   83.839166][ T7018] syzkaller0: entered promiscuous mode
[   83.841176][ T7018] syzkaller0: entered allmulticast mode
[   83.863959][ T7016] tipc: Resetting bearer <eth:syzkaller0>
[   83.869150][ T7014] tipc: Resetting bearer <eth:syzkaller0>
[   83.878379][ T7014] tipc: Disabling bearer <eth:syzkaller0>
[   83.890297][ T7020] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   84.026221][ T7030] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[   84.039173][ T7030] syzkaller0: entered promiscuous mode
[   84.041371][ T7030] syzkaller0: entered allmulticast mode
[   84.890860][ T7036] tap0: tun_chr_ioctl cmd 1074025680
[   84.918786][ T7032] D: renamed from syzkaller0
[   84.969802][ T7040] validate_nla: 2 callbacks suppressed
[   84.969819][ T7040] netlink: 'syz.2.283': attribute type 4 has an invalid length.
[   84.978832][ T7040] __nla_validate_parse: 16 callbacks suppressed
[   84.978846][ T7040] netlink: 152 bytes leftover after parsing attributes in process `syz.2.283'.
[   84.989461][ T7040] : renamed from bond0
[   85.041036][  T793] lo speed is unknown, defaulting to 1000
[   85.041104][ T5882] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   85.045845][  T793] syz0: Port: 1 Link DOWN
[   85.049105][ T5882] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   85.053465][ T5882] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   85.057124][ T5882] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   85.070912][  T793] lo speed is unknown, defaulting to 1000
[   85.349247][ T7061] netlink: 12 bytes leftover after parsing attributes in process `syz.2.290'.
[   85.349766][ T7067] netlink: 12 bytes leftover after parsing attributes in process `syz.0.291'.
[   85.378309][ T7067] pim6reg: entered allmulticast mode
[   85.383672][ T7067] pim6reg: left allmulticast mode
[   85.437011][ T7067] netlink: 'syz.0.291': attribute type 10 has an invalid length.
[   85.442287][ T7067] bond0: (slave wlan1): Opening slave failed
[   85.453752][ T7069] netlink: 'syz.2.292': attribute type 9 has an invalid length.
[   85.457340][ T7069] netlink: 224 bytes leftover after parsing attributes in process `syz.2.292'.
[   85.595744][ T7077] netlink: 4 bytes leftover after parsing attributes in process `syz.2.294'.
[   85.617469][ T7077] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[   85.630800][ T7077] CPU: 0 UID: 0 PID: 7077 Comm: syz.2.294 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[   85.630815][ T7077] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   85.630820][ T7077] Call Trace:
[   85.630823][ T7077]  <TASK>
[   85.630827][ T7077]  dump_stack_lvl+0x189/0x250
[   85.630844][ T7077]  ? __pfx_dump_stack_lvl+0x10/0x10
[   85.630852][ T7077]  ? __pfx__printk+0x10/0x10
[   85.630863][ T7077]  ? kernfs_path_from_node+0x2f/0x290
[   85.630872][ T7077]  ? kernfs_path_from_node+0x250/0x290
[   85.630878][ T7077]  ? kernfs_path_from_node+0x2f/0x290
[   85.630887][ T7077]  sysfs_warn_dup+0x8e/0xa0
[   85.630895][ T7077]  sysfs_do_create_link_sd+0xc0/0x110
[   85.630904][ T7077]  device_add_class_symlinks+0x1cf/0x240
[   85.630914][ T7077]  device_add+0x475/0xb50
[   85.630923][ T7077]  wiphy_register+0x1ba6/0x28d0
[   85.630941][ T7077]  ? __pfx_wiphy_register+0x10/0x10
[   85.630951][ T7077]  ? minstrel_ht_alloc+0x6dd/0x7e0
[   85.630963][ T7077]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[   85.630976][ T7077]  ieee80211_register_hw+0x3425/0x4080
[   85.630991][ T7077]  ? ieee80211_register_hw+0x1411/0x4080
[   85.631002][ T7077]  ? __pfx_ieee80211_register_hw+0x10/0x10
[   85.631010][ T7077]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   85.631023][ T7077]  ? __hrtimer_setup+0x187/0x210
[   85.631030][ T7077]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[   85.631063][ T7077]  mac80211_hwsim_new_radio+0x2f0e/0x5380
[   85.631087][ T7077]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[   85.631094][ T7077]  ? trace_kmalloc+0x1f/0xd0
[   85.631103][ T7077]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[   85.631111][ T7077]  ? kstrndup+0xbf/0x160
[   85.631123][ T7077]  hwsim_new_radio_nl+0xea4/0x1b10
[   85.631133][ T7077]  ? __pfx___nla_validate_parse+0x10/0x10
[   85.631150][ T7077]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[   85.631163][ T7077]  ? __nla_parse+0x40/0x60
[   85.631174][ T7077]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[   85.631186][ T7077]  genl_family_rcv_msg_doit+0x215/0x300
[   85.631201][ T7077]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[   85.631214][ T7077]  ? bpf_lsm_capable+0x9/0x20
[   85.631223][ T7077]  ? security_capable+0x7e/0x2e0
[   85.631236][ T7077]  genl_rcv_msg+0x60e/0x790
[   85.631246][ T7077]  ? __pfx_genl_rcv_msg+0x10/0x10
[   85.631252][ T7077]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[   85.631266][ T7077]  netlink_rcv_skb+0x208/0x470
[   85.631275][ T7077]  ? __lock_acquire+0xab9/0xd20
[   85.631286][ T7077]  ? __pfx_genl_rcv_msg+0x10/0x10
[   85.631293][ T7077]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   85.631310][ T7077]  ? down_read+0x1ad/0x2e0
[   85.631317][ T7077]  genl_rcv+0x28/0x40
[   85.631323][ T7077]  netlink_unicast+0x82f/0x9e0
[   85.631335][ T7077]  ? __pfx_netlink_unicast+0x10/0x10
[   85.631345][ T7077]  ? netlink_sendmsg+0x642/0xb30
[   85.631352][ T7077]  ? skb_put+0x11b/0x210
[   85.631361][ T7077]  netlink_sendmsg+0x805/0xb30
[   85.631374][ T7077]  ? __pfx_netlink_sendmsg+0x10/0x10
[   85.631385][ T7077]  ? aa_sock_msg_perm+0xf1/0x1d0
[   85.631396][ T7077]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   85.631404][ T7077]  ? __pfx_netlink_sendmsg+0x10/0x10
[   85.631413][ T7077]  __sock_sendmsg+0x21c/0x270
[   85.631424][ T7077]  ____sys_sendmsg+0x505/0x830
[   85.631434][ T7077]  ? __pfx_____sys_sendmsg+0x10/0x10
[   85.631445][ T7077]  ? import_iovec+0x74/0xa0
[   85.631454][ T7077]  ___sys_sendmsg+0x21f/0x2a0
[   85.631462][ T7077]  ? __pfx____sys_sendmsg+0x10/0x10
[   85.631484][ T7077]  ? __fget_files+0x2a/0x420
[   85.631491][ T7077]  ? __fget_files+0x3a0/0x420
[   85.631502][ T7077]  __x64_sys_sendmsg+0x19b/0x260
[   85.631509][ T7077]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   85.631521][ T7077]  ? rcu_is_watching+0x15/0xb0
[   85.631530][ T7077]  ? do_syscall_64+0xbe/0x3b0
[   85.631542][ T7077]  do_syscall_64+0xfa/0x3b0
[   85.631550][ T7077]  ? lockdep_hardirqs_on+0x9c/0x150
[   85.631559][ T7077]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   85.631565][ T7077]  ? exc_page_fault+0x9f/0xf0
[   85.631574][ T7077]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   85.631581][ T7077] RIP: 0033:0x7ffa1b58ebe9
[   85.631589][ T7077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   85.631594][ T7077] RSP: 002b:00007ffa1c467038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   85.631603][ T7077] RAX: ffffffffffffffda RBX: 00007ffa1b7b5fa0 RCX: 00007ffa1b58ebe9
[   85.631607][ T7077] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006
[   85.631611][ T7077] RBP: 00007ffa1b611e19 R08: 0000000000000000 R09: 0000000000000000
[   85.631615][ T7077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   85.631619][ T7077] R13: 00007ffa1b7b6038 R14: 00007ffa1b7b5fa0 R15: 00007ffe34b74338
[   85.631631][ T7077]  </TASK>
[   85.892227][ T7091] netlink: 96 bytes leftover after parsing attributes in process `syz.0.298'.
[   85.901402][ T7091] vlan0: entered allmulticast mode
[   85.903547][ T7091] erspan0: entered allmulticast mode
[   85.921144][ T7093] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[   85.928589][ T7093] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[   85.998173][ T7096] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   86.001540][ T7096] syzkaller0: entered promiscuous mode
[   86.004303][ T7096] syzkaller0: entered allmulticast mode
[   86.008320][ T7096] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   86.034959][ T7096] tipc: Resetting bearer <eth:syzkaller0>
[   86.037485][ T7096] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   86.050088][ T7095] tipc: Resetting bearer <eth:syzkaller0>
[   86.066550][ T7095] tipc: Disabling bearer <eth:syzkaller0>
[   86.084848][ T7105] netlink: 20 bytes leftover after parsing attributes in process `syz.0.300'.
[   86.157978][ T7107] openvswitch: netlink: Key type 215 is out of range max 32
[   86.253826][ T7117] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   86.261536][ T7117] syzkaller0: entered promiscuous mode
[   86.264536][ T7117] syzkaller0: entered allmulticast mode
[   86.278994][ T7119] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   86.283685][ T7119] syzkaller0: entered promiscuous mode
[   86.285873][ T7119] syzkaller0: entered allmulticast mode
[   86.295586][ T7117] tipc: Resetting bearer <eth:syzkaller0>
[   86.299409][ T7116] tipc: Resetting bearer <eth:syzkaller0>
[   86.309458][ T7116] tipc: Disabling bearer <eth:syzkaller0>
[   86.321273][ T7121] veth3: left promiscuous mode
[   86.336734][ T7119] tipc: Resetting bearer <eth:syzkaller0>
[   86.346087][ T7118] tipc: Resetting bearer <eth:syzkaller0>
[   86.358341][ T7118] tipc: Disabling bearer <eth:syzkaller0>
[   86.623839][ T7134] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   86.627679][ T7134] syzkaller0: entered promiscuous mode
[   86.630234][ T7134] syzkaller0: entered allmulticast mode
[   86.637808][ T7134] tipc: Resetting bearer <eth:syzkaller0>
[   86.649798][ T7134] tipc: Disabling bearer <eth:syzkaller0>
[   87.324963][ T7141] netlink: 'syz.0.312': attribute type 10 has an invalid length.
[   87.330063][ T7141] 8021q: adding VLAN 0 to HW filter on device batadv0
[   87.335834][ T7141] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   87.340911][ T7141] netlink: 4 bytes leftover after parsing attributes in process `syz.0.312'.
[   87.344788][ T7141] netlink: 16 bytes leftover after parsing attributes in process `syz.0.312'.
[   87.348998][ T7141] netlink: 'syz.0.312': attribute type 10 has an invalid length.
[   87.352343][ T7141] netlink: 40 bytes leftover after parsing attributes in process `syz.0.312'.
[   87.357011][ T7141] batadv0: entered promiscuous mode
[   87.359281][ T7141] batadv0: entered allmulticast mode
[   87.363836][ T7141] bond0: (slave batadv0): Releasing backup interface
[   87.373385][ T7141] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[   87.463870][ T7147] lo speed is unknown, defaulting to 1000
[   87.631393][ T7154] IPVS: length: 129 != 24
[   87.665120][ T7152] lo speed is unknown, defaulting to 1000
[   87.795259][ T7147] netlink: 'syz.0.315': attribute type 13 has an invalid length.
[   87.832894][ T7156] netlink: 'syz.1.317': attribute type 13 has an invalid length.
[   87.835650][ T7156] netlink: 'syz.1.317': attribute type 17 has an invalid length.
[   87.857837][ T7147] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.861907][ T7147] 8021q: adding VLAN 0 to HW filter on device team0
[   87.877169][ T7147] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   87.935689][ T7156] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.941665][ T7156] 8021q: adding VLAN 0 to HW filter on device team0
[   87.950977][ T7156] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   87.965790][ T7160] lo speed is unknown, defaulting to 1000
[   88.006910][ T7166] ip6erspan0: entered promiscuous mode
[   88.019532][  T793] lo speed is unknown, defaulting to 1000
[   88.021883][  T793] syz0: Port: 1 Link ACTIVE
[   88.032059][  T793] lo speed is unknown, defaulting to 1000
[   88.589045][ T7187] netlink: 'syz.1.323': attribute type 4 has an invalid length.
[   88.592267][ T7187] : renamed from bond0 (while UP)
[   89.385554][ T6977] ==================================================================
[   89.388807][ T6977] BUG: KASAN: slab-use-after-free in __mutex_lock+0x7fc/0x1360
[   89.391453][ T6977] Read of size 8 at addr ffff88810da5c0a0 by task khidpd_0c451010/6977
[   89.395435][ T6977] 
[   89.396439][ T6977] CPU: 1 UID: 0 PID: 6977 Comm: khidpd_0c451010 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[   89.396449][ T6977] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   89.396454][ T6977] Call Trace:
[   89.396459][ T6977]  <TASK>
[   89.396464][ T6977]  dump_stack_lvl+0x189/0x250
[   89.396478][ T6977]  ? __kasan_check_byte+0x12/0x40
[   89.396489][ T6977]  ? __pfx_dump_stack_lvl+0x10/0x10
[   89.396497][ T6977]  ? lock_release+0x4b/0x3e0
[   89.396508][ T6977]  ? __virt_addr_valid+0x4a5/0x5c0
[   89.396517][ T6977]  print_report+0xca/0x240
[   89.396524][ T6977]  ? __mutex_lock+0x7fc/0x1360
[   89.396534][ T6977]  kasan_report+0x118/0x150
[   89.396542][ T6977]  ? __mutex_lock+0x7fc/0x1360
[   89.396552][ T6977]  __mutex_lock+0x7fc/0x1360
[   89.396561][ T6977]  ? __mutex_lock+0x5b6/0x1360
[   89.396570][ T6977]  ? l2cap_unregister_user+0x6a/0x1b0
[   89.396580][ T6977]  ? __pfx___mutex_lock+0x10/0x10
[   89.396590][ T6977]  ? __pfx___timer_delete_sync+0x10/0x10
[   89.396600][ T6977]  l2cap_unregister_user+0x6a/0x1b0
[   89.396608][ T6977]  hidp_session_thread+0x3c9/0x410
[   89.396618][ T6977]  ? __pfx_hidp_session_thread+0x10/0x10
[   89.396643][ T6977]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   89.396651][ T6977]  ? __pfx_hidp_session_wake_function+0x10/0x10
[   89.396660][ T6977]  ? __pfx_hidp_session_wake_function+0x10/0x10
[   89.396667][ T6977]  ? __kthread_parkme+0x7b/0x200
[   89.396675][ T6977]  ? __kthread_parkme+0x1a1/0x200
[   89.396683][ T6977]  kthread+0x711/0x8a0
[   89.396690][ T6977]  ? __pfx_hidp_session_thread+0x10/0x10
[   89.396697][ T6977]  ? __pfx_kthread+0x10/0x10
[   89.396705][ T6977]  ? _raw_spin_unlock_irq+0x23/0x50
[   89.396712][ T6977]  ? lockdep_hardirqs_on+0x9c/0x150
[   89.396721][ T6977]  ? __pfx_kthread+0x10/0x10
[   89.396729][ T6977]  ret_from_fork+0x3fc/0x770
[   89.396737][ T6977]  ? __pfx_ret_from_fork+0x10/0x10
[   89.396744][ T6977]  ? __switch_to_asm+0x39/0x70
[   89.396752][ T6977]  ? __switch_to_asm+0x33/0x70
[   89.396759][ T6977]  ? __pfx_kthread+0x10/0x10
[   89.396766][ T6977]  ret_from_fork_asm+0x1a/0x30
[   89.396777][ T6977]  </TASK>
[   89.396779][ T6977] 
[   89.480483][ T6977] Allocated by task 5848:
[   89.482365][ T6977]  kasan_save_track+0x3e/0x80
[   89.484402][ T6977]  __kasan_kmalloc+0x93/0xb0
[   89.486366][ T6977]  __kmalloc_noprof+0x27a/0x4f0
[   89.488495][ T6977]  hci_alloc_dev_priv+0x28/0x2060
[   89.490632][ T6977]  vhci_create_device+0x120/0x6e0
[   89.492788][ T6977]  vhci_write+0x3ce/0x4a0
[   89.494691][ T6977]  vfs_write+0x5c9/0xb30
[   89.496530][ T6977]  ksys_write+0x145/0x250
[   89.498354][ T6977]  do_syscall_64+0xfa/0x3b0
[   89.500342][ T6977]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.502857][ T6977] 
[   89.503887][ T6977] Freed by task 5848:
[   89.505646][ T6977]  kasan_save_track+0x3e/0x80
[   89.507746][ T6977]  kasan_save_free_info+0x46/0x50
[   89.510010][ T6977]  __kasan_slab_free+0x5b/0x80
[   89.512132][ T6977]  kfree+0x18e/0x440
[   89.513875][ T6977]  bt_host_release+0x82/0x90
[   89.515915][ T6977]  device_release+0x9c/0x1c0
[   89.517982][ T6977]  kobject_put+0x22b/0x480
[   89.519971][ T6977]  vhci_release+0x88/0xd0
[   89.521898][ T6977]  __fput+0x44c/0xa70
[   89.523683][ T6977]  task_work_run+0x1d4/0x260
[   89.525698][ T6977]  do_exit+0x6b5/0x2300
[   89.527549][ T6977]  do_group_exit+0x21c/0x2d0
[   89.529576][ T6977]  get_signal+0x1286/0x1340
[   89.531566][ T6977]  arch_do_signal_or_restart+0x9a/0x750
[   89.534019][ T6977]  exit_to_user_mode_loop+0x75/0x110
[   89.536357][ T6977]  do_syscall_64+0x2bd/0x3b0
[   89.538403][ T6977]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.540885][ T6977] 
[   89.541924][ T6977] Last potentially related work creation:
[   89.544418][ T6977]  kasan_save_stack+0x3e/0x60
[   89.546542][ T6977]  kasan_record_aux_stack+0xbd/0xd0
[   89.548795][ T6977]  insert_work+0x3d/0x330
[   89.550725][ T6977]  __queue_work+0xcd2/0xfb0
[   89.552746][ T6977]  queue_work_on+0x181/0x270
[   89.554701][ T6977]  l2cap_chan_send+0x1110/0x2790
[   89.556800][ T6977]  l2cap_sock_sendmsg+0x32e/0x4a0
[   89.558916][ T6977]  __sock_sendmsg+0x21c/0x270
[   89.560896][ T6977]  ____sys_sendmsg+0x52d/0x830
[   89.562969][ T6977]  ___sys_sendmsg+0x21f/0x2a0
[   89.565029][ T6977]  __sys_sendmmsg+0x227/0x430
[   89.567079][ T6977]  __x64_sys_sendmmsg+0xa0/0xc0
[   89.569176][ T6977]  do_syscall_64+0xfa/0x3b0
[   89.571197][ T6977]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.573750][ T6977] 
[   89.574759][ T6977] Second to last potentially related work creation:
[   89.577502][ T6977]  kasan_save_stack+0x3e/0x60
[   89.579588][ T6977]  kasan_record_aux_stack+0xbd/0xd0
[   89.581862][ T6977]  insert_work+0x3d/0x330
[   89.583756][ T6977]  __queue_work+0xbaf/0xfb0
[   89.585696][ T6977]  queue_work_on+0x181/0x270
[   89.587633][ T6977]  process_scheduled_works+0xae1/0x17b0
[   89.589885][ T6977]  worker_thread+0x8a0/0xda0
[   89.591830][ T6977]  kthread+0x711/0x8a0
[   89.593588][ T6977]  ret_from_fork+0x3fc/0x770
[   89.595647][ T6977]  ret_from_fork_asm+0x1a/0x30
[   89.597619][ T6977] 
[   89.598657][ T6977] The buggy address belongs to the object at ffff88810da5c000
[   89.598657][ T6977]  which belongs to the cache kmalloc-8k of size 8192
[   89.604503][ T6977] The buggy address is located 160 bytes inside of
[   89.604503][ T6977]  freed 8192-byte region [ffff88810da5c000, ffff88810da5e000)
[   89.610454][ T6977] 
[   89.611490][ T6977] The buggy address belongs to the physical page:
[   89.614251][ T6977] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10da58
[   89.618049][ T6977] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[   89.621650][ T6977] ksm flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[   89.625146][ T6977] page_type: f5(slab)
[   89.626932][ T6977] raw: 057ff00000000040 ffff88801a442280 ffffea000428e400 0000000000000003
[   89.630690][ T6977] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[   89.634455][ T6977] head: 057ff00000000040 ffff88801a442280 ffffea000428e400 0000000000000003
[   89.638251][ T6977] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[   89.642035][ T6977] head: 057ff00000000003 ffffea0004369601 00000000ffffffff 00000000ffffffff
[   89.645834][ T6977] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[   89.649628][ T6977] page dumped because: kasan: bad access detected
[   89.652312][ T6977] page_owner tracks the page as allocated
[   89.654825][ T6977] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5591, tgid 5591 (dhcpcd), ts 38252699064, free_ts 37929721612
[   89.663678][ T6977]  post_alloc_hook+0x240/0x2a0
[   89.665763][ T6977]  get_page_from_freelist+0x21e4/0x22c0
[   89.668136][ T6977]  __alloc_frozen_pages_noprof+0x181/0x370
[   89.670703][ T6977]  alloc_pages_mpol+0x232/0x4a0
[   89.672858][ T6977]  allocate_slab+0x8a/0x370
[   89.674895][ T6977]  ___slab_alloc+0xbeb/0x1410
[   89.677006][ T6977]  __kmalloc_node_track_caller_noprof+0x2f8/0x4e0
[   89.679828][ T6977]  kmalloc_reserve+0x136/0x290
[   89.681952][ T6977]  __alloc_skb+0x142/0x2d0
[   89.683938][ T6977]  netlink_dump+0x167/0xe90
[   89.685963][ T6977]  netlink_recvmsg+0x676/0xa30
[   89.688108][ T6977]  sock_recvmsg+0x22c/0x270
[   89.690124][ T6977]  ____sys_recvmsg+0x1c9/0x460
[   89.692231][ T6977]  ___sys_recvmsg+0x1b5/0x510
[   89.694345][ T6977]  __x64_sys_recvmsg+0x198/0x260
[   89.696541][ T6977]  do_syscall_64+0xfa/0x3b0
[   89.698570][ T6977] page last free pid 5693 tgid 5693 stack trace:
[   89.701346][ T6977]  __free_frozen_pages+0xbc4/0xd30
[   89.703613][ T6977]  __put_partials+0x156/0x1a0
[   89.705741][ T6977]  put_cpu_partial+0x17c/0x250
[   89.707781][ T6977]  __slab_free+0x2d5/0x3c0
[   89.709660][ T6977]  qlist_free_all+0x97/0x140
[   89.711660][ T6977]  kasan_quarantine_reduce+0x148/0x160
[   89.713940][ T6977]  __kasan_slab_alloc+0x22/0x80
[   89.716070][ T6977]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[   89.718362][ T6977]  getname_flags+0xb8/0x540
[   89.720283][ T6977]  do_sys_openat2+0xbc/0x1c0
[   89.722333][ T6977]  __x64_sys_openat+0x138/0x170
[   89.724498][ T6977]  do_syscall_64+0xfa/0x3b0
[   89.726488][ T6977]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.728936][ T6977] 
[   89.730043][ T6977] Memory state around the buggy address:
[   89.732506][ T6977]  ffff88810da5bf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   89.736017][ T6977]  ffff88810da5c000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   89.739505][ T6977] >ffff88810da5c080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   89.742959][ T6977]                                ^
[   89.745212][ T6977]  ffff88810da5c100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   89.748512][ T6977]  ffff88810da5c180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   89.751809][ T6977] ==================================================================
[   89.755324][ T6977] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   89.758244][ T6977] CPU: 1 UID: 0 PID: 6977 Comm: khidpd_0c451010 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[   89.763762][ T6977] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   89.767953][ T6977] Call Trace:
[   89.769467][ T6977]  <TASK>
[   89.770773][ T6977]  dump_stack_lvl+0x99/0x250
[   89.772807][ T6977]  ? __asan_memcpy+0x40/0x70
[   89.774840][ T6977]  ? __pfx_dump_stack_lvl+0x10/0x10
[   89.777150][ T6977]  ? __pfx__printk+0x10/0x10
[   89.779211][ T6977]  vpanic+0x281/0x750
[   89.780967][ T6977]  ? __pfx_vpanic+0x10/0x10
[   89.782924][ T6977]  ? irqentry_exit+0x74/0x90
[   89.784908][ T6977]  panic+0xb9/0xc0
[   89.786533][ T6977]  ? __pfx_panic+0x10/0x10
[   89.788493][ T6977]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[   89.791075][ T6977]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   89.793669][ T6977]  ? __mutex_lock+0x7fc/0x1360
[   89.795663][ T6977]  check_panic_on_warn+0x89/0xb0
[   89.797847][ T6977]  ? __mutex_lock+0x7fc/0x1360
[   89.799961][ T6977]  end_report+0x78/0x160
[   89.801820][ T6977]  kasan_report+0x129/0x150
[   89.803800][ T6977]  ? __mutex_lock+0x7fc/0x1360
[   89.805934][ T6977]  __mutex_lock+0x7fc/0x1360
[   89.807955][ T6977]  ? __mutex_lock+0x5b6/0x1360
[   89.810072][ T6977]  ? l2cap_unregister_user+0x6a/0x1b0
[   89.812397][ T6977]  ? __pfx___mutex_lock+0x10/0x10
[   89.814517][ T6977]  ? __pfx___timer_delete_sync+0x10/0x10
[   89.817020][ T6977]  l2cap_unregister_user+0x6a/0x1b0
[   89.819316][ T6977]  hidp_session_thread+0x3c9/0x410
[   89.821570][ T6977]  ? __pfx_hidp_session_thread+0x10/0x10
[   89.824042][ T6977]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   89.826640][ T6977]  ? __pfx_hidp_session_wake_function+0x10/0x10
[   89.829407][ T6977]  ? __pfx_hidp_session_wake_function+0x10/0x10
[   89.831966][ T6977]  ? __kthread_parkme+0x7b/0x200
[   89.834204][ T6977]  ? __kthread_parkme+0x1a1/0x200
[   89.836438][ T6977]  kthread+0x711/0x8a0
[   89.838273][ T6977]  ? __pfx_hidp_session_thread+0x10/0x10
[   89.840756][ T6977]  ? __pfx_kthread+0x10/0x10
[   89.842807][ T6977]  ? _raw_spin_unlock_irq+0x23/0x50
[   89.845109][ T6977]  ? lockdep_hardirqs_on+0x9c/0x150
[   89.847403][ T6977]  ? __pfx_kthread+0x10/0x10
[   89.849434][ T6977]  ret_from_fork+0x3fc/0x770
[   89.851503][ T6977]  ? __pfx_ret_from_fork+0x10/0x10
[   89.853795][ T6977]  ? __switch_to_asm+0x39/0x70
[   89.855916][ T6977]  ? __switch_to_asm+0x33/0x70
[   89.858045][ T6977]  ? __pfx_kthread+0x10/0x10
[   89.860103][ T6977]  ret_from_fork_asm+0x1a/0x30
[   89.862195][ T6977]  </TASK>
[   89.864403][ T6977] Kernel Offset: disabled
[   89.866359][ T6977] Rebooting in 86400 seconds..

VM DIAGNOSIS:
15:10:51  Registers:
info registers vcpu 0

CPU#0
RAX=1ffff11020a7029c RBX=0000000000000000 RCX=0000000000000000 RDX=0000000000000000
RSI=0000000000000000 RDI=ffffffff99d17960 RBP=ffffffff84d01c6a RSP=ffffc90002cbf6e0
R8 =0000000000000001 R9 =0000000000000000 R10=dffffc0000000000 R11=fffffbfff1f470a7
R12=0000000000000000 R13=ffffffff99d17960 R14=0000000000000000 R15=0000000000000001
RIP=ffffffff819d5aec RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055557ad48500 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffffc403fd8 CR3=0000000023cf6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000063 RBX=0000000000000063 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90006ea7370
R8 =ffff88801fa38237 R9 =1ffff11003f47046 R10=dffffc0000000000 R11=ffffffff854efeb0
R12=dffffc0000000000 R13=ffffffff99af9910 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854eff2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000555577f4e808 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 00000000000000ff
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
