last executing test programs:

553.009093ms ago: executing program 1 (id=2):
socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32)
socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32)
socket$pppoe(0x18, 0x1, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$packet(0x11, 0x2, 0x300) (async, rerun: 32)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 32)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) (async, rerun: 32)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000004c0)={0x0, 0x465f}, 0x8) (rerun: 32)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r1, 0x4) (async)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8)
r2 = socket(0x11, 0xa, 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000780)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELTABLE={0x28, 0x2, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x34, 0x18, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, @NFT_OBJECT_CT_HELPER=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}}, 0x14)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, &(0x7f0000000140), &(0x7f0000000080)=@tcp=r2}, 0x20)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r5, 0x20, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x400c04c}, 0x4) (async)
sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x1}], 0x1}}], 0x1, 0x0) (async)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000280)=ANY=[], 0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000440)={<r6=>0x0, 0x7f}, &(0x7f0000000480)=0x8)
getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00000005c0)={r6, 0x6, 0x8, 0xb56, 0x200, 0x77eb, 0x1c, 0xf8, {0x0, @in6={{0xa, 0x4e24, 0xfd, @empty, 0xfffff650}}, 0xfffffffa, 0x0, 0xb, 0xa22e, 0x5}}, &(0x7f0000000500)=0xb0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x13c, 0x10, 0x1, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8af8d, 0x60d1}, [@IFLA_LINKINFO={0x11c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10c, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1, 0x4}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xa, 0x4}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_INGRESS_QOS={0x58, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4e, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x400, 0xa111}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x8}}]}, @IFLA_VLAN_EGRESS_QOS={0x34, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0xd}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffff, 0x800}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0xb}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x6383}}]}, @IFLA_VLAN_EGRESS_QOS={0x58, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0xffffffff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0xe6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x8}}]}]}}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x2)

421.037583ms ago: executing program 2 (id=6):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000700)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0xc}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'sit0\x00', <r1=>0x0, 0x40, 0x7, 0x0, 0x7, {{0xd, 0x4, 0x0, 0x3c, 0x34, 0x64, 0x0, 0x34, 0x2f, 0x0, @empty, @loopback, {[@rr={0x7, 0xf, 0xa8, [@local, @local, @empty]}, @timestamp={0x44, 0x10, 0xd0, 0x0, 0x4, [0x8, 0xffff7fff, 0x4]}]}}}}})
recvfrom(r0, &(0x7f0000000040)=""/75, 0x4b, 0x40, &(0x7f0000000180)=@ll={0x11, 0x16, r1, 0x1, 0xa7, 0x6, @local}, 0x80) (async, rerun: 32)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/58, 0x3a}], 0x1, 0x9, 0x80) (rerun: 32)

315.641913ms ago: executing program 1 (id=7):
bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0xe, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000100000000000000000000007112bb000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0xc, &(0x7f0000000000)=0xff, 0x4)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000000010300000000000000000002000000180001801400018008000100ac14140008007f00ac1414aa"], 0x2c}}, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="c00e00007200911fdabcf8b30771a54a07"], 0xfe33)
socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x200002, 0x0)
openat$cgroup_freezer_state(r2, &(0x7f00000003c0), 0x2, 0x0)
r3 = socket(0x2000000015, 0x800, 0xfffffffd)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000800100000000000080000009111510200000000950000000000000076f0d0e78b9d9358e2436d04504cc39e5fa0c6e294a195666de04c3f55acd9c80b49531a1bda5026c0bba3318393d245e2a2a1d378f5694f400bdb8a992a205c0c50d9c08e9bf5c77b58e28dafc6cafd7a55ec7e1b7273"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bind$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_int(r5, 0x0, 0x16, 0x0, &(0x7f0000000200))
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, @in={0x2, 0x4e21, @remote}], 0x20)
accept4$ax25(0xffffffffffffffff, &(0x7f0000000000)={{}, [@bcast, @netrom, @netrom, @default, @default, @remote, @rose, @bcast]}, &(0x7f0000000300)=0x48, 0x800)
socket$kcm(0x21, 0x2, 0x2)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r6}, &(0x7f0000000080), &(0x7f0000000180)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
unshare(0x20000400)
r7 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x42)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x26fc53b4bfd8bd5b, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_FAMILY={0x0, 0x5, 0x3}, @IPSET_ATTR_FAMILY={0x0, 0x5, 0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x5c}}, 0x0)
recvfrom$packet(r3, 0x0, 0x0, 0x40000000, &(0x7f0000000440)={0x11, 0x1c, 0x0, 0x1, 0x6, 0x6, @multicast}, 0x14)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x8000, 0x40, 0xffffffff, 0x3, {{0xd, 0x4, 0x3, 0x3, 0x34, 0x68, 0x0, 0x40, 0x29, 0x0, @broadcast, @private=0xa010100, {[@ssrr={0x89, 0x13, 0xd1, [@private=0xa010100, @local, @multicast1, @remote]}, @timestamp_prespec={0x44, 0xc, 0x4f, 0x3, 0x0, [{@loopback, 0x10001}]}]}}}}})

315.420207ms ago: executing program 2 (id=8):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fccbdf25090000000500070003000000080001000100001a050008"], 0x2c}, 0x1, 0x0, 0x0, 0x24084001}, 0x0)

305.17323ms ago: executing program 1 (id=9):
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000002880)=[{&(0x7f00000000c0)=""/91, 0x5b}], 0x1, 0xa2e1, 0xc)
writev(r0, &(0x7f0000000600)=[{&(0x7f0000000000)="4a5d4ddc9ed229e8498721105b226faea77623c2cc6b41a232171eb67f1a222b0bf14ff30e04012214317e20b9e9e978974313772593dce199dd56d264802ea662284b7fff9617f443febec2116750b24a2a63a7cb60f535bb095bdae24ed8e8a3a0cc6397206f114ea7761c6c5ffb01d5905767b2d9972b", 0x78}, {&(0x7f0000000140)="b1a4e307311d59d25d6fde432de295090d", 0x11}, {&(0x7f0000000340)="436cec547ecd591df419764be179773e561960c7f1568c7fa1296f79dd2118d2517da45d125de9a44d1d8df1f31e8092d9baed5ef93cf41ce7c0aa40f8eda4817419f2ade9f5351e2e1b0c91dab6b90a33c3d1953d682cc2845cebacf6ae58378080324045c25e405e53a6c9afbdc1613d05aa505c7377b0df57610aa086e3b5ce0998f60b065d6d99a877dd2747903ffad124efc3d3a46452b0933563", 0x9d}, {&(0x7f0000000440)="1bd11387e93cdf5dcaa75a48e9ada05c8d201b9eac83a0c0ac2c3c8d6744ee5b6f89a314c78310599ee4958ef1cec0f71611513646f16d41d8a66f547d125f2ee3168b66c009f6aa5a7b237566fc738f8976790d79d679cce5953adfa56621a05bfb3573fe2537abd23a1a9aacd6c704075562a3cc9ca7662048b682310a1ba6464cf2a0d523005c7eb6aa80cceb0ab982809205add23a506858f7b019767a21663172912ba7794f07fd5da8", 0xac}, {&(0x7f0000000800)="be0ff629996fb6be1b41778127222aee2734a3bf8181dae8b0995697cb4573f35c3ab56ca87ae199491a567defe6f2256137d4fcaf45d9314fdf608e553af9b3f05174d9174bf3ab386bf415d907f63b1f9128c97b19d619cb14659e022b045973cbcd58abc010ea397961099791a50d7b67f9ce3fbaa7a5191605bae970a2b866a5ccd780b39aadf9a32606a5ea143d6e9e8d351302b2330f73efc426d497348a3ad5667f75c50b18be8cfa432e4fe6ec26cd89f1320cb35b65c3ec0c442595c7028447b572953c2ceed1f8ddab14277a4f31b9096e2d92dc2129a391657fe20449e7185538f69311ab252cc6ed2ce70b8f13d8fab8866966372069a854fd7dab3fbf04cf0009eaa7329c066b1cd4b1392afb4ba76749d3b235b8c263a19a694540956ab0d80e5989da08cf74ec5e4544dadf137e066485e667a747700d6685fe1c2533f6ec39f5190f8aa18642de7a27094321c20c8111d9547886f08fc0016fe362be07e346999d28001194b0843cd9f3fd0d9d6d1e51488d202bb85553064a8012492bb23258847078105a70545787703ec3e386110847a11a032dec7a533740c27df9e7a71785bf070527450f44505b4e5c4fbb5423d5c018d5e3f1cfac730d416c3675d3cd6087a251535132800451a6990f3882efdb10835feaab6c0b3e8ba06700fbdc6e6a82917d21a3c4aec51bd54dd95f2ea0ee8dce9a92c361bb7182092051d131534ffc71ff0f0f769dd9a7753202f538b4bde24c36b242e4d9b88f8d9f17440faff3fbeb3af46dbc41b092333540d4d86bd84084899c60f618c8c56de4c15040b4ed3f5e5860e68788ec2f8eb65f9d6689fc166d32859b389c891e32dd9179ca9c5251d6a0a91b7ee73612a2e440e1cbf633f4bfcb5708a4e0778e5fa6887e07686b9f0a0f11ab7ab43d1f7cc28f04e38238e5ffce4a532345a8fb49550fd6314a743bb6f30a24289ae4600a3d97cf01732bea5d09512c9e830f1db3f91c60a58e9c37c9b06689fe4b146cdc8027dd1aece466418bc1f50a9826d128264da9e67b920117284afee9dbaacbc1b46ab22eebe25a47b852b9d84fe99b8154c39e6a475e7a8712c9e2a94ee23f0bfa525e848cb912e87e4334a43da05def2aa5983264a38eda2ae2c6695e29ea48970d44d6ecd01c9f7c9f7350c18b97ab896d3767ea16fd6c4a77c84802a7db9d679c48baa7eb0da907ac5d6433c7ab345eb768880dbb991cd84f5a4c72c78569da44da4d7dd20a143b55d03bc334b8b54ee8bb56a2deacec04eed013e67a1c773179d0635372afc9fafc92c287851129ce4a4eec1d0c6190e70b9fedc2a783cb25977d471f1121dd699f9b2bfcf2bad56877770d2a51673bb1ee1bbc628105b99049cb26b607335a369f5c5c769bfb164c920964950bac5eb22d1cad044415c451211b6c48ba9c12c9b4abe9806efe62fe28aa37f7d11017c13f08774f6b03998e1d5b23ac426f262be4145b633bd075b4a98f46f6fe6327870d7526eec5d54ed2a8eaca524893eab3416f629ac120642115dc60e484e89cd75578e498ff0ed883ba84b0fbef38ce9b09a35d0db81623fb3ddb3dde3753f01d45ef08cfcf1a343305025524811f54894079bd4408a6fe8534575c01bd2694bb149555c55f95afce16ae283b632feda0f12d2e6b4761a4001da95f19b2101552f71300f50c2049c6586981c9ae862c2d395d758d6bc202b35ba91f2b5ff3ecd39c935bf753fb5eb6df06d6b3b2d06fa41d8d26cc742d806ece6948e9460b17dc6e855c2bc1ef1f5bf58d53baa4e2dea92669d3a10f693e5e368225aadf8a9d85f59e09f3d19a9ce50d465e301431b6a65e77d128b5f402e4a28a38a4d3208a12104a55e62530da0edb7bb86c43a749a21a0f8c4f38c3bf297c73ac7fbdfbc1d5959bb61bed7af8b30bb15db5a72253e436cffff762e2b72665f990ab4e4dbc5b541b8bdc50ecba619b9aca6883cf8655c0d3ca32b29584935df04aec32c6f6405a5d193ae47cf6bf11cb02e56ef48e7ed11202a03c28deb175f24b8fd8abe9948cffd73518a4c5d8c7c9ddbed11b98220e902fd944666dbc8eded25c0d88d3a9ff4471afceb046c7db272672e7af2f42a4d85790af0949477236a8b55f9ed45d743174a1e8ec5efa3f31bcba980f06146f310ce13ceabe6aa9e1ab601b34c9e948132b7b25da8ed5dc7ea136cbbdf43d21219bfcaea703145c1b70b09850e2a4c21bd9532e6f844bb0c9413fd82e56296f6cc1f1e23b7d6c184010c319a25a77bfc714d165fc15e045e9bc671bcfc575817f1b25194f78215e42a82ec6bfe492ecad1f6bfafc70d48289a5d21a7479a16fb07fc7adc6a164f0e191c8cbab5694cae7c18f0800682d7e274293801d7937afbdf7da5b489e0c9b71b087ce0bcce3f7b6ab02ae14ab983626ee3bc8a646f338ea0d8f4c3b9f02b305a71412c139de121660fef4799a73bee303537b62111422bd897a56cd367b1e3828e4997c6a43d7fa9db7255ed760f59a710ce44d3fc68ba39cbb028dec7ba49e4b6ecbad62fd276f26190286b017d32baa59e648610346bea0973d278eea7ffca9002ab89191d17c18eef70c5ee21a33ce238107f40032e8e74d80afdd53b5f8b2874bef0bc5afcb9882e1019672fa6bfab4a5f74b80e09369243aa35b4c636a949cf2b955ba148a73edc0b6358667bd73bd607c66420abed5d560fce0135fba2e79f3a58789ecc597a4f888d57ddfa84ed570154e71a35736f953c72ae4a02ba6ff8f41f30fd266d8e55454fca9bef92758a921ef02b3f6ad0de4663b1192c6d13c8885029b0fc4c65e7c079d3b9d7e6d2be49817f9b1dc491294790cf76309d0361a71a26c713bf76df64c8c4746211d97d827fb3b55da9adadf030f4d5341294ab7cee1cbc662d8b55fc866b444815c1c8a63cf708d57496b7f70423ef6a587b8e2baf16147b86d6f4784ee6911a66e91af59fa3569280cc8f84154d019c3e92ec255646931a68ad039dfa91c8471b24a9651047af7bbadd46da06c3f54a6cc16e96fe194940b0e8effc97937ca04a16059e6f777dcaf862195c3ca92a1d86d0b0d4321285de3110444e54890dca0fa06a849cff7f6adb779df75f4edbdef6c6777ca8c0e39b8289bf668a870ce5d92c2ce54b7748fee8bf235cc755aeb6628ee188eb4dcb0d262a80a553bbe9b3899ecb10226714b8e8b74241e6b8d1c2f4638d63b2ce2e0736c5113fca68b1fa59d505394a95229691553b6945928b9f7a8eba2a50bf2f200dc49ee8b9b4573417cf2f1fec119b5d4f225f1ffcb19b9ec966edec342e187ed553de51ae40122f9f9031af3ce141ed032c33c7dff0da1398a080e199cd23007e03226cfa2496a8bd0ce7b011cef0cce618d5d265a4dbbcfe07ef8f94f2bea1ed4b05a1db83f6bfeffb25e4b72275235a34cb58db3f8337404cb18ea77c8f3f59e7e2ef3a6e5c66ffbee1302435311443192b32238fd898f2745f6b30f7ec28e30987b75e8ef59b7a4125ec34b6ca1a2dc633f51b50bda62f9847b240fcbff02dc4ba86a52dc175e24886b7ed0be9a86a7c2a5ea689a79c9b18c92388b1337e23283fcfa9c4a366b04b74e24acd039176dbf193ee146b6c5a52d9246a37cb8014e6ac1af2a9d2e0c457d0577f39ad1de7c326f2c8e3b689726177a07f5bdf4bed000eab6f212470af2301475bd5f3f50163d2810c9c5462ebfd1632f0a55f2adcbe1c036361cf58b94d5879c5ccce352e583c155c3da9fcf18ec6ae2c869dc82338954209c5caee5f3b7e16d4facb9dfbfa4ebd0a4f6c59fa206b4251320e0f100bd96bf82c3bfa9af9dbd44776c75f99b146b725c3ebc6f3cdabe97fa2d063970629d39e7b53d9525ce8d813f57df78b030db2cb8887f107cc25305729bec7b8624710f72fdf3b4846a31cb8ca62da2ac8aeca7ee7b453a73d05ad5612f82c1ee5c12f9f1e8593aa2d27c81da32e58862b36328c1aeb0a44888748149bb326b44f383361c0c297e4bcf68e0c16e58914b481816eae83966a5322f079e65e65f69f0578e971b5898de5feeb533d89e672a2113e75c7d31eda84383a81e0f88a86669f3bc6af27e3dd7ab73083bfc48f38a14d04cd27c90360786c7865e7682b7440a74c120dd938b6587ca2e24aaf0cad8706f6e059e7fa8dff7d1d53b64ca891282e168cfb298ff29aa14cec2e650e8d133e36561cc2e4a797d18be616778435b287292ccaafa8b4fbad2b7e72517240e20bcbbf127203b95d82cd8f367aa141bfce568e0b1bbf41548db3de23b8fe119045264b557c363b0737d340fe0b771d43e3d0edfec05d462b9c60de5dff210f187d888e2e04111deb53040cd47d48764c6f3b4ddcd89129dcd03989115ba3547909bee89f92488a2d33ae6b07f08de390eee037f8562021831c46793b19cc992edec512ae252c39c95ad12620311b5d4ea3a51c9a334f793d5d5ca4c9bc88af7d010a6fa82155f8d29b806b0f9e6e8024cc4fae90088d6b30dfdba212f54fee9b43702fc8975baa3e08ec0eb1868c0cac22661814ca872d8f36c8f357ab4e1c73a93ab2e16e058d08dda1e24b4931bc9916919825757c21f001a758b44ba5ec71c7d356c6c791278ba9c9a21c3a84aae634159189f0c14f277457c85ad4769b906cd8a5fa5505dfac96def5dc32c909eb0c4d528740072016db8f5a085da538640b09a4d9c5b41af2151c13aeb1962738fc0c03d1f7667df6c366f97acbf84b740f2ab3c5ddd05d5f03876347e914059b89f0eeb7dada9f2d49fc78ddd21b46925b6dc7fc5c0d5d37207259715728a25a5e7dd39841df49519178845478b74693813fcff79477d7f07571f857f060d7e7a072db22300602ef5097974088a32311a62afe322662d08e2159c20078fbeef4142cf1e542253199296c199898093e2dea983dfb23a51b55b9c8b9fbe231a4abbf7fd9dac54b7044395151b6ca81e3099dd3b95138d5f49e68779ec0dfbff693cde9e1300f8df9943e8c044128e81bb1dd246f79747eb0bc44c81e0503659ec9a6f9d3cf8a47a070f9830d5aeabfdc4821526a256be79f01a2c195d19c9357bf8d27d444728abfb81d938e7520f2883304ab1e75e5b0c3f0b452ad742c1db819da9d35df851f24eb02e1ab1c35faa45ac1d5466aee15d1c7009afa7454ff6f3a73395c8849a228e9a7fec048a266412fe2dc9be7b96fca9c559e4cf19cef03a5cecf1c9898be54a83a0e9353fb44d9d1a689026d7aba33369dbbaf97de7c4401f1ee23445257e5fcc4aa84dbcd022abdb926db27017bee9c7a4f8c5ab3f547e1c2f722613a9cd268b26e82667481aeb5b61f17fb30be1e1bc49460e0154aa6af594c73c1ee9416d47a1a8a8410ce5b3a03fda2888ba9cc02804d4d9add25943e27e5393a00920df775481fb9531fd9480469db31d517407e12ebce569ca758f2d9c987dfa19dd7a0a90b85d17789052f92d3eeabe5aa066971cfafc8f9dbe8bc48a6251f3724e838588cad71eab7ae14f270878ae554cbcbb9f8cdedd54fe5a0a8246c86621e2cbd466aa348298d536a441813224c54943e05bbad81eed99f3d2be6ae935e27668e035f1918f9e86312d08284fa78e60d682f9d467c6800e063c28540ed4809e78d33069981b3251e9f6fc9ea7f41bf9f066f2e2bec047f6c792b9ccf2cf65acd80050ea3f511fa88d91182fec6e9028d57eaaab672c74c695f288141580133ad7eb36be4f993386c5cda478eaa24cf2000000000000000000000083afebc12447a4", 0xff8}, {&(0x7f0000000500)="c2b03800fb26f66f5e2f4adbd42e56ea9d5d5940b437ed655d05cdf2bf7c7b03f33f1fb07cb98b7de44a07d555b89df749288d87fb0f6d6932ac0a5a63c402837cc65916e1cd3098413fe29ef4e34f58610c8a1058db5d0b81f999df7d13d006681a0e77981551ec64011d285d5b54ec753a89db18807030249d86e011fcf8edc3c3fdb714cd082286c85ad0c1ca1c18420ce84670c93e84a5c944412281ad0a0c33526b2023da006521a09adc11049dab98c771c5ba24908e02ef319c0f8183d8aee71126f81d8cc5224217aa937053f76de42459f4f45c774888cc0f7232e520040e", 0xe3}, {&(0x7f0000000280)="7983e2b8", 0x4}], 0x7)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000001240)=ANY=[@ANYBLOB="000086dd0000120000000000000060fc03000f982c00fe8000000000000000f0f800000000aaff02000000000000000000000000000188"], 0xfce)

249.83514ms ago: executing program 2 (id=10):
r0 = socket(0x10, 0x3, 0x6)
r1 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0xf00, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x20000000)

249.265567ms ago: executing program 0 (id=11):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1805000000fe0300000000000000000085000000c40000009500"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000000c0)=r0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1805000000fe0300000000000000000085000000c40000009500"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000000c0)=r0) (async)

200.165689ms ago: executing program 0 (id=12):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xf}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xb, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0)
r4 = openat$cgroup(r1, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0)
r5 = openat$cgroup_type(r4, &(0x7f0000000180), 0x2, 0x0)
sendfile(r0, r5, 0x0, 0x7)

199.946483ms ago: executing program 2 (id=13):
socket(0x10, 0x3, 0x6)
r0 = socket(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272})
ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0x13)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000000)={{{@in=@empty, @in=@broadcast, 0x4e24, 0x0, 0x4e23, 0x40, 0x2, 0xa0, 0x80, 0x3a}, {0x1000a, 0x1, 0x2, 0x0, 0x7, 0x6, 0x1, 0xe3}, {0x40, 0x1, 0x7, 0x1}, 0x4, 0x6e6bc0, 0x2, 0x0, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d4, 0x6c}, 0xa, @in=@broadcast, 0x3501, 0x1, 0x1, 0xd, 0x719c, 0x7, 0x1}}, 0xe8)
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x20000000)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00'})

151.097164ms ago: executing program 0 (id=14):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000)={0x5, 0x6}, 0x2)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={<r2=>0x0, 0x3}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={<r3=>r2, 0x1}, &(0x7f0000000100)=0x8)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x101044, 0x0)
r5 = ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_LOOPBACK(r6, 0x65, 0x3, &(0x7f0000000180)=0x1, 0x4)
ioctl$NS_GET_USERNS(r5, 0xb701, 0x0)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000001c0)={r3, 0x5, 0x40, 0xffff, 0x101, 0xc}, &(0x7f0000000200)=0x14)
r7 = openat$cgroup_ro(r0, &(0x7f0000000240)='memory.numa_stat\x00', 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f00000002c0)={'ip_vti0\x00', <r8=>0x0, 0x1, 0x8000, 0x4, 0x8, {{0x32, 0x4, 0x0, 0x20, 0xc8, 0x65, 0x0, 0xf8, 0x4, 0x0, @remote, @multicast2, {[@lsrr={0x83, 0x7, 0xa1, [@empty]}, @generic={0x83, 0x2}, @cipso={0x86, 0x14, 0xffffffffffffffff, [{0x4, 0xe, "f9dbcd8d03da2570eb3eca07"}]}, @ssrr={0x89, 0x17, 0x2e, [@remote, @loopback, @empty, @multicast2, @loopback]}, @noop, @cipso={0x86, 0x14, 0x2, [{0x6, 0x9, "90ba90c82a0c23"}, {0x1, 0x5, "825168"}]}, @cipso={0x86, 0x45, 0x3, [{0x2, 0xa, "3e3b3696216d0edb"}, {0x5, 0xf, "9b80bcb19fc9fe0d2a1a7c27be"}, {0x5, 0x12, "da02af2b58e5c09fdc30fc49097cb59e"}, {0x6, 0x7, "0632403657"}, {0x6, 0xd, "041b89e7cd389f0301ec0a"}]}, @timestamp_addr={0x44, 0x24, 0x46, 0x1, 0x1, [{@dev={0xac, 0x14, 0x14, 0x14}, 0x7f}, {@local, 0x5}, {@local, 0x3}, {@empty, 0x40}]}]}}}}})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@ipv6_getnetconf={0x3c, 0x52, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x33}, @NETCONFA_FORWARDING={0x8}, @NETCONFA_RP_FILTER={0x8, 0x3, 0xb20f9f1b}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x7}, @NETCONFA_IFINDEX={0x8, 0x1, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40850}, 0x40080c1)
close(r0)
setsockopt$netrom_NETROM_IDLE(r5, 0x103, 0x7, &(0x7f00000004c0)=0x403, 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = accept(r0, &(0x7f0000000500)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000580)=0x80)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r7)
sendmsg$NL80211_CMD_RELOAD_REGDB(r9, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, r10, 0x1, 0x70bd2a, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
r11 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r11, 0x89f8, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000700)={'gretap0\x00', <r12=>0x0, 0x7800, 0x8, 0x10, 0x7, {{0x9, 0x4, 0x1, 0x0, 0x24, 0x64, 0x0, 0x0, 0x29, 0x0, @multicast1, @loopback, {[@generic={0x83, 0xd, "833221b9ae78a7f7198ece"}]}}}}})
ioctl$sock_netrom_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000007c0)={0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]})
sendmsg$NFNL_MSG_ACCT_GET(r7, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x38, 0x1, 0x7, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4d30}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)={0x2, 0x4, 0x8, 0x1, 0x80, r7, 0x10, '\x00', r12, r7, 0x4, 0x3, 0x1}, 0x50)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)={0x2, 0x4, 0x8, 0x1, 0x80, r13, 0x9, '\x00', 0x0, r7, 0x9, 0x2}, 0x50)
clock_gettime(0x0, &(0x7f0000000b00)={<r14=>0x0, <r15=>0x0})
pselect6(0x40, &(0x7f0000000a40)={0x8000000000000001, 0xa, 0x76, 0x100000001, 0xffffffffffffffff, 0x3, 0x8, 0xf}, &(0x7f0000000a80)={0x9, 0x31, 0xe285, 0x47, 0x0, 0x6, 0x3, 0x4}, &(0x7f0000000ac0)={0x7fffffff, 0x8, 0x7, 0x3, 0x6, 0x0, 0x1, 0x6c4c}, &(0x7f0000000b40)={r14, r15+10000000}, &(0x7f0000000bc0)={&(0x7f0000000b80)={[0x9b]}, 0x8})
setsockopt$IP_VS_SO_SET_ZERO(r7, 0x0, 0x48f, &(0x7f0000000c00)={0xc, @dev={0xac, 0x14, 0x14, 0x21}, 0x4e20, 0x1, 'sh\x00', 0x0, 0x100, 0x52}, 0x2c)

89.58656ms ago: executing program 2 (id=15):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_newnexthop={0x38, 0x68, 0x1, 0x0, 0x8000000, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0xc, 0x1, [{0x2}, {0x2}]}}, @NHA_OIF={0x8, 0x5, r1}]}, 0x38}}, 0x0)

89.173741ms ago: executing program 0 (id=16):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x112, 0x2, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@getchain={0x54, 0x66, 0x800, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0x8, 0xfff2}, {0xfff9, 0x6}}, [{0x8, 0xb, 0x7}, {0x8, 0xb, 0xd}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0xfff}]}, 0x54}}, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r3, {0xf, 0x7}, {0x0, 0xfff1}, {0x9, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000c0}, 0x8010)
r5 = socket(0x400000000010, 0x3, 0x0)
unshare(0x24020400)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x90)
r7 = epoll_create(0x800)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000001c0)={0x10})
sendmmsg$inet6(r2, &(0x7f0000000340)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x18}, 0x7fff}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000200)="bcd877031f6f2c23ad40a847fec4a181cd47a1aa5ae636623e9e386e9b1c2d7bbf987a621d2af21f", 0x28}, {&(0x7f00000002c0)="0b40bfd696b60d6f94efdf0fd9db64c6c91b1f83ae80a969189257bed18d5b454fcabce3b0f21b595fda8e24ddfd888dd6352dd87770c8acab5695e441ccbd94803d0cc6eee44c58a32072c213699a0b5f29f628f36a6362fe7d1e71c350756771b0262b1d38504e9a18", 0x6a}, {&(0x7f0000000240)="4331bd5a57b4e36c888cc0d0e75d5ac7f9c672", 0x13}, {&(0x7f0000000480)="854c6138aeb11c899d9c45035a75b65b6545635bb62ba039e8c6a0a5d012e15dae686107c727a3fa1c4e2f5f9dfb7047967126d2f76129a28467265e08758806a326c9227344eb82781676652a8b807d224d926219391e5f33b0fb8d674d858fbfa9c42d5cc74eb79666cf7bb5edecbdb1fc9024ea011b4d0b99a0844bf03ab76d067666bbefda9310c79559c8bd6a9b9390dbc7a8318998b0a4b37ef54507e2b093ae775cb1b80741a98a0c5cba890299dfcf14e5a6371ca26c6ae2ec5a9a0988dafb30c695060bc07c5326be62cc0be541d3", 0xd3}, {&(0x7f0000000580)="669178ed35d6f2ca92f76aca499a4d60192668e282d44554cf742545a7601a07c2d9a05e3d1d64b01d2202be149de9d0b709c73f61c1dff278bb0764d2d2f19aaa0583d9a41879e99435038758279a0e5249b20da6c06205f580e51e28989ac52f4ee222a95108612239d73ddb50b252193796a28c571b7a64ed443a240b903055d852710f7c71ac62aa88fec90b4a813f9169607273613f28df3cf80bb2e1fd45dd7b3954a3008ff7c6d44124198adc96c9acfe1bf907bbd655ec79de45601a2e77dbdf8b685cb9ab6deee9b1", 0xcd}, {&(0x7f00000003c0)="26935a881aa7f1a19dd00a6d6b257a7b20e52beee933545b7f2b83662771be408d6d7ee10ba3508776c78447737693e4c0f82b7450bd32fe21a3a29b4f431d7dad756a5351fb9f0de915a5ea74b2b3df", 0x50}], 0x6}}], 0x1, 0x40040)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xc, 0xc}, {0x0, 0xfff1}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4041080)
r10 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000fee000)=0x4, 0x4)
listen(r10, 0x50)

88.321563ms ago: executing program 2 (id=17):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r0, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x2b, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x4000000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, 0x0, 0x400c800)
r3 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r3, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r1)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004024}, 0x800)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0x40840)
socket$netlink(0x10, 0x3, 0x0)
connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000340)={r5, r5, 0x8, 0x1, &(0x7f0000000180)="c0", 0xb, 0x1, 0x46d, 0xfff9, 0x3, 0x0, 0x8, 'syz0\x00'})
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)

205.479µs ago: executing program 0 (id=18):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000004c40)={@remote}, 0x14)
r3 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', <r4=>0x0})
setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote, r4}, 0x14)
setsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000380)={@remote, r4}, 0x14)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)={0x3c, r0, 0x801, 0x0, 0x3, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}]}]}, 0x3c}}, 0x20000000)

0s ago: executing program 0 (id=19):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
recvmmsg(0xffffffffffffffff, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0x1000}], 0x1, 0x10002, 0x0)
listen(0xffffffffffffffff, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x68}, [@ldst={0x6}]}, 0x0, 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'lblc\x00', 0x2d, 0x40085, 0x13}, 0x2c)
ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4)
r3 = socket(0x10, 0x803, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f00000000c0))
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_newaddr={0x48, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0xb, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_FLAGS={0x8, 0x8, 0x442}]}, 0x48}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:65234' (ED25519) to the list of known hosts.
syzkaller login: [   41.317576][ T5791] cgroup: Unknown subsys name 'net'
[   41.377406][ T5791] cgroup: Unknown subsys name 'cpuset'
[   41.382020][ T5791] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.631868][ T5791] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   45.857048][ T5234] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   45.860306][ T5234] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   45.863240][ T5234] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   45.866961][ T5234] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   45.869766][ T5234] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   45.915114][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   45.917975][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   45.920733][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   45.923916][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   45.935292][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   45.952792][ T5234] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   45.957127][ T5234] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   45.960067][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   45.963495][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   45.967046][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   46.103071][ T5842] chnl_net:caif_netlink_parms(): no params data found
[   46.168748][ T5850] chnl_net:caif_netlink_parms(): no params data found
[   46.205830][ T5847] chnl_net:caif_netlink_parms(): no params data found
[   46.221020][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.223429][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.226863][ T5842] bridge_slave_0: entered allmulticast mode
[   46.229636][ T5842] bridge_slave_0: entered promiscuous mode
[   46.233296][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.235714][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.238005][ T5842] bridge_slave_1: entered allmulticast mode
[   46.240637][ T5842] bridge_slave_1: entered promiscuous mode
[   46.293119][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.308518][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.326025][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.328392][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.330628][ T5850] bridge_slave_0: entered allmulticast mode
[   46.333795][ T5850] bridge_slave_0: entered promiscuous mode
[   46.350957][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.353419][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.355842][ T5847] bridge_slave_0: entered allmulticast mode
[   46.358525][ T5847] bridge_slave_0: entered promiscuous mode
[   46.361533][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.363786][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.366657][ T5847] bridge_slave_1: entered allmulticast mode
[   46.369354][ T5847] bridge_slave_1: entered promiscuous mode
[   46.371683][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.374006][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.376762][ T5850] bridge_slave_1: entered allmulticast mode
[   46.379408][ T5850] bridge_slave_1: entered promiscuous mode
[   46.383258][ T5842] team0: Port device team_slave_0 added
[   46.400450][ T5842] team0: Port device team_slave_1 added
[   46.430536][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.434983][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.438327][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.440553][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.448830][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.453887][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.458451][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.461557][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.463663][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.472035][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.501917][ T5850] team0: Port device team_slave_0 added
[   46.513246][ T5847] team0: Port device team_slave_0 added
[   46.516279][ T5850] team0: Port device team_slave_1 added
[   46.533381][ T5847] team0: Port device team_slave_1 added
[   46.562665][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.565002][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.573187][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.577597][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.579871][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.588542][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.595283][ T5842] hsr_slave_0: entered promiscuous mode
[   46.597624][ T5842] hsr_slave_1: entered promiscuous mode
[   46.600323][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.602578][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.610781][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.618484][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.620680][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.629403][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.694048][ T5847] hsr_slave_0: entered promiscuous mode
[   46.697530][ T5847] hsr_slave_1: entered promiscuous mode
[   46.699613][ T5847] debugfs: 'hsr0' already exists in 'hsr'
[   46.701513][ T5847] Cannot create hsr debugfs directory
[   46.706413][ T5850] hsr_slave_0: entered promiscuous mode
[   46.708720][ T5850] hsr_slave_1: entered promiscuous mode
[   46.710821][ T5850] debugfs: 'hsr0' already exists in 'hsr'
[   46.712655][ T5850] Cannot create hsr debugfs directory
[   46.876980][ T5842] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   46.883206][ T5842] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   46.893007][ T5842] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   46.898449][ T5842] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   46.928425][ T5847] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   46.938130][ T5847] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   46.951862][ T5847] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   46.957545][ T5847] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   46.968362][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.970913][ T5842] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.973761][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.976410][ T5842] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.999085][ T5850] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   47.003599][ T5850] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   47.015812][ T5850] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   47.021277][ T5850] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   47.037784][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.040176][ T5847] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.042668][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.045112][ T5847] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.063657][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.071321][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.073705][ T5850] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.076325][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.078680][ T5850] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.106507][   T29] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.109756][   T29] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.113429][   T29] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.117771][   T29] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.120465][   T29] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.123140][   T29] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.142366][ T5842] 8021q: adding VLAN 0 to HW filter on device team0
[   47.153818][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.156323][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.168527][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.170917][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.184294][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.195990][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.212262][ T5850] 8021q: adding VLAN 0 to HW filter on device team0
[   47.223281][   T29] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.225819][   T29] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.233759][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.236167][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.241894][ T5847] 8021q: adding VLAN 0 to HW filter on device team0
[   47.258054][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.260488][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.271374][   T29] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.273608][   T29] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.297387][ T5850] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   47.323866][ T5847] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   47.335074][ T5847] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   47.389941][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.414581][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.431114][ T5842] veth0_vlan: entered promiscuous mode
[   47.446302][ T5842] veth1_vlan: entered promiscuous mode
[   47.463891][ T5850] veth0_vlan: entered promiscuous mode
[   47.470907][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.479127][ T5850] veth1_vlan: entered promiscuous mode
[   47.493823][ T5842] veth0_macvtap: entered promiscuous mode
[   47.508757][ T5842] veth1_macvtap: entered promiscuous mode
[   47.518036][ T5850] veth0_macvtap: entered promiscuous mode
[   47.526371][ T5850] veth1_macvtap: entered promiscuous mode
[   47.529334][ T5847] veth0_vlan: entered promiscuous mode
[   47.540747][ T5847] veth1_vlan: entered promiscuous mode
[   47.544547][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.550444][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.558712][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.563770][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.572859][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.582601][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.588130][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.597142][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.600026][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.603086][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.611632][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.617629][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.630654][ T5847] veth0_macvtap: entered promiscuous mode
[   47.648924][ T5847] veth1_macvtap: entered promiscuous mode
[   47.668563][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.681369][   T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.684013][   T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.688460][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.708827][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.711770][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.717623][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.722003][   T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.724017][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.725060][   T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.736414][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.746980][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.774370][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.781713][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.796152][ T5850] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   47.803958][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.809962][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.837532][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.840138][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.906305][ T5852] Bluetooth: hci0: command tx timeout
[   47.985101][ T5852] Bluetooth: hci2: command tx timeout
[   47.986102][   T55] Bluetooth: hci1: command tx timeout
[   48.049046][ T5929] netlink: 'syz.1.7': attribute type 1 has an invalid length.
[   48.140118][ T5937] syz.1.9 uses obsolete (PF_INET,SOCK_PACKET)
[   48.192517][ T5944] tap0: tun_chr_ioctl cmd 1074025678
[   48.194415][ T5944] tap0: group set to 0
[   48.220563][ T5946] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   48.362008][ T5956] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   48.368417][ T5905] hid-generic 0005:046D:FFF9.0001: collection stack underflow
[   48.371028][ T5905] hid-generic 0005:046D:FFF9.0001: item 0 0 0 12 parsing failed
[   48.377897][ T5905] hid-generic 0005:046D:FFF9.0001: probe with driver hid-generic failed with error -22
[   48.458376][ T5905] IPVS: starting estimator thread 0...
Connection to localhost closed by remote host.
[   48.462381][ T5960] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[   48.489470][ T5960] netlink: 'syz.0.19': attribute type 11 has an invalid length.
[   48.565543][ T5964] IPVS: using max 79 ests per chain, 189600 per kthread
[   48.649192][ T5958] ==================================================================
[   48.651911][ T5958] BUG: KASAN: slab-use-after-free in __mutex_lock+0x7fc/0x1360
[   48.654421][ T5958] Read of size 8 at addr ffff888107d540a0 by task khidpd_046dfff9/5958
[   48.657888][ T5958] 
[   48.658710][ T5958] CPU: 0 UID: 0 PID: 5958 Comm: khidpd_046dfff9 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[   48.658720][ T5958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   48.658725][ T5958] Call Trace:
[   48.658729][ T5958]  <TASK>
[   48.658732][ T5958]  dump_stack_lvl+0x189/0x250
[   48.658744][ T5958]  ? __kasan_check_byte+0x12/0x40
[   48.658756][ T5958]  ? __pfx_dump_stack_lvl+0x10/0x10
[   48.658764][ T5958]  ? lock_release+0x4b/0x3e0
[   48.658775][ T5958]  ? __virt_addr_valid+0x4a5/0x5c0
[   48.658785][ T5958]  print_report+0xca/0x240
[   48.658792][ T5958]  ? __mutex_lock+0x7fc/0x1360
[   48.658801][ T5958]  kasan_report+0x118/0x150
[   48.658811][ T5958]  ? __mutex_lock+0x7fc/0x1360
[   48.658820][ T5958]  __mutex_lock+0x7fc/0x1360
[   48.658828][ T5958]  ? __mutex_lock+0x5b6/0x1360
[   48.658837][ T5958]  ? l2cap_unregister_user+0x6a/0x1b0
[   48.658846][ T5958]  ? __pfx___mutex_lock+0x10/0x10
[   48.658855][ T5958]  ? __pfx___timer_delete_sync+0x10/0x10
[   48.658866][ T5958]  l2cap_unregister_user+0x6a/0x1b0
[   48.658873][ T5958]  hidp_session_thread+0x3c9/0x410
[   48.658881][ T5958]  ? __pfx_hidp_session_thread+0x10/0x10
[   48.658888][ T5958]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   48.658896][ T5958]  ? __pfx_hidp_session_wake_function+0x10/0x10
[   48.658903][ T5958]  ? __pfx_hidp_session_wake_function+0x10/0x10
[   48.658910][ T5958]  ? __kthread_parkme+0x7b/0x200
[   48.658918][ T5958]  ? __kthread_parkme+0x1a1/0x200
[   48.658925][ T5958]  kthread+0x711/0x8a0
[   48.658933][ T5958]  ? __pfx_hidp_session_thread+0x10/0x10
[   48.658940][ T5958]  ? __pfx_kthread+0x10/0x10
[   48.658948][ T5958]  ? _raw_spin_unlock_irq+0x23/0x50
[   48.658954][ T5958]  ? lockdep_hardirqs_on+0x9c/0x150
[   48.658963][ T5958]  ? __pfx_kthread+0x10/0x10
[   48.658971][ T5958]  ret_from_fork+0x3fc/0x770
[   48.658979][ T5958]  ? __pfx_ret_from_fork+0x10/0x10
[   48.658987][ T5958]  ? __switch_to_asm+0x39/0x70
[   48.658995][ T5958]  ? __switch_to_asm+0x33/0x70
[   48.659003][ T5958]  ? __pfx_kthread+0x10/0x10
[   48.659010][ T5958]  ret_from_fork_asm+0x1a/0x30
[   48.659021][ T5958]  </TASK>
[   48.659024][ T5958] 
[   48.726776][ T5958] Allocated by task 5850:
[   48.728223][ T5958]  kasan_save_track+0x3e/0x80
[   48.729798][ T5958]  __kasan_kmalloc+0x93/0xb0
[   48.731340][ T5958]  __kmalloc_noprof+0x27a/0x4f0
[   48.732955][ T5958]  hci_alloc_dev_priv+0x28/0x2060
[   48.734635][ T5958]  vhci_create_device+0x120/0x6e0
[   48.736329][ T5958]  vhci_write+0x3ce/0x4a0
[   48.737779][ T5958]  vfs_write+0x54b/0xa90
[   48.739192][ T5958]  ksys_write+0x145/0x250
[   48.740634][ T5958]  do_syscall_64+0xfa/0x3b0
[   48.742139][ T5958]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   48.744089][ T5958] 
[   48.744905][ T5958] Freed by task 5850:
[   48.746386][ T5958]  kasan_save_track+0x3e/0x80
[   48.747946][ T5958]  kasan_save_free_info+0x46/0x50
[   48.749627][ T5958]  __kasan_slab_free+0x5b/0x80
[   48.751222][ T5958]  kfree+0x18e/0x440
[   48.752525][ T5958]  bt_host_release+0x82/0x90
[   48.754037][ T5958]  device_release+0x9c/0x1c0
[   48.755573][ T5958]  kobject_put+0x22b/0x480
[   48.757003][ T5958]  vhci_release+0x88/0xd0
[   48.758453][ T5958]  __fput+0x44c/0xa70
[   48.759781][ T5958]  task_work_run+0x1d4/0x260
[   48.761290][ T5958]  do_exit+0x6b5/0x2300
[   48.762612][ T5958]  do_group_exit+0x21c/0x2d0
[   48.764064][ T5958]  get_signal+0x1286/0x1340
[   48.765514][ T5958]  arch_do_signal_or_restart+0x9a/0x750
[   48.767234][ T5958]  exit_to_user_mode_loop+0x75/0x110
[   48.768894][ T5958]  do_syscall_64+0x2bd/0x3b0
[   48.770345][ T5958]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   48.772233][ T5958] 
[   48.772998][ T5958] Last potentially related work creation:
[   48.774765][ T5958]  kasan_save_stack+0x3e/0x60
[   48.776267][ T5958]  kasan_record_aux_stack+0xbd/0xd0
[   48.777922][ T5958]  insert_work+0x3d/0x330
[   48.779344][ T5958]  __queue_work+0xbaf/0xfb0
[   48.780775][ T5958]  queue_work_on+0x181/0x270
[   48.782250][ T5958]  process_scheduled_works+0xae1/0x17b0
[   48.784023][ T5958]  worker_thread+0x8a0/0xda0
[   48.785518][ T5958]  kthread+0x711/0x8a0
[   48.786857][ T5958]  ret_from_fork+0x3fc/0x770
[   48.788344][ T5958]  ret_from_fork_asm+0x1a/0x30
[   48.789854][ T5958] 
[   48.790628][ T5958] Second to last potentially related work creation:
[   48.792645][ T5958]  kasan_save_stack+0x3e/0x60
[   48.794115][ T5958]  kasan_record_aux_stack+0xbd/0xd0
[   48.795760][ T5958]  insert_work+0x3d/0x330
[   48.797145][ T5958]  __queue_work+0xcd2/0xfb0
[   48.798617][ T5958]  call_timer_fn+0x17e/0x5f0
[   48.800129][ T5958]  __run_timer_base+0x646/0x860
[   48.801711][ T5958]  run_timer_softirq+0xb7/0x180
[   48.803252][ T5958]  handle_softirqs+0x286/0x870
[   48.804774][ T5958]  __irq_exit_rcu+0xca/0x1f0
[   48.806265][ T5958]  irq_exit_rcu+0x9/0x30
[   48.807618][ T5958]  sysvec_apic_timer_interrupt+0xa6/0xc0
[   48.809427][ T5958]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[   48.811319][ T5958] 
[   48.812099][ T5958] The buggy address belongs to the object at ffff888107d54000
[   48.812099][ T5958]  which belongs to the cache kmalloc-8k of size 8192
[   48.816453][ T5958] The buggy address is located 160 bytes inside of
[   48.816453][ T5958]  freed 8192-byte region [ffff888107d54000, ffff888107d56000)
[   48.820877][ T5958] 
[   48.821651][ T5958] The buggy address belongs to the physical page:
[   48.823690][ T5958] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x107d50
[   48.826463][ T5958] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[   48.829054][ T5958] anon flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[   48.831578][ T5958] page_type: f5(slab)
[   48.832864][ T5958] raw: 057ff00000000040 ffff88801a442280 0000000000000000 dead000000000001
[   48.835525][ T5958] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[   48.838177][ T5958] head: 057ff00000000040 ffff88801a442280 0000000000000000 dead000000000001
[   48.840842][ T5958] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[   48.843512][ T5958] head: 057ff00000000003 ffffea00041f5401 00000000ffffffff 00000000ffffffff
[   48.846224][ T5958] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[   48.848941][ T5958] page dumped because: kasan: bad access detected
[   48.851030][ T5958] page_owner tracks the page as allocated
[   48.852819][ T5958] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 5463942433, free_ts 0
[   48.858905][ T5958]  post_alloc_hook+0x240/0x2a0
[   48.860493][ T5958]  get_page_from_freelist+0x21e4/0x22c0
[   48.862192][ T5958]  __alloc_frozen_pages_noprof+0x181/0x370
[   48.864049][ T5958]  alloc_pages_mpol+0x232/0x4a0
[   48.865603][ T5958]  allocate_slab+0x8a/0x370
[   48.867014][ T5958]  ___slab_alloc+0xbeb/0x1410
[   48.868484][ T5958]  __kmalloc_noprof+0x305/0x4f0
[   48.870077][ T5958]  fb_show_logo+0xe6c/0x1b30
[   48.871624][ T5958]  fbcon_switch+0x15f3/0x2040
[   48.873170][ T5958]  redraw_screen+0x56d/0xe90
[   48.874714][ T5958]  set_con2fb_map+0xda9/0x13c0
[   48.876319][ T5958]  fbcon_fb_registered+0x24e/0x610
[   48.877994][ T5958]  register_framebuffer+0x6f9/0x880
[   48.879706][ T5958]  __drm_fb_helper_initial_config_and_unlock+0x1307/0x18a0
[   48.882030][ T5958]  drm_fbdev_client_hotplug+0x16c/0x230
[   48.883804][ T5958]  drm_client_register+0x172/0x210
[   48.885496][ T5958] page_owner free stack trace missing
[   48.887267][ T5958] 
[   48.888062][ T5958] Memory state around the buggy address:
[   48.889897][ T5958]  ffff888107d53f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   48.892454][ T5958]  ffff888107d54000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   48.894976][ T5958] >ffff888107d54080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   48.897522][ T5958]                                ^
[   48.899199][ T5958]  ffff888107d54100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   48.901819][ T5958]  ffff888107d54180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   48.904443][ T5958] ==================================================================
[   48.907662][ T5958] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   48.909938][ T5958] CPU: 0 UID: 0 PID: 5958 Comm: khidpd_046dfff9 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[   48.913878][ T5958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   48.917166][ T5958] Call Trace:
[   48.918291][ T5958]  <TASK>
[   48.919284][ T5958]  dump_stack_lvl+0x99/0x250
[   48.920817][ T5958]  ? __asan_memcpy+0x40/0x70
[   48.922348][ T5958]  ? __pfx_dump_stack_lvl+0x10/0x10
[   48.924049][ T5958]  ? __pfx__printk+0x10/0x10
[   48.925593][ T5958]  vpanic+0x281/0x750
[   48.926922][ T5958]  ? __pfx_vpanic+0x10/0x10
[   48.928439][ T5958]  ? irqentry_exit+0x74/0x90
[   48.929967][ T5958]  panic+0xb9/0xc0
[   48.931199][ T5958]  ? __pfx_panic+0x10/0x10
[   48.932677][ T5958]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[   48.934611][ T5958]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   48.936546][ T5958]  ? __mutex_lock+0x7fc/0x1360
[   48.938124][ T5958]  check_panic_on_warn+0x89/0xb0
[   48.939759][ T5958]  ? __mutex_lock+0x7fc/0x1360
[   48.941344][ T5958]  end_report+0x78/0x160
[   48.942747][ T5958]  kasan_report+0x129/0x150
[   48.944247][ T5958]  ? __mutex_lock+0x7fc/0x1360
[   48.945818][ T5958]  __mutex_lock+0x7fc/0x1360
[   48.947340][ T5958]  ? __mutex_lock+0x5b6/0x1360
[   48.948905][ T5958]  ? l2cap_unregister_user+0x6a/0x1b0
[   48.950610][ T5958]  ? __pfx___mutex_lock+0x10/0x10
[   48.952247][ T5958]  ? __pfx___timer_delete_sync+0x10/0x10
[   48.954088][ T5958]  l2cap_unregister_user+0x6a/0x1b0
[   48.955814][ T5958]  hidp_session_thread+0x3c9/0x410
[   48.957431][ T5958]  ? __pfx_hidp_session_thread+0x10/0x10
[   48.959250][ T5958]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   48.961190][ T5958]  ? __pfx_hidp_session_wake_function+0x10/0x10
[   48.963274][ T5958]  ? __pfx_hidp_session_wake_function+0x10/0x10
[   48.965315][ T5958]  ? __kthread_parkme+0x7b/0x200
[   48.966950][ T5958]  ? __kthread_parkme+0x1a1/0x200
[   48.968605][ T5958]  kthread+0x711/0x8a0
[   48.969932][ T5958]  ? __pfx_hidp_session_thread+0x10/0x10
[   48.971761][ T5958]  ? __pfx_kthread+0x10/0x10
[   48.973250][ T5958]  ? _raw_spin_unlock_irq+0x23/0x50
[   48.974900][ T5958]  ? lockdep_hardirqs_on+0x9c/0x150
[   48.976613][ T5958]  ? __pfx_kthread+0x10/0x10
[   48.978136][ T5958]  ret_from_fork+0x3fc/0x770
[   48.979676][ T5958]  ? __pfx_ret_from_fork+0x10/0x10
[   48.981332][ T5958]  ? __switch_to_asm+0x39/0x70
[   48.982854][ T5958]  ? __switch_to_asm+0x33/0x70
[   48.984440][ T5958]  ? __pfx_kthread+0x10/0x10
[   48.985970][ T5958]  ret_from_fork_asm+0x1a/0x30
[   48.987573][ T5958]  </TASK>
[   48.989252][ T5958] Kernel Offset: disabled
[   48.990682][ T5958] Rebooting in 86400 seconds..

VM DIAGNOSIS:
19:09:48  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90003fe7370
R8 =ffff888020d28237 R9 =1ffff110041a5046 R10=dffffc0000000000 R11=ffffffff854e71d0
R12=dffffc0000000000 R13=ffffffff99af48ee R14=ffffffff99de94e0 R15=0000000000000000
RIP=ffffffff854e724c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8621000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f337bae7d60 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007ff526d87498 00007ff526d87470 XMM03=00007ff526d874a8 00007ff526d874a0
XMM04=00007ff5278ed100 00007ff526d87460 XMM05=00007ff526d87478 00007ff526d874c0
XMM06=00007ff526d874b8 00007ff526d874b0 XMM07=00007ff526d874a8 00007ff526d874a0
XMM08=0000000000000000 00007ff526c12ee7 XMM09=0000000000000000 00007ff526c12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ad35766322b1b00 RBX=ffffffff81968308 RCX=1ad35766322b1b00 RDX=0000000000000001
RSI=ffffffff8d9b494b RDI=ffffffff8be32680 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa34730 R13=0000000000000001 R14=0000000000000001 R15=1ffff1102001f000
RIP=ffffffff8b78b3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c21000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c252c50 CR3=000000010883a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 000000306d616574
XMM02=00007f8bd8d87498 00007f8bd8d87470 XMM03=00007f8bd8d874a8 00007f8bd8d874a0
XMM04=00007f8bd98ed100 00007f8bd8d87460 XMM05=00007f8bd8d87478 00007f8bd8d874c0
XMM06=00007f8bd8d874b8 00007f8bd8d874b0 XMM07=00007f8bd8d874a8 00007f8bd8d874a0
XMM08=0000000000000000 00007f8bd8c12ee7 XMM09=0000000000000000 00007f8bd8c12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
