last executing test programs:

2.204541163s ago: executing program 4 (id=138):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040), 0x4)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x8000}, 0x4)

2.114955761s ago: executing program 2 (id=141):
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x31)
ioctl$SIOCAX25NOUID(r0, 0x89e3, &(0x7f0000000000))
setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f00000001c0)={0xffff, "913f84"}, 0x6)

2.054061065s ago: executing program 2 (id=142):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d8000000150081044e81f782db44b9040a78080206000000040000a118000300ff05000006000e1208000f0100810401a80016eaa400010000005f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e00600000000d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bfffdccf85df947e5e0", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, r3)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r3)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r7, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0)
sendmsg$TIPC_NL_PEER_REMOVE(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1180000}, 0xc, &(0x7f00000000c0)={&(0x7f00000007c0)={0xa4, r7, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x4}, @TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20040040}, 0x24001000)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0xd0f, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x2}}, [@TCA_STAB={0x4}, @TCA_STAB={0x4}]}, 0x2c}}, 0x20004010)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000580)={&(0x7f0000000480), 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, r4, 0x1, 0x70bd25, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x5, 0x0, @udp='udp:syz2\x00'}}}}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x34, r10, 0x1, 0x70bd2c, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9b2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_DISABLE(r11, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000700)={0x14, r12, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r12, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x2048c40}, 0x4040004)

2.010598514s ago: executing program 4 (id=144):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r0, 0x0, 0x30, 0x0, &(0x7f0000000280)="61dfb0020866c667fc53b9265583e283d8ddef068c05608ffc450394321545000043aee3b6278051a7cb166483298871", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.884659758s ago: executing program 4 (id=146):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet(0x2, 0x5, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x3d, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
close(r1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="64000800787df731fb2348e1fcffffffc70ac0f0ee", @ANYRES16=r5, @ANYBLOB="0100fefffffffedbdf250f00000008000300", @ANYRES32=r4, @ANYBLOB="0500290001000000"], 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}, 0xf5ff}], 0xf00, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x4, &(0x7f0000000740)=ANY=[@ANYRESHEX=0x0, @ANYRESOCT=r0, @ANYBLOB="5e928d0b5d4d11195524874265ccabbc2ec4dfa288d7da8a38ed09b32e902725b00317b7a935af46c1b65f2017422478a1324f78efbf38428bd9e8e45a1b9251cb21b6dfec1549da079f3c31f3993e0a127c73908da563ac82c9d48c974555211c6583b71b7f36586f3ccd2a2625542d7d7187a8d310ee7607eec9107b0d235644ee903c1b012eb2f63fd0f034a65eedc779c76730fffe39bf2bc19ee0fe05548b8d154db62f30872e6fa3f1d621427d30db1ccbaaf40704", @ANYRES16=r4, @ANYRES64=r2], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r6, 0x0, 0x3c, 0x72, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xbd, 0x94, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fd", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb90", 0x0, 0x8000}, 0x50)
r7 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r7, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r8, 0x400448e1, &(0x7f0000000640)="47d45dcbc5387a59fa2c9cbda65b76c8c5dd76b37dd5d669641906e0dee62d2d4e2eba6eb3605b766114a079c47d4d3c725eeb3ad8211f8aaa1b3affca9bedd6369ebddab78208d68635b004050cceadf750c82f259911b2724c06fd4d0a55a94c7d44319b98a69bb646f705d06bd4a52d8d18ae8b7674687129acdf0bf828ebefb6a221194c1b321d030db7803ec8030000007bb9172b30b5c89440771e562f7863663791d153499dcf373b322e2d9cc5d3e7a8a9b8efc83ae479316dcfedad65c7232dc70f624f01fc5c56ecd919ce33e9a22c051822e73d3e5474b32727e559")
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000000206010800000000000000000100000a11000300686173683a69702c6d61726b00000000050001000790116005000500020000000900020073797a300000000005000400000000001400078008000840000000d308000640"], 0x60}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0)
connect$rose(0xffffffffffffffff, &(0x7f0000000500)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}, 0x1c)
r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r11, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6)
write(r11, &(0x7f0000000040)="05000000010000", 0x7)

1.841579744s ago: executing program 1 (id=148):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$inet_opts(r0, 0x0, 0xb, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x5, 0x1}]}}, 0x0, 0x26, 0x0, 0xa, 0x0, 0x0, @void, @value}, 0x28)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket(0x2, 0x80805, 0x0)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x2a, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000008850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket(0x18, 0x0, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @empty, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @random="fd3a343ce829", @private=0xa010100, @local, @multicast1}}}}, 0x0)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.717324869s ago: executing program 2 (id=150):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x7, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0x20, &(0x7f0000000880)={&(0x7f00000001c0)=""/96, 0x60, <r1=>0x0, &(0x7f0000000800)=""/114, 0x72}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000980)=ANY=[@ANYRESDEC=0x0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f600000085"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(r2, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_ttl={{0x14, 0x110}}], 0x30}, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, 0x0, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x800000, 0x10008, 0x8})
write$bt_hci(r4, &(0x7f0000000080)=ANY=[], 0x6)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/11], 0x48)
accept4(r3, &(0x7f0000000a80)=@generic, &(0x7f0000000900)=0x80, 0x80800)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000ee40c7c90000000000000000000000000018120000", @ANYRES32=<r6=>r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000178500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000bc0)='qdisc_reset\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000001000)=""/16, 0x1030000, 0x1000, 0x5}, 0x20)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000a00)=ANY=[@ANYRES8=r2], 0x0, 0xfc5f, 0x0, 0xfffffffc, 0x0, 0x0, @void, @value}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES16=r1, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000001f001000"], 0x50)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000940)=ANY=[@ANYRESDEC=r6, @ANYRES32, @ANYBLOB="00000000000000001c001a8008000280fe"], 0x44}}, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r7, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc)
setsockopt$sock_attach_bpf(r7, 0x1, 0xd, &(0x7f0000000080), 0x24)
close(r7)
recvmmsg(r0, &(0x7f0000000600), 0x0, 0x2, 0x0)

1.550718382s ago: executing program 2 (id=153):
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x31)
ioctl$SIOCAX25NOUID(r0, 0x89e3, &(0x7f0000000000))
setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f00000001c0)={0xffff, "913f84"}, 0x6)

1.481354942s ago: executing program 2 (id=154):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040), 0x4)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x8000}, 0x4)

1.316823497s ago: executing program 2 (id=156):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet(0x2, 0x5, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x3d, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
close(r1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="64000800787df731fb2348e1fcffffffc70ac0f0ee", @ANYRES16=r5, @ANYBLOB="0100fefffffffedbdf250f00000008000300", @ANYRES32=r4, @ANYBLOB="0500290001000000"], 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}, 0xf5ff}], 0xf00, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x4, &(0x7f0000000740)=ANY=[@ANYRESHEX=0x0, @ANYRESOCT=r0, @ANYBLOB="5e928d0b5d4d11195524874265ccabbc2ec4dfa288d7da8a38ed09b32e902725b00317b7a935af46c1b65f2017422478a1324f78efbf38428bd9e8e45a1b9251cb21b6dfec1549da079f3c31f3993e0a127c73908da563ac82c9d48c974555211c6583b71b7f36586f3ccd2a2625542d7d7187a8d310ee7607eec9107b0d235644ee903c1b012eb2f63fd0f034a65eedc779c76730fffe39bf2bc19ee0fe05548b8d154db62f30872e6fa3f1d621427d30db1ccbaaf40704", @ANYRES16=r4, @ANYRES64=r2], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r6, 0x0, 0x3c, 0x72, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xbd, 0x94, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fd", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb90", 0x0, 0x8000}, 0x50)
r7 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r7, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r8, 0x400448e1, &(0x7f0000000640)="47d45dcbc5387a59fa2c9cbda65b76c8c5dd76b37dd5d669641906e0dee62d2d4e2eba6eb3605b766114a079c47d4d3c725eeb3ad8211f8aaa1b3affca9bedd6369ebddab78208d68635b004050cceadf750c82f259911b2724c06fd4d0a55a94c7d44319b98a69bb646f705d06bd4a52d8d18ae8b7674687129acdf0bf828ebefb6a221194c1b321d030db7803ec8030000007bb9172b30b5c89440771e562f7863663791d153499dcf373b322e2d9cc5d3e7a8a9b8efc83ae479316dcfedad65c7232dc70f624f01fc5c56ecd919ce33e9a22c051822e73d3e5474b32727e559")
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r9, 0x400448cb, 0x0)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000000206010800000000000000000100000a11000300686173683a69702c6d61726b00000000050001000790116005000500020000000900020073797a300000000005000400000000001400078008000840000000d308000640"], 0x60}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0)
connect$rose(0xffffffffffffffff, &(0x7f0000000500)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}, 0x1c)
r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r12, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6)
write(r12, &(0x7f0000000040)="05000000010000", 0x7)

1.293358851s ago: executing program 4 (id=157):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)="c74e76aaeae46f57e25bf4c5b6735a3ecfb624ea045dadd2c32e8a24136161ce7ef213ea24f84f16c733fe057846ab0a2a8bbf52f0a9ac9bcbbb2c198b76034fe3afc742523c7c9213c91f3a42ed4c3227ca8abf15707dfe1f881f7afb3469eee31add058c70026f2590fefef80ffb98b239b37b7353585a9af554ee44f0b747aa70439c8ebed3528b8b6a9ba8f96cbc63b3f08f090037b165347bc61e413b28034d1186f41993c15a", 0xa9}], 0x1}}], 0x3, 0x8800)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000740)={'sit0\x00', 0x0})
sendmsg(r0, &(0x7f00000005c0)={&(0x7f0000000280)=@ax25={{0x3, @null, 0x4}, [@null, @default, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @default]}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000500)="68f475afa442db4d66b253bd0b278d2a4e7bbf34767d1b380faa85124a34d2d04734192ff2efd3abdd535d33bb96d39cc7dbb6741e455384dca9532d69fcfc6cb27fb7f63bb056a6aab2a9def0beeaf0393a65c324d72c027a6adbbed6258614dd2ab4", 0x63}], 0x1, &(0x7f0000000a80)=[{0xc0, 0x104, 0x9, "ad4b193c63f0dca5eb733d8efe9a763c9a5af6c45855713471f492fe2b0352fccdad4ccb1bd1d473be700e2fcb91d6e39e4648e43e058d175c5105a11f45e91e97521fc8ba34fe1f8881092a2406e0cc39f36bf8e3d2c87330bfc59fe7a166eb1196767fa9ea8c9245ddef176520d4d4f07b64114f31efc49ee3ba5f4a0e691242cd3974a49667a20b7f6ba37aad6d277dd94afc43b080b27ae1c95ebd78686cc4182f00f38599112b99"}, {0xe0, 0x117, 0x5bd9, "df63c4b4d1ee65ecda663edf89f39cef4700bc25781abcdec7566185ea7ef2e3eea7c126cdd186733a756b5ebab4aac60455b5ea4464ba3989afc0028ec233af98e091df37fd46e005095947d9597f9afc1e554372fbed006ea5c14a0461e1e75b4323d17b40713a54c9175091a00bd366395dca1a9b481ed1df5ca2f53e4fc160ac62450ad30f9cd44bfdd5415d24ce0739f58f2f66d209da0edbcda69db5ff944db9eea275707ec39a476190495c7adf18552b4af3237661bd1c99b3b0baa6a48bad762218e967f70054"}, {0x68, 0x102, 0x1000, "f552181e017aa57e144c00f18bdfea6637f39cc0540d7d48f9a61c64da29072c02388fd6c580b991aaaf96883218232a18e9c1ca28e65c75cde8ceb0f73aa27d951324b0de031584e40dc1c3a96139329ad0c808"}, {0xe8, 0x8, 0xff, "8e08b549e3377fa9fa435a1df3dc1409cd8d141e384c37ac055dee595110da4698b5db241ae08f57e5be91af718dcd78ad23b90bc05300e847b68610174e88048c825936a380792241ca2c3c6b396b90e7edc688d497074eab2b3281a5015c4c118055f44a3ebe8242a172d2dbb88819b10ad9ba5fa0b7017dcd6e7116812e9df0f023ad89386b88237816b3bb7907f9fb88ae40e493859901f030a481bf70ce3acfaf041cb086173d8afcaea93853e0bdc5d2565e1ac5643485cc42e8e048834febbf7dabac231b680b5da8a910d06a5c"}, {0x10, 0x104, 0x9}, {0xc0, 0x10d, 0x9, "8b52ea8281275ebb2feb273b832fdd8048bbd091fa2ed24e9636f90696b019953aa82daa8b0d5a239783d96580e03d685175d9a61fd2c4cb79f6a8f453fec240d39b4c5daa7fca2b97255f0b3caa045f823bd46652d63e5e54ebe79924697b07abae4c0c3bfa5cb2423e16311a393142add2daaabd1ba236b170edf620d0adf086e8a84a88c418fc4a4c7f26173f4f9fa06a9ee496a357f9f95305d4f00bf141c3d5e406cc3b301c77bc"}, {0x38, 0x108, 0x2, "79f8c54c1796d0d3ac1526f1a96709292634b02643d815dd8ad1c34d3c17d2d7b69d4cadc3"}, {0x38, 0x103, 0x7f, "6e33d46cf9b0a9dc175f5cddc10d970a1ecc29b9d15323e8074752ae902da66941ba"}, {0x28, 0x10a, 0x6, "635634045d59a7431d749dd59a8acf2791fd38"}], 0x458}, 0x20000000)

1.055444295s ago: executing program 1 (id=161):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d8000000150081044e81f782db44b9040a78080206000000040000a118000300ff05000006000e1208000f0100810401a80016eaa400010000005f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e00600000000d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bfffdccf85df947e5e0", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, r3)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r3)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r7, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0)
sendmsg$TIPC_NL_PEER_REMOVE(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1180000}, 0xc, &(0x7f00000000c0)={&(0x7f00000007c0)={0xa4, r7, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x4}, @TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20040040}, 0x24001000)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0xd0f, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x2}}, [@TCA_STAB={0x4}, @TCA_STAB={0x4}]}, 0x2c}}, 0x20004010)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000580)={&(0x7f0000000480), 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, r4, 0x1, 0x70bd25, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x5, 0x0, @udp='udp:syz2\x00'}}}}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x34, r10, 0x1, 0x70bd2c, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9b2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_DISABLE(r11, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000700)={0x14, r12, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r12, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x2048c40}, 0x4040004)

932.889411ms ago: executing program 3 (id=162):
r0 = socket$tipc(0x1e, 0xb913db9f26d2cb6c, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmsg$xdp(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000480)="069f8c1b6afeb73edaf231b2b6adac0332f6def35971a0fc68cb585d39370428a37223dbca1978ad6734901b5e2563ba64cf24dca55a424409c2492748395b", 0x3f}, {0x0}], 0x2, 0x0, 0x0, 0x4000000}, 0x4084080)
getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000000000)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000000040)=0x2c)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00'})
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_buf(r5, 0x0, 0x4, &(0x7f0000000040)="440910", 0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xcc, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
close(0x3)

879.182062ms ago: executing program 0 (id=163):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x7, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0x20, &(0x7f0000000880)={&(0x7f00000001c0)=""/96, 0x60, <r1=>0x0, &(0x7f0000000800)=""/114, 0x72}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000980)=ANY=[@ANYRESDEC=0x0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f600000085"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(r2, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_ttl={{0x14, 0x110}}], 0x30}, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, 0x0, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x800000, 0x10008, 0x8})
write$bt_hci(r4, &(0x7f0000000080)=ANY=[], 0x6)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/11], 0x48)
accept4(r3, &(0x7f0000000a80)=@generic, &(0x7f0000000900)=0x80, 0x80800)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000ee40c7c90000000000000000000000000018120000", @ANYRES32=<r6=>r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000178500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000bc0)='qdisc_reset\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000001000)=""/16, 0x1030000, 0x1000, 0x5}, 0x20)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000a00)=ANY=[@ANYRES8=r2], 0x0, 0xfc5f, 0x0, 0xfffffffc, 0x0, 0x0, @void, @value}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES16=r1, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000001f001000"], 0x50)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000940)=ANY=[@ANYRESDEC=r6, @ANYRES32, @ANYBLOB="00000000000000001c001a8008000280fe"], 0x44}}, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r7, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc)
setsockopt$sock_attach_bpf(r7, 0x1, 0xd, &(0x7f0000000080), 0x24)
close(r7)
recvmmsg(r0, &(0x7f0000000600), 0x0, 0x2, 0x0)

834.460168ms ago: executing program 1 (id=164):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$inet_opts(r0, 0x0, 0xb, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x5, 0x1}]}}, 0x0, 0x26, 0x0, 0xa, 0x0, 0x0, @void, @value}, 0x28)
socket(0x2, 0x80805, 0x0)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
unshare(0x2040400)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0x13)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0)

801.343225ms ago: executing program 3 (id=165):
r0 = socket(0x23, 0x2, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$unix(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000040)
close(0x3)
sendmsg(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000050000000900010073797a300000000054000000030a010300000001"], 0x9c}}, 0x0)
sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)={0x2c, r2, 0x800, 0x70bd29, 0x25dfdbf8, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x300048c0)

752.934981ms ago: executing program 0 (id=166):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040), 0x4)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x8000}, 0x4)

671.797432ms ago: executing program 3 (id=167):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f00000004c0))
sendmmsg(r2, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x44004)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x10)
bind$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0x1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x840)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="98030000", @ANYRES16, @ANYBLOB="010028057000fcdbdf253b000000", @ANYRES32=r5, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c09d000560333"], 0x398}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1005, @none, 0xfffc}, 0xe)
listen(0xffffffffffffffff, 0xa1)
clock_gettime(0x5, &(0x7f0000000040))
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
shutdown(0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFT_MSG_GETOBJ(r0, 0x0, 0x40000080)

568.816013ms ago: executing program 0 (id=168):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f00000004c0))
sendmmsg(r2, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x44004)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x10)
bind$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0x1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYRES32=r3], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x840)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1005, @none, 0xfffc}, 0xe)
listen(0xffffffffffffffff, 0xa1)
clock_gettime(0x5, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
shutdown(0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFT_MSG_GETOBJ(r0, 0x0, 0x40000080)

567.714579ms ago: executing program 3 (id=169):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x18, r1, 0x301, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8080}, 0x4004)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x40000042}, 0x10)
r4 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042}, 0x10)
r5 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000080)={0x42}, 0x10)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}]}, 0x64}}, 0x44814)
r6 = syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), r0)
sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r6, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_FAMILY={0x5, 0xd, 0xf}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010100}]}, 0x38}, 0x1, 0x0, 0x0, 0x40910}, 0x4000005)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r7}, 0x18)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000580), 0x8)

543.912659ms ago: executing program 1 (id=170):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x7, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0x20, &(0x7f0000000880)={&(0x7f00000001c0)=""/96, 0x60, <r1=>0x0, &(0x7f0000000800)=""/114, 0x72}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000980)=ANY=[@ANYRESDEC=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f600000085"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(r2, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_ttl={{0x14, 0x110}}], 0x30}, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x800000, 0x10008, 0x8})
write$bt_hci(r4, &(0x7f0000000080)=ANY=[], 0x6)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/11], 0x48)
accept4(r3, &(0x7f0000000a80)=@generic, &(0x7f0000000900)=0x80, 0x80800)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000ee40c7c90000000000000000000000000018120000", @ANYRES32=<r6=>r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000178500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000bc0)='qdisc_reset\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000001000)=""/16, 0x1030000, 0x1000, 0x5}, 0x20)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000a00)=ANY=[@ANYRES8=r2], 0x0, 0xfc5f, 0x0, 0xfffffffc, 0x0, 0x0, @void, @value}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES16=r1, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000001f001000"], 0x50)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000940)=ANY=[@ANYRESDEC=r6, @ANYRES32, @ANYBLOB="00000000000000001c001a8008000280fe"], 0x44}}, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r7, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc)
setsockopt$sock_attach_bpf(r7, 0x1, 0xd, &(0x7f0000000080), 0x24)
close(r7)
recvmmsg(r0, &(0x7f0000000600), 0x0, 0x2, 0x0)

486.467036ms ago: executing program 0 (id=171):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$inet_opts(r0, 0x0, 0xb, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x5, 0x1}]}}, 0x0, 0x26, 0x0, 0xa, 0x0, 0x0, @void, @value}, 0x28)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket(0x2, 0x80805, 0x0)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
unshare(0x2040400)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0x13)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0)

382.693053ms ago: executing program 1 (id=172):
r0 = socket$tipc(0x1e, 0xb913db9f26d2cb6c, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, r1)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmsg$xdp(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000480)="069f8c1b6afeb73edaf231b2b6adac0332f6def35971a0fc68cb585d39370428a37223dbca1978ad6734901b5e2563ba64cf24dca55a424409c2492748395b", 0x3f}, {&(0x7f0000000500)="1979f48004585800a9dfaecb12f3457467daeffb267dc4d07dd2e9807e1bd753b7c69be9b83d3771801f386a1d91320104fc79a9fbfc57794c", 0x39}], 0x2, 0x0, 0x0, 0x4000000}, 0x4084080)
getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000000000)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000000040)=0x2c)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00'})
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_buf(r5, 0x0, 0x4, &(0x7f0000000040)="440910", 0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xcc, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
close(0x3)

375.757699ms ago: executing program 3 (id=173):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100"], 0x64}, 0x1, 0x0, 0x0, 0x20048800}, 0x0)

359.95857ms ago: executing program 0 (id=174):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newnexthop={0x2c, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_OIF={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r3, <r5=>0xffffffffffffffff}, 0x4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000cc0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd700000000000090000000e0001006e657464657673696d0000000f00020012f2c658657673696d30000008000300000000000800090000000000"], 0x44}}, 0x0)
r7 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$packet_drop_memb(r7, 0x107, 0x2, &(0x7f0000000040)={0x0, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}, 0x10)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r11=>0x0})
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="a4000000100003052bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000007c0012800c0001006d6163766c616e006c00028056894e5010000000580005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaaaa00000a000400aaaaaaaaaaaa000024fe04000180c200000e00000a000000aaaaaaaaaa2800000a000400aaaaaaaaaabb00000a000400f37bb9edf99b0000080003000300000008000500", @ANYRES32=r11, @ANYBLOB], 0xa4}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000203010200000000000000000000000009000200000000470200000008000340000000000800010001"], 0x30}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c0000000203010100060000000000000a0000000800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x805}, 0x4008040)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x100010, r8, 0x2)

292.52053ms ago: executing program 4 (id=175):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d8000000150081044e81f782db44b9040a78080206000000040000a118000300ff05000006000e1208000f0100810401a80016eaa400010000005f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e00600000000d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bfffdccf85df947e5e0", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, r3)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r3)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r7, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0)
sendmsg$TIPC_NL_PEER_REMOVE(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1180000}, 0xc, &(0x7f00000000c0)={&(0x7f00000007c0)={0xa4, r7, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x4}, @TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20040040}, 0x24001000)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0xd0f, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x2}}, [@TCA_STAB={0x4}, @TCA_STAB={0x4}]}, 0x2c}}, 0x20004010)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000580)={&(0x7f0000000480), 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, r4, 0x1, 0x70bd25, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x5, 0x0, @udp='udp:syz2\x00'}}}}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x34, r10, 0x1, 0x70bd2c, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9b2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_DISABLE(r11, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000700)={0x14, r12, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r12, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x2048c40}, 0x4040004)

207.808129ms ago: executing program 3 (id=176):
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0xf)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xd, 0x0, &(0x7f0000000240)="e0274206000000ff9782062f86", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000680)={0xffffffffffff84b5, 0x5f8f})
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10)
r4 = socket$inet6(0xa, 0x3, 0x8000000003c)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588)
r5 = socket$inet6(0xa, 0x3, 0x8000000003c)
sendmsg(r5, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

119.353721ms ago: executing program 1 (id=177):
r0 = socket(0x23, 0x2, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$unix(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000040)
close(0x3)
sendmsg(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000050000000900010073797a300000000054000000030a010300000001"], 0x9c}}, 0x0)
sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)={0x2c, r2, 0x800, 0x70bd29, 0x25dfdbf8, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x300048c0)

58.46484ms ago: executing program 0 (id=178):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040), 0x4)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x8000}, 0x4)

0s ago: executing program 4 (id=179):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)={0x14, r2, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0)
listen(r0, 0xfffffff8)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local, @link_local={0x3}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0x37, 0x70, 0x64, 0x0, 0xf, 0x1, 0x0, @private=0xa010101, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x9, 0x0, 0x0, {0x15, 0x4, 0x2, 0x9, 0x3ff, 0x67, 0x2, 0x0, 0x33, 0xe, @broadcast, @multicast1, {[@rr={0x7, 0x7, 0x4f, [@broadcast]}, @ssrr={0x89, 0xf, 0xa6, [@multicast2, @multicast1, @broadcast]}, @cipso={0x86, 0x27, 0xffffffffffffffff, [{0x5, 0x4, "1a00"}, {0x0, 0xb, "2a04ca996499b968b1"}, {0x7, 0xc, "6d0ae793a603ae3302d7"}, {0x5, 0x6, "62f1212c"}]}]}}}}}}}, 0x0)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0x36, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xffffffff, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="070000000000000000000200000014000180060001000200000008000300ac1414aaa02035b39b7e115ec3c05b8f2b28bc10846686ee1d44d0b0ed8f3b578a87317c2bbd55bb9489"], 0x28}}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="180500000000000000000000000000001836000005000000000000000600000095"], &(0x7f0000000540)='GPL\x00', 0x8, 0xdb, &(0x7f0000003e40)=""/219, 0x41100, 0x54, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$SIOCRSGCAUSE(r10, 0x89e0, &(0x7f0000000340))

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.3' (ED25519) to the list of known hosts.
[   82.888876][ T5822] cgroup: Unknown subsys name 'net'
[   83.003172][ T5822] cgroup: Unknown subsys name 'cpuset'
[   83.013219][ T5822] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   84.706227][ T5822] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   88.625397][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   88.634032][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   88.641930][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   88.649484][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   88.656929][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   88.664417][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   88.672642][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   88.680048][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   88.691864][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   88.705397][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   88.708920][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   88.716681][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   88.727784][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   88.735543][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   88.738976][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   88.743112][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   88.762510][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   88.772717][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   88.780482][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   88.788949][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   88.808949][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   88.818423][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   88.828789][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   88.838134][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   88.845918][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   89.538285][ T5843] chnl_net:caif_netlink_parms(): no params data found
[   89.569121][ T5849] chnl_net:caif_netlink_parms(): no params data found
[   89.614792][ T5832] chnl_net:caif_netlink_parms(): no params data found
[   89.659472][ T5837] chnl_net:caif_netlink_parms(): no params data found
[   89.720237][ T5838] chnl_net:caif_netlink_parms(): no params data found
[   89.874856][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.882645][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.890045][ T5849] bridge_slave_0: entered allmulticast mode
[   89.897311][ T5849] bridge_slave_0: entered promiscuous mode
[   89.954702][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.962330][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.969821][ T5849] bridge_slave_1: entered allmulticast mode
[   89.976893][ T5849] bridge_slave_1: entered promiscuous mode
[   89.983936][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.991252][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.998588][ T5843] bridge_slave_0: entered allmulticast mode
[   90.006709][ T5843] bridge_slave_0: entered promiscuous mode
[   90.032190][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.039418][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.046692][ T5832] bridge_slave_0: entered allmulticast mode
[   90.054742][ T5832] bridge_slave_0: entered promiscuous mode
[   90.074896][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.082181][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.089783][ T5843] bridge_slave_1: entered allmulticast mode
[   90.096919][ T5843] bridge_slave_1: entered promiscuous mode
[   90.145273][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.152591][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.160520][ T5832] bridge_slave_1: entered allmulticast mode
[   90.167758][ T5832] bridge_slave_1: entered promiscuous mode
[   90.199290][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.206451][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.214473][ T5837] bridge_slave_0: entered allmulticast mode
[   90.221616][ T5837] bridge_slave_0: entered promiscuous mode
[   90.229978][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.237100][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.244290][ T5837] bridge_slave_1: entered allmulticast mode
[   90.253183][ T5837] bridge_slave_1: entered promiscuous mode
[   90.288543][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.326262][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.333600][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.341527][ T5838] bridge_slave_0: entered allmulticast mode
[   90.349805][ T5838] bridge_slave_0: entered promiscuous mode
[   90.373426][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.400313][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.428043][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.437431][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.448052][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.455507][ T5838] bridge_slave_1: entered allmulticast mode
[   90.463220][ T5838] bridge_slave_1: entered promiscuous mode
[   90.486070][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.499889][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.524919][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.550226][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.588317][ T5849] team0: Port device team_slave_0 added
[   90.597100][ T5849] team0: Port device team_slave_1 added
[   90.645217][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.657371][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.695641][ T5843] team0: Port device team_slave_0 added
[   90.704654][ T5843] team0: Port device team_slave_1 added
[   90.713732][ T5837] team0: Port device team_slave_0 added
[   90.739717][ T5832] team0: Port device team_slave_0 added
[   90.759303][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.766257][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.792421][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.809727][ T5844] Bluetooth: hci0: command tx timeout
[   90.809733][ T5847] Bluetooth: hci2: command tx timeout
[   90.809984][ T5847] Bluetooth: hci1: command tx timeout
[   90.830472][ T5837] team0: Port device team_slave_1 added
[   90.851180][ T5838] team0: Port device team_slave_0 added
[   90.859012][ T5832] team0: Port device team_slave_1 added
[   90.865531][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.872529][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.898472][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.903566][ T5847] Bluetooth: hci4: command tx timeout
[   90.909092][   T51] Bluetooth: hci3: command tx timeout
[   90.980993][ T5838] team0: Port device team_slave_1 added
[   90.987627][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.994916][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.021041][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   91.058624][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   91.066140][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.092884][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   91.105049][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0
[   91.112260][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.140412][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   91.153292][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1
[   91.160949][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.187341][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.214419][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1
[   91.221476][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.248120][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.268531][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   91.275872][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.302339][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.334388][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0
[   91.341384][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.367307][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   91.417634][ T5849] hsr_slave_0: entered promiscuous mode
[   91.424564][ T5849] hsr_slave_1: entered promiscuous mode
[   91.433275][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1
[   91.440338][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.466518][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.512989][ T5837] hsr_slave_0: entered promiscuous mode
[   91.520184][ T5837] hsr_slave_1: entered promiscuous mode
[   91.526400][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   91.534675][ T5837] Cannot create hsr debugfs directory
[   91.615244][ T5843] hsr_slave_0: entered promiscuous mode
[   91.622691][ T5843] hsr_slave_1: entered promiscuous mode
[   91.629303][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   91.636873][ T5843] Cannot create hsr debugfs directory
[   91.716975][ T5832] hsr_slave_0: entered promiscuous mode
[   91.724298][ T5832] hsr_slave_1: entered promiscuous mode
[   91.730596][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   91.738160][ T5832] Cannot create hsr debugfs directory
[   91.883671][ T5838] hsr_slave_0: entered promiscuous mode
[   91.890556][ T5838] hsr_slave_1: entered promiscuous mode
[   91.896626][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   91.904267][ T5838] Cannot create hsr debugfs directory
[   92.017111][ T1067] cfg80211: failed to load regulatory.db
[   92.385338][ T5849] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   92.405555][ T5849] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   92.416808][ T5849] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   92.438275][ T5849] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   92.504841][ T5837] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   92.528427][ T5837] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   92.557994][ T5837] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   92.568629][ T5837] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   92.617144][ T5843] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   92.641787][ T5843] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   92.655680][ T5843] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   92.681660][ T5843] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   92.752099][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   92.767098][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   92.804428][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   92.817350][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   92.889447][ T5847] Bluetooth: hci0: command tx timeout
[   92.889570][   T51] Bluetooth: hci2: command tx timeout
[   92.894881][ T5844] Bluetooth: hci1: command tx timeout
[   92.943960][ T5838] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   92.965937][ T5838] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   92.972764][ T5844] Bluetooth: hci3: command tx timeout
[   92.980247][ T5844] Bluetooth: hci4: command tx timeout
[   92.984224][ T5838] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   92.998130][ T5838] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   93.013483][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.069897][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   93.087323][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.094591][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.132869][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.140007][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.152970][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.201435][ T5837] 8021q: adding VLAN 0 to HW filter on device team0
[   93.261271][ T1109] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.268820][ T1109] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.285896][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.312830][ T1109] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.319973][ T1109] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.367740][ T5843] 8021q: adding VLAN 0 to HW filter on device team0
[   93.382572][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.389770][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.454657][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.464080][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.471284][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.517435][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.644045][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   93.684058][ T5838] 8021q: adding VLAN 0 to HW filter on device team0
[   93.736532][ T1325] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.743699][ T1325] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.784792][ T1325] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.791995][ T1325] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.822630][ T1325] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.829856][ T1325] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.876526][ T1325] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.883751][ T1325] bridge0: port 2(bridge_slave_1) entered forwarding state
[   94.008462][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.136129][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.271281][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.371984][ T5837] veth0_vlan: entered promiscuous mode
[   94.407206][ T5837] veth1_vlan: entered promiscuous mode
[   94.521531][ T5843] veth0_vlan: entered promiscuous mode
[   94.589041][ T5837] veth0_macvtap: entered promiscuous mode
[   94.606167][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.621437][ T5843] veth1_vlan: entered promiscuous mode
[   94.635614][ T5837] veth1_macvtap: entered promiscuous mode
[   94.691105][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.737973][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.773843][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.803256][  T145] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.814199][  T145] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.838590][  T145] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.847847][  T145] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.905834][ T5849] veth0_vlan: entered promiscuous mode
[   94.927714][ T5843] veth0_macvtap: entered promiscuous mode
[   94.937587][ T5832] veth0_vlan: entered promiscuous mode
[   94.948630][ T5838] veth0_vlan: entered promiscuous mode
[   94.961309][ T5843] veth1_macvtap: entered promiscuous mode
[   94.974341][ T5844] Bluetooth: hci1: command tx timeout
[   94.974417][ T5847] Bluetooth: hci0: command tx timeout
[   94.980911][ T5844] Bluetooth: hci2: command tx timeout
[   95.001405][ T5849] veth1_vlan: entered promiscuous mode
[   95.028186][ T5832] veth1_vlan: entered promiscuous mode
[   95.041580][ T5838] veth1_vlan: entered promiscuous mode
[   95.059333][ T5844] Bluetooth: hci4: command tx timeout
[   95.059462][ T5847] Bluetooth: hci3: command tx timeout
[   95.093676][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.103467][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.121764][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.165030][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.207778][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.214250][ T5832] veth0_macvtap: entered promiscuous mode
[   95.222690][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.245203][ T1109] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.261055][ T5849] veth0_macvtap: entered promiscuous mode
[   95.278109][ T1109] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.297006][ T1109] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.316935][ T5832] veth1_macvtap: entered promiscuous mode
[   95.324755][ T5849] veth1_macvtap: entered promiscuous mode
[   95.344718][ T1109] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.348352][ T5837] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   95.396034][ T5838] veth0_macvtap: entered promiscuous mode
[   95.438496][ T5838] veth1_macvtap: entered promiscuous mode
[   95.457657][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.490504][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.539023][ T5956] IPv6: addrconf: prefix option has invalid lifetime
[   95.542189][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.595119][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.619802][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.627656][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.672490][ T5958] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   95.674996][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.705087][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.718415][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.743124][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.752865][ T1159] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.775964][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.784817][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.804206][ T1159] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.828150][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.860175][ T1159] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.883306][ T1159] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.939972][ T1159] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.962847][ T1159] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.091556][ T1159] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.115424][ T1159] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.186690][ T5964] IPv6: addrconf: prefix option has invalid lifetime
[   96.204246][ T1159] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.297590][ T1325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.307599][ T1325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.384881][ T5968] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   96.441255][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.473638][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.552244][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.578893][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.731553][ T5975] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma?
[   96.747225][ T1325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.765579][ T1325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.786824][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.826107][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.848100][ T5978] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   96.962970][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.992853][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.018069][ T5980] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   97.053958][ T5847] Bluetooth: hci2: command tx timeout
[   97.059304][ T5844] Bluetooth: hci0: command tx timeout
[   97.059859][ T5847] Bluetooth: hci1: command tx timeout
[   97.132381][ T5847] Bluetooth: hci3: command tx timeout
[   97.137927][   T51] Bluetooth: hci4: command tx timeout
[   97.470753][ T5993] Bluetooth: MGMT ver 1.23
[   97.570939][ T6001] IPv6: addrconf: prefix option has invalid lifetime
[   97.727466][ T5999] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3'.
[   97.801009][ T6008] netlink: 104 bytes leftover after parsing attributes in process `syz.3.16'.
[   98.929717][ T6043] IPv6: addrconf: prefix option has invalid lifetime
[   99.356813][ T6053] netlink: 'syz.2.31': attribute type 5 has an invalid length.
[   99.424588][ T6053] ip6erspan0: entered allmulticast mode
[   99.738135][ T6063] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.835534][ T6068] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5
[   99.852540][ T1325] af_packet: tpacket_rcv: packet too big, clamped from 24 to 4294967272. macoff=96
[   99.882439][ T6063] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.087558][ T6063] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.728311][ T6063] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.915629][ T6089] netlink: 'syz.3.44': attribute type 5 has an invalid length.
[  100.944556][ T6089] ip6erspan0: entered allmulticast mode
[  101.060681][  T145] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.088890][  T145] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  101.381068][ T6097] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  101.388168][ T6105] tipc: Failed to remove unknown binding: 66,1,1/0:513858072/513858074
[  101.445546][ T1159] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.512113][ T1159] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  101.781815][ T6117] netlink: 'syz.1.49': attribute type 5 has an invalid length.
[  101.822927][ T6117] ip6erspan0: entered allmulticast mode
[  101.832328][ T6116] xt_CT: No such helper "snmp"
[  101.911931][ T6123] netlink: 'syz.4.51': attribute type 5 has an invalid length.
[  101.975773][ T6123] ip6erspan0: entered allmulticast mode
[  102.107803][ T6129] netlink: 104 bytes leftover after parsing attributes in process `syz.0.53'.
[  102.200224][ T6125] TCP: tcp_parse_options: Illegal window scaling value 128 > 14 received
[  102.334785][ T6130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  102.430157][ T6141] netlink: 48 bytes leftover after parsing attributes in process `syz.2.52'.
[  102.586882][ T6150] syz.1.58: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  102.651847][ T6150] CPU: 1 UID: 0 PID: 6150 Comm: syz.1.58 Not tainted 6.16.0-rc2-syzkaller-00660-ga6a4db166c65 #0 PREEMPT(full) 
[  102.651885][ T6150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  102.651904][ T6150] Call Trace:
[  102.651917][ T6150]  <TASK>
[  102.651926][ T6150]  dump_stack_lvl+0x189/0x250
[  102.651975][ T6150]  ? __pfx_dump_stack_lvl+0x10/0x10
[  102.652007][ T6150]  ? __pfx__printk+0x10/0x10
[  102.652029][ T6150]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  102.652051][ T6150]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  102.652075][ T6150]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  102.652100][ T6150]  warn_alloc+0x214/0x310
[  102.652123][ T6150]  ? stack_depot_save_flags+0x429/0x900
[  102.652154][ T6150]  ? __pfx_warn_alloc+0x10/0x10
[  102.652179][ T6150]  ? kasan_save_track+0x4f/0x80
[  102.652210][ T6150]  ? xskq_create+0x56/0x170
[  102.652227][ T6150]  ? xsk_init_queue+0xb0/0x110
[  102.652255][ T6150]  ? xsk_setsockopt+0x43f/0x710
[  102.652281][ T6150]  ? do_sock_setsockopt+0x257/0x3e0
[  102.652307][ T6150]  ? __x64_sys_setsockopt+0x18b/0x220
[  102.652333][ T6150]  ? do_syscall_64+0xfa/0x3b0
[  102.652351][ T6150]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  102.652379][ T6150]  __vmalloc_node_range_noprof+0x125/0x12f0
[  102.652434][ T6150]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  102.652463][ T6150]  ? __kasan_kmalloc+0x93/0xb0
[  102.652485][ T6150]  vmalloc_user_noprof+0xad/0xf0
[  102.652507][ T6150]  ? xskq_create+0xbf/0x170
[  102.652526][ T6150]  xskq_create+0xbf/0x170
[  102.652548][ T6150]  xsk_init_queue+0xb0/0x110
[  102.652581][ T6150]  xsk_setsockopt+0x43f/0x710
[  102.652614][ T6150]  ? __pfx_xsk_setsockopt+0x10/0x10
[  102.652641][ T6150]  ? __lock_acquire+0xab9/0xd20
[  102.652680][ T6150]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  102.652705][ T6150]  ? __pfx_xsk_setsockopt+0x10/0x10
[  102.652736][ T6150]  do_sock_setsockopt+0x257/0x3e0
[  102.652767][ T6150]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  102.652801][ T6150]  ? __fget_files+0x2a/0x420
[  102.652836][ T6150]  __x64_sys_setsockopt+0x18b/0x220
[  102.652878][ T6150]  do_syscall_64+0xfa/0x3b0
[  102.652898][ T6150]  ? lockdep_hardirqs_on+0x9c/0x150
[  102.652916][ T6150]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  102.652936][ T6150]  ? clear_bhb_loop+0x60/0xb0
[  102.652961][ T6150]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  102.652980][ T6150] RIP: 0033:0x7f5da158e929
[  102.653003][ T6150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  102.653019][ T6150] RSP: 002b:00007f5da2445038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  102.653041][ T6150] RAX: ffffffffffffffda RBX: 00007f5da17b5fa0 RCX: 00007f5da158e929
[  102.653055][ T6150] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006
[  102.653067][ T6150] RBP: 00007f5da1610b39 R08: 0000000000000004 R09: 0000000000000000
[  102.653079][ T6150] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  102.653110][ T6150] R13: 0000000000000000 R14: 00007f5da17b5fa0 R15: 00007ffc72d891a8
[  102.653143][ T6150]  </TASK>
[  102.655448][ T6150] Mem-Info:
[  102.857674][ T6149] xt_hashlimit: size too large, truncated to 1048576
[  102.913030][ T6150] active_anon:4964 inactive_anon:0 isolated_anon:0
[  102.913030][ T6150]  active_file:1226 inactive_file:39826 isolated_file:0
[  102.913030][ T6150]  unevictable:768 dirty:1655 writeback:0
[  102.913030][ T6150]  slab_reclaimable:10463 slab_unreclaimable:96550
[  102.913030][ T6150]  mapped:29205 shmem:1362 pagetables:1143
[  102.913030][ T6150]  sec_pagetables:0 bounce:0
[  102.913030][ T6150]  kernel_misc_reclaimable:0
[  102.913030][ T6150]  free:1324024 free_pcp:25534 free_cma:0
[  102.913101][ T6150] Node 0 active_anon:19856kB inactive_anon:0kB active_file:4904kB inactive_file:159108kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116820kB dirty:6612kB writeback:0kB shmem:3912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11828kB pagetables:4440kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  103.027306][ T6156] netlink: 'syz.4.61': attribute type 5 has an invalid length.
[  103.066456][ T6150] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  103.188236][ T6150] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  103.280230][ T6150] lowmem_reserve[]: 0 2500 2502 2502 2502
[  103.286403][ T6150] Node 0 DMA32 free:1375032kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17544kB inactive_anon:0kB active_file:5016kB inactive_file:157300kB unevictable:1536kB writepending:6628kB present:3129332kB managed:2561008kB mlocked:0kB bounce:0kB free_pcp:76256kB local_pcp:40900kB free_cma:0kB
[  103.347095][ T6150] lowmem_reserve[]: 0 0 1 1 1
[  103.352514][ T6150] Node 0 Normal free:28kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1808kB unevictable:0kB writepending:4kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB
[  103.401703][ T6165] netlink: 1 bytes leftover after parsing attributes in process `syz.0.64'.
[  103.410834][ T6150] lowmem_reserve[]: 0 0 0 0 0
[  103.415680][ T6150] Node 1 Normal free:3900764kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:8kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:22944kB local_pcp:9248kB free_cma:0kB
[  103.456993][ T6150] lowmem_reserve[]: 0 0 0 0 0
[  103.461239][ T6165] geneve2: entered promiscuous mode
[  103.466979][ T6165] geneve2: entered allmulticast mode
[  103.472155][ T6150] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  103.505689][ T6168] tipc: Started in network mode
[  103.523263][ T6168] tipc: Node identity ac14140f, cluster identity 4711
[  103.543055][ T6150] Node 0 DMA32: 1048*4kB (UM) 163*8kB (UME) 46*16kB (UM) 21*32kB (UME) 18*64kB (UM) 10*128kB (UME) 8*256kB (UM) 5*512kB (UME) 5*1024kB (UME) 7*2048kB (UME) 333*4096kB (M) = 1397368kB
[  103.561392][ T6168] tipc: New replicast peer: 255.255.255.255
[  103.562295][ T6168] tipc: Enabled bearer <udp:syz2>, priority 10
[  103.585171][ T6170] IPv6: addrconf: prefix option has invalid lifetime
[  103.625641][ T6150] Node 0 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28kB
[  103.694240][ T6150] Node 1 Normal: 191*4kB (UE) 46*8kB (UME) 45*16kB (UME) 53*32kB (UME) 16*64kB (UME) 7*128kB (UME) 4*256kB (UM) 6*512kB (UME) 2*1024kB (UM) 1*2048kB (U) 949*4096kB (M) = 3900764kB
[  103.717818][ T6150] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  103.727754][ T6150] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  103.739961][ T6150] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  103.751878][ T6150] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  103.772794][ T6150] 42462 total pagecache pages
[  103.777522][ T6150] 0 pages in swap cache
[  103.783639][ T6150] Free swap  = 124996kB
[  103.796297][ T6150] Total swap = 124996kB
[  103.804734][ T6150] 2097051 pages RAM
[  103.808642][ T6150] 0 pages HighMem/MovableOnly
[  103.813386][ T6150] 424693 pages reserved
[  103.817562][ T6150] 0 pages cma reserved
[  103.844589][   T59] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 45053 - 0
[  103.855146][   T59] netdevsim netdevsim0 netdevsim0: set [1, 2] type 2 family 0 port 57507 - 0
[  103.868595][   T59] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 45053 - 0
[  103.878309][   T59] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 57507 - 0
[  103.896010][ T6168] netlink: 12 bytes leftover after parsing attributes in process `syz.4.65'.
[  103.907202][ T6168] tipc: Disabling bearer <udp:syz2>
[  104.072612][   T59] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 45053 - 0
[  104.090768][   T59] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 57507 - 0
[  104.103012][ T1109] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 45053 - 0
[  104.117094][ T1109] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 57507 - 0
[  104.405232][ T6205] netlink: 104 bytes leftover after parsing attributes in process `syz.2.76'.
[  104.453848][ T6208] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  104.650167][ T6216] IPv6: addrconf: prefix option has invalid lifetime
[  104.672325][ T6217] tipc: New replicast peer: 255.255.255.255
[  104.682456][ T6217] tipc: Enabled bearer <udp:syz2>, priority 10
[  104.730216][ T6217] netlink: 12 bytes leftover after parsing attributes in process `syz.4.82'.
[  104.755334][ T6217] tipc: Disabling bearer <udp:syz2>
[  104.780641][ T6217] Zero length message leads to an empty skb
[  104.901049][ T5847] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  104.969966][ T5847] Bluetooth: hci0: command 0x0c1a tx timeout
[  105.206524][ T6246] netlink: 104 bytes leftover after parsing attributes in process `syz.0.94'.
[  105.454457][ T6252] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  105.507541][ T6259] IPv6: addrconf: prefix option has invalid lifetime
[  105.582042][ T6261] tipc: Started in network mode
[  105.587024][ T6261] tipc: Node identity ac14140f, cluster identity 4711
[  105.603214][ T6261] tipc: New replicast peer: 255.255.255.255
[  105.613342][ T6261] tipc: Enabled bearer <udp:syz2>, priority 10
[  105.623161][ T6261] netlink: 12 bytes leftover after parsing attributes in process `syz.0.100'.
[  105.641882][ T6261] tipc: Disabling bearer <udp:syz2>
[  106.044772][ T6287] IPv6: addrconf: prefix option has invalid lifetime
[  106.416601][ T6301] geneve2: entered promiscuous mode
[  106.434694][ T6301] geneve2: entered allmulticast mode
[  106.454691][   T59] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 55988 - 0
[  106.487210][   T59] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 59642 - 0
[  106.502424][   T59] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 55988 - 0
[  106.513069][   T59] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 59642 - 0
[  106.525062][   T59] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 55988 - 0
[  106.576136][   T59] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 59642 - 0
[  106.603586][   T59] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 55988 - 0
[  106.628613][   T59] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 59642 - 0
[  106.794628][ T6326] IPv6: addrconf: prefix option has invalid lifetime
[  106.919549][ T6332] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  107.528969][   T51] Bluetooth: hci0: command 0x0c1a tx timeout
[  107.535642][ T5847] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  107.625597][ T6299] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  107.749544][ T6363] tipc: Started in network mode
[  107.759273][ T6363] tipc: Node identity ac14140f, cluster identity 4711
[  107.771116][ T6363] tipc: New replicast peer: 255.255.255.255
[  107.777581][ T6363] tipc: Enabled bearer <udp:syz2>, priority 10
[  107.794294][ T6363] netlink: 12 bytes leftover after parsing attributes in process `syz.2.142'.
[  107.804215][ T6363] tipc: Disabling bearer <udp:syz2>
[  107.869836][ T6374] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  107.920020][ T6378] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  108.507661][ T6394] geneve2: entered promiscuous mode
[  108.521686][ T6394] geneve2: entered allmulticast mode
[  108.547021][   T59] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 55956 - 0
[  108.556064][   T59] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 34132 - 0
[  108.587078][   T59] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 55956 - 0
[  108.613035][   T59] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 34132 - 0
[  108.638633][   T59] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 55956 - 0
[  108.677524][   T59] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 34132 - 0
[  108.688117][   T59] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 55956 - 0
[  108.698116][   T59] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 34132 - 0
[  108.758257][ T6419] tipc: Started in network mode
[  108.764339][ T6419] tipc: Node identity ac14140f, cluster identity 4711
[  108.775629][ T6419] tipc: New replicast peer: 255.255.255.255
[  108.782347][ T6419] tipc: Enabled bearer <udp:syz2>, priority 10
[  108.794386][ T6419] netlink: 12 bytes leftover after parsing attributes in process `syz.1.161'.
[  108.807033][ T6419] tipc: Disabling bearer <udp:syz2>
[  108.820745][ T6419] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  108.989833][ T6426] netlink: 64 bytes leftover after parsing attributes in process `syz.3.165'.
[  109.060130][ T6431] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  109.448117][ T6446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.173'.
[  109.516338][ T6452] tipc: New replicast peer: 255.255.255.255
[  109.528255][ T6453] netlink: 104 bytes leftover after parsing attributes in process `syz.0.174'.
[  109.530412][ T6452] tipc: Enabled bearer <udp:syz2>, priority 10
[  109.550910][ T6452] netlink: 12 bytes leftover after parsing attributes in process `syz.4.175'.
[  109.563061][ T6452] tipc: Disabling bearer <udp:syz2>
[  109.593152][ T6455] xt_hashlimit: size too large, truncated to 1048576
[  109.607654][ T6452] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  109.709282][ T6459] netlink: 64 bytes leftover after parsing attributes in process `syz.1.177'.
[  110.096986][ T5847] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  110.143349][ T6404] ==================================================================
[  110.151457][ T6404] BUG: KASAN: slab-use-after-free in skb_queue_purge_reason+0x99/0x360
[  110.159734][ T6404] Read of size 8 at addr ffff8880283ed058 by task syz.2.156/6404
[  110.167496][ T6404] 
[  110.169838][ T6404] CPU: 0 UID: 0 PID: 6404 Comm: syz.2.156 Not tainted 6.16.0-rc2-syzkaller-00660-ga6a4db166c65 #0 PREEMPT(full) 
[  110.169872][ T6404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  110.169885][ T6404] Call Trace:
[  110.169893][ T6404]  <TASK>
[  110.169901][ T6404]  dump_stack_lvl+0x189/0x250
[  110.169936][ T6404]  ? __virt_addr_valid+0x1c8/0x5c0
[  110.169957][ T6404]  ? rcu_is_watching+0x15/0xb0
[  110.169986][ T6404]  ? __kasan_check_byte+0x12/0x40
[  110.170007][ T6404]  ? __pfx_dump_stack_lvl+0x10/0x10
[  110.170037][ T6404]  ? rcu_is_watching+0x15/0xb0
[  110.170066][ T6404]  ? lock_release+0x4b/0x3e0
[  110.170095][ T6404]  ? __virt_addr_valid+0x1c8/0x5c0
[  110.170115][ T6404]  ? __virt_addr_valid+0x4a5/0x5c0
[  110.170136][ T6404]  print_report+0xd2/0x2b0
[  110.170162][ T6404]  ? skb_queue_purge_reason+0x99/0x360
[  110.170184][ T6404]  kasan_report+0x118/0x150
[  110.170214][ T6404]  ? skb_queue_purge_reason+0x99/0x360
[  110.170242][ T6404]  skb_queue_purge_reason+0x99/0x360
[  110.170269][ T6404]  ? __pfx_skb_queue_purge_reason+0x10/0x10
[  110.170293][ T6404]  ? __pfx___mutex_lock+0x10/0x10
[  110.170314][ T6404]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  110.170339][ T6404]  ? drain_workqueue+0x2cb/0x390
[  110.170361][ T6404]  ? __pfx_vhci_flush+0x10/0x10
[  110.170381][ T6404]  vhci_flush+0x44/0x50
[  110.170400][ T6404]  hci_dev_reset+0x41d/0x5c0
[  110.170432][ T6404]  sock_do_ioctl+0xdc/0x300
[  110.170455][ T6404]  ? __pfx_sock_do_ioctl+0x10/0x10
[  110.170475][ T6404]  ? __lock_acquire+0xab9/0xd20
[  110.170510][ T6404]  sock_ioctl+0x576/0x790
[  110.170531][ T6404]  ? __pfx_sock_ioctl+0x10/0x10
[  110.170551][ T6404]  ? __fget_files+0x2a/0x420
[  110.170572][ T6404]  ? __fget_files+0x3a0/0x420
[  110.170603][ T6404]  ? __fget_files+0x2a/0x420
[  110.170625][ T6404]  ? bpf_lsm_file_ioctl+0x9/0x20
[  110.170651][ T6404]  ? __pfx_sock_ioctl+0x10/0x10
[  110.170669][ T6404]  __se_sys_ioctl+0xfc/0x170
[  110.170698][ T6404]  do_syscall_64+0xfa/0x3b0
[  110.170716][ T6404]  ? lockdep_hardirqs_on+0x9c/0x150
[  110.170734][ T6404]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.170753][ T6404]  ? clear_bhb_loop+0x60/0xb0
[  110.170774][ T6404]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.170793][ T6404] RIP: 0033:0x7f9aba38e929
[  110.170809][ T6404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  110.170825][ T6404] RSP: 002b:00007f9abb1f8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  110.170844][ T6404] RAX: ffffffffffffffda RBX: 00007f9aba5b5fa0 RCX: 00007f9aba38e929
[  110.170858][ T6404] RDX: 0000000000000000 RSI: 00000000400448cb RDI: 000000000000000a
[  110.170870][ T6404] RBP: 00007f9aba410b39 R08: 0000000000000000 R09: 0000000000000000
[  110.170882][ T6404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  110.170893][ T6404] R13: 0000000000000000 R14: 00007f9aba5b5fa0 R15: 00007ffdc87c0098
[  110.170915][ T6404]  </TASK>
[  110.170921][ T6404] 
[  110.462592][ T6404] Allocated by task 5832:
[  110.466917][ T6404]  kasan_save_track+0x3e/0x80
[  110.471607][ T6404]  __kasan_kmalloc+0x93/0xb0
[  110.476194][ T6404]  __kmalloc_cache_noprof+0x230/0x3d0
[  110.481591][ T6404]  vhci_open+0x57/0x360
[  110.485753][ T6404]  misc_open+0x2b9/0x330
[  110.490005][ T6404]  chrdev_open+0x4cc/0x5e0
[  110.494428][ T6404]  do_dentry_open+0xdf3/0x1970
[  110.499198][ T6404]  vfs_open+0x3b/0x340
[  110.503276][ T6404]  path_openat+0x2ee5/0x3830
[  110.507868][ T6404]  do_filp_open+0x1fa/0x410
[  110.512375][ T6404]  do_sys_openat2+0x121/0x1c0
[  110.517060][ T6404]  __x64_sys_openat+0x138/0x170
[  110.521914][ T6404]  do_syscall_64+0xfa/0x3b0
[  110.526433][ T6404]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.532325][ T6404] 
[  110.534646][ T6404] Freed by task 5832:
[  110.538620][ T6404]  kasan_save_track+0x3e/0x80
[  110.543307][ T6404]  kasan_save_free_info+0x46/0x50
[  110.548339][ T6404]  __kasan_slab_free+0x62/0x70
[  110.553106][ T6404]  kfree+0x18e/0x440
[  110.557039][ T6404]  vhci_release+0xbc/0xd0
[  110.561363][ T6404]  __fput+0x44c/0xa70
[  110.565345][ T6404]  task_work_run+0x1d1/0x260
[  110.569936][ T6404]  do_exit+0x6ad/0x22e0
[  110.574097][ T6404]  do_group_exit+0x21c/0x2d0
[  110.578692][ T6404]  __x64_sys_exit_group+0x3f/0x40
[  110.583727][ T6404]  x64_sys_call+0x21ba/0x21c0
[  110.588403][ T6404]  do_syscall_64+0xfa/0x3b0
[  110.592908][ T6404]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.598794][ T6404] 
[  110.601113][ T6404] The buggy address belongs to the object at ffff8880283ed000
[  110.601113][ T6404]  which belongs to the cache kmalloc-1k of size 1024
[  110.615156][ T6404] The buggy address is located 88 bytes inside of
[  110.615156][ T6404]  freed 1024-byte region [ffff8880283ed000, ffff8880283ed400)
[  110.628954][ T6404] 
[  110.631279][ T6404] The buggy address belongs to the physical page:
[  110.637678][ T6404] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x283e8
[  110.646452][ T6404] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  110.654957][ T6404] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  110.662851][ T6404] page_type: f5(slab)
[  110.666919][ T6404] raw: 00fff00000000040 ffff88801a441dc0 ffffea0000696000 dead000000000003
[  110.675502][ T6404] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  110.684082][ T6404] head: 00fff00000000040 ffff88801a441dc0 ffffea0000696000 dead000000000003
[  110.692768][ T6404] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  110.701434][ T6404] head: 00fff00000000003 ffffea0000a0fa01 00000000ffffffff 00000000ffffffff
[  110.710101][ T6404] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  110.718765][ T6404] page dumped because: kasan: bad access detected
[  110.725190][ T6404] page_owner tracks the page as allocated
[  110.730903][ T6404] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x252800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_THISNODE), pid 59, tgid 59 (kworker/u8:4), ts 12770877312, free_ts 0
[  110.749307][ T6404]  post_alloc_hook+0x240/0x2a0
[  110.754077][ T6404]  get_page_from_freelist+0x21e4/0x22c0
[  110.759628][ T6404]  __alloc_frozen_pages_noprof+0x181/0x370
[  110.765455][ T6404]  allocate_slab+0x65/0x3b0
[  110.769963][ T6404]  ___slab_alloc+0xbfc/0x1480
[  110.774646][ T6404]  __kmalloc_cache_node_noprof+0x29a/0x3d0
[  110.780462][ T6404]  blk_mq_alloc_and_init_hctx+0x181/0xd60
[  110.786205][ T6404]  __blk_mq_realloc_hw_ctxs+0x169/0x400
[  110.791753][ T6404]  blk_mq_init_allocated_queue+0x400/0x1490
[  110.797665][ T6404]  blk_mq_alloc_queue+0x197/0x290
[  110.802704][ T6404]  scsi_alloc_sdev+0x76d/0xb50
[  110.807482][ T6404]  scsi_probe_and_add_lun+0x1cb/0x4520
[  110.812957][ T6404]  __scsi_scan_target+0x1dd/0xd10
[  110.820611][ T6404]  scsi_scan_host_selected+0x372/0x690
[  110.826092][ T6404]  do_scan_async+0x124/0x760
[  110.830695][ T6404]  async_run_entry_fn+0xa8/0x3f0
[  110.835831][ T6404] page_owner free stack trace missing
[  110.841214][ T6404] 
[  110.843553][ T6404] Memory state around the buggy address:
[  110.849286][ T6404]  ffff8880283ecf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  110.857358][ T6404]  ffff8880283ecf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  110.866565][ T6404] >ffff8880283ed000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  110.874631][ T6404]                                                     ^
[  110.881856][ T6404]  ffff8880283ed080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  110.889981][ T6404]  ffff8880283ed100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  110.898052][ T6404] ==================================================================
[  111.057727][ T6404] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  111.064984][ T6404] CPU: 1 UID: 0 PID: 6404 Comm: syz.2.156 Not tainted 6.16.0-rc2-syzkaller-00660-ga6a4db166c65 #0 PREEMPT(full) 
[  111.076903][ T6404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  111.086983][ T6404] Call Trace:
[  111.090291][ T6404]  <TASK>
[  111.093248][ T6404]  dump_stack_lvl+0x99/0x250
[  111.097871][ T6404]  ? __asan_memcpy+0x40/0x70
[  111.102481][ T6404]  ? __pfx_dump_stack_lvl+0x10/0x10
[  111.107695][ T6404]  ? __pfx__printk+0x10/0x10
[  111.112302][ T6404]  panic+0x2db/0x790
[  111.116224][ T6404]  ? __pfx_panic+0x10/0x10
[  111.120659][ T6404]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  111.126565][ T6404]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  111.132902][ T6404]  ? print_memory_metadata+0x314/0x400
[  111.138383][ T6404]  ? skb_queue_purge_reason+0x99/0x360
[  111.143848][ T6404]  check_panic_on_warn+0x89/0xb0
[  111.148808][ T6404]  ? skb_queue_purge_reason+0x99/0x360
[  111.154293][ T6404]  end_report+0x78/0x160
[  111.158996][ T6404]  kasan_report+0x129/0x150
[  111.163522][ T6404]  ? skb_queue_purge_reason+0x99/0x360
[  111.169014][ T6404]  skb_queue_purge_reason+0x99/0x360
[  111.174357][ T6404]  ? __pfx_skb_queue_purge_reason+0x10/0x10
[  111.180278][ T6404]  ? __pfx___mutex_lock+0x10/0x10
[  111.185319][ T6404]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  111.191319][ T6404]  ? drain_workqueue+0x2cb/0x390
[  111.196268][ T6404]  ? __pfx_vhci_flush+0x10/0x10
[  111.201130][ T6404]  vhci_flush+0x44/0x50
[  111.205298][ T6404]  hci_dev_reset+0x41d/0x5c0
[  111.209910][ T6404]  sock_do_ioctl+0xdc/0x300
[  111.214442][ T6404]  ? __pfx_sock_do_ioctl+0x10/0x10
[  111.219571][ T6404]  ? __lock_acquire+0xab9/0xd20
[  111.224457][ T6404]  sock_ioctl+0x576/0x790
[  111.228800][ T6404]  ? __pfx_sock_ioctl+0x10/0x10
[  111.233658][ T6404]  ? __fget_files+0x2a/0x420
[  111.238867][ T6404]  ? __fget_files+0x3a0/0x420
[  111.243547][ T6404]  ? __fget_files+0x2a/0x420
[  111.248166][ T6404]  ? bpf_lsm_file_ioctl+0x9/0x20
[  111.253205][ T6404]  ? __pfx_sock_ioctl+0x10/0x10
[  111.258416][ T6404]  __se_sys_ioctl+0xfc/0x170
[  111.263028][ T6404]  do_syscall_64+0xfa/0x3b0
[  111.267553][ T6404]  ? lockdep_hardirqs_on+0x9c/0x150
[  111.272799][ T6404]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.278874][ T6404]  ? clear_bhb_loop+0x60/0xb0
[  111.283565][ T6404]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.289461][ T6404] RIP: 0033:0x7f9aba38e929
[  111.293882][ T6404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  111.313498][ T6404] RSP: 002b:00007f9abb1f8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  111.321954][ T6404] RAX: ffffffffffffffda RBX: 00007f9aba5b5fa0 RCX: 00007f9aba38e929
[  111.329931][ T6404] RDX: 0000000000000000 RSI: 00000000400448cb RDI: 000000000000000a
[  111.337915][ T6404] RBP: 00007f9aba410b39 R08: 0000000000000000 R09: 0000000000000000
[  111.345911][ T6404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  111.353926][ T6404] R13: 0000000000000000 R14: 00007f9aba5b5fa0 R15: 00007ffdc87c0098
[  111.361931][ T6404]  </TASK>
[  111.365359][ T6404] Kernel Offset: disabled
[  111.369711][ T6404] Rebooting in 86400 seconds..