last executing test programs:

1.481515784s ago: executing program 2 (id=131):
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000000)={0x0, 0x0})

1.480849694s ago: executing program 2 (id=133):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000050000020000000f00000008000300", @ANYRES32=r2, @ANYBLOB="0500330002"], 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0)

1.410984665s ago: executing program 2 (id=135):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x4000, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x49108}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x50}}, 0x0)

1.355323598s ago: executing program 2 (id=138):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&\x00'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)
recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001780)=""/4071, 0xfe7}], 0x1}, 0x40000102)
sendmsg$inet(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x1}], 0x1}, 0x40)

1.23587447s ago: executing program 2 (id=144):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r0=>0xffffffffffffffff})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r1, 0x4)
recvmsg$unix(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r3)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2c, r4, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000054)

546.988576ms ago: executing program 0 (id=164):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)

435.246189ms ago: executing program 1 (id=167):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x3d, 0x107, 0x8000, 0x8, {0x3, 0x7c}, [@nested={0x10, 0x8, 0x0, 0x1, [@typed={0xc, 0x8, 0x0, 0x0, @u64=0x8}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4091}, 0xc000)

345.40951ms ago: executing program 1 (id=168):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x891e, &(0x7f0000000900)={'bridge0\x00', @multicast})

344.495781ms ago: executing program 0 (id=169):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x6c, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @mcast2}]}}}, @IFLA_LINK={0x8}]}, 0x6c}}, 0x0)

341.711013ms ago: executing program 2 (id=170):
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x4, &(0x7f0000000000)=[{}, {}, {}, {0x6}]})
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x1, @loopback, 0x2}]}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c00000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB], 0x5c}}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, 0x0, 0x0)
sendmsg$nl_route(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001200375f"], 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0xc0)
r4 = socket$kcm(0x2, 0xa, 0x2)
r5 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000080)=r5)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r6 = socket(0x40000000015, 0x805, 0x0)
getsockopt(r6, 0x114, 0x271b, 0x0, &(0x7f00000000c0))
write$tun(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaabb08004500452c00000000002f9078ac1e0001e0000001000086dd00189078040000000000000086ddffff0000000027"], 0xfdef)

252.750364ms ago: executing program 1 (id=171):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r1}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0))

250.958406ms ago: executing program 0 (id=172):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @empty, 'vlan1\x00'}}, 0x1e)
ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x2, @random="f4cf5a9aa15f", 'virt_wifi0\x00'}})

191.086999ms ago: executing program 0 (id=173):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r1, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000840)="d2ff03066003008cb89e08d986ddf6bdfb04bbc7bca4599d5d8946a846b95e10c61411fedf568d547936f65334f3d2d319af339b5ee0", 0x0, 0xd5b4, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

188.762274ms ago: executing program 1 (id=174):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000040)={0x1, 'veth0_vlan\x00', {}, 0xf})
r2 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_ADD_RULE(r2, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f00000000c0)={0x42c, 0x3f3, 0x200, 0x70bd25, 0x25dfdbfe, {0x1, 0x1, 0x36, [0x5bc, 0xb, 0xfffffffe, 0x40, 0x3, 0x8, 0x1, 0x0, 0x3, 0x4, 0x6, 0x60000000, 0xfe8, 0xfc, 0x5, 0x101, 0x2, 0x7000000, 0x8, 0x10001, 0xb, 0x8, 0x1, 0x4, 0x6, 0xf, 0x0, 0x0, 0xffffff19, 0x3, 0x10001, 0x8, 0x5, 0x1, 0x10, 0xe76, 0x2, 0x20400, 0x2, 0x0, 0x7a, 0x7, 0x0, 0x4, 0x200, 0x5ad, 0x81, 0x1ff, 0x9, 0x3, 0x3, 0x4, 0xb, 0x1, 0x0, 0x8, 0x6fc, 0x3ff, 0xff, 0x80, 0xc, 0x200, 0x0, 0xf0], [0x69ece681, 0x8, 0x0, 0x1, 0x1, 0x4, 0x2, 0x203, 0x3, 0x5, 0xf3c, 0x4, 0x3, 0x0, 0x180, 0x101, 0x4, 0x3ff, 0x2, 0xce3d, 0x3, 0x7, 0xcfc, 0xff, 0xe31, 0x1000, 0x3, 0xffffff46, 0x0, 0x7ff, 0x3, 0x7, 0x200, 0x9e, 0xffff, 0x4, 0x8f4, 0x153, 0x8, 0x590, 0x6, 0xd, 0xf4, 0x7, 0x6, 0x6, 0x10, 0x2, 0x3, 0x5, 0x7, 0x4, 0x9, 0x9d, 0x0, 0x9, 0xfda, 0x3, 0xffffffff, 0x6, 0xe, 0x991e, 0x0, 0x7fffffff], [0x1, 0x4475, 0xa26, 0x7, 0x7698, 0x3, 0x18000, 0xd2, 0x0, 0x7, 0x2, 0xfffffff8, 0x401, 0x9, 0xfffff8f1, 0x3538, 0x4, 0x1, 0x726ac3b0, 0x2e72292f, 0x7, 0xfffffff7, 0xb59, 0x7fffffff, 0x1, 0x80, 0xc1c, 0x2, 0x5, 0x2fc6, 0xe2f0, 0x3, 0x9, 0xf, 0x7, 0x80000000, 0x0, 0x101, 0x9, 0x3, 0x10, 0x0, 0x73, 0x6, 0x9, 0xffff, 0x0, 0x6, 0x9, 0x678, 0x3, 0x0, 0xb94, 0x6, 0x7, 0x2, 0x2, 0x3, 0x8000, 0x856, 0x4, 0x8, 0x2bd2], [0x8, 0x9, 0x1, 0x3, 0x4, 0x4, 0x1, 0xbbf, 0x100, 0x3, 0xa, 0x200, 0x2, 0x2c, 0x6, 0x3, 0x9, 0x1, 0xb9ee, 0x20200000, 0x7, 0x77, 0xffffffff, 0x4, 0x68e92ba3, 0x1, 0x5, 0x1, 0x2, 0x9d, 0x7, 0x0, 0x2, 0xa7, 0x2, 0x80, 0x10, 0x800, 0x8, 0x6, 0x2, 0x4, 0x62, 0x7, 0x9, 0x7, 0x567, 0x7, 0x7, 0x92, 0x7, 0x7fff, 0x7, 0x4, 0x7fffffff, 0x5, 0x0, 0x5, 0x8, 0x2, 0x2, 0x5, 0x1, 0x7], 0xa, ['*\x00', 'nl80211\x00']}, ["", ""]}, 0x42c}, 0x1, 0x0, 0x0, 0xc090}, 0x4000)
sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r1, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_QUANTUM={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x4000000)
r3 = socket$kcm(0x29, 0x0, 0x0)
recvmsg$kcm(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000680)=""/193, 0xc1}, {&(0x7f0000000780)=""/209, 0xd1}], 0x2, &(0x7f00000008c0)=""/183, 0xb7}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000ec0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x760bc49e2516fd9a}, 0xc, &(0x7f0000000e80)={&(0x7f0000000a00)={0x204, r1, 0xd8a312e92bfc0e05, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_FRAME={0x184, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x1}, {0x5}, @broadcast, @broadcast, @from_mac=@broadcast, {0x1, 0x5}}, @void, @void, @val={0x3, 0x1, 0x80}, @void, @void, [{0xdd, 0x76, "a544e8d296a8cb3faa9e4526614c1d710729dba3c438c9d84ec11acde91855f0d0225269a89a59cc2426e91953a756932adc5d7379864990b1f23f89cc36f010f4679b7f70b3e39a755c780b8e67a542875c144d865105c1cb76fee428cf8d7c308395c610b44ce7ca0f2da19bdcba77a051db21bf21"}, {0xdd, 0x6, "f3c8af5bd5e3"}, {0xdd, 0x55, "ddd27e3c16eb2d984f70c3b25f427673bc90826a505e5adb450053cb1d080ff506d1f1a7f2a286d25832a3c3d1796901e95d3aa7f762292533f0d189b7da982599c8bd60b38e7145de51f407da2cbd17fde9e6bc49"}, {0xdd, 0xb, "8cc4a126b697eb04eb781a"}, {0xdd, 0x7f, "defda6064dc5b012e6ce39dab21050344935d487e7a39a6a1c2a567a2672e7ba5a8686e375a70f22685db968b0deb1cdd2c53003597f2419f6475c72b326753b20dbe40909e804d7def58686cb101b7da00ea52f5044b168008471776ff0255cd97e5477c59a49e97589101a79bd508920dadd33b3b22f8b1c3b62c9ceae5d"}]}}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3c}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffff7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x243}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x136}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2f8}, @NL80211_ATTR_CENTER_FREQ2={0x8}]]}, 0x204}, 0x1, 0x0, 0x0, 0x8805}, 0x24008081)
r5 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000f00)={{}, [@rose, @remote, @default, @null, @null, @rose, @bcast, @bcast]}, &(0x7f0000000f80)=0x48, 0x80800)
sendto$netrom(r5, &(0x7f0000000fc0)="e461d07f2bbc5fa8002e72743d757ab3c438aebec796a97f9f46ebde2bfff232b5e092f865b375ba641eb3f4cc651fc5401cf3a88cae20cf7e4d6bda41a7676e6853d309d6cf42b20d39fc6d2fc43c69f510fbd5fc7a0b834f2b1272b5cc76d4523d87015eb03601375e0235a397ad14bd24c7ffeaf79a0da56a4bce2ae1ef3568c9f3a452651e", 0x87, 0xc004, &(0x7f0000001080)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}, 0x48)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001140), r0)
sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000001480)={&(0x7f0000001100), 0xc, &(0x7f0000001440)={&(0x7f0000001180)={0x28c, r6, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x78, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8001}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "12f4c9787d58d46bd7722e0c0a716acf4e933597091aeafe"}}]}, @TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'syzkaller1\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3e1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}, @TIPC_NLA_NODE={0x1c0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1370}, @TIPC_NLA_NODE_ID={0x75, 0x3, "6a1bb9518dfdf4008d17ec167b5ce4983f8bf121877507aca409a5dc7753e89a85512b395816250530cb4305d4b8e7469a8f93e46cab899d89e64ef3ce73e7546e02b06e9c76a13fead43044409d6e9809aa391184687d1c3599ff031203c7cbd7ff9c3dc255154e731b303d1a8224a10a"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_ID={0xa9, 0x3, "f13bf2ea4265beb6810476513b1fab026094984829cf5ba6062fce466543c95091c5b8c74f251cc88134e3e2a5a90f2b9f7d0dc145c3f88d9ce41940d5aa389dcb7a4aebb9b36a5e64759ee4ee6b4ffee297a5916939ff303b11034e1a2fea4d021cfa2b85d0e24e9f9ad169476d920c54c707e2fed3ba35baa9cb7dfbbb4355ddc96b57ce0283155ff0aed410ca4c62f96e0b11661729ed12b00e14dd2fa888d4b7e2a541"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_ID={0x74, 0x3, "ae51a2e2c835cff85dd710fdeebc86652eabf77ce82981d2aed2783db19cac0c759ee27f0b5d63e21819c0bf6da61a0c3b93483320157690d73fbd83c7dc30103eead8740f0d218f8ced8e61d5737825d8bc24db4e66ede5e5274d0668d8edda317fc7397b462333b8c868a9017e7d0c"}, @TIPC_NLA_NODE_REKEYING={0x8}]}]}, 0x28c}, 0x1, 0x0, 0x0, 0x40}, 0x10)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000014c0)='./cgroup.net/syz1\x00', 0x200002, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000d, 0x10, r7, 0x70eaa000)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001540), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001580)={'wpan4\x00', <r9=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000015c0)={'wpan0\x00', <r10=>0x0})
sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x4c, r8, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4024891}, 0x40000)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000001700)=0x1, 0x4)
socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000001740)={0x0, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x8, 'syz1\x00', @default, 0x7fff, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
socket$nl_generic(0x10, 0x3, 0x10)
writev(r2, &(0x7f0000002800)=[{&(0x7f00000017c0)="705e64b7e977af", 0x7}, {0x0}], 0x2)
r11 = accept(r5, &(0x7f0000002840)=@xdp, &(0x7f00000028c0)=0x80)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r11, 0x84, 0x19, &(0x7f0000002980)={0x0, 0x8}, 0x8)

102.846328ms ago: executing program 0 (id=175):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000900)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d61637365630000140002800500060001000000050007000100000008000500", @ANYRES32=r1], 0x54}}, 0x0)

87.539539ms ago: executing program 1 (id=176):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="280000001200010e00e1ff0600000000000000000c0000000000000000000000080031"], 0x28}], 0x1}, 0x4000800)

3.983462ms ago: executing program 1 (id=177):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000640)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

0s ago: executing program 0 (id=178):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:43093' (ED25519) to the list of known hosts.
syzkaller login: [   48.909744][ T5741] cgroup: Unknown subsys name 'net'
[   48.996104][ T5741] cgroup: Unknown subsys name 'cpuset'
[   49.005193][ T5741] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.343897][ T5741] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   60.589443][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   60.620237][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   60.621606][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   60.623331][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   60.627888][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   60.628163][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   60.634398][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   60.636838][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   60.639939][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   60.643537][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   60.683800][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   60.687364][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   60.690942][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   60.694890][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   60.698138][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   61.017909][ T5847] chnl_net:caif_netlink_parms(): no params data found
[   61.057896][ T5839] chnl_net:caif_netlink_parms(): no params data found
[   61.092166][ T5842] chnl_net:caif_netlink_parms(): no params data found
[   61.160259][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.164444][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.167259][ T5847] bridge_slave_0: entered allmulticast mode
[   61.170862][ T5847] bridge_slave_0: entered promiscuous mode
[   61.180005][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.183514][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.186266][ T5847] bridge_slave_1: entered allmulticast mode
[   61.188972][ T5847] bridge_slave_1: entered promiscuous mode
[   61.192207][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.194850][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.197438][ T5839] bridge_slave_0: entered allmulticast mode
[   61.200061][ T5839] bridge_slave_0: entered promiscuous mode
[   61.231969][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.234279][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.236603][ T5839] bridge_slave_1: entered allmulticast mode
[   61.239710][ T5839] bridge_slave_1: entered promiscuous mode
[   61.297913][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.303922][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.307737][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.310092][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.312806][ T5842] bridge_slave_0: entered allmulticast mode
[   61.315618][ T5842] bridge_slave_0: entered promiscuous mode
[   61.318610][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.320826][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.323467][ T5842] bridge_slave_1: entered allmulticast mode
[   61.326050][ T5842] bridge_slave_1: entered promiscuous mode
[   61.329895][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.346780][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.395977][ T5847] team0: Port device team_slave_0 added
[   61.400100][ T5847] team0: Port device team_slave_1 added
[   61.415294][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.420264][ T5839] team0: Port device team_slave_0 added
[   61.441305][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.446046][ T5839] team0: Port device team_slave_1 added
[   61.448514][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.450671][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.460289][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.489442][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.492565][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.501897][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.514677][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.517009][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.527088][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.532779][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.535558][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.544781][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.573041][ T5842] team0: Port device team_slave_0 added
[   61.579258][ T5842] team0: Port device team_slave_1 added
[   61.596965][ T5847] hsr_slave_0: entered promiscuous mode
[   61.601210][ T5847] hsr_slave_1: entered promiscuous mode
[   61.650731][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.653889][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.665210][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.683465][ T5839] hsr_slave_0: entered promiscuous mode
[   61.686552][ T5839] hsr_slave_1: entered promiscuous mode
[   61.689218][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   61.691722][ T5839] Cannot create hsr debugfs directory
[   61.694288][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.697111][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.708603][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.816899][ T5842] hsr_slave_0: entered promiscuous mode
[   61.819579][ T5842] hsr_slave_1: entered promiscuous mode
[   61.823358][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   61.825800][ T5842] Cannot create hsr debugfs directory
[   61.974137][ T5847] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   61.979987][ T5847] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   61.994653][ T5847] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   62.000301][ T5847] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   62.046137][ T5839] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   62.052928][ T5839] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   62.058929][ T5839] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   62.064749][ T5839] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   62.145306][ T5842] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   62.154591][ T5842] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   62.159228][ T5842] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   62.172938][ T5842] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   62.204326][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.220326][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.235380][ T5847] 8021q: adding VLAN 0 to HW filter on device team0
[   62.250926][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.253363][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.259576][ T5839] 8021q: adding VLAN 0 to HW filter on device team0
[   62.269763][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.272254][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.287176][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.289463][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.293809][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.296143][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.387997][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.424788][ T5842] 8021q: adding VLAN 0 to HW filter on device team0
[   62.438222][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.440776][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.454327][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.457163][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.565230][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.596282][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.603485][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.634428][ T5839] veth0_vlan: entered promiscuous mode
[   62.652519][ T5839] veth1_vlan: entered promiscuous mode
[   62.672694][ T5843] Bluetooth: hci0: command tx timeout
[   62.673086][   T54] Bluetooth: hci1: command tx timeout
[   62.695634][ T5847] veth0_vlan: entered promiscuous mode
[   62.702736][ T5842] veth0_vlan: entered promiscuous mode
[   62.718874][ T5842] veth1_vlan: entered promiscuous mode
[   62.724015][ T5847] veth1_vlan: entered promiscuous mode
[   62.726606][ T5839] veth0_macvtap: entered promiscuous mode
[   62.739296][ T5839] veth1_macvtap: entered promiscuous mode
[   62.759284][ T5842] veth0_macvtap: entered promiscuous mode
[   62.763268][   T54] Bluetooth: hci2: command tx timeout
[   62.771791][ T5847] veth0_macvtap: entered promiscuous mode
[   62.776296][ T5842] veth1_macvtap: entered promiscuous mode
[   62.780199][ T5847] veth1_macvtap: entered promiscuous mode
[   62.788024][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.803563][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.812475][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.821058][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.825688][ T5847] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.829010][ T5847] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.833448][ T5847] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.836270][ T5847] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.846678][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.856321][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.865636][ T5839] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.868969][ T5839] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.873100][ T5839] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.876303][ T5839] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.886296][ T5842] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.889759][ T5842] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.895342][ T5842] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.898297][ T5842] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.011072][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.019337][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.027623][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.037195][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.050396][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.055477][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.079460][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.084635][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.104005][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.106980][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.139217][ T5847] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   63.142106][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.153297][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.383636][ T5910] netlink: 'syz.2.21': attribute type 16 has an invalid length.
[   63.386830][ T5910] netlink: 'syz.2.21': attribute type 3 has an invalid length.
[   63.390032][ T5910] netlink: 64066 bytes leftover after parsing attributes in process `syz.2.21'.
[   63.509757][ T5919] warning: `syz.0.25' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   64.620918][ T5987] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   64.676103][ T5991] Driver unsupported XDP return value 0 on prog  (id 6) dev N/A, expect packet loss!
[   64.751826][   T54] Bluetooth: hci0: command tx timeout
[   64.752288][ T5843] Bluetooth: hci1: command tx timeout
[   64.833903][ T5843] Bluetooth: hci2: command tx timeout
[   65.252742][ T6027] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   65.498063][ T6043] netlink: 'syz.1.85': attribute type 1 has an invalid length.
[   65.501365][ T6043] netlink: 'syz.1.85': attribute type 2 has an invalid length.
[   65.713366][ T6063] IPv6: Can't replace route, no match found
[   66.832641][ T5843] Bluetooth: hci1: command tx timeout
[   66.841616][ T5843] Bluetooth: hci0: command tx timeout
[   66.913697][ T5843] Bluetooth: hci2: command tx timeout
[   68.277797][ T6151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.133'.
[   68.288108][ T6152] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   68.298784][ T6152] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   68.337307][ T6156] vlan0: entered promiscuous mode
[   68.383357][ T6158] netlink: 4 bytes leftover after parsing attributes in process `syz.0.136'.
[   68.573302][ T6174] tap0: tun_chr_ioctl cmd 1074025676
[   68.575716][ T6174] tap0: owner set to 0
[   68.790109][ T6192] netlink: 'syz.1.151': attribute type 1 has an invalid length.
[   68.913328][ T5843] Bluetooth: hci0: command tx timeout
[   68.913344][   T54] Bluetooth: hci1: command tx timeout
[   69.001786][ T5843] Bluetooth: hci2: command tx timeout
[   69.103413][ T6212] netlink: 16 bytes leftover after parsing attributes in process `syz.1.160'.
[   69.355581][ T6227] netlink: 'syz.1.167': attribute type 8 has an invalid length.
[   69.420083][ T6231] ip6tnl1: entered promiscuous mode
[   69.425472][ T6231] ip6tnl1: entered allmulticast mode
[   69.554395][ T6233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.170'.
[   69.573965][ T6233] syz.2.170 uses obsolete (PF_INET,SOCK_PACKET)
[   69.647720][ T6243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.175'.
[   70.118791][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.177021][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.293667][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.345811][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.450577][   T13] bridge_slave_1: left allmulticast mode
[   70.453785][   T13] bridge_slave_1: left promiscuous mode
[   70.456480][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.462681][   T13] bridge_slave_0: left allmulticast mode
[   70.464625][   T13] bridge_slave_0: left promiscuous mode
[   70.466840][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.695806][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   70.706933][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   70.710592][   T13] bond0 (unregistering): Released all slaves
[   70.944629][   T13] hsr_slave_0: left promiscuous mode
[   70.947521][   T13] hsr_slave_1: left promiscuous mode
[   70.950090][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   70.953842][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   70.956958][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   70.959396][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   70.978233][   T13] veth1_macvtap: left promiscuous mode
[   70.980580][   T13] veth0_macvtap: left promiscuous mode
[   70.987289][   T13] veth1_vlan: left promiscuous mode
[   70.989391][   T13] veth0_vlan: left promiscuous mode
[   71.236055][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.238184][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.268840][   T13] team0 (unregistering): Port device team_slave_1 removed
[   71.290193][   T13] team0 (unregistering): Port device team_slave_0 removed
[   73.360984][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.425421][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.498864][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.564298][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.668305][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.718079][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.777542][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.856409][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.955793][   T13] bridge_slave_1: left allmulticast mode
[   73.957729][   T13] bridge_slave_1: left promiscuous mode
[   73.959698][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.964863][   T13] bridge_slave_0: left allmulticast mode
[   73.966716][   T13] bridge_slave_0: left promiscuous mode
[   73.968630][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.974188][   T13] bridge_slave_1: left allmulticast mode
[   73.976050][   T13] bridge_slave_1: left promiscuous mode
[   73.977946][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.984795][   T13] bridge_slave_0: left allmulticast mode
[   73.986814][   T13] bridge_slave_0: left promiscuous mode
[   73.988883][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.175061][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   74.180163][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   74.184671][   T13] bond0 (unregistering): Released all slaves
[   74.327151][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   74.335162][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   74.340046][   T13] bond0 (unregistering): Released all slaves
[   74.765941][   T13] hsr_slave_0: left promiscuous mode
[   74.768894][   T13] hsr_slave_1: left promiscuous mode
[   74.771955][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   74.775012][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   74.778756][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   74.791566][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   74.799674][   T13] hsr_slave_0: left promiscuous mode
[   74.808157][   T13] hsr_slave_1: left promiscuous mode
[   74.810950][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   74.817405][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   74.822425][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   74.825597][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   74.846641][   T13] veth1_macvtap: left promiscuous mode
[   74.848965][   T13] veth0_macvtap: left promiscuous mode
[   74.851678][   T13] veth1_vlan: left promiscuous mode
[   74.853990][   T13] veth0_vlan: left promiscuous mode
[   74.858156][   T13] veth1_macvtap: left promiscuous mode
[   74.860515][   T13] veth0_macvtap: left promiscuous mode
[   74.863141][   T13] veth1_vlan: left promiscuous mode
[   75.252513][   T13] team0 (unregistering): Port device team_slave_1 removed
[   75.276368][   T13] team0 (unregistering): Port device team_slave_0 removed
[   75.690964][   T13] team0 (unregistering): Port device team_slave_1 removed
[   75.709750][   T13] team0 (unregistering): Port device team_slave_0 removed
[   81.487109][  T790] cfg80211: failed to load regulatory.db

VM DIAGNOSIS:
08:38:50  Registers:
info registers vcpu 0

CPU#0
RAX=1ffffffff1f422c7 RBX=dffffc0000000000 RCX=ffff88801b3db980 RDX=0000000000000000
RSI=000000000000001d RDI=000000000000001f RBP=ffffc900036476f0 RSP=ffffc90003647600
R8 =ffffea000045c377 R9 =1ffffd400008b86e R10=dffffc0000000000 R11=fffff9400008b86f
R12=0000000000000001 R13=ffffea0000458d40 R14=000000000000001d R15=000000000000001e
RIP=ffffffff81fbe82c RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8650000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000560b89157d98 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00ff000000000000 ff00000000000000 XMM05=0000000000000041 0000000000005f66
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffffffff0000 XMM09=6174735f64616f6c 66666f5f74665f66
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffff110050af460 RBX=dffffc0000000000 RCX=ffff888108f9b980 RDX=0000000000000000
RSI=ffff88802857a530 RDI=ffff88802857a350 RBP=1ffff110050af479 RSP=ffffc90003667808
R8 =ffff8880226365ef R9 =1ffff110044c6cbd R10=dffffc0000000000 R11=ffffffff82076cb0
R12=00007fadf3a95000 R13=0000000000000045 R14=ffff88802857a3b0 R15=ffff88802857a300
RIP=ffffffff82076d63 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c50000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000560b89157d98 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00ff000000000000 ff00000000000000 XMM05=0000000000000301 0000000000000030
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffff0000 ffffffffffffff00 XMM09=6c6c696b66722f33 7968702f31313230
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
