last executing test programs:

970.4979ms ago: executing program 1 (id=431):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x7, [@union={0x0, 0x6, 0x0, 0x5, 0x1, 0x7ff, [{0x8, 0x5, 0x3}, {0x8, 0x2, 0x5}, {0xa, 0x3, 0x6b}, {0x2, 0x3, 0xffffffff}, {0xd, 0x1, 0x6e}, {0x0, 0x1, 0x401}]}, @var={0xe, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x61, 0x20, 0x2e, 0xec, 0x2e]}}, &(0x7f0000000300)=""/192, 0x83, 0xc0, 0x0, 0x4, 0x10000}, 0x28)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x7f, <r1=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x200000000000028e, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1ae18ecfca8e5cb8, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r4, 0x1, 0x1000000000000f, &(0x7f0000000180)=0x57bb, 0x3c)
setsockopt$sock_attach_bpf(r4, 0x1, 0x34, &(0x7f00000000c0)=r3, 0x4)
r5 = socket$kcm(0x2, 0xa, 0x2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r7 = openat$cgroup_devices(r6, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r7, &(0x7f0000000140)=ANY=[@ANYBLOB='a 75:*\t\n'], 0xa)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r8)
sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x68, r9, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PEERS={0x40, 0x8, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @loopback}}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000040)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="650700000000000061114400000000000d1000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48}, 0x94)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x1c, 0x6, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}}, @NFT_MSG_NEWSET={0x24, 0x9, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_EXPRESSIONS={0x4}, @NFTA_SET_DESC={0x4}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x12}]}, @NFT_MSG_DELCHAIN={0xac, 0x5, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_HOOK={0x60, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'erspan0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_vlan\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x48337fa3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x59a9e12d}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xb6ae12d}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x101, 0x0, 0x0, {0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWSET={0x1e0, 0x9, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_EXPRESSIONS={0x4}, @NFTA_SET_EXPRESSIONS={0x1a8, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x50, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_OSF_TTL={0x5}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0x9}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0xf}]}}}, {0x68, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x5c, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_CMP_OP={0x8}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_CMP_DATA={0x40, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x62}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}}}, {0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_DIRECTION={0x5}]}}}, {0x3c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_TPROXY_FAMILY={0x8}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x12}]}}}, {0x14, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x4}}}, {0x18, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x2c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x23}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x5}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x1e}]}}}]}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x6}}}, 0x370}, 0x1, 0x0, 0x0, 0x800}, 0xc0)
write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500561308005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000cc00000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e64021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef)

896.067979ms ago: executing program 1 (id=432):
r0 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_int(r0, 0x107, 0x9, 0x0, &(0x7f0000000640)=0xffffffffffffff48)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
r2 = socket(0x2, 0x80805, 0x0)
r3 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f0000000200)={r4, 0x5, 0x20}, &(0x7f00000001c0)=0x18)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000080)={r4, 0x6, 0x0, 0x5, 0x4, 0xb5a}, 0x14)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x4, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000}, 0x400}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004300)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf252001000000000000000000000000000200000000000000000000ffff6401010000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000900000000000000000000000000000000010008000000000000000000000000ffffffffffffffff07000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000001"], 0xfc}}, 0x0)
socket(0x1a, 0x800, 0x3)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x8, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001c80)={0x6, 0x5, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x1000}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000700)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r7]}, 0x94)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r9 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r8, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef)

797.026507ms ago: executing program 1 (id=433):
unshare(0x900)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000}, 0x400}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610424000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610424000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004300)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf252001000000000000000000000000000200000000000000000000ffff6401010000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000900000000000000000000000000000000010008000000000000000000000000ffffffffffffffff07000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000001"], 0xfc}}, 0x0) (async)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004300)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf252001000000000000000000000000000200000000000000000000ffff6401010000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000900000000000000000000000000000000010008000000000000000000000000ffffffffffffffff07000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000001"], 0xfc}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef)

735.052071ms ago: executing program 1 (id=435):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)=0xfffffffd)
socket$unix(0x1, 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000340)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
syz_emit_ethernet(0x7e, &(0x7f0000000400)={@random="a5050f0000b1", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x68, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x1, 0x23, 0x0, {0x15, 0x4, 0x2, 0x8, 0x3, 0x66, 0x6, 0x5, 0x32, 0x6e, @empty, @remote, {[@timestamp_addr={0x44, 0x24, 0x9a, 0x1, 0x7, [{@local}, {@local, 0x17}, {@multicast2, 0xfffffff9}, {@private=0xa010102, 0x2}]}, @timestamp_addr={0x44, 0x1c, 0x94, 0x1, 0x0, [{@rand_addr=0x64010101, 0x800}, {@empty, 0xf}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x401}]}]}}}}}}}, 0x0)
write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x28, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0x700}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c)

606.984079ms ago: executing program 1 (id=440):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xcb, 0x0, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, 0x0, &(0x7f00000000c0))
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r2, 0x8008f513, &(0x7f0000000040))
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', r7, 0xffffffffffffffff, 0x4, 0x3, 0x3}, 0x50)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000400)=@o_path={&(0x7f0000000300)='./file0\x00', r8, 0x4000, r6}, 0x18)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8b37, &(0x7f0000000000)={'wlan0\x00'})
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x20, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
r10 = socket(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r10, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x710, 0x8000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x0, 0x5, 0x2f, 0x0, @empty, @private}}}})
socket$kcm(0x2, 0x8, 0x2)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x521c00, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'vxcan1\x00', @broadcast})
write$tun(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd09032800050030000300600000000028290081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef)

606.679406ms ago: executing program 0 (id=441):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e20, @loopback}}, 0xfffffeff, 0x7, 0x81, 0xf9, 0x29, 0x6, 0x6}, &(0x7f0000000380)=0x9c)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000000ec0)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x2b, 0x1c, 0x65, 0x0, 0x60, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, "14f3305280f125e6"}}, 0x2a)
r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000100), r1)
sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x80, r4, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'pimreg\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'pimreg1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004040}, 0x20000000)

535.836606ms ago: executing program 2 (id=442):
socket$unix(0x1, 0x1, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r0 = socket$kcm(0x2, 0x0, 0x2)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000069111c00000000048510000002"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x73, 0xfffff034}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000740)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000009a5ab6e10c00000000000000040000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000000000000004400050000000000000000000000000000000000000000003c00000002000000ffffffff00020000000000000000000006000000040100000000afe274d9da000000000000000000004c8a"], 0xfc}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="02000000000000"], 0x50)
r5 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000540)={'ip6gre0\x00', 0x0})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000600)={'ip6tnl0\x00', 0x0})
sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="0001260000000000c67300000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8090}, 0x41000)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
accept$unix(r7, &(0x7f0000000180)=@abs, &(0x7f0000000240)=0x6e)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1b)
bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbff, 0x1}, 0xc)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYRESHEX=r1, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b00010067656e657665000020000280140007000000000000000000000000000000000105000c000100000008000a00", @ANYRES32=r8], 0x58}}, 0x4000810)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000340)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x10, 0x2, 0x0)

466.960523ms ago: executing program 0 (id=443):
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r2 = socket(0xa, 0x3, 0x3a)
socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xc8, 0x0, 0xc000000)
write$tun(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa000000000086dd6d0000000008110000000000000000000000800100000000ffea"], 0x42)

466.534468ms ago: executing program 2 (id=444):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff8500000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'veth1_to_hsr\x00', 0x4000})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$tun(r2, &(0x7f0000000000)=ANY=[], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0)
r3 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r3, 0x208)
r4 = accept4(r3, 0x0, 0x0, 0x80000)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x2, 0xb8}, 0x90)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b705000000000000611071000000000007000000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a)
r6 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4)
sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x20, 0x32, 0x605, 0x70bd25, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x140d, 0x4, 0x70bd29, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x1)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010dd010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000030900020073797a31000000000900010073797a300000000008001f4000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000100003800c000080080004"], 0xe0}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x60, 0x1, 0x4, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x18}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}, @NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x800}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0xa00000}, @NFULA_CFG_MODE={0xa, 0x2, {0x3, 0x2}}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x80}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x9}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x880)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x8029, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c)

466.088575ms ago: executing program 1 (id=445):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r1 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
writev(r1, &(0x7f0000001580)=[{&(0x7f0000000340)='0_', 0x2}], 0x1)
socket$unix(0x1, 0x1, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000003c000701fcffffff00000000017c0000100036800c00020008000000007000000c0001800602"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000140)=0xfff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r4}, 0x10)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="9115463ecc790180c200000308060001080006040002aaaaaafb2c9b3f446a73d1aaaabbac1414"], 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r7=>0x0})
sendto$packet(r6, &(0x7f0000000240)="f257a8ea7bc273dfaeab96850806", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x4, r7, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}}, 0x14)
write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600)
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000380)={<r8=>r5})
ioctl$sock_x25_SIOCDELRT(r8, 0x890c, &(0x7f0000000480)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}, 0x7, 'veth1_to_team\x00'})
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r5, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x3a, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x401, 0x44000000, 0x0, 0xfffffffffffffed3, 0x0, 0x0, 0x1, 0xfffffffd, 0x9}, 0x50)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000340)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
syz_emit_ethernet(0x7e, &(0x7f0000000400)=ANY=[@ANYBLOB="a5050f0000b1aaaaaaaaaa3e08004500007000680000000190780a010002ac1414aa0c0090780123000045220003006600060532006e00000000ac1414bb44249a71ac1414aa00000000ac1414aa00000017e0000002fffffff90a01010200000002441c94016401010100000800000000000000000fac1e010100000401"], 0x0)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
write$tun(r0, &(0x7f0000000580)=ANY=[@ANYRES16=r9, @ANYRESDEC=r7, @ANYRES16, @ANYBLOB="ba00000000400007000002d58838068b910000008c28bda665717592b5d27d1ab8d7af81473d4a19a88f8666e9e8c3001ab3d6b483afb9f1727a5778ea400ae5c247c2a5223a10a5fec3d228ff38759e363e707ef907cbf8ddcd7fba5965b04548654bda6e02278fe2b96968e688760ef0eb79f6af78ebfa0eaf1d5afb4fc0845b60d3d3fad66957d7dc634d39c52fe8082dcb05469ac138dd6b7fef8713fb85f691f16abfc4aa819b9ab36004b8a1782f766ce42f4b040c325319e940634fa7426574d71d2dbe"], 0xfd6c)

407.05266ms ago: executing program 0 (id=446):
r0 = socket(0x2c, 0x3, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) (async, rerun: 32)
bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) (async, rerun: 32)
write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe)

336.978304ms ago: executing program 2 (id=447):
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xc, [@enum64={0x8, 0x1, 0x0, 0x13, 0x0, 0x2, [{0xb, 0x6, 0x5}]}]}, {0x0, [0x5f, 0x30, 0x0, 0x0, 0x61, 0x2e, 0x5f, 0x2e, 0x5f, 0x0]}}, 0x0, 0x3c, 0x0, 0x1, 0x5}, 0x28)
syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r0, 0x58, &(0x7f0000000340)}, 0x10)
ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r2, 0x3)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000140)={r5, 0x4}, 0x8)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r6, &(0x7f0000000040), 0x10)
sendmsg$can_bcm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="04"], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x240400c6)
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f0000000280)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x2, 0x3, 0x0, 0x9, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}, @sadb_x_filter={0x5, 0x1a, @in6=@private1, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xb, 0x10, 0x4}, @sadb_address={0x5, 0x7, 0x3c, 0xa0, 0x0, @in6={0xa, 0x4e24, 0xfffffff7, @empty, 0x1}}, @sadb_x_sa2={0x2, 0x13, 0x1}]}, 0x88}, 0x1, 0x7}, 0x0)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x4, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000480)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10, 0x3}}}}}}, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x5}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xd, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000fdffffff847300001100000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x53, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2002}, 0x94)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$kcm(0x2, 0xa, 0x2)

336.776342ms ago: executing program 0 (id=448):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
socket$kcm(0x11, 0xa, 0x300)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001780)=ANY=[@ANYBLOB="980000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000000000000180012800b0001006772657461700000000002800400120008000a00", @ANYRES32=0x0, @ANYBLOB="140035007665746831000000000000000000000044002b8008000800", @ANYRES32, @ANYBLOB='\b\x00\b\x00', @ANYRES32, @ANYBLOB="0a000100"], 0x98}, 0x1, 0x0, 0x0, 0x24000804}, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xb}, {0xffff, 0xffff}, {0x2, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'macvtap0\x00', 0x1})
r9 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4)
write$tun(r1, &(0x7f00000002c0)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x64, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x4, 0x1, "9f71f7d4c7833a15bf97e2cebd45473ccd578e290a9e081e08616606ba5dcc29", "2c40d970a2d55e2aa8a7a9c500723b26", {"611e018724b760a0335e1f76e4d14a05", "ee3151aceb7f9dbb9e54104aa191d9b2"}}}}}}}}}, 0x9e)

199.107481ms ago: executing program 2 (id=449):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000340)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
syz_emit_ethernet(0x7e, &(0x7f0000000040)=ANY=[@ANYBLOB="a5050f0000b1aaaaaaaaaa3e08004500007000680000000190780a010102ac1414aa0c0090780123000045220003006600060532006e00000000ac1414bb44249a71ac1414aa00000000ac1414aa00000017e0000002fffffff90a01010200000002441c94016401010100000800000000000000000fac1e01010000040161c06b825241ccd1333e08bd4df8a13280913c531b26a6f04d265def80606a8154d2cab19bb9d0c7f6f0681bd4f05210fc847187ae5f24189e8f077b6c7680976796b15aca41e60d101e3435f1293d014efe23a447bcfef13b5c80e6f0ba6353801c91719e39f640d237add9d2d572381a54a9574af7ef13a4207c52aaf9f9ee1defc5c34770f88362d6cc85fdfa294f1dfe92749a651e0c1270439bcaea3a2f8558c7ff06d30d7be83daf18a724e7efca9ce9dacb26768c142b835f460c8ac39bfaf6bdf2e8fc9e1d"], 0x0)
write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x28, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0x700}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c)

198.425628ms ago: executing program 0 (id=450):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000100)=0x7fffffff)
bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000980)={0x14, 0x1, 0x8, 0x5, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0xc0c4}, 0x0)
getsockopt$inet6_int(r0, 0x29, 0x1, 0x0, &(0x7f00000004c0))
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
r4 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000100)=0xfffffffc, 0x4)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000080)=0x7ff, 0x4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
ioctl$VFAT_IOCTL_READDIR_BOTH(r5, 0x82307201, &(0x7f0000000a40)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r9 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa006}, 0x4)
writev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)="89e7ee2c7cdad9b4b47380c988ca", 0xe}], 0x1)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r10 = socket$kcm(0x2, 0xa, 0x2)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000080)={0x3, 'veth0_to_bridge\x00', {0x80}, 0x7})
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe)

126.34626ms ago: executing program 2 (id=451):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c40000001900674c020000000000000000000000000000000000000000000000ff02000000000000000000000000000100010000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="010000000000000000000000000000000000000000000000f6b58032b3a514bf49000000000000000000000000000000008000000000000000000000000000fce6ffffffffffff0000000000000000b0ac00000000000000000000040000000000000000000000000400000000000000010000000000003eb39bfb31a1e719f9b5b97e4fd085560a0010000100000000000000"], 0xc4}}, 0x4c050)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket(0x25, 0x5, 0x0)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r2)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000b00)=ANY=[@ANYBLOB="140100002e000100000000000000000001"], 0x114}], 0x1}, 0x0)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x2c, r3, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x5}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4000004)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0)
sendmsg$NFNL_MSG_ACCT_GET(r1, 0x0, 0x800)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_DEL(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x38, 0x2, 0x9, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @remote}}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20010000)
r7 = socket$kcm(0x2, 0xa, 0x2)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef)

618.003µs ago: executing program 2 (id=452):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c000280050016000200"], 0x3c}}, 0x4)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003083300fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) (async)
write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003083300fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef)
setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'lo\x00', <r4=>0x0})
sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000000c0)={0x1d, r4}, 0x10, &(0x7f00000003c0)={&(0x7f0000000400)=@canfd={{0x4, 0x1, 0x1, 0x1}, 0xfb, 0x0, 0x0, 0x0, "cca6f1e10194fd9304e8689818861d84be21875faed70061c5322a4ca48de2c8afc31232034c834cdc4586231d4cd7fcc6c6ad00"}, 0x48}, 0x2, 0x0, 0x0, 0x24008804}, 0x30048009)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000280)=ANY=[@ANYBLOB="0000efd7", @ANYRES16=0x0, @ANYBLOB="050427bd7000fadbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000005000300030000000800040001000000"], 0x58}, 0x1, 0x0, 0x0, 0x10008001}, 0x44080)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'team0\x00', <r5=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', <r6=>0x0})
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000001540)=ANY=[@ANYBLOB="ec050000", @ANYRES16=0x0, @ANYBLOB="010027bd7000fbdbdf250300000008000100", @ANYRES32=r4, @ANYBLOB="ec0102803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c000000000000000000000005000300030000000800040098ff013338000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400010400003c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r4, @ANYBLOB="08000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r4, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000400686173685f746f5f706f72745f6d617070696e6700000000080001000000000000000000000000002f1018646b4fb882f375c68aa110e69ea0a95bdc3c3dd93f553bc5ce401d45cb6d959335ce6b7010f7f0504fb5f01b791ce03b76321558a1f660479a4fb58ca8e524e9ccaed2ebee93817a899faffa3fb70333081d87879c914cfea620926c827b31b7102d43e2e9f09459af026034", @ANYRES32=r5, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000008000100", @ANYRES32=r4, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650008000100", @ANYRES32=r6, @ANYBLOB="a80202804c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400090000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400050000007c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000004c0004000900010723bd000004000304ff03000008000b06010000000800058105000000acee00070100000006000401c01f000002000607080000000800f8030500000062200000070000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r4, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400fcffffff08000600", @ANYRES32=r4, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004008000000008000600", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000008000008000100", @ANYRES32=r4, @ANYBLOB="4400028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400260c000008000600", @ANYRES32=r4, @ANYBLOB], 0x5ec}, 0x1, 0x0, 0x0, 0x44000}, 0x40001) (async)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000001540)=ANY=[@ANYBLOB="ec050000", @ANYRES16=0x0, @ANYBLOB="010027bd7000fbdbdf250300000008000100", @ANYRES32=r4, @ANYBLOB="ec0102803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c000000000000000000000005000300030000000800040098ff013338000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400010400003c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r4, @ANYBLOB="08000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r4, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000400686173685f746f5f706f72745f6d617070696e6700000000080001000000000000000000000000002f1018646b4fb882f375c68aa110e69ea0a95bdc3c3dd93f553bc5ce401d45cb6d959335ce6b7010f7f0504fb5f01b791ce03b76321558a1f660479a4fb58ca8e524e9ccaed2ebee93817a899faffa3fb70333081d87879c914cfea620926c827b31b7102d43e2e9f09459af026034", @ANYRES32=r5, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000008000100", @ANYRES32=r4, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650008000100", @ANYRES32=r6, @ANYBLOB="a80202804c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400090000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400050000007c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000004c0004000900010723bd000004000304ff03000008000b06010000000800058105000000acee00070100000006000401c01f000002000607080000000800f8030500000062200000070000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r4, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400fcffffff08000600", @ANYRES32=r4, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004008000000008000600", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000008000008000100", @ANYRES32=r4, @ANYBLOB="4400028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400260c000008000600", @ANYRES32=r4, @ANYBLOB], 0x5ec}, 0x1, 0x0, 0x0, 0x44000}, 0x40001)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbfb, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4040085}, 0x10)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000040), 0x4) (async)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000040), 0x4)
sendto$inet6(r8, &(0x7f0000000580)="03", 0x1, 0x20000800, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async)
sendto$inet6(r8, &(0x7f0000000580)="03", 0x1, 0x20000800, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) (async)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
ioctl$BTRFS_IOC_SET_FEATURES(r8, 0x40309439, &(0x7f00000001c0)={0x1, 0x2, 0x5})
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r10, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
socket$tipc(0x1e, 0x2, 0x0) (async)
r11 = socket$tipc(0x1e, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r12=>0x0})
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="3e2e51b05300080003000000000000000000", @ANYRES32=r12, @ANYBLOB="0400ff000600980008000000"], 0x28}, 0x1, 0x0, 0x0, 0x40000c1}, 0x4050) (async)
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="3e2e51b05300080003000000000000000000", @ANYRES32=r12, @ANYBLOB="0400ff000600980008000000"], 0x28}, 0x1, 0x0, 0x0, 0x40000c1}, 0x4050)

0s ago: executing program 0 (id=453):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f00000008c0)={0x1, 0x9})

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:34415' (ED25519) to the list of known hosts.
syzkaller login: [   40.605293][ T5824] cgroup: Unknown subsys name 'net'
[   40.787996][ T5824] cgroup: Unknown subsys name 'cpuset'
[   40.792282][ T5824] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   41.910454][ T5824] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   44.406596][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   44.410565][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   44.413152][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   44.415907][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   44.418369][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   44.434373][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   44.437192][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   44.440504][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   44.443163][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   44.446122][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   44.472054][ T5233] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   44.474572][ T5233] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   44.477911][ T5233] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   44.484116][ T5233] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   44.487431][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   44.521068][ T5836] chnl_net:caif_netlink_parms(): no params data found
[   44.554069][ T5840] chnl_net:caif_netlink_parms(): no params data found
[   44.598493][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.601506][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.604519][ T5836] bridge_slave_0: entered allmulticast mode
[   44.608118][ T5836] bridge_slave_0: entered promiscuous mode
[   44.612452][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.615950][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.619087][ T5836] bridge_slave_1: entered allmulticast mode
[   44.621829][ T5836] bridge_slave_1: entered promiscuous mode
[   44.644099][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.647334][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.650123][ T5840] bridge_slave_0: entered allmulticast mode
[   44.652504][ T5840] bridge_slave_0: entered promiscuous mode
[   44.659543][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   44.663152][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.666153][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.669025][ T5840] bridge_slave_1: entered allmulticast mode
[   44.671955][ T5840] bridge_slave_1: entered promiscuous mode
[   44.677874][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   44.697831][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   44.701578][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   44.706400][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   44.721874][ T5836] team0: Port device team_slave_0 added
[   44.730041][ T5836] team0: Port device team_slave_1 added
[   44.732689][ T5840] team0: Port device team_slave_0 added
[   44.742058][ T5840] team0: Port device team_slave_1 added
[   44.756234][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0
[   44.758590][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   44.768557][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   44.772631][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1
[   44.775157][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   44.784074][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   44.806587][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0
[   44.809402][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   44.819927][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   44.826281][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1
[   44.829147][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   44.845840][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   44.869234][ T5836] hsr_slave_0: entered promiscuous mode
[   44.872067][ T5836] hsr_slave_1: entered promiscuous mode
[   44.880514][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.882911][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.885312][ T5845] bridge_slave_0: entered allmulticast mode
[   44.888242][ T5845] bridge_slave_0: entered promiscuous mode
[   44.896813][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.899392][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.901822][ T5845] bridge_slave_1: entered allmulticast mode
[   44.904252][ T5845] bridge_slave_1: entered promiscuous mode
[   44.923449][ T5840] hsr_slave_0: entered promiscuous mode
[   44.925913][ T5840] hsr_slave_1: entered promiscuous mode
[   44.928112][ T5840] debugfs: 'hsr0' already exists in 'hsr'
[   44.930050][ T5840] Cannot create hsr debugfs directory
[   44.934026][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   44.943921][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   44.976043][ T5845] team0: Port device team_slave_0 added
[   44.982489][ T5845] team0: Port device team_slave_1 added
[   45.002147][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   45.005091][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.015553][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   45.021161][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   45.023582][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.032521][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   45.068839][ T5845] hsr_slave_0: entered promiscuous mode
[   45.071285][ T5845] hsr_slave_1: entered promiscuous mode
[   45.073400][ T5845] debugfs: 'hsr0' already exists in 'hsr'
[   45.075309][ T5845] Cannot create hsr debugfs directory
[   45.084477][ T5836] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   45.091586][ T5836] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   45.099774][ T5836] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   45.107436][ T5836] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   45.129097][ T5840] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   45.140837][ T5840] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   45.144390][ T5840] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   45.150594][ T5840] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   45.167757][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.170201][ T5836] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.172707][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.175071][ T5836] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.186677][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.189161][ T5840] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.191854][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.194521][ T5840] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.199457][ T5845] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   45.203520][ T5845] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   45.208274][ T5845] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   45.212528][ T5845] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   45.233341][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.235783][ T5845] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.238202][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.240539][ T5845] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.266696][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0
[   45.270240][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[   45.280557][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   45.285958][   T52] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.288598][   T52] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.291749][   T52] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.294737][   T52] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.299304][   T52] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.302154][   T52] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.309914][ T5840] 8021q: adding VLAN 0 to HW filter on device team0
[   45.315959][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[   45.320002][  T491] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.322377][  T491] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.327423][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   45.331786][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.334194][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.339050][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.341595][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.356960][  T491] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.359408][  T491] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.367353][  T491] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.369910][  T491] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.373090][  T491] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.375769][  T491] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.468426][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[   45.494488][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0
[   45.501397][ T5836] veth0_vlan: entered promiscuous mode
[   45.507339][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   45.513299][ T5836] veth1_vlan: entered promiscuous mode
[   45.527786][ T5840] veth0_vlan: entered promiscuous mode
[   45.537588][ T5836] veth0_macvtap: entered promiscuous mode
[   45.543964][ T5840] veth1_vlan: entered promiscuous mode
[   45.549316][ T5836] veth1_macvtap: entered promiscuous mode
[   45.553031][ T5845] veth0_vlan: entered promiscuous mode
[   45.559920][ T5845] veth1_vlan: entered promiscuous mode
[   45.563205][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[   45.573311][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[   45.578911][ T5840] veth0_macvtap: entered promiscuous mode
[   45.586941][ T5840] veth1_macvtap: entered promiscuous mode
[   45.592313][ T5890] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   45.598897][ T5890] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   45.602595][ T5890] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   45.607233][ T5845] veth0_macvtap: entered promiscuous mode
[   45.611627][ T5890] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   45.619228][ T5845] veth1_macvtap: entered promiscuous mode
[   45.623148][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0
[   45.632609][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1
[   45.642005][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   45.645121][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   45.651280][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   45.661032][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   45.664927][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   45.668697][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   45.681096][ T5890] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   45.684787][ T5890] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   45.693049][ T5890] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   45.698775][ T5890] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   45.704244][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   45.708378][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   45.731286][  T491] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   45.739137][  T491] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   45.750969][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   45.754094][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   45.760126][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   45.765176][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   45.783369][ T5836] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   45.791719][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   45.797247][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   45.820848][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   45.825151][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   45.830768][ T5910] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET)
[   45.842447][ T5912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'.
[   45.899958][ T5919] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   46.039930][ T5926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6'.
[   46.043002][ T5926] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6'.
[   46.049297][   T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   46.049319][ T5926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6'.
[   46.053075][   T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   46.059963][   T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   46.063128][   T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   46.065563][ T5926] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6'.
[   46.069924][ T5926] Zero length message leads to an empty skb
[   46.435680][ T5849] Bluetooth: hci0: command tx timeout
[   46.515793][   T54] Bluetooth: hci1: command tx timeout
[   46.518057][ T5849] Bluetooth: hci2: command tx timeout
[   47.468748][ T5930] sctp: [Deprecated]: syz.1.8 (pid 5930) Use of int in max_burst socket option deprecated.
[   47.468748][ T5930] Use struct sctp_assoc_value instead
[   48.515543][ T5849] Bluetooth: hci0: command tx timeout
[   48.595643][   T54] Bluetooth: hci1: command tx timeout
[   48.596235][ T5849] Bluetooth: hci2: command tx timeout
[   49.029086][ T5945] Bluetooth: MGMT ver 1.23
[   49.199578][   T13] syzkaller0: tun_net_xmit 76
[   49.201332][   T13] syzkaller0: tun_net_xmit 48
[   49.208168][ T5955] syzkaller0: create flow: hash 148164212 index 1
[   49.213274][ T5954] syzkaller0: delete flow: hash 148164212 index 1
[   49.633515][ T5976] sctp: [Deprecated]: syz.0.24 (pid 5976) Use of int in max_burst socket option deprecated.
[   49.633515][ T5976] Use struct sctp_assoc_value instead
[   49.823452][ T5990] netlink: 68 bytes leftover after parsing attributes in process `syz.0.28'.
[   49.905161][ T5992] netlink: 480 bytes leftover after parsing attributes in process `syz.1.29'.
[   50.141694][ T6017] geneve2: entered promiscuous mode
[   50.144751][   T13] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[   50.149554][   T13] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[   50.153060][   T13] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[   50.157410][   T13] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[   50.157461][ T6017] sctp: [Deprecated]: syz.0.36 (pid 6017) Use of int in max_burst socket option deprecated.
[   50.157461][ T6017] Use struct sctp_assoc_value instead
[   50.380954][ T6022] pim6reg1: entered promiscuous mode
[   50.383140][ T6022] pim6reg1: entered allmulticast mode
[   50.533115][ T6026] netlink: 'syz.2.39': attribute type 4 has an invalid length.
[   50.591127][ T6029] netlink: 844 bytes leftover after parsing attributes in process `syz.2.40'.
[   50.605504][ T5849] Bluetooth: hci0: command tx timeout
[   50.608930][ T6029] netlink: 20 bytes leftover after parsing attributes in process `syz.2.40'.
[   50.666698][ T6031] netlink: 92 bytes leftover after parsing attributes in process `syz.2.41'.
[   50.675951][ T5849] Bluetooth: hci2: command tx timeout
[   50.677887][ T5849] Bluetooth: hci1: command tx timeout
[   50.748034][ T6033] syz.2.42 (6033) used greatest stack depth: 19752 bytes left
[   50.937154][ T6044] __nla_validate_parse: 1 callbacks suppressed
[   50.937166][ T6044] netlink: 4 bytes leftover after parsing attributes in process `syz.1.45'.
[   50.992575][ T6047] sctp: [Deprecated]: syz.1.47 (pid 6047) Use of int in max_burst socket option deprecated.
[   50.992575][ T6047] Use struct sctp_assoc_value instead
[   51.043217][ T6051] syzkaller1: entered promiscuous mode
[   51.045864][ T6051] syzkaller1: entered allmulticast mode
[   51.101981][ T6063] netlink: 4 bytes leftover after parsing attributes in process `syz.2.53'.
[   51.178639][ T6072] xt_HMARK: proto mask must be zero with L3 mode
[   51.189381][ T6070] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   51.197081][ T6070] tipc: Started in network mode
[   51.199027][ T6070] tipc: Node identity 9e569e02b2a4, cluster identity 4711
[   51.201645][ T6070] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   51.271011][ T6069] tipc: Disabling bearer <eth:syzkaller0>
[   51.297706][   T13] syzkaller0: tun_net_xmit 76
[   51.299614][   T13] syzkaller0: tun_net_xmit 48
[   51.300329][ T6079] syzkaller0: create flow: hash 148164212 index 1
[   51.308642][ T6078] syzkaller0: delete flow: hash 148164212 index 1
[   51.501267][ T6087] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   51.596515][ T6094] netlink: 'syz.2.64': attribute type 10 has an invalid length.
[   51.599450][ T6094] macvlan0: entered promiscuous mode
[   51.604686][ T6094] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[   51.614457][ T6094] netlink: 32 bytes leftover after parsing attributes in process `syz.2.64'.
[   51.624340][ T6095] netlink: 44 bytes leftover after parsing attributes in process `syz.1.63'.
[   51.635004][ T6095] netlink: 19 bytes leftover after parsing attributes in process `syz.1.63'.
[   51.638783][ T6095] netlink: 'syz.1.63': attribute type 6 has an invalid length.
[   51.641333][ T6095] netlink: 'syz.1.63': attribute type 4 has an invalid length.
[   51.652144][ T6094] netlink: 'syz.2.64': attribute type 4 has an invalid length.
[   51.676521][ T6099] netlink: 68 bytes leftover after parsing attributes in process `syz.2.65'.
[   52.486633][ T6114] netlink: 12 bytes leftover after parsing attributes in process `syz.0.68'.
[   52.675996][   T54] Bluetooth: hci0: command tx timeout
[   52.755956][   T54] Bluetooth: hci1: command tx timeout
[   52.758351][   T54] Bluetooth: hci2: command tx timeout
[   53.340980][ T6212] sctp: [Deprecated]: syz.2.77 (pid 6212) Use of int in max_burst socket option deprecated.
[   53.340980][ T6212] Use struct sctp_assoc_value instead
[   53.358650][ T6215] netlink: 20 bytes leftover after parsing attributes in process `syz.0.78'.
[   53.394192][ T6217] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   53.456175][ T6221] syzkaller0: tun_chr_ioctl cmd 1074025673
[   53.473218][ T6221] syzkaller0: create flow: hash 148164212 index 1
[   53.481299][   T13] syzkaller0: tun_net_xmit 76
[   53.483126][   T13] syzkaller0: tun_net_xmit 48
[   53.487684][ T6220] syzkaller0: delete flow: hash 148164212 index 1
[   53.612170][   T13] syzkaller0: tun_net_xmit 76
[   53.613910][   T13] syzkaller0: tun_net_xmit 48
[   53.618544][ T6232] syzkaller0: create flow: hash 148164212 index 1
[   53.627058][ T6234] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   53.630100][ T6234] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   53.635636][    T9] syzkaller0: tun_net_xmit 76
[   53.642495][ T6231] syzkaller0: delete flow: hash 148164212 index 1
[   53.847980][ T6242] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   53.851236][ T6242] syzkaller0: entered promiscuous mode
[   53.853228][ T6242] syzkaller0: entered allmulticast mode
[   53.863012][ T6242] tipc: Resetting bearer <eth:syzkaller0>
[   53.899272][ T6239] tipc: Resetting bearer <eth:syzkaller0>
[   53.903358][ T6239] tipc: Disabling bearer <eth:syzkaller0>
[   53.910648][ T6248] syzkaller1: entered promiscuous mode
[   53.912649][ T6248] syzkaller1: entered allmulticast mode
[   54.050234][ T6257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.91'.
[   54.195012][   T12] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[   54.520075][ T6308] Bluetooth: MGMT ver 1.23
[   54.801261][ T6348] netlink: 'syz.2.100': attribute type 7 has an invalid length.
[   54.814037][ T6348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.100'.
[   54.830171][ T6348] bridge1: port 1(bond1) entered blocking state
[   54.832690][ T6348] bridge1: port 1(bond1) entered disabled state
[   54.835629][ T5849] Bluetooth: hci2: command tx timeout
[   54.836906][ T6348] bond1: entered allmulticast mode
[   55.016317][ T6365] sctp: [Deprecated]: syz.2.101 (pid 6365) Use of int in max_burst socket option deprecated.
[   55.016317][ T6365] Use struct sctp_assoc_value instead
[   55.245196][ T6386] sctp: [Deprecated]: syz.1.107 (pid 6386) Use of int in max_burst socket option deprecated.
[   55.245196][ T6386] Use struct sctp_assoc_value instead
[   55.453994][ T6396] netlink: 'syz.1.111': attribute type 1 has an invalid length.
[   55.486548][ T6396] syzkaller1: entered promiscuous mode
[   55.488440][ T6396] syzkaller1: entered allmulticast mode
[   55.538533][ T6404] netlink: 'syz.0.113': attribute type 11 has an invalid length.
[   55.706191][ T6417] syzkaller1: entered promiscuous mode
[   55.707996][ T6417] syzkaller1: entered allmulticast mode
[   55.851306][   T12] syzkaller0: tun_net_xmit 76
[   55.851408][ T6425] syzkaller0: create flow: hash 3049610709 index 1
[   55.852920][   T12] syzkaller0: tun_net_xmit 48
[   55.873359][ T6424] syzkaller0: delete flow: hash 3049610709 index 1
[   55.954509][ T6433] __nla_validate_parse: 5 callbacks suppressed
[   55.954519][ T6433] netlink: 68 bytes leftover after parsing attributes in process `syz.0.122'.
[   55.994320][ T6435] warning: `syz.1.123' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   56.001169][ T6435] openvswitch: netlink: ct_state flags 0000ee01 unsupported
[   56.168858][ T6445] syzkaller0: create flow: hash 148164212 index 1
[   56.171381][ T6446] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (128)
[   56.176904][ T6443] syzkaller0: delete flow: hash 148164212 index 1
[   56.259982][ T6449] netlink: 830 bytes leftover after parsing attributes in process `syz.0.128'.
[   56.603706][ T6467] netlink: 'syz.2.133': attribute type 1 has an invalid length.
[   56.606996][ T6467] netlink: 44 bytes leftover after parsing attributes in process `syz.2.133'.
[   56.742530][ T6478] syzkaller1: entered promiscuous mode
[   56.744381][ T6478] syzkaller1: entered allmulticast mode
[   56.876286][   T13] syzkaller0: tun_net_xmit 76
[   56.878201][   T13] syzkaller0: tun_net_xmit 48
[   56.878366][ T6487] syzkaller0: create flow: hash 1459516004 index 1
[   56.889376][ T6485] syzkaller0: delete flow: hash 1459516004 index 1
[   57.006807][ T6498] syzkaller1: entered promiscuous mode
[   57.009277][ T6498] syzkaller1: entered allmulticast mode
[   57.019053][ T6502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.144'.
[   57.029089][ T6502] syzkaller1: entered promiscuous mode
[   57.031005][ T6502] syzkaller1: entered allmulticast mode
[   57.102666][ T6509] netlink: 'syz.1.146': attribute type 21 has an invalid length.
[   57.108053][ T6513] veth1_to_bridge: entered allmulticast mode
[   57.111514][  T491] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.114599][ T6509] netlink: 132 bytes leftover after parsing attributes in process `syz.1.146'.
[   57.119277][ T6509] openvswitch: netlink: Key type 16144 is out of range max 32
[   57.129938][   T24] hid (null): unknown global tag 0xe
[   57.131654][   T24] hid (null): unknown global tag 0xd
[   57.136446][   T24] hid (null): report_id 0 is invalid
[   57.176913][ T6521] sctp: [Deprecated]: syz.2.149 (pid 6521) Use of int in max_burst socket option deprecated.
[   57.176913][ T6521] Use struct sctp_assoc_value instead
[   57.253426][ T6526] syzkaller1: entered promiscuous mode
[   57.255468][ T6526] syzkaller1: entered allmulticast mode
[   57.312253][ T6528] netlink: 12 bytes leftover after parsing attributes in process `syz.1.152'.
[   57.322947][ T6529] netlink: 12 bytes leftover after parsing attributes in process `syz.1.152'.
[   57.353584][ T6533] netlink: 12 bytes leftover after parsing attributes in process `syz.0.153'.
[   57.469101][   T24] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   57.471501][   T24] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   57.473897][   T24] hid-generic 0005:16BF:5505.0001: reserved main item tag 0xe
[   57.478976][ T6539] syzkaller1: entered promiscuous mode
[   57.480881][ T6539] syzkaller1: entered allmulticast mode
[   57.481383][   T24] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   57.485348][   T24] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   57.488819][   T24] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   57.491540][   T24] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   57.493970][   T24] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   57.498083][   T24] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   57.501092][   T24] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   57.504153][   T24] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   57.518812][   T24] hid-generic 0005:16BF:5505.0001: collection stack underflow
[   57.521455][   T24] hid-generic 0005:16BF:5505.0001: item 0 4 0 12 parsing failed
[   57.524141][   T24] hid-generic 0005:16BF:5505.0001: probe with driver hid-generic failed with error -22
[   57.688143][   T13] syzkaller0: tun_net_xmit 76
[   57.689783][   T13] syzkaller0: tun_net_xmit 48
[   57.693441][ T6547] syzkaller0: create flow: hash 148164212 index 1
[   57.698128][ T6546] syzkaller0: delete flow: hash 148164212 index 1
[   57.786887][ T6549] netlink: 28 bytes leftover after parsing attributes in process `syz.1.159'.
[   57.789908][ T6549] openvswitch: netlink: Flow key attr not present in new flow.
[   57.794485][ T6549] netlink: 28 bytes leftover after parsing attributes in process `syz.1.159'.
[   58.102832][ T6569] sctp: [Deprecated]: syz.1.162 (pid 6569) Use of int in max_burst socket option deprecated.
[   58.102832][ T6569] Use struct sctp_assoc_value instead
[   58.279521][ T6583] sctp: [Deprecated]: syz.0.166 (pid 6583) Use of int in max_burst socket option deprecated.
[   58.279521][ T6583] Use struct sctp_assoc_value instead
[   58.290695][ T6585] netlink: 'syz.2.167': attribute type 15 has an invalid length.
[   58.543965][ T6591] syzkaller1: entered promiscuous mode
[   58.546622][ T6591] syzkaller1: entered allmulticast mode
[   58.605682][ T5849] Bluetooth: hci2: command tx timeout
[   58.631779][ T6598] syzkaller1: entered promiscuous mode
[   58.633620][ T6598] syzkaller1: entered allmulticast mode
[   59.497782][ T6671] batadv_slave_1: entered promiscuous mode
[   59.508176][ T6670] batadv_slave_1: left promiscuous mode
[   59.522336][ T6669] syzkaller1: entered promiscuous mode
[   59.524585][ T6669] syzkaller1: entered allmulticast mode
[   59.704603][ T6685] netlink: 'syz.2.193': attribute type 23 has an invalid length.
[   59.784825][ T6690] syzkaller0: create flow: hash 148164212 index 1
[   59.794338][ T6689] syzkaller0: delete flow: hash 148164212 index 1
[   59.924303][ T6703] syzkaller1: entered promiscuous mode
[   59.926769][ T6703] syzkaller1: entered allmulticast mode
[   59.959010][ T6702] NCSI netlink: No device for ifindex 0
[   60.074327][ T6724] sctp: [Deprecated]: syz.1.204 (pid 6724) Use of int in max_burst socket option deprecated.
[   60.074327][ T6724] Use struct sctp_assoc_value instead
[   60.170498][   T13] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   60.173813][ T6728] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   60.227956][ T6730] sctp: [Deprecated]: syz.1.206 (pid 6730) Use of int in max_burst socket option deprecated.
[   60.227956][ T6730] Use struct sctp_assoc_value instead
[   61.010210][ T6770] __nla_validate_parse: 10 callbacks suppressed
[   61.010220][ T6770] netlink: 60 bytes leftover after parsing attributes in process `syz.2.218'.
[   61.103247][ T6777] netlink: 12 bytes leftover after parsing attributes in process `syz.1.220'.
[   61.213628][ T6787] syzkaller1: entered promiscuous mode
[   61.215770][ T6787] syzkaller1: entered allmulticast mode
[   61.222734][ T6787] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   61.227272][ T6786] tipc: Disabling bearer <eth:syzkaller0>
[   61.427643][ T6799] netlink: 'syz.0.227': attribute type 4 has an invalid length.
[   61.427645][ T6800] netlink: 'syz.0.227': attribute type 4 has an invalid length.
[   61.622961][ T6813] syzkaller1: entered promiscuous mode
[   61.633045][ T6813] syzkaller1: entered allmulticast mode
[   61.872433][ T6828] syzkaller1: entered promiscuous mode
[   61.874385][ T6828] syzkaller1: entered allmulticast mode
[   61.878047][ T6828] raw_sendmsg: syz.0.235 forgot to set AF_INET. Fix it!
[   62.567593][ T6836] syzkaller1: entered promiscuous mode
[   62.569720][ T6836] syzkaller1: entered allmulticast mode
[   62.974265][ T6856] syzkaller0: entered promiscuous mode
[   62.978800][ T6856] syzkaller0: entered allmulticast mode
[   62.982170][ T5890] syzkaller0: tun_net_xmit 70
[   62.984018][ T6856] syzkaller0: tun_chr_ioctl cmd 1074025677
[   62.986813][ T6856] syzkaller0: Linktype set failed because interface is up
[   62.990482][ T6856] netlink: 12 bytes leftover after parsing attributes in process `syz.1.245'.
[   63.063139][ T6861] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   63.222842][    C0] vcan0: j1939_tp_rxtimer: 0xffff888030910c00: rx timeout, send abort
[   63.225817][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888030910c00: 0x10000: (3) A timeout occurred and this is the connection abort to close the session.
[   63.327010][ T5890] syzkaller0: tun_net_xmit 76
[   63.328701][ T5890] syzkaller0: tun_net_xmit 48
[   63.329706][ T6881] syzkaller0: create flow: hash 148164212 index 1
[   63.334154][ T6880] syzkaller0: delete flow: hash 148164212 index 1
[   63.434353][ T6884] syzkaller0: tun_chr_ioctl cmd 1074025675
[   63.437200][ T6884] syzkaller0: persist disabled
[   63.562395][ T6895] sctp: [Deprecated]: syz.0.254 (pid 6895) Use of int in max_burst socket option deprecated.
[   63.562395][ T6895] Use struct sctp_assoc_value instead
[   63.679718][ T6907] syzkaller1: entered allmulticast mode
[   63.915303][   T12] syzkaller0: tun_net_xmit 76
[   63.917125][   T12] syzkaller0: tun_net_xmit 48
[   64.064621][ T6920] openvswitch: netlink: ct_state flags 0000ee01 unsupported
[   64.111225][ T6922] netlink: 68 bytes leftover after parsing attributes in process `syz.1.262'.
[   64.134407][ T6922] netlink: 68 bytes leftover after parsing attributes in process `syz.1.262'.
[   64.154336][ T6929] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[   64.275758][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   64.539954][ T6963] syzkaller0: entered promiscuous mode
[   64.541891][ T6963] syzkaller0: entered allmulticast mode
[   64.664575][ T6967] netlink: 12 bytes leftover after parsing attributes in process `syz.2.272'.
[   64.684052][ T6968] netlink: 32 bytes leftover after parsing attributes in process `syz.0.273'.
[   64.688780][ T6968] netlink: 36 bytes leftover after parsing attributes in process `syz.0.273'.
[   64.779159][ T6978] syzkaller0: create flow: hash 148164212 index 1
[   64.794222][ T6980] sctp: [Deprecated]: syz.0.276 (pid 6980) Use of int in max_burst socket option deprecated.
[   64.794222][ T6980] Use struct sctp_assoc_value instead
[   65.034080][ T5890] syzkaller0: tun_net_xmit 76
[   65.036456][ T5890] syzkaller0: tun_net_xmit 48
[   65.055765][    T9] syzkaller0: tun_net_xmit 76
[   65.139857][ T6983] netlink: 12 bytes leftover after parsing attributes in process `syz.1.277'.
[   65.143406][ T6983] netlink: 68 bytes leftover after parsing attributes in process `syz.1.277'.
[   65.546353][ T6972] syzkaller0: delete flow: hash 148164212 index 1
[   65.724029][   T12] syzkaller0: tun_net_xmit 76
[   65.727147][   T12] syzkaller0: tun_net_xmit 48
[   65.731693][ T7005] syzkaller0: create flow: hash 148164212 index 1
[   65.745598][    T9] syzkaller0: tun_net_xmit 76
[   65.752706][ T7002] syzkaller0: delete flow: hash 148164212 index 1
[   65.913439][ T7034] syzkaller1: entered promiscuous mode
[   65.917920][ T7034] syzkaller1: entered allmulticast mode
[   66.022155][   T12] syzkaller0: tun_net_xmit 76
[   66.025041][   T12] syzkaller0: tun_net_xmit 48
[   66.025136][ T7050] syzkaller0: create flow: hash 148164212 index 1
[   66.032778][ T7049] syzkaller0: delete flow: hash 148164212 index 1
[   66.195307][ T7074] __nla_validate_parse: 6 callbacks suppressed
[   66.195316][ T7074] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.303'.
[   66.205578][ T7074] syzkaller1: entered promiscuous mode
[   66.207392][ T7074] syzkaller1: entered allmulticast mode
[   66.211104][ T7074] syzkaller1: left promiscuous mode
[   66.212883][ T7074] syzkaller1: left allmulticast mode
[   66.632098][ T7116] netlink: 277 bytes leftover after parsing attributes in process `syz.1.315'.
[   66.643985][ T7121] netlink: 68 bytes leftover after parsing attributes in process `syz.0.317'.
[   67.073437][   T12] syzkaller0: tun_net_xmit 76
[   67.075115][   T12] syzkaller0: tun_net_xmit 48
[   67.112021][ T7144] netlink: 24 bytes leftover after parsing attributes in process `syz.2.325'.
[   67.203809][ T7148] syzkaller0: create flow: hash 148164212 index 1
[   67.207511][ T7147] syzkaller0: delete flow: hash 148164212 index 1
[   67.241585][ T7151] netlink: 68 bytes leftover after parsing attributes in process `syz.0.328'.
[   67.773822][   T12] syzkaller0: tun_net_xmit 76
[   67.774741][ T7164] syzkaller0: create flow: hash 148164212 index 1
[   67.776216][   T12] syzkaller0: tun_net_xmit 48
[   67.781425][ T7163] syzkaller0: delete flow: hash 148164212 index 1
[   67.904161][ T7166] netlink: 28 bytes leftover after parsing attributes in process `syz.1.332'.
[   68.006085][ T7169] sctp: [Deprecated]: syz.1.333 (pid 7169) Use of int in max_burst socket option deprecated.
[   68.006085][ T7169] Use struct sctp_assoc_value instead
[   68.261688][ T7184] syzkaller1: entered promiscuous mode
[   68.263558][ T7184] syzkaller1: entered allmulticast mode
[   68.350639][ T7193] netlink: 68 bytes leftover after parsing attributes in process `syz.0.340'.
[   68.449717][ T7199] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   68.452253][ T7199] IPv6: NLM_F_CREATE should be set when creating new route
[   68.454632][ T7199] IPv6: NLM_F_CREATE should be set when creating new route
[   68.457116][ T7202] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.342'.
[   68.501433][ T7207] sctp: [Deprecated]: syz.0.344 (pid 7207) Use of int in max_burst socket option deprecated.
[   68.501433][ T7207] Use struct sctp_assoc_value instead
[   68.546461][ T7209] netlink: 12 bytes leftover after parsing attributes in process `syz.2.345'.
[   68.844755][ T7223] netlink: 248 bytes leftover after parsing attributes in process `syz.2.349'.
[   68.848239][ T7223] vlan0: entered promiscuous mode
[   68.850274][ T7223] vlan0: entered allmulticast mode
[   68.852097][ T7223] veth0_vlan: entered allmulticast mode
[   68.916780][ T7226] syzkaller1: entered promiscuous mode
[   68.919043][ T7226] syzkaller1: entered allmulticast mode
[   69.241515][ T7250] netlink: 'syz.1.355': attribute type 10 has an invalid length.
[   69.246533][ T7251] netlink: 'syz.1.355': attribute type 10 has an invalid length.
[   69.458438][ T7275] sctp: [Deprecated]: syz.2.363 (pid 7275) Use of int in max_burst socket option deprecated.
[   69.458438][ T7275] Use struct sctp_assoc_value instead
[   69.511892][ T7280] team0: entered allmulticast mode
[   69.513716][ T7280] team_slave_0: entered allmulticast mode
[   69.521254][ T7280] team_slave_1: entered allmulticast mode
[   69.547995][ T7285] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   69.624222][ T7287] bond2 (unregistering): Released all slaves
[   69.754778][ T7296] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode
[   69.757420][ T7296] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   69.952165][ T7313] syzkaller1: entered allmulticast mode
[   70.177047][ T7323] syzkaller1: entered promiscuous mode
[   70.179083][ T7323] syzkaller1: entered allmulticast mode
[   70.273323][ T7326] syzkaller1: entered promiscuous mode
[   70.275254][ T7326] syzkaller1: entered allmulticast mode
[   70.533633][ T7338] syzkaller1: entered promiscuous mode
[   70.535965][ T7338] syzkaller1: entered allmulticast mode
[   70.572564][ T7341] syzkaller1: entered promiscuous mode
[   70.574943][ T7341] syzkaller1: entered allmulticast mode
[   70.665230][   T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   70.669456][   T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   70.677541][   T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   70.680611][   T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   70.705122][   T13] syzkaller0: tun_net_xmit 76
[   70.707543][   T13] syzkaller0: tun_net_xmit 48
[   70.719278][ T7345] syzkaller0: create flow: hash 148164212 index 1
[   70.723247][ T7343] syzkaller0: delete flow: hash 148164212 index 1
[   70.866756][ T7363] netlink: 'syz.1.390': attribute type 6 has an invalid length.
[   70.997542][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   70.999700][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.226770][ T7391] __nla_validate_parse: 16 callbacks suppressed
[   71.226779][ T7391] netlink: 12 bytes leftover after parsing attributes in process `syz.2.398'.
[   71.233449][ T7391] netlink: 68 bytes leftover after parsing attributes in process `syz.2.398'.
[   71.238704][ T7392] netlink: 68 bytes leftover after parsing attributes in process `syz.2.398'.
[   71.288354][ T7391] syzkaller1: entered promiscuous mode
[   71.290599][ T7391] syzkaller1: entered allmulticast mode
[   71.360918][ T7396] netlink: 16 bytes leftover after parsing attributes in process `syz.1.400'.
[   71.474833][ T7406] sctp: [Deprecated]: syz.2.402 (pid 7406) Use of int in max_burst socket option deprecated.
[   71.474833][ T7406] Use struct sctp_assoc_value instead
[   71.723845][ T5846] syzkaller0: tun_net_xmit 76
[   71.730001][ T7425] syzkaller0: create flow: hash 148164212 index 1
[   71.732312][ T5846] syzkaller0: tun_net_xmit 48
[   71.746216][ T5906] syzkaller0: tun_net_xmit 76
[   71.788111][ T7424] syzkaller0: delete flow: hash 148164212 index 1
[   71.872987][ T7431] sctp: [Deprecated]: syz.1.410 (pid 7431) Use of int in max_burst socket option deprecated.
[   71.872987][ T7431] Use struct sctp_assoc_value instead
[   72.165933][ T7449] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode
[   72.171230][ T7449] netlink: 'syz.1.418': attribute type 1 has an invalid length.
[   72.173775][ T7449] netlink: 144 bytes leftover after parsing attributes in process `syz.1.418'.
[   72.176969][ T7449] netlink: 96 bytes leftover after parsing attributes in process `syz.1.418'.
[   72.221227][ T7453] netlink: 184 bytes leftover after parsing attributes in process `syz.2.420'.
[   72.275614][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   72.307823][ T7457] netlink: 68 bytes leftover after parsing attributes in process `syz.1.421'.
[   72.377344][ T7464] netlink: 12 bytes leftover after parsing attributes in process `syz.1.423'.
[   72.377787][ T7466] netlink: 68 bytes leftover after parsing attributes in process `syz.1.423'.
[   72.461277][ T7470] syzkaller0: tun_chr_ioctl cmd 1074025675
[   72.463732][ T7470] syzkaller0: persist disabled
[   72.495951][ T7470] syzkaller0: create flow: hash 148164212 index 1
[   72.516088][   T13] syzkaller0: tun_net_xmit 76
[   72.517940][   T13] syzkaller0: tun_net_xmit 48
[   72.545538][   T24] syzkaller0: tun_net_xmit 76
[   73.237541][ T7468] syzkaller0: delete flow: hash 148164212 index 1
[   73.822784][ T7527] syzkaller1: entered promiscuous mode
[   73.825184][ T7527] syzkaller1: entered allmulticast mode
[   73.952904][ T7530] netlink: 'syz.2.442': attribute type 1 has an invalid length.
[   74.001363][ T7542] netlink: 'syz.1.445': attribute type 2 has an invalid length.
[   74.005766][ T7542] : entered promiscuous mode
[   74.126742][ T7553] veth1: entered promiscuous mode
[   74.129479][ T7553] netlink: 'syz.0.448': attribute type 1 has an invalid length.
[   74.132079][ T7553] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check.
[   74.261146][ T7559] tipc: Started in network mode
[   74.263003][ T7559] tipc: Node identity 924252af31db, cluster identity 4711
[   74.266370][ T7559] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   74.287165][ T7559] syzkaller0: entered promiscuous mode
[   74.289224][ T7559] syzkaller0: entered allmulticast mode
[   74.291864][ T7559] tipc: Resetting bearer <eth:syzkaller0>
[   74.299270][ T7561] netlink: 'syz.2.451': attribute type 2 has an invalid length.
[   74.303111][ T7561] netlink: 'syz.2.451': attribute type 1 has an invalid length.
[   74.309616][ T7558] tipc: Resetting bearer <eth:syzkaller0>
[   74.327693][ T7558] tipc: Disabling bearer <eth:syzkaller0>
[   74.414205][ T7563] sctp: [Deprecated]: syz.2.452 (pid 7563) Use of int in max_burst socket option deprecated.
[   74.414205][ T7563] Use struct sctp_assoc_value instead
[   74.419994][ T7564] sctp: [Deprecated]: syz.2.452 (pid 7564) Use of int in max_burst socket option deprecated.
[   74.419994][ T7564] Use struct sctp_assoc_value instead
[   74.467934][ T5292] udevd[5292]: worker [5839] terminated by signal 33 (Unknown signal 33)
[   74.476241][ T5292] udevd[5292]: worker [5842] terminated by signal 33 (Unknown signal 33)
[   74.486275][ T5292] udevd[5292]: worker [5841] terminated by signal 33 (Unknown signal 33)
[   74.599906][ T6517] ==================================================================
[   74.602576][ T6517] BUG: KASAN: slab-use-after-free in __mutex_lock+0x801/0x1350
[   74.605437][ T6517] Read of size 8 at addr ffff88802a3840a0 by task khidpd_16bf5505/6517
[   74.608782][ T6517] 
[   74.609793][ T6517] CPU: 0 UID: 0 PID: 6517 Comm: khidpd_16bf5505 Not tainted syzkaller #0 PREEMPT(full) 
[   74.609808][ T6517] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   74.609815][ T6517] Call Trace:
[   74.609821][ T6517]  <TASK>
[   74.609827][ T6517]  dump_stack_lvl+0x189/0x250
[   74.609845][ T6517]  ? __pfx_dump_stack_lvl+0x10/0x10
[   74.609857][ T6517]  ? lock_release+0x4b/0x3e0
[   74.609874][ T6517]  ? __virt_addr_valid+0x4a5/0x5c0
[   74.609884][ T6517]  print_report+0xca/0x240
[   74.609894][ T6517]  ? __mutex_lock+0x801/0x1350
[   74.609903][ T6517]  kasan_report+0x118/0x150
[   74.609918][ T6517]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   74.609932][ T6517]  ? __mutex_lock+0x801/0x1350
[   74.609944][ T6517]  __mutex_lock+0x801/0x1350
[   74.609954][ T6517]  ? __mutex_lock+0x5bb/0x1350
[   74.609964][ T6517]  ? l2cap_unregister_user+0x6a/0x1b0
[   74.609974][ T6517]  ? __pfx___mutex_lock+0x10/0x10
[   74.609990][ T6517]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   74.610005][ T6517]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   74.610020][ T6517]  l2cap_unregister_user+0x6a/0x1b0
[   74.610034][ T6517]  hidp_session_thread+0x3c9/0x410
[   74.610050][ T6517]  ? __pfx_hidp_session_thread+0x10/0x10
[   74.610059][ T6517]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   74.610071][ T6517]  ? __pfx_hidp_session_wake_function+0x10/0x10
[   74.610086][ T6517]  ? __pfx_hidp_session_wake_function+0x10/0x10
[   74.610099][ T6517]  ? __kthread_parkme+0x7b/0x200
[   74.610111][ T6517]  ? __kthread_parkme+0x1a1/0x200
[   74.610123][ T6517]  kthread+0x711/0x8a0
[   74.610137][ T6517]  ? __pfx_hidp_session_thread+0x10/0x10
[   74.610147][ T6517]  ? __pfx_kthread+0x10/0x10
[   74.610158][ T6517]  ? rcu_is_watching+0x15/0xb0
[   74.610169][ T6517]  ? __pfx_kthread+0x10/0x10
[   74.610181][ T6517]  ret_from_fork+0x3fc/0x770
[   74.610193][ T6517]  ? __pfx_ret_from_fork+0x10/0x10
[   74.610204][ T6517]  ? __switch_to_asm+0x39/0x70
[   74.610217][ T6517]  ? __switch_to_asm+0x33/0x70
[   74.610229][ T6517]  ? __pfx_kthread+0x10/0x10
[   74.610237][ T6517]  ret_from_fork_asm+0x1a/0x30
[   74.610254][ T6517]  </TASK>
[   74.610258][ T6517] 
[   74.679025][ T6517] Allocated by task 5845:
[   74.680480][ T6517]  kasan_save_track+0x3e/0x80
[   74.682302][ T6517]  __kasan_kmalloc+0x93/0xb0
[   74.684065][ T6517]  __kmalloc_noprof+0x27a/0x4f0
[   74.685975][ T6517]  hci_alloc_dev_priv+0x28/0x2060
[   74.688107][ T6517]  vhci_create_device+0x120/0x6e0
[   74.690268][ T6517]  vhci_write+0x3ce/0x4a0
[   74.692103][ T6517]  vfs_write+0x5c9/0xb30
[   74.693904][ T6517]  ksys_write+0x145/0x250
[   74.695760][ T6517]  do_syscall_64+0xfa/0x3b0
[   74.697574][ T6517]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.699769][ T6517] 
[   74.700576][ T6517] Freed by task 5845:
[   74.701904][ T6517]  kasan_save_track+0x3e/0x80
[   74.703452][ T6517]  kasan_save_free_info+0x46/0x50
[   74.705109][ T6517]  __kasan_slab_free+0x5b/0x80
[   74.706725][ T6517]  kfree+0x18e/0x440
[   74.707981][ T6517]  bt_host_release+0x82/0x90
[   74.709489][ T6517]  device_release+0x9c/0x1c0
[   74.710956][ T6517]  kobject_put+0x22b/0x480
[   74.712375][ T6517]  vhci_release+0x88/0xd0
[   74.713808][ T6517]  __fput+0x44c/0xa70
[   74.715124][ T6517]  task_work_run+0x1d4/0x260
[   74.716666][ T6517]  do_exit+0x6b5/0x2300
[   74.718047][ T6517]  do_group_exit+0x21c/0x2d0
[   74.719579][ T6517]  __x64_sys_exit_group+0x3f/0x40
[   74.721228][ T6517]  x64_sys_call+0x21f7/0x2200
[   74.722790][ T6517]  do_syscall_64+0xfa/0x3b0
[   74.724276][ T6517]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.726169][ T6517] 
[   74.726978][ T6517] Last potentially related work creation:
[   74.728849][ T6517]  kasan_save_stack+0x3e/0x60
[   74.730404][ T6517]  kasan_record_aux_stack+0xbd/0xd0
[   74.732111][ T6517]  insert_work+0x3d/0x330
[   74.733549][ T6517]  __queue_work+0xcd2/0xfb0
[   74.735052][ T6517]  queue_work_on+0x181/0x270
[   74.736578][ T6517]  l2cap_chan_send+0x1110/0x2790
[   74.738206][ T6517]  l2cap_sock_sendmsg+0x32e/0x4a0
[   74.739869][ T6517]  __sock_sendmsg+0x21c/0x270
[   74.741413][ T6517]  ____sys_sendmsg+0x52d/0x830
[   74.742999][ T6517]  ___sys_sendmsg+0x21f/0x2a0
[   74.744469][ T6517]  __sys_sendmmsg+0x227/0x430
[   74.745989][ T6517]  __x64_sys_sendmmsg+0xa0/0xc0
[   74.747511][ T6517]  do_syscall_64+0xfa/0x3b0
[   74.749196][ T6517]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.751279][ T6517] 
[   74.752084][ T6517] Second to last potentially related work creation:
[   74.754379][ T6517]  kasan_save_stack+0x3e/0x60
[   74.755951][ T6517]  kasan_record_aux_stack+0xbd/0xd0
[   74.757611][ T6517]  insert_work+0x3d/0x330
[   74.759003][ T6517]  __queue_work+0xcd2/0xfb0
[   74.760513][ T6517]  queue_work_on+0x181/0x270
[   74.762027][ T6517]  l2cap_chan_send+0x1110/0x2790
[   74.763676][ T6517]  l2cap_sock_sendmsg+0x32e/0x4a0
[   74.765321][ T6517]  __sock_sendmsg+0x21c/0x270
[   74.766873][ T6517]  ____sys_sendmsg+0x52d/0x830
[   74.768453][ T6517]  ___sys_sendmsg+0x21f/0x2a0
[   74.770025][ T6517]  __sys_sendmmsg+0x227/0x430
[   74.771608][ T6517]  __x64_sys_sendmmsg+0xa0/0xc0
[   74.773291][ T6517]  do_syscall_64+0xfa/0x3b0
[   74.774762][ T6517]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.776689][ T6517] 
[   74.777461][ T6517] The buggy address belongs to the object at ffff88802a384000
[   74.777461][ T6517]  which belongs to the cache kmalloc-8k of size 8192
[   74.781885][ T6517] The buggy address is located 160 bytes inside of
[   74.781885][ T6517]  freed 8192-byte region [ffff88802a384000, ffff88802a386000)
[   74.786316][ T6517] 
[   74.787125][ T6517] The buggy address belongs to the physical page:
[   74.789229][ T6517] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2a380
[   74.792078][ T6517] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[   74.794843][ T6517] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[   74.797350][ T6517] page_type: f5(slab)
[   74.798686][ T6517] raw: 00fff00000000040 ffff88801a442280 dead000000000100 dead000000000122
[   74.801454][ T6517] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[   74.804234][ T6517] head: 00fff00000000040 ffff88801a442280 dead000000000100 dead000000000122
[   74.807010][ T6517] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[   74.809798][ T6517] head: 00fff00000000003 ffffea0000a8e001 00000000ffffffff 00000000ffffffff
[   74.812594][ T6517] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[   74.815382][ T6517] page dumped because: kasan: bad access detected
[   74.817480][ T6517] page_owner tracks the page as allocated
[   74.819337][ T6517] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5671, tgid 5671 (init), ts 25167516936, free_ts 0
[   74.825424][ T6517]  post_alloc_hook+0x240/0x2a0
[   74.827087][ T6517]  get_page_from_freelist+0x21e4/0x22c0
[   74.828966][ T6517]  __alloc_frozen_pages_noprof+0x181/0x370
[   74.830974][ T6517]  alloc_pages_mpol+0x232/0x4a0
[   74.832701][ T6517]  allocate_slab+0x8a/0x370
[   74.834435][ T6517]  ___slab_alloc+0xbeb/0x1410
[   74.835914][ T6517]  __kmalloc_cache_noprof+0x296/0x3d0
[   74.837624][ T6517]  tomoyo_init_log+0x111f/0x1f70
[   74.839269][ T6517]  tomoyo_supervisor+0x340/0x1480
[   74.841200][ T6517]  tomoyo_env_perm+0x149/0x1e0
[   74.843015][ T6517]  tomoyo_find_next_domain+0x15cf/0x1aa0
[   74.844769][ T6517]  tomoyo_bprm_check_security+0x11c/0x180
[   74.846573][ T6517]  security_bprm_check+0x89/0x270
[   74.848210][ T6517]  bprm_execve+0x8ee/0x1450
[   74.849744][ T6517]  do_execveat_common+0x510/0x6a0
[   74.851398][ T6517]  __x64_sys_execve+0x94/0xb0
[   74.852904][ T6517] page_owner free stack trace missing
[   74.854614][ T6517] 
[   74.855407][ T6517] Memory state around the buggy address:
[   74.857239][ T6517]  ffff88802a383f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   74.859792][ T6517]  ffff88802a384000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   74.862302][ T6517] >ffff88802a384080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   74.864854][ T6517]                                ^
[   74.866482][ T6517]  ffff88802a384100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   74.869083][ T6517]  ffff88802a384180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   74.871599][ T6517] ==================================================================
[   74.875138][ T6517] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   74.877513][ T6517] CPU: 0 UID: 0 PID: 6517 Comm: khidpd_16bf5505 Not tainted syzkaller #0 PREEMPT(full) 
[   74.880549][ T6517] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   74.883710][ T6517] Call Trace:
[   74.884795][ T6517]  <TASK>
[   74.885803][ T6517]  dump_stack_lvl+0x99/0x250
[   74.887308][ T6517]  ? __asan_memcpy+0x40/0x70
[   74.888808][ T6517]  ? __pfx_dump_stack_lvl+0x10/0x10
[   74.890442][ T6517]  ? __pfx__printk+0x10/0x10
[   74.891908][ T6517]  vpanic+0x281/0x750
[   74.893166][ T6517]  ? __pfx_vpanic+0x10/0x10
[   74.894612][ T6517]  ? rcu_is_watching+0x15/0xb0
[   74.896190][ T6517]  panic+0xb9/0xc0
[   74.897399][ T6517]  ? __pfx_panic+0x10/0x10
[   74.898869][ T6517]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[   74.900753][ T6517]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   74.902592][ T6517]  ? __mutex_lock+0x801/0x1350
[   74.904170][ T6517]  check_panic_on_warn+0x89/0xb0
[   74.905760][ T6517]  ? __mutex_lock+0x801/0x1350
[   74.907252][ T6517]  end_report+0x78/0x160
[   74.908618][ T6517]  kasan_report+0x129/0x150
[   74.910078][ T6517]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   74.911961][ T6517]  ? __mutex_lock+0x801/0x1350
[   74.913473][ T6517]  __mutex_lock+0x801/0x1350
[   74.914942][ T6517]  ? __mutex_lock+0x5bb/0x1350
[   74.916472][ T6517]  ? l2cap_unregister_user+0x6a/0x1b0
[   74.918196][ T6517]  ? __pfx___mutex_lock+0x10/0x10
[   74.919785][ T6517]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   74.921647][ T6517]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   74.923495][ T6517]  l2cap_unregister_user+0x6a/0x1b0
[   74.925213][ T6517]  hidp_session_thread+0x3c9/0x410
[   74.926914][ T6517]  ? __pfx_hidp_session_thread+0x10/0x10
[   74.928726][ T6517]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   74.930641][ T6517]  ? __pfx_hidp_session_wake_function+0x10/0x10
[   74.932670][ T6517]  ? __pfx_hidp_session_wake_function+0x10/0x10
[   74.934704][ T6517]  ? __kthread_parkme+0x7b/0x200
[   74.936328][ T6517]  ? __kthread_parkme+0x1a1/0x200
[   74.937999][ T6517]  kthread+0x711/0x8a0
[   74.939354][ T6517]  ? __pfx_hidp_session_thread+0x10/0x10
[   74.941203][ T6517]  ? __pfx_kthread+0x10/0x10
[   74.942694][ T6517]  ? rcu_is_watching+0x15/0xb0
[   74.944266][ T6517]  ? __pfx_kthread+0x10/0x10
[   74.945799][ T6517]  ret_from_fork+0x3fc/0x770
[   74.947323][ T6517]  ? __pfx_ret_from_fork+0x10/0x10
[   74.948972][ T6517]  ? __switch_to_asm+0x39/0x70
[   74.950484][ T6517]  ? __switch_to_asm+0x33/0x70
[   74.952053][ T6517]  ? __pfx_kthread+0x10/0x10
[   74.953548][ T6517]  ret_from_fork_asm+0x1a/0x30
[   74.955061][ T6517]  </TASK>
[   74.956765][ T6517] Kernel Offset: disabled
[   74.958166][ T6517] Rebooting in 86400 seconds..

VM DIAGNOSIS:
17:20:07  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000074 RBX=0000000000000074 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90006b97370
R8 =ffff8880206e0237 R9 =1ffff110040dc046 R10=dffffc0000000000 R11=ffffffff854f22c0
R12=dffffc0000000000 R13=ffffffff99afd8e8 R14=ffffffff99df23e0 R15=0000000000000000
RIP=ffffffff854f233c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055a8cc2be200 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000500646968 XMM03=0000000000000000 ffff000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000171 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffff0000 ffffffffffffffff XMM09=0000000000000171 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000080000000 RBX=00000000000036b1 RCX=0000000000000000 RDX=0000000000000031
RSI=ffffffff8be33660 RDI=00000000ffffffff RBP=0000000000000001 RSP=ffffc900001c78c0
R8 =ffffe8ffffc22307 R9 =1ffffd1ffff84460 R10=dffffc0000000000 R11=ffffffff8b78b4a0
R12=0000000000000001 R13=0000000000000002 R14=00000031d2f6d5d6 R15=00000000000022e6
RIP=ffffffff8b78b4fb RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055dbfe3f1400 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=000000ff00000000 0000000000000000
XMM02=00ff000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
