last executing test programs:

56.137803423s ago: executing program 1 (id=39):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000001100000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="150000000300000008000000e2cf00003082", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000050000000300"/20, @ANYRES32, @ANYBLOB="a5a98dfe"], 0x50)
bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000600)={'filter\x00', 0x4}, 0x68)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
syz_80211_inject_frame(&(0x7f0000000340)=@broadcast, &(0x7f0000000900)=@mgmt_frame=@probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x8}, @device_b, @broadcast, @random="11c302284448", {0x5, 0x1}, @value=@ver_80211n={0x0, 0x0, 0x3, 0x3, 0x0, 0x2, 0x1}}, 0x3, @random=0x7, 0x2100, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @val={0x6, 0x2}, @val={0x2d, 0x1a, {0xf4a2, 0x1, 0x1, 0x0, {0x8, 0x1ad1, 0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, 0x300, 0x7fffffff, 0x1}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x3, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2}}, [{0xdd, 0xb3, "5be25a2b259df5cc0872e13cccfcf0fca84fb0a3e48be155e52dbdc74e8d3db81b07c33a43ae64549dd18fe07833bd96ffd825e59cfb819977ce4068fd8f25ab76e689924d014648931df2dc14c7969652a93ee133c675548e3a27e521ea2c3692efa7064c8b8a83fec9da3831a5498b2d89928fa54a3cb2145fb7000ab6ca9d129d7af3cb1930899a8daec7fbf4cde6fdf4d4441f270c88f4fd0876822a3435ae2da1266345a85221d70957b008ca83e9f55b"}, {0xdd, 0x5d, "8107ef84105a390d07cb5ec75ff14b17f206e4f4548a39d5e9bac79c24246df0bb1c599e87d5163dbea056419ead61fc4b62a0d1f8e636760478fb4e8ed20c4108014126121dc0536788110fd6d08908ce55967d5654a96f1e42397357"}, {0xdd, 0xd1, "051a63f5329d77e32606206303ccd046d5308cd5a1a000edb790ac5fc21db8ff6d2bac72520c71ae9c43731ac104dee7ea49ca5e569940968c88e004359e76eb41940ea8e6013447b91f1749c4651abd8902247ccf09ef3b390e3cc119c2569d73e025adfa960c97a008e48931f479db1b17b137ea42ab184bf7eb1f07f679dcdc32b1dfd5c3f37d60f706e4f42547d0b8b47a6ae7c44b8431fcd8fb9647ce67fc09f9f925b7ac0568e6d65c0ed1c9b07b56017a8aaaf55a40d9dd7fb4ed000fa642d150aef7df12a7c19b3dc2ed77edaf"}, {0xdd, 0x8c, "6f11f1ce5aafd1f3a0b917f8d78367b4e4961776c0419490954bae795059ba66a321f7fa22c3553bac8e77810e703fc798aeedd6260d89c13b9e7e7fc029b4f24c29455cda7d19ca6c98c33f97a9d3e46abf8ead2e883ce7bda32762617b69926eee82f2162b806170fff1ffd076a88f03a99901cfe76a3b305a3c6bb84906f0e4b3fe2544626fc7eda9f0fc"}]}, 0x2d6)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

33.716594346s ago: executing program 1 (id=39):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000001100000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="150000000300000008000000e2cf00003082", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000050000000300"/20, @ANYRES32, @ANYBLOB="a5a98dfe"], 0x50)
bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000600)={'filter\x00', 0x4}, 0x68)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
syz_80211_inject_frame(&(0x7f0000000340)=@broadcast, &(0x7f0000000900)=@mgmt_frame=@probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x8}, @device_b, @broadcast, @random="11c302284448", {0x5, 0x1}, @value=@ver_80211n={0x0, 0x0, 0x3, 0x3, 0x0, 0x2, 0x1}}, 0x3, @random=0x7, 0x2100, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @val={0x6, 0x2}, @val={0x2d, 0x1a, {0xf4a2, 0x1, 0x1, 0x0, {0x8, 0x1ad1, 0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, 0x300, 0x7fffffff, 0x1}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x3, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2}}, [{0xdd, 0xb3, "5be25a2b259df5cc0872e13cccfcf0fca84fb0a3e48be155e52dbdc74e8d3db81b07c33a43ae64549dd18fe07833bd96ffd825e59cfb819977ce4068fd8f25ab76e689924d014648931df2dc14c7969652a93ee133c675548e3a27e521ea2c3692efa7064c8b8a83fec9da3831a5498b2d89928fa54a3cb2145fb7000ab6ca9d129d7af3cb1930899a8daec7fbf4cde6fdf4d4441f270c88f4fd0876822a3435ae2da1266345a85221d70957b008ca83e9f55b"}, {0xdd, 0x5d, "8107ef84105a390d07cb5ec75ff14b17f206e4f4548a39d5e9bac79c24246df0bb1c599e87d5163dbea056419ead61fc4b62a0d1f8e636760478fb4e8ed20c4108014126121dc0536788110fd6d08908ce55967d5654a96f1e42397357"}, {0xdd, 0xd1, "051a63f5329d77e32606206303ccd046d5308cd5a1a000edb790ac5fc21db8ff6d2bac72520c71ae9c43731ac104dee7ea49ca5e569940968c88e004359e76eb41940ea8e6013447b91f1749c4651abd8902247ccf09ef3b390e3cc119c2569d73e025adfa960c97a008e48931f479db1b17b137ea42ab184bf7eb1f07f679dcdc32b1dfd5c3f37d60f706e4f42547d0b8b47a6ae7c44b8431fcd8fb9647ce67fc09f9f925b7ac0568e6d65c0ed1c9b07b56017a8aaaf55a40d9dd7fb4ed000fa642d150aef7df12a7c19b3dc2ed77edaf"}, {0xdd, 0x8c, "6f11f1ce5aafd1f3a0b917f8d78367b4e4961776c0419490954bae795059ba66a321f7fa22c3553bac8e77810e703fc798aeedd6260d89c13b9e7e7fc029b4f24c29455cda7d19ca6c98c33f97a9d3e46abf8ead2e883ce7bda32762617b69926eee82f2162b806170fff1ffd076a88f03a99901cfe76a3b305a3c6bb84906f0e4b3fe2544626fc7eda9f0fc"}]}, 0x2d6)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

23.690059059s ago: executing program 1 (id=39):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000001100000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="150000000300000008000000e2cf00003082", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000050000000300"/20, @ANYRES32, @ANYBLOB="a5a98dfe"], 0x50)
bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000600)={'filter\x00', 0x4}, 0x68)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
syz_80211_inject_frame(&(0x7f0000000340)=@broadcast, &(0x7f0000000900)=@mgmt_frame=@probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x8}, @device_b, @broadcast, @random="11c302284448", {0x5, 0x1}, @value=@ver_80211n={0x0, 0x0, 0x3, 0x3, 0x0, 0x2, 0x1}}, 0x3, @random=0x7, 0x2100, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @val={0x6, 0x2}, @val={0x2d, 0x1a, {0xf4a2, 0x1, 0x1, 0x0, {0x8, 0x1ad1, 0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, 0x300, 0x7fffffff, 0x1}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x3, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2}}, [{0xdd, 0xb3, "5be25a2b259df5cc0872e13cccfcf0fca84fb0a3e48be155e52dbdc74e8d3db81b07c33a43ae64549dd18fe07833bd96ffd825e59cfb819977ce4068fd8f25ab76e689924d014648931df2dc14c7969652a93ee133c675548e3a27e521ea2c3692efa7064c8b8a83fec9da3831a5498b2d89928fa54a3cb2145fb7000ab6ca9d129d7af3cb1930899a8daec7fbf4cde6fdf4d4441f270c88f4fd0876822a3435ae2da1266345a85221d70957b008ca83e9f55b"}, {0xdd, 0x5d, "8107ef84105a390d07cb5ec75ff14b17f206e4f4548a39d5e9bac79c24246df0bb1c599e87d5163dbea056419ead61fc4b62a0d1f8e636760478fb4e8ed20c4108014126121dc0536788110fd6d08908ce55967d5654a96f1e42397357"}, {0xdd, 0xd1, "051a63f5329d77e32606206303ccd046d5308cd5a1a000edb790ac5fc21db8ff6d2bac72520c71ae9c43731ac104dee7ea49ca5e569940968c88e004359e76eb41940ea8e6013447b91f1749c4651abd8902247ccf09ef3b390e3cc119c2569d73e025adfa960c97a008e48931f479db1b17b137ea42ab184bf7eb1f07f679dcdc32b1dfd5c3f37d60f706e4f42547d0b8b47a6ae7c44b8431fcd8fb9647ce67fc09f9f925b7ac0568e6d65c0ed1c9b07b56017a8aaaf55a40d9dd7fb4ed000fa642d150aef7df12a7c19b3dc2ed77edaf"}, {0xdd, 0x8c, "6f11f1ce5aafd1f3a0b917f8d78367b4e4961776c0419490954bae795059ba66a321f7fa22c3553bac8e77810e703fc798aeedd6260d89c13b9e7e7fc029b4f24c29455cda7d19ca6c98c33f97a9d3e46abf8ead2e883ce7bda32762617b69926eee82f2162b806170fff1ffd076a88f03a99901cfe76a3b305a3c6bb84906f0e4b3fe2544626fc7eda9f0fc"}]}, 0x2d6)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

17.821356463s ago: executing program 1 (id=39):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000001100000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="150000000300000008000000e2cf00003082", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000050000000300"/20, @ANYRES32, @ANYBLOB="a5a98dfe"], 0x50)
bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000600)={'filter\x00', 0x4}, 0x68)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
syz_80211_inject_frame(&(0x7f0000000340)=@broadcast, &(0x7f0000000900)=@mgmt_frame=@probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x8}, @device_b, @broadcast, @random="11c302284448", {0x5, 0x1}, @value=@ver_80211n={0x0, 0x0, 0x3, 0x3, 0x0, 0x2, 0x1}}, 0x3, @random=0x7, 0x2100, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @val={0x6, 0x2}, @val={0x2d, 0x1a, {0xf4a2, 0x1, 0x1, 0x0, {0x8, 0x1ad1, 0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, 0x300, 0x7fffffff, 0x1}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x3, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2}}, [{0xdd, 0xb3, "5be25a2b259df5cc0872e13cccfcf0fca84fb0a3e48be155e52dbdc74e8d3db81b07c33a43ae64549dd18fe07833bd96ffd825e59cfb819977ce4068fd8f25ab76e689924d014648931df2dc14c7969652a93ee133c675548e3a27e521ea2c3692efa7064c8b8a83fec9da3831a5498b2d89928fa54a3cb2145fb7000ab6ca9d129d7af3cb1930899a8daec7fbf4cde6fdf4d4441f270c88f4fd0876822a3435ae2da1266345a85221d70957b008ca83e9f55b"}, {0xdd, 0x5d, "8107ef84105a390d07cb5ec75ff14b17f206e4f4548a39d5e9bac79c24246df0bb1c599e87d5163dbea056419ead61fc4b62a0d1f8e636760478fb4e8ed20c4108014126121dc0536788110fd6d08908ce55967d5654a96f1e42397357"}, {0xdd, 0xd1, "051a63f5329d77e32606206303ccd046d5308cd5a1a000edb790ac5fc21db8ff6d2bac72520c71ae9c43731ac104dee7ea49ca5e569940968c88e004359e76eb41940ea8e6013447b91f1749c4651abd8902247ccf09ef3b390e3cc119c2569d73e025adfa960c97a008e48931f479db1b17b137ea42ab184bf7eb1f07f679dcdc32b1dfd5c3f37d60f706e4f42547d0b8b47a6ae7c44b8431fcd8fb9647ce67fc09f9f925b7ac0568e6d65c0ed1c9b07b56017a8aaaf55a40d9dd7fb4ed000fa642d150aef7df12a7c19b3dc2ed77edaf"}, {0xdd, 0x8c, "6f11f1ce5aafd1f3a0b917f8d78367b4e4961776c0419490954bae795059ba66a321f7fa22c3553bac8e77810e703fc798aeedd6260d89c13b9e7e7fc029b4f24c29455cda7d19ca6c98c33f97a9d3e46abf8ead2e883ce7bda32762617b69926eee82f2162b806170fff1ffd076a88f03a99901cfe76a3b305a3c6bb84906f0e4b3fe2544626fc7eda9f0fc"}]}, 0x2d6)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

10.470991739s ago: executing program 1 (id=39):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000001100000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="150000000300000008000000e2cf00003082", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000050000000300"/20, @ANYRES32, @ANYBLOB="a5a98dfe"], 0x50)
bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000600)={'filter\x00', 0x4}, 0x68)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
syz_80211_inject_frame(&(0x7f0000000340)=@broadcast, &(0x7f0000000900)=@mgmt_frame=@probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x8}, @device_b, @broadcast, @random="11c302284448", {0x5, 0x1}, @value=@ver_80211n={0x0, 0x0, 0x3, 0x3, 0x0, 0x2, 0x1}}, 0x3, @random=0x7, 0x2100, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @val={0x6, 0x2}, @val={0x2d, 0x1a, {0xf4a2, 0x1, 0x1, 0x0, {0x8, 0x1ad1, 0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, 0x300, 0x7fffffff, 0x1}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x3, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2}}, [{0xdd, 0xb3, "5be25a2b259df5cc0872e13cccfcf0fca84fb0a3e48be155e52dbdc74e8d3db81b07c33a43ae64549dd18fe07833bd96ffd825e59cfb819977ce4068fd8f25ab76e689924d014648931df2dc14c7969652a93ee133c675548e3a27e521ea2c3692efa7064c8b8a83fec9da3831a5498b2d89928fa54a3cb2145fb7000ab6ca9d129d7af3cb1930899a8daec7fbf4cde6fdf4d4441f270c88f4fd0876822a3435ae2da1266345a85221d70957b008ca83e9f55b"}, {0xdd, 0x5d, "8107ef84105a390d07cb5ec75ff14b17f206e4f4548a39d5e9bac79c24246df0bb1c599e87d5163dbea056419ead61fc4b62a0d1f8e636760478fb4e8ed20c4108014126121dc0536788110fd6d08908ce55967d5654a96f1e42397357"}, {0xdd, 0xd1, "051a63f5329d77e32606206303ccd046d5308cd5a1a000edb790ac5fc21db8ff6d2bac72520c71ae9c43731ac104dee7ea49ca5e569940968c88e004359e76eb41940ea8e6013447b91f1749c4651abd8902247ccf09ef3b390e3cc119c2569d73e025adfa960c97a008e48931f479db1b17b137ea42ab184bf7eb1f07f679dcdc32b1dfd5c3f37d60f706e4f42547d0b8b47a6ae7c44b8431fcd8fb9647ce67fc09f9f925b7ac0568e6d65c0ed1c9b07b56017a8aaaf55a40d9dd7fb4ed000fa642d150aef7df12a7c19b3dc2ed77edaf"}, {0xdd, 0x8c, "6f11f1ce5aafd1f3a0b917f8d78367b4e4961776c0419490954bae795059ba66a321f7fa22c3553bac8e77810e703fc798aeedd6260d89c13b9e7e7fc029b4f24c29455cda7d19ca6c98c33f97a9d3e46abf8ead2e883ce7bda32762617b69926eee82f2162b806170fff1ffd076a88f03a99901cfe76a3b305a3c6bb84906f0e4b3fe2544626fc7eda9f0fc"}]}, 0x2d6)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

4.340679236s ago: executing program 1 (id=39):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000001100000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="150000000300000008000000e2cf00003082", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000050000000300"/20, @ANYRES32, @ANYBLOB="a5a98dfe"], 0x50)
bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000600)={'filter\x00', 0x4}, 0x68)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
syz_80211_inject_frame(&(0x7f0000000340)=@broadcast, &(0x7f0000000900)=@mgmt_frame=@probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x8}, @device_b, @broadcast, @random="11c302284448", {0x5, 0x1}, @value=@ver_80211n={0x0, 0x0, 0x3, 0x3, 0x0, 0x2, 0x1}}, 0x3, @random=0x7, 0x2100, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @val={0x6, 0x2}, @val={0x2d, 0x1a, {0xf4a2, 0x1, 0x1, 0x0, {0x8, 0x1ad1, 0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, 0x300, 0x7fffffff, 0x1}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x3, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2}}, [{0xdd, 0xb3, "5be25a2b259df5cc0872e13cccfcf0fca84fb0a3e48be155e52dbdc74e8d3db81b07c33a43ae64549dd18fe07833bd96ffd825e59cfb819977ce4068fd8f25ab76e689924d014648931df2dc14c7969652a93ee133c675548e3a27e521ea2c3692efa7064c8b8a83fec9da3831a5498b2d89928fa54a3cb2145fb7000ab6ca9d129d7af3cb1930899a8daec7fbf4cde6fdf4d4441f270c88f4fd0876822a3435ae2da1266345a85221d70957b008ca83e9f55b"}, {0xdd, 0x5d, "8107ef84105a390d07cb5ec75ff14b17f206e4f4548a39d5e9bac79c24246df0bb1c599e87d5163dbea056419ead61fc4b62a0d1f8e636760478fb4e8ed20c4108014126121dc0536788110fd6d08908ce55967d5654a96f1e42397357"}, {0xdd, 0xd1, "051a63f5329d77e32606206303ccd046d5308cd5a1a000edb790ac5fc21db8ff6d2bac72520c71ae9c43731ac104dee7ea49ca5e569940968c88e004359e76eb41940ea8e6013447b91f1749c4651abd8902247ccf09ef3b390e3cc119c2569d73e025adfa960c97a008e48931f479db1b17b137ea42ab184bf7eb1f07f679dcdc32b1dfd5c3f37d60f706e4f42547d0b8b47a6ae7c44b8431fcd8fb9647ce67fc09f9f925b7ac0568e6d65c0ed1c9b07b56017a8aaaf55a40d9dd7fb4ed000fa642d150aef7df12a7c19b3dc2ed77edaf"}, {0xdd, 0x8c, "6f11f1ce5aafd1f3a0b917f8d78367b4e4961776c0419490954bae795059ba66a321f7fa22c3553bac8e77810e703fc798aeedd6260d89c13b9e7e7fc029b4f24c29455cda7d19ca6c98c33f97a9d3e46abf8ead2e883ce7bda32762617b69926eee82f2162b806170fff1ffd076a88f03a99901cfe76a3b305a3c6bb84906f0e4b3fe2544626fc7eda9f0fc"}]}, 0x2d6)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

609.553766ms ago: executing program 2 (id=675):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffe16, &(0x7f0000000140)="06f7", 0x0}, 0xffffffffffffff3a)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0x113, 0x3f00f000, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0x4a, 0xffffff0c}, 0x40)

511.749492ms ago: executing program 2 (id=677):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1000, 0x4, 0x10000000, 0xc}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv6_getaddr={0x2c, 0x16, 0x3c2be10bca706f15, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0)

431.250423ms ago: executing program 2 (id=680):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3f, 0x70bd27, 0x1, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5c, 0x8001, 0x3, 0x5, 0xfffffff8}, @multicast1, @multicast1, 0xffffff00, 0x1}}]}, {0xfffffffffffffd7f}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x6c}}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

322.246841ms ago: executing program 0 (id=681):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_buf(r0, 0x29, 0x50, &(0x7f0000002a40)=""/157, &(0x7f0000002b00)=0x9d)

258.858779ms ago: executing program 0 (id=682):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000240)={0x0, 0x7, 0x200, 0x9}, 0x10)

258.066855ms ago: executing program 2 (id=683):
r0 = socket(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'macvlan0\x00', <r1=>0x0})
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000100)={0x0, 0x1, 0x16, r1, 0x8}, 0xc)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x1, 0x0, 0x0, r1, 0x267a4e37}, 0xc)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x24008050}, 0x20008000)

171.11339ms ago: executing program 0 (id=684):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000480)=0x8, 0x2)

170.812973ms ago: executing program 0 (id=685):
r0 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
bind$tipc(r0, 0x0, 0x0)
sendmsg$tipc(r0, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x2, 0x3, 0x4}}, 0x10, 0x0}, 0x0)

140.052071ms ago: executing program 2 (id=686):
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x7, 0x0, 0x0)

69.83292ms ago: executing program 0 (id=687):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4)
sendmsg$sock(r0, &(0x7f0000000780)={&(0x7f0000000300)=@in={0x2, 0x4e22, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000000700)=[@mark={{0x14, 0x1, 0x51, 0xfffffffb}}], 0x18}, 0x0)

63.463334ms ago: executing program 0 (id=688):
syz_emit_ethernet(0x42, &(0x7f0000000100)={@remote, @local, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x4, @empty, @loopback, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}, &(0x7f0000000000)={0x1, 0x2, [0x0, 0xa64, 0x857, 0xcb4]})
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="03050000000f00000500", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480))
r1 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0xc}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x10, 0x4}}]}}]}, 0x3c}}, 0x4000)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x34)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8, 0x0, 0x0, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, @exit], {0x95, 0x0, 0xff85}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xbb2}, 0x94)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_ext={0x1c, 0x5, &(0x7f0000000280)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_fd={0x18, 0x4, 0x1, 0x0, r0}], &(0x7f00000004c0)='syzkaller\x00', 0x6, 0x45, &(0x7f0000000600)=""/69, 0x0, 0x10, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000000680)={0x2, 0x95}, 0x8, 0x10, &(0x7f00000006c0)={0x3, 0x0, 0x8, 0x1}, 0x10, 0x161d2, 0xffffffffffffffff, 0x0, &(0x7f0000000700)=[r0, r0, r4, r0, r0, r0, r5], &(0x7f0000000840), 0x10, 0x6}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0)
r6 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r6, &(0x7f0000007940)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x36b, @remote, 0xfffffff4}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1400000000000000290000000400"], 0x66}}], 0x1, 0x800)
r7 = accept4$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e, 0x80000)
r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$SIOCRSSL2CALL(r8, 0x89e2, &(0x7f0000000280)=@null)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
ioctl$TUNSETLINK(r9, 0x400454cd, 0x339)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000003a80)={0x0, 0x0, &(0x7f0000003a40)={&(0x7f0000003900)=@dellinkprop={0x38, 0x6d, 0x511, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2, 0x440c0}, [@IFLA_IFNAME={0x14, 0x3, 'gre0\x00'}, @IFLA_PROP_LIST={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000140)={'veth1_to_hsr\x00', @multicast})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xc}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x90)
recvmsg$unix(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/122, 0x7a}], 0x1, &(0x7f0000000300)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r11=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x140}, 0x40002021)
getsockopt$inet_sctp_SCTP_CONTEXT(r11, 0x84, 0x11, 0x0, &(0x7f0000000240))

0s ago: executing program 2 (id=689):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x3, {{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {}, 0x0, 0x200}, [@tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x3c}, 0x2, @in=@multicast1, 0x3507, 0x4, 0x3, 0x7, 0x8, 0x4, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xc}, 0x4d3, 0x6c}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3501, 0x2, 0x0, 0x73, 0x8001, 0x4, 0x7}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x92}, 0x80000001, 0x3c}, 0xa, @in=@remote, 0x0, 0x5, 0x1, 0x9, 0x8, 0xe7, 0x7}]}]}, 0x17c}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:23161' (ED25519) to the list of known hosts.
syzkaller login: [   48.788170][ T5748] cgroup: Unknown subsys name 'net'
[   48.896869][ T5748] cgroup: Unknown subsys name 'cpuset'
[   48.900864][ T5748] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.666830][ T5748] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.851156][ T5813] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.855358][ T5813] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.858721][ T5813] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.862443][ T5813] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.877030][ T5816] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.881603][ T5816] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.885559][ T5202] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.893581][ T5202] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.923655][ T5202] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.934815][ T5816] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.935311][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.942135][ T5816] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.949532][ T5820] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.958578][ T5820] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.962172][ T5820] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.313238][ T5814] chnl_net:caif_netlink_parms(): no params data found
[   55.352704][ T5810] chnl_net:caif_netlink_parms(): no params data found
[   55.405823][ T5818] chnl_net:caif_netlink_parms(): no params data found
[   55.532303][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.535367][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.537868][ T5810] bridge_slave_0: entered allmulticast mode
[   55.541476][ T5810] bridge_slave_0: entered promiscuous mode
[   55.546781][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.549759][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.552678][ T5814] bridge_slave_0: entered allmulticast mode
[   55.557327][ T5814] bridge_slave_0: entered promiscuous mode
[   55.578549][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.580882][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.583183][ T5810] bridge_slave_1: entered allmulticast mode
[   55.587135][ T5810] bridge_slave_1: entered promiscuous mode
[   55.590069][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.593015][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.596112][ T5814] bridge_slave_1: entered allmulticast mode
[   55.599758][ T5814] bridge_slave_1: entered promiscuous mode
[   55.649878][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.654118][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.657361][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.660519][ T5818] bridge_slave_0: entered allmulticast mode
[   55.666610][ T5818] bridge_slave_0: entered promiscuous mode
[   55.671164][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.674383][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.677687][ T5818] bridge_slave_1: entered allmulticast mode
[   55.681766][ T5818] bridge_slave_1: entered promiscuous mode
[   55.698687][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.707421][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.733687][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.770463][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.776372][ T5814] team0: Port device team_slave_0 added
[   55.780268][ T5810] team0: Port device team_slave_0 added
[   55.787622][ T5814] team0: Port device team_slave_1 added
[   55.792253][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.808045][ T5810] team0: Port device team_slave_1 added
[   55.860150][ T5818] team0: Port device team_slave_0 added
[   55.863052][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.866220][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.876831][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.882327][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.886221][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.895414][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.900745][ T5818] team0: Port device team_slave_1 added
[   55.903402][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.906636][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.917102][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.922307][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.924880][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.934868][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.991614][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.995233][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.005883][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.040678][ T5810] hsr_slave_0: entered promiscuous mode
[   56.044146][ T5810] hsr_slave_1: entered promiscuous mode
[   56.048040][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.050849][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.062147][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.085006][ T5814] hsr_slave_0: entered promiscuous mode
[   56.087414][ T5814] hsr_slave_1: entered promiscuous mode
[   56.089749][ T5814] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.092279][ T5814] Cannot create hsr debugfs directory
[   56.189821][ T5818] hsr_slave_0: entered promiscuous mode
[   56.193269][ T5818] hsr_slave_1: entered promiscuous mode
[   56.197001][ T5818] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.200153][ T5818] Cannot create hsr debugfs directory
[   56.486309][ T5810] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.497165][ T5810] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.504281][ T5810] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.521096][ T5810] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.550486][ T5814] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.568925][ T5814] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.576134][ T5814] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.595644][ T5814] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.618829][ T5818] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.629127][ T5818] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.635536][ T5818] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.642460][ T5818] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.755449][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.789642][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.795200][ T5810] 8021q: adding VLAN 0 to HW filter on device team0
[   56.808667][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.818530][  T794] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.821573][  T794] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.837386][ T5818] 8021q: adding VLAN 0 to HW filter on device team0
[   56.843023][  T794] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.846103][  T794] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.857587][ T5814] 8021q: adding VLAN 0 to HW filter on device team0
[   56.865260][  T794] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.868367][  T794] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.879287][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.881817][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.888360][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.890660][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.901416][  T794] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.904134][  T794] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.984647][ T5820] Bluetooth: hci2: command tx timeout
[   56.986200][   T54] Bluetooth: hci0: command tx timeout
[   56.989734][ T5202] Bluetooth: hci1: command tx timeout
[   57.119628][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.179346][ T5818] veth0_vlan: entered promiscuous mode
[   57.202639][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.209936][ T5818] veth1_vlan: entered promiscuous mode
[   57.216613][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.275539][ T5814] veth0_vlan: entered promiscuous mode
[   57.286417][ T5818] veth0_macvtap: entered promiscuous mode
[   57.290823][ T5814] veth1_vlan: entered promiscuous mode
[   57.307094][ T5818] veth1_macvtap: entered promiscuous mode
[   57.316383][ T5810] veth0_vlan: entered promiscuous mode
[   57.332373][ T5810] veth1_vlan: entered promiscuous mode
[   57.337103][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.352643][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.358715][ T5814] veth0_macvtap: entered promiscuous mode
[   57.367709][ T5818] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.370745][ T5818] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.375215][ T5818] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.378439][ T5818] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.388998][ T5814] veth1_macvtap: entered promiscuous mode
[   57.412699][ T5810] veth0_macvtap: entered promiscuous mode
[   57.440432][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.446448][ T5810] veth1_macvtap: entered promiscuous mode
[   57.469873][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.484985][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.487995][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.491210][ T5814] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.495115][ T5814] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.498463][ T5814] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.502050][ T5814] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.532395][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.554277][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.557363][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.562661][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.568222][ T5810] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.571832][ T5810] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.577123][ T5810] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.580654][ T5810] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.659557][ T5818] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.668339][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.682413][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.718417][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.721721][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.789920][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.793211][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.862943][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.867493][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.157572][ T5894] netlink: 'syz.0.5': attribute type 29 has an invalid length.
[   58.174962][ T5894] netlink: 'syz.0.5': attribute type 29 has an invalid length.
[   58.195730][ T5894] netlink: 500 bytes leftover after parsing attributes in process `syz.0.5'.
[   58.213290][ T5894] unsupported nla_type 58
[   58.375951][ T5898] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   58.406193][ T5898] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -1
[   58.427631][ T5900] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[   58.460129][ T5901] warning: `syz.0.8' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   58.532597][ T5900] bridge_slave_0: left allmulticast mode
[   58.545628][ T5900] bridge_slave_0: left promiscuous mode
[   58.548591][ T5900] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.567516][ T5901] netlink: 'syz.0.8': attribute type 10 has an invalid length.
[   58.585043][ T5900] bridge_slave_1: left allmulticast mode
[   58.587363][ T5900] bridge_slave_1: left promiscuous mode
[   58.604942][ T5900] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.634443][ T5900] bond0: (slave bond_slave_0): Releasing backup interface
[   58.650792][ T5900] bond0: (slave bond_slave_1): Releasing backup interface
[   58.686147][ T5900] team0: Port device team_slave_0 removed
[   58.710685][ T5900] team0: Port device team_slave_1 removed
[   58.720774][ T5900] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   58.725787][ T5900] batman_adv: batadv0: Removing interface: batadv_slave_0
[   58.730084][ T5900] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   58.732860][ T5900] batman_adv: batadv0: Removing interface: batadv_slave_1
[   58.745538][ T5901] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[   58.773397][ T5901] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.784880][ T5901] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   58.814672][ T5900] syz.0.8 (5900) used greatest stack depth: 20312 bytes left
[   59.064358][ T5202] Bluetooth: hci1: command tx timeout
[   59.066583][ T5202] Bluetooth: hci2: command tx timeout
[   59.159836][ T5927] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   59.168424][ T5927] xt_HMARK: spi-set and port-set can't be combined
[   59.398349][   T55] block nbd0: Receive control failed (result -32)
[   60.235284][ T5842] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.539194][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   60.542616][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   60.546922][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   60.551133][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   60.555735][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   60.703636][ T5987] netlink: 4 bytes leftover after parsing attributes in process `syz.2.46'.
[   60.750736][ T5979] chnl_net:caif_netlink_parms(): no params data found
[   60.862865][ T5979] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.865840][ T5979] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.868446][ T5979] bridge_slave_0: entered allmulticast mode
[   60.871285][ T5979] bridge_slave_0: entered promiscuous mode
[   60.875362][ T5979] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.878133][ T5979] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.880857][ T5979] bridge_slave_1: entered allmulticast mode
[   60.884561][ T5979] bridge_slave_1: entered promiscuous mode
[   60.908926][ T5979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.913981][ T5979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.941277][ T5979] team0: Port device team_slave_0 added
[   60.949535][ T5979] team0: Port device team_slave_1 added
[   60.972180][ T5979] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.975062][ T5979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.986456][ T5979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.991596][ T5979] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.994235][ T5979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.003131][ T5979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.070259][ T5979] hsr_slave_0: entered promiscuous mode
[   61.072687][ T5979] hsr_slave_1: entered promiscuous mode
[   61.075604][ T5979] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   61.078412][ T5979] Cannot create hsr debugfs directory
[   61.132486][ T6002] Bluetooth: MGMT ver 1.23
[   61.143694][   T54] Bluetooth: hci2: command tx timeout
[   61.145622][   T54] Bluetooth: hci1: command tx timeout
[   61.298800][ T6010] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   61.352056][ T6012] xt_nat: multiple ranges no longer supported
[   61.392699][ T5842] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.471852][ T5842] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.538418][ T6023] delete_channel: no stack
[   61.568495][ T5842] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.803625][ T5842] bridge_slave_1: left allmulticast mode
[   61.805484][ T5842] bridge_slave_1: left promiscuous mode
[   61.810704][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.840962][ T5842] bridge_slave_0: left allmulticast mode
[   61.848185][ T5842] bridge_slave_0: left promiscuous mode
[   61.854182][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.325945][ T5842] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   62.336123][ T5842] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   62.349241][ T5842] bond0 (unregistering): Released all slaves
[   62.500523][ T6066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.78'.
[   62.583801][   T54] Bluetooth: hci0: command tx timeout
[   62.945438][ T5842] hsr_slave_0: left promiscuous mode
[   62.957274][ T5842] hsr_slave_1: left promiscuous mode
[   62.960236][ T5842] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   62.974341][ T5842] batman_adv: batadv0: Removing interface: batadv_slave_0
[   62.979401][ T5842] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   62.982594][ T5842] batman_adv: batadv0: Removing interface: batadv_slave_1
[   63.006004][ T5842] veth1_macvtap: left promiscuous mode
[   63.015013][ T5842] veth0_macvtap: left promiscuous mode
[   63.017505][ T5842] veth1_vlan: left promiscuous mode
[   63.019869][ T5842] veth0_vlan: left promiscuous mode
[   63.224423][   T54] Bluetooth: hci1: command tx timeout
[   63.224972][ T5820] Bluetooth: hci2: command tx timeout
[   63.382529][ T5842] team0 (unregistering): Port device team_slave_1 removed
[   63.409496][ T5842] team0 (unregistering): Port device team_slave_0 removed
[   63.670047][ T5979] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   63.676994][ T5979] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   63.685768][ T5979] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   63.717777][ T5979] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   63.826165][ T5979] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.842839][ T5979] 8021q: adding VLAN 0 to HW filter on device team0
[   63.851589][  T794] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.854462][  T794] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.883286][  T794] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.886354][  T794] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.079198][ T5979] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.237159][ T5979] veth0_vlan: entered promiscuous mode
[   64.248092][ T5979] veth1_vlan: entered promiscuous mode
[   64.327778][ T6137] netlink: 40 bytes leftover after parsing attributes in process `syz.0.100'.
[   64.333361][ T5979] veth0_macvtap: entered promiscuous mode
[   64.342876][ T5979] veth1_macvtap: entered promiscuous mode
[   64.391427][ T5979] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.416844][ T5979] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.427595][ T5979] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.431598][ T5979] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.435841][ T5979] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.440134][ T5979] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.495648][  T794] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.498913][  T794] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.539267][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.542169][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.664073][ T5820] Bluetooth: hci0: command 0x041b tx timeout
[   64.711798][ T6161] netlink: 16 bytes leftover after parsing attributes in process `syz.0.106'.
[   65.969700][ T6204] netlink: 'syz.0.121': attribute type 1 has an invalid length.
[   65.972783][ T6204] netlink: 'syz.0.121': attribute type 1 has an invalid length.
[   66.338639][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.492147][ T6227] ieee802154 phy0 wpan0: encryption failed: -22
[   66.607612][   T33] audit: type=1804 audit(1751913804.218:2): pid=6231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.132" name="/newroot/42/memory.events" dev="tmpfs" ino=231 res=1 errno=0
[   66.633969][   T33] audit: type=1800 audit(1751913804.238:3): pid=6231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.132" name="memory.events" dev="tmpfs" ino=231 res=0 errno=0
[   66.855857][ T5820] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   66.860423][ T5820] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   66.863157][ T5820] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   66.868268][ T5820] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   66.871944][ T5820] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   67.159344][ T6232] chnl_net:caif_netlink_parms(): no params data found
[   67.619716][ T6232] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.622689][ T6232] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.638051][ T6232] bridge_slave_0: entered allmulticast mode
[   67.662561][ T6232] bridge_slave_0: entered promiscuous mode
[   67.670580][ T6232] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.686337][ T6232] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.689366][ T6232] bridge_slave_1: entered allmulticast mode
[   67.718919][ T6232] bridge_slave_1: entered promiscuous mode
[   67.853079][ T6232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.900985][ T6232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   68.049035][ T6232] team0: Port device team_slave_0 added
[   68.052972][ T6232] team0: Port device team_slave_1 added
[   68.146105][ T6261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.144'.
[   68.914150][ T5820] Bluetooth: hci0: command tx timeout
[   70.930270][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   70.932366][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   70.984415][ T5820] Bluetooth: hci0: command tx timeout
[   73.063785][ T5820] Bluetooth: hci0: command tx timeout
[   75.143820][ T5820] Bluetooth: hci0: command tx timeout
[   77.078646][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.126858][ T6232] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.129481][ T6232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.139954][ T6232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   77.145044][ T6232] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.147291][ T6232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.157518][ T6232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.165730][ T6270] netlink: 'syz.2.147': attribute type 10 has an invalid length.
[   77.172201][ T6270] netlink: 40 bytes leftover after parsing attributes in process `syz.2.147'.
[   77.248398][ T6270] team0: Port device geneve0 added
[   77.394973][ T6232] hsr_slave_0: entered promiscuous mode
[   77.397342][ T6232] hsr_slave_1: entered promiscuous mode
[   77.812131][ T6290] netlink: 28 bytes leftover after parsing attributes in process `syz.0.157'.
[   77.825875][ T6286] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.829089][ T6286] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.013451][    C0] sched: DL replenish lagged too much
[   78.062803][ T6286] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   78.077826][ T6286] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   78.198706][ T6286] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.202013][ T6286] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.206958][ T6286] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.209990][ T6286] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.448144][ T6286] syz.2.155 (6286) used greatest stack depth: 19928 bytes left
[   78.666552][ T6300] syz.0.162 uses obsolete (PF_INET,SOCK_PACKET)
[   78.817117][ T6308] netlink: 20 bytes leftover after parsing attributes in process `syz.2.166'.
[   79.909148][ T6319] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   79.967443][ T6321] Zero length message leads to an empty skb
[   80.307399][ T6333] syzkaller1: entered promiscuous mode
[   80.309877][ T6333] syzkaller1: entered allmulticast mode
[   80.675249][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.207137][  T970] cfg80211: failed to load regulatory.db
[   81.921770][ T6336] netlink: 844 bytes leftover after parsing attributes in process `syz.2.180'.
[   81.943388][ T6337] Cannot find set identified by id 0 to match
[   81.993665][ T6336] netlink: 20 bytes leftover after parsing attributes in process `syz.2.180'.
[   82.098239][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.176165][ T6341] Illegal XDP return value 4294967262 on prog  (id 29) dev N/A, expect packet loss!
[   82.452903][   T12] bridge_slave_1: left allmulticast mode
[   82.454994][   T12] bridge_slave_1: left promiscuous mode
[   82.456988][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.473160][   T12] bridge_slave_0: left allmulticast mode
[   82.478144][   T12] bridge_slave_0: left promiscuous mode
[   82.481262][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.983043][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   83.000293][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   83.008074][   T12] bond0 (unregistering): Released all slaves
[   83.064138][ T6359] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[   83.067333][ T6359] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[   83.597476][ T6371] netlink: 52 bytes leftover after parsing attributes in process `syz.2.191'.
[   83.930257][   T12] hsr_slave_0: left promiscuous mode
[   83.950295][   T12] hsr_slave_1: left promiscuous mode
[   83.956569][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   83.959499][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   83.981446][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   83.986378][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   84.050063][   T12] veth1_macvtap: left promiscuous mode
[   84.052273][   T12] veth0_macvtap: left promiscuous mode
[   84.060415][   T12] veth1_vlan: left promiscuous mode
[   84.062440][   T12] veth0_vlan: left promiscuous mode
[   84.594253][   T12] team0 (unregistering): Port device team_slave_1 removed
[   84.661420][   T12] team0 (unregistering): Port device team_slave_0 removed
[   85.414961][ T6232] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   85.450537][ T6232] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   85.469953][ T6232] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   85.486679][ T6232] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   85.656599][ T6232] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.683210][ T6232] 8021q: adding VLAN 0 to HW filter on device team0
[   85.782741][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.785219][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.808383][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.810793][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[   86.436747][ T6232] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.534354][ T6232] veth0_vlan: entered promiscuous mode
[   86.551877][ T6232] veth1_vlan: entered promiscuous mode
[   86.670806][ T6232] veth0_macvtap: entered promiscuous mode
[   86.705373][ T6232] veth1_macvtap: entered promiscuous mode
[   86.768665][ T6232] batman_adv: batadv0: Interface activated: batadv_slave_0
[   86.792790][ T6232] batman_adv: batadv0: Interface activated: batadv_slave_1
[   86.816561][ T6232] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.819485][ T6232] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.822551][ T6232] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.852131][ T6232] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.977528][  T794] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.981085][  T794] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.041475][  T794] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.056530][  T794] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.627275][ T6489] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   87.941752][ T6501] netlink: 4 bytes leftover after parsing attributes in process `syz.2.237'.
[   87.995994][ T6501] batman_adv: batadv0: Removing interface: batadv_slave_1
[   88.033215][ T6503] netlink: 4 bytes leftover after parsing attributes in process `syz.0.238'.
[   88.292515][ T6511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.242'.
[   88.401698][ T6514] netlink: 132 bytes leftover after parsing attributes in process `syz.2.244'.
[   88.408353][ T6515] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.243'.
[   89.141270][ T5202] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   89.147206][ T5202] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   89.151174][ T5202] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   89.156172][ T5202] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   89.159669][ T5202] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   89.286472][ T5826] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.519204][ T6528] chnl_net:caif_netlink_parms(): no params data found
[   89.642727][ T5826] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.667679][ T6540] netlink: 4 bytes leftover after parsing attributes in process `syz.2.249'.
[   89.685589][ T6540] netlink: 4 bytes leftover after parsing attributes in process `syz.2.249'.
[   89.819970][ T6528] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.823099][ T6528] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.830130][ T6528] bridge_slave_0: entered allmulticast mode
[   89.834670][ T6528] bridge_slave_0: entered promiscuous mode
[   89.859048][ T5826] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.937249][ T6528] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.940633][ T6528] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.944501][ T6528] bridge_slave_1: entered allmulticast mode
[   89.948553][ T6528] bridge_slave_1: entered promiscuous mode
[   89.979632][ T6545] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[   89.995943][ T6545] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   90.109735][ T5826] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.135619][ T6528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.158289][ T6528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.259186][ T6528] team0: Port device team_slave_0 added
[   90.301628][ T6528] team0: Port device team_slave_1 added
[   90.442506][ T6528] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.453720][ T6528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.482923][ T6528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.567094][ T6528] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.577655][ T6528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.593323][ T6528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.654842][ T6561] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4300
[   90.733720][ T6528] hsr_slave_0: entered promiscuous mode
[   90.736159][ T6528] hsr_slave_1: entered promiscuous mode
[   90.738393][ T6528] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   90.741234][ T6528] Cannot create hsr debugfs directory
[   90.818217][ T5826] bridge_slave_1: left allmulticast mode
[   90.821847][ T5826] bridge_slave_1: left promiscuous mode
[   90.825406][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.839268][ T5826] bridge_slave_0: left allmulticast mode
[   90.845518][ T5826] bridge_slave_0: left promiscuous mode
[   90.849708][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.224925][ T5202] Bluetooth: hci0: command tx timeout
[   91.277095][ T5826] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   91.288173][ T5826] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   91.295454][ T5826] bond0 (unregistering): Released all slaves
[   91.966399][ T5826] hsr_slave_0: left promiscuous mode
[   91.970817][ T5826] hsr_slave_1: left promiscuous mode
[   91.973133][ T5826] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   91.977627][ T5826] batman_adv: batadv0: Removing interface: batadv_slave_0
[   91.981747][ T5826] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   91.985920][ T5826] batman_adv: batadv0: Removing interface: batadv_slave_1
[   91.996962][ T5826] veth1_macvtap: left promiscuous mode
[   91.998822][ T5826] veth0_macvtap: left promiscuous mode
[   92.001584][ T5826] veth1_vlan: left promiscuous mode
[   92.003779][ T5826] veth0_vlan: left promiscuous mode
[   92.566485][ T5826] team0 (unregistering): Port device team_slave_1 removed
[   92.635749][ T5826] team0 (unregistering): Port device team_slave_0 removed
[   93.230790][ T6586] netlink: 'syz.2.263': attribute type 3 has an invalid length.
[   93.247940][ T6586] netlink: 'syz.2.263': attribute type 3 has an invalid length.
[   93.319529][ T5202] Bluetooth: hci0: command tx timeout
[   93.414167][ T6590] netlink: 12 bytes leftover after parsing attributes in process `syz.0.264'.
[   93.424299][ T6590] netlink: 'syz.0.264': attribute type 1 has an invalid length.
[   93.578152][ T6594] netlink: 20 bytes leftover after parsing attributes in process `syz.0.264'.
[   93.625059][ T6596] set match dimension is over the limit!
[   93.980944][ T6606] xt_recent: Unsupported userspace flags (00000048)
[   94.300244][ T6528] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   94.314499][ T6528] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   94.365751][ T6528] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   94.430426][ T6528] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   95.720444][ T5202] Bluetooth: hci0: command tx timeout
[   96.299990][ T6528] 8021q: adding VLAN 0 to HW filter on device bond0
[   96.373278][ T6528] 8021q: adding VLAN 0 to HW filter on device team0
[   96.433337][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.436335][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[   96.519078][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.521400][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[   96.982791][ T6528] 8021q: adding VLAN 0 to HW filter on device batadv0
[   97.034585][ T6528] veth0_vlan: entered promiscuous mode
[   97.045630][ T6528] veth1_vlan: entered promiscuous mode
[   97.106489][ T6528] veth0_macvtap: entered promiscuous mode
[   97.120779][ T6528] veth1_macvtap: entered promiscuous mode
[   97.146600][ T6528] batman_adv: batadv0: Interface activated: batadv_slave_0
[   97.163123][ T6528] batman_adv: batadv0: Interface activated: batadv_slave_1
[   97.180385][ T6528] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.198848][ T6528] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.201875][ T6528] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.205165][ T6528] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.506437][ T6682] netlink: 272 bytes leftover after parsing attributes in process `syz.2.289'.
[   97.516208][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.518621][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.546142][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.548595][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.793091][ T6701] netlink: 16 bytes leftover after parsing attributes in process `syz.2.298'.
[   98.050276][ T6721] netlink: 4 bytes leftover after parsing attributes in process `syz.0.308'.
[   98.059512][ T6722] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   98.200342][ T6730] xfrm1: entered promiscuous mode
[   98.202701][ T6730] xfrm1: entered allmulticast mode
[   98.252407][ T6733] netlink: 16 bytes leftover after parsing attributes in process `syz.0.313'.
[   98.344713][ T6737] Bluetooth: MGMT ver 1.23
[   98.725770][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.740692][ T6752] netdevsim netdevsim0: Direct firmware load for .
[   98.740692][ T6752]  failed with error -2
[   98.746379][ T6752] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[   98.746379][ T6752] 
[   99.280933][ T6757] netlink: zone id is out of range
[   99.480328][ T5820] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   99.486362][ T5820] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   99.489133][ T5820] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   99.492227][ T5820] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   99.494939][ T5820] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   99.524859][ T6772] netlink: 'syz.2.328': attribute type 13 has an invalid length.
[   99.527803][ T6772] netlink: 'syz.2.328': attribute type 17 has an invalid length.
[   99.652270][ T6777] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   99.710172][ T6769] chnl_net:caif_netlink_parms(): no params data found
[   99.737699][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.840868][ T6769] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.843297][ T6769] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.855425][ T6769] bridge_slave_0: entered allmulticast mode
[   99.858169][ T6769] bridge_slave_0: entered promiscuous mode
[   99.861393][ T6769] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.865119][ T6769] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.868383][ T6769] bridge_slave_1: entered allmulticast mode
[   99.871335][ T6769] bridge_slave_1: entered promiscuous mode
[   99.880822][ T6802] veth0: entered promiscuous mode
[   99.882760][ T6802] netlink: 4 bytes leftover after parsing attributes in process `syz.2.339'.
[   99.899299][ T6802] veth0 (unregistering): left promiscuous mode
[   99.917175][ T6769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   99.922237][ T6769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   99.946186][ T6769] team0: Port device team_slave_0 added
[   99.949665][ T6769] team0: Port device team_slave_1 added
[   99.968658][ T6769] batman_adv: batadv0: Adding interface: batadv_slave_0
[   99.971437][ T6769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   99.982208][ T6769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   99.991379][ T6769] batman_adv: batadv0: Adding interface: batadv_slave_1
[   99.995002][ T6769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  100.011020][ T6769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  100.061641][ T6769] hsr_slave_0: entered promiscuous mode
[  100.066008][ T6769] hsr_slave_1: entered promiscuous mode
[  100.132024][ T6820] netlink: 4888 bytes leftover after parsing attributes in process `syz.0.346'.
[  100.378294][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.435549][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.571304][   T12] bridge_slave_1: left allmulticast mode
[  100.574427][   T12] bridge_slave_1: left promiscuous mode
[  100.576720][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.580354][   T12] bridge_slave_0: left allmulticast mode
[  100.582245][   T12] bridge_slave_0: left promiscuous mode
[  100.585806][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.792420][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  100.797759][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  100.801573][   T12] bond0 (unregistering): Released all slaves
[  101.109367][   T12] hsr_slave_0: left promiscuous mode
[  101.111719][   T12] hsr_slave_1: left promiscuous mode
[  101.122398][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  101.126669][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  101.131038][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  101.133404][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  101.147222][   T12] veth1_macvtap: left promiscuous mode
[  101.150371][   T12] veth0_macvtap: left promiscuous mode
[  101.152180][   T12] veth1_vlan: left promiscuous mode
[  101.157005][   T12] veth0_vlan: left promiscuous mode
[  101.203268][ T6877] netlink: 'syz.2.371': attribute type 3 has an invalid length.
[  101.382676][   T12] team0 (unregistering): Port device team_slave_1 removed
[  101.402840][   T12] team0 (unregistering): Port device team_slave_0 removed
[  101.555015][ T5820] Bluetooth: hci0: command tx timeout
[  101.669851][ T6769] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  101.676934][ T6769] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  101.688321][ T6769] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  101.700009][ T6769] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  101.861759][ T6769] 8021q: adding VLAN 0 to HW filter on device bond0
[  101.902137][ T6769] 8021q: adding VLAN 0 to HW filter on device team0
[  101.921071][ T6264] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.924190][ T6264] bridge0: port 1(bridge_slave_0) entered forwarding state
[  101.958784][ T6264] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.961947][ T6264] bridge0: port 2(bridge_slave_1) entered forwarding state
[  102.292552][ T6769] 8021q: adding VLAN 0 to HW filter on device batadv0
[  102.355952][ T6769] veth0_vlan: entered promiscuous mode
[  102.367855][ T6769] veth1_vlan: entered promiscuous mode
[  102.388162][ T6769] veth0_macvtap: entered promiscuous mode
[  102.394668][ T6769] veth1_macvtap: entered promiscuous mode
[  102.403239][ T6769] batman_adv: batadv0: Interface activated: batadv_slave_0
[  102.411020][ T6769] batman_adv: batadv0: Interface activated: batadv_slave_1
[  102.414990][ T6769] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  102.417826][ T6769] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  102.420631][ T6769] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  102.423343][ T6769] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  102.598499][ T6264] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.601560][ T6264] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.644826][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.647810][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.836559][ T6945] infiniband syz0: set down
[  102.839617][ T6945] infiniband syz0: added ipvlan1
[  102.870824][ T6945] RDS/IB: syz0: added
[  102.873168][ T6945] smc: adding ib device syz0 with port count 1
[  102.876104][ T6945] smc:    ib device syz0 port 1 has pnetid 
[  103.904523][ T6981] netlink: 28 bytes leftover after parsing attributes in process `syz.0.411'.
[  104.263212][ T6996] netlink: 4 bytes leftover after parsing attributes in process `syz.0.418'.
[  104.401190][ T7010] netlink: 4 bytes leftover after parsing attributes in process `syz.2.425'.
[  104.608379][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.296852][ T7034] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  105.299238][ T7034] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  105.435851][ T5202] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  105.439036][ T5202] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  105.444101][ T5202] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  105.448494][ T5202] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  105.453916][ T5202] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  105.766771][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.301602][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.519113][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.857941][ T7061] vlan3: entered promiscuous mode
[  106.860155][ T7061] vlan2: entered promiscuous mode
[  106.862467][ T7061] gretap0: entered promiscuous mode
[  106.892067][ T7042] chnl_net:caif_netlink_parms(): no params data found
[  106.932168][   T12] bridge_slave_1: left allmulticast mode
[  106.936276][   T12] bridge_slave_1: left promiscuous mode
[  106.938672][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.943213][   T12] bridge_slave_0: left allmulticast mode
[  106.945781][   T12] bridge_slave_0: left promiscuous mode
[  106.948094][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.217539][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  107.222444][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  107.233067][   T12] bond0 (unregistering): Released all slaves
[  107.337054][ T7042] bridge0: port 1(bridge_slave_0) entered blocking state
[  107.366681][ T7042] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.383401][ T7042] bridge_slave_0: entered allmulticast mode
[  107.392484][ T7042] bridge_slave_0: entered promiscuous mode
[  107.400208][ T7042] bridge0: port 2(bridge_slave_1) entered blocking state
[  107.403845][ T7042] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.406847][ T7042] bridge_slave_1: entered allmulticast mode
[  107.412816][ T7042] bridge_slave_1: entered promiscuous mode
[  107.463712][ T5820] Bluetooth: hci0: command tx timeout
[  107.556838][ T7042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  107.572554][ T7093] netlink: 12 bytes leftover after parsing attributes in process `syz.0.453'.
[  107.603357][ T7042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  107.649943][ T7099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.456'.
[  107.699005][ T7042] team0: Port device team_slave_0 added
[  107.742207][ T7042] team0: Port device team_slave_1 added
[  107.769721][ T7101] netlink: 4 bytes leftover after parsing attributes in process `syz.0.457'.
[  107.928698][   T12] hsr_slave_0: left promiscuous mode
[  107.933023][ T7114] netlink: 40 bytes leftover after parsing attributes in process `syz.2.460'.
[  107.937823][   T12] hsr_slave_1: left promiscuous mode
[  107.940719][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  107.944691][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  107.948424][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  107.951423][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  107.970977][   T12] veth1_macvtap: left promiscuous mode
[  107.973241][   T12] veth0_macvtap: left promiscuous mode
[  107.975775][   T12] veth1_vlan: left promiscuous mode
[  107.977536][   T12] veth0_vlan: left promiscuous mode
[  108.215722][ T7126] netlink: 24 bytes leftover after parsing attributes in process `syz.0.465'.
[  108.296218][   T12] team0 (unregistering): Port device team_slave_1 removed
[  108.316801][   T12] team0 (unregistering): Port device team_slave_0 removed
[  108.584451][ T7042] batman_adv: batadv0: Adding interface: batadv_slave_0
[  108.586944][ T7042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  108.595717][ T7042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  108.600785][ T7042] batman_adv: batadv0: Adding interface: batadv_slave_1
[  108.603270][ T7042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  108.611854][ T7042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  108.720952][ T7042] hsr_slave_0: entered promiscuous mode
[  108.731961][ T7042] hsr_slave_1: entered promiscuous mode
[  109.456581][ T7042] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  109.474789][ T7042] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  109.488272][ T7042] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  109.499279][ T7042] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  109.543741][ T5820] Bluetooth: hci0: command tx timeout
[  109.585712][ T7042] 8021q: adding VLAN 0 to HW filter on device bond0
[  109.600310][ T7042] 8021q: adding VLAN 0 to HW filter on device team0
[  109.618917][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[  109.621775][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[  109.640637][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[  109.643694][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[  109.813062][ T7199] netlink: 'syz.2.486': attribute type 21 has an invalid length.
[  109.817653][ T7198] Bluetooth: MGMT ver 1.23
[  109.838008][ T7199] IPv6: NLM_F_CREATE should be specified when creating new route
[  109.848911][ T7042] 8021q: adding VLAN 0 to HW filter on device batadv0
[  109.940531][ T7042] veth0_vlan: entered promiscuous mode
[  109.951369][ T7042] veth1_vlan: entered promiscuous mode
[  109.971608][ T7042] veth0_macvtap: entered promiscuous mode
[  109.983367][ T7042] veth1_macvtap: entered promiscuous mode
[  110.003062][ T7042] batman_adv: batadv0: Interface activated: batadv_slave_0
[  110.009837][ T7042] batman_adv: batadv0: Interface activated: batadv_slave_1
[  110.019523][ T7042] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  110.023281][ T7042] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  110.037558][ T7042] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  110.042715][ T7042] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  110.142454][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.145989][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.194045][ T1198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.197394][ T1198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.222829][ T7232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.498'.
[  110.542503][ T7249] atomic_op ffff88803aac7998 conn xmit_atomic 0000000000000000
[  111.509328][ T7277] netlink: 28 bytes leftover after parsing attributes in process `syz.0.517'.
[  111.652384][ T7289] SET target dimension over the limit!
[  111.738664][ T7299] netlink: 10 bytes leftover after parsing attributes in process `syz.2.527'.
[  111.780512][ T7303] netlink: 64 bytes leftover after parsing attributes in process `syz.0.530'.
[  111.787186][ T7303] netlink: 64 bytes leftover after parsing attributes in process `syz.0.530'.
[  111.928312][ T5843] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.766194][ T5202] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  112.770919][ T5202] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  112.775075][ T5202] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  112.779354][ T5202] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  112.787202][ T5202] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  112.897763][ T7339] netlink: 28 bytes leftover after parsing attributes in process `syz.2.545'.
[  112.902435][ T7336] netlink: 28 bytes leftover after parsing attributes in process `syz.0.544'.
[  112.910783][ T7339] netlink: 'syz.2.545': attribute type 7 has an invalid length.
[  112.919646][ T7339] netlink: 'syz.2.545': attribute type 8 has an invalid length.
[  112.922923][ T7339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.545'.
[  113.047236][ T7329] chnl_net:caif_netlink_parms(): no params data found
[  113.113131][ T7329] bridge0: port 1(bridge_slave_0) entered blocking state
[  113.116247][ T7329] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.118997][ T7329] bridge_slave_0: entered allmulticast mode
[  113.121784][ T7329] bridge_slave_0: entered promiscuous mode
[  113.127653][ T7329] bridge0: port 2(bridge_slave_1) entered blocking state
[  113.130302][ T7329] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.132928][ T7329] bridge_slave_1: entered allmulticast mode
[  113.137517][ T7329] bridge_slave_1: entered promiscuous mode
[  113.169574][ T7329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  113.184672][ T7329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  113.217691][ T7329] team0: Port device team_slave_0 added
[  113.222573][ T7329] team0: Port device team_slave_1 added
[  113.237809][ T7356] netlink: 'syz.2.550': attribute type 10 has an invalid length.
[  113.251835][ T7329] batman_adv: batadv0: Adding interface: batadv_slave_0
[  113.254254][ T7329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  113.262762][ T7329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  113.270114][ T7356] 8021q: adding VLAN 0 to HW filter on device batadv0
[  113.284464][ T7356] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  113.288772][ T7329] batman_adv: batadv0: Adding interface: batadv_slave_1
[  113.291482][ T7329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  113.302431][ T7329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  113.335229][ T7329] hsr_slave_0: entered promiscuous mode
[  113.337649][ T7329] hsr_slave_1: entered promiscuous mode
[  113.339763][ T7329] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  113.342329][ T7329] Cannot create hsr debugfs directory
[  113.544691][ T5843] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.618473][ T5843] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.710017][ T5843] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.914374][ T5843] bridge_slave_1: left allmulticast mode
[  113.916806][ T5843] bridge_slave_1: left promiscuous mode
[  113.919309][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.926466][ T5843] bridge_slave_0: left allmulticast mode
[  113.928939][ T5843] bridge_slave_0: left promiscuous mode
[  113.932282][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.130689][ T5843] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  114.135653][ T5843] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  114.139491][ T5843] bond0 (unregistering): Released all slaves
[  114.550107][ T5843] hsr_slave_0: left promiscuous mode
[  114.552398][ T5843] hsr_slave_1: left promiscuous mode
[  114.554981][ T5843] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  114.557330][ T5843] batman_adv: batadv0: Removing interface: batadv_slave_0
[  114.560144][ T5843] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  114.562536][ T5843] batman_adv: batadv0: Removing interface: batadv_slave_1
[  114.583377][ T5843] veth1_macvtap: left promiscuous mode
[  114.585813][ T5843] veth0_macvtap: left promiscuous mode
[  114.587850][ T5843] veth1_vlan: left promiscuous mode
[  114.589655][ T5843] veth0_vlan: left promiscuous mode
[  114.833659][ T5820] Bluetooth: hci0: command tx timeout
[  114.895544][ T5843] team0 (unregistering): Port device team_slave_1 removed
[  114.920995][ T5843] team0 (unregistering): Port device team_slave_0 removed
[  114.938281][ T7387] netlink: 12 bytes leftover after parsing attributes in process `syz.0.559'.
[  115.365746][ T7329] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  115.387331][ T7329] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  115.402981][ T7329] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  115.420025][ T7329] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  115.527319][ T7329] 8021q: adding VLAN 0 to HW filter on device bond0
[  115.550618][ T7329] 8021q: adding VLAN 0 to HW filter on device team0
[  115.560781][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[  115.563237][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[  115.570927][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[  115.573562][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[  115.637465][ T7415] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 11
[  115.755461][ T7329] 8021q: adding VLAN 0 to HW filter on device batadv0
[  115.805761][ T7329] veth0_vlan: entered promiscuous mode
[  115.814358][ T7329] veth1_vlan: entered promiscuous mode
[  115.845088][ T7329] veth0_macvtap: entered promiscuous mode
[  115.850762][ T7329] veth1_macvtap: entered promiscuous mode
[  115.861983][ T7329] batman_adv: batadv0: Interface activated: batadv_slave_0
[  115.873189][ T7329] batman_adv: batadv0: Interface activated: batadv_slave_1
[  115.883074][ T7329] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  115.887909][ T7329] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  115.891786][ T7329] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  115.896356][ T7329] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  115.975926][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.978797][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.002021][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.008565][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.250965][ T7459] IPv6: Can't replace route, no match found
[  116.398218][ T7469] smc: net device bond0 applied user defined pnetid SYZ2
[  116.402304][ T7469] smc: net device bond0 erased user defined pnetid SYZ2
[  116.628231][ T7483] netlink: 56 bytes leftover after parsing attributes in process `syz.0.600'.
[  116.635235][ T7483] netlink: 24 bytes leftover after parsing attributes in process `syz.0.600'.
[  116.677973][ T7488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.603'.
[  116.875457][ T7505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.610'.
[  116.883528][ T7505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.610'.
[  117.030032][ T7511] netlink: 12 bytes leftover after parsing attributes in process `syz.0.612'.
[  117.454492][ T7526] batman_adv: batadv0: Adding interface: ip6gretap1
[  117.457237][ T7526] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  117.469510][ T7526] batman_adv: batadv0: Interface activated: ip6gretap1
[  117.508615][ T7535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.623'.
[  118.040479][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.132082][ T5202] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  119.138133][ T5202] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  119.141766][ T5202] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  119.147446][ T5202] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  119.152084][ T5202] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  119.196204][ T7595] netlink: 4 bytes leftover after parsing attributes in process `syz.0.649'.
[  119.404168][ T7605] "syz.2.654" (7605) uses obsolete ecb(arc4) skcipher
[  119.591289][ T7590] chnl_net:caif_netlink_parms(): no params data found
[  119.681740][ T7590] bridge0: port 1(bridge_slave_0) entered blocking state
[  119.685196][ T7590] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.688129][ T7590] bridge_slave_0: entered allmulticast mode
[  119.691999][ T7590] bridge_slave_0: entered promiscuous mode
[  119.697877][ T7590] bridge0: port 2(bridge_slave_1) entered blocking state
[  119.700654][ T7590] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.704342][ T7590] bridge_slave_1: entered allmulticast mode
[  119.708279][ T7590] bridge_slave_1: entered promiscuous mode
[  119.740518][ T7590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  119.747192][ T7590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  119.778082][ T7590] team0: Port device team_slave_0 added
[  119.785520][ T7590] team0: Port device team_slave_1 added
[  119.814379][ T7590] batman_adv: batadv0: Adding interface: batadv_slave_0
[  119.817081][ T7590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  119.828664][ T7590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  119.834138][ T7590] batman_adv: batadv0: Adding interface: batadv_slave_1
[  119.836659][ T7590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  119.845821][ T7590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  119.884160][ T7590] hsr_slave_0: entered promiscuous mode
[  119.886448][ T7590] hsr_slave_1: entered promiscuous mode
[  119.911866][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.976514][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.049377][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.163106][   T12] bridge_slave_1: left allmulticast mode
[  120.165329][   T12] bridge_slave_1: left promiscuous mode
[  120.167425][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.171569][   T12] bridge_slave_0: left allmulticast mode
[  120.173349][   T12] bridge_slave_0: left promiscuous mode
[  120.175680][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.358370][ T7631] sctp: [Deprecated]: syz.0.660 (pid 7631) Use of struct sctp_assoc_value in delayed_ack socket option.
[  120.358370][ T7631] Use struct sctp_sack_info instead
[  120.440355][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  120.447636][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  120.451814][   T12] bond0 (unregistering): Released all slaves
[  120.616918][ T7643] netlink: 40 bytes leftover after parsing attributes in process `syz.2.666'.
[  120.940760][   T24] hid-generic 0005:04F3:8002.0001: collection stack underflow
[  120.964221][   T24] hid-generic 0005:04F3:8002.0001: item 0 0 0 12 parsing failed
[  120.984571][   T24] hid-generic 0005:04F3:8002.0001: probe with driver hid-generic failed with error -22
[  121.029687][   T12] hsr_slave_0: left promiscuous mode
[  121.032676][   T12] hsr_slave_1: left promiscuous mode
[  121.040816][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  121.054293][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  121.068131][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  121.071370][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  121.087014][   T12] veth1_macvtap: left promiscuous mode
[  121.089410][   T12] veth0_macvtap: left promiscuous mode
[  121.091929][   T12] veth1_vlan: left promiscuous mode
[  121.097131][   T12] veth0_vlan: left promiscuous mode
[  121.226779][ T5820] Bluetooth: hci0: command tx timeout
[  121.449045][   T12] team0 (unregistering): Port device team_slave_1 removed
[  121.470389][   T12] team0 (unregistering): Port device team_slave_0 removed
[  121.724513][ T7590] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  121.738842][ T7590] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  121.746082][ T7590] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  121.755522][ T7590] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  121.908138][ T7590] 8021q: adding VLAN 0 to HW filter on device bond0
[  121.938468][ T7590] 8021q: adding VLAN 0 to HW filter on device team0
[  121.960336][ T7687] netlink: 104 bytes leftover after parsing attributes in process `syz.0.679'.
[  121.961153][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[  121.966442][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[  121.988547][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[  121.990965][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[  122.008479][ T7690] netlink: 28 bytes leftover after parsing attributes in process `syz.2.680'.
[  122.024139][ T7690] netlink: 28 bytes leftover after parsing attributes in process `syz.2.680'.
[  122.030613][ T7590] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  122.047523][ T7690] netlink: 28 bytes leftover after parsing attributes in process `syz.2.680'.
[  122.050582][ T7690] netlink: 28 bytes leftover after parsing attributes in process `syz.2.680'.
[  122.139587][ T7590] 8021q: adding VLAN 0 to HW filter on device batadv0
[  122.146371][ T7700] pim6reg: entered allmulticast mode
[  122.161566][ T7700] macvlan0: entered allmulticast mode
[  122.173403][ T7700] macvlan0 (unregistering): left allmulticast mode
[  122.187814][ T7590] veth0_vlan: entered promiscuous mode
[  122.193032][ T7590] veth1_vlan: entered promiscuous mode
[  122.212496][ T7590] veth0_macvtap: entered promiscuous mode
[  122.233374][ T7590] veth1_macvtap: entered promiscuous mode
[  122.270090][ T7590] batman_adv: batadv0: Interface activated: batadv_slave_0
[  122.284562][ T7590] batman_adv: batadv0: Interface activated: batadv_slave_1
[  122.291027][ T7590] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  122.294484][ T7590] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  122.298143][ T7590] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  122.301001][ T7590] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  122.389644][  T794] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  122.395022][  T794] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  122.437720][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  122.441044][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  122.503924][ T7657] ==================================================================
[  122.507446][ T7657] BUG: KASAN: slab-use-after-free in __mutex_lock+0x738/0xe80
[  122.510671][ T7657] Read of size 8 at addr ffff88811dffc0a0 by task khidpd_04f38002/7657
[  122.515092][ T7657] 
[  122.515920][ T7657] CPU: 0 UID: 0 PID: 7657 Comm: khidpd_04f38002 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  122.515931][ T7657] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  122.515935][ T7657] Call Trace:
[  122.515939][ T7657]  <TASK>
[  122.515942][ T7657]  dump_stack_lvl+0x189/0x250
[  122.515957][ T7657]  ? __virt_addr_valid+0x1c8/0x5c0
[  122.515964][ T7657]  ? rcu_is_watching+0x15/0xb0
[  122.515974][ T7657]  ? __kasan_check_byte+0x12/0x40
[  122.515982][ T7657]  ? __pfx_dump_stack_lvl+0x10/0x10
[  122.515991][ T7657]  ? rcu_is_watching+0x15/0xb0
[  122.516001][ T7657]  ? lock_release+0x4b/0x3e0
[  122.516017][ T7657]  ? __virt_addr_valid+0x1c8/0x5c0
[  122.516023][ T7657]  ? __virt_addr_valid+0x4a5/0x5c0
[  122.516030][ T7657]  print_report+0xd2/0x2b0
[  122.516039][ T7657]  ? __mutex_lock+0x738/0xe80
[  122.516049][ T7657]  kasan_report+0x118/0x150
[  122.516056][ T7657]  ? __mutex_lock+0x738/0xe80
[  122.516067][ T7657]  __mutex_lock+0x738/0xe80
[  122.516077][ T7657]  ? __mutex_lock+0x51b/0xe80
[  122.516088][ T7657]  ? l2cap_unregister_user+0x6a/0x1b0
[  122.516099][ T7657]  ? __pfx___mutex_lock+0x10/0x10
[  122.516111][ T7657]  ? __pfx___timer_delete_sync+0x10/0x10
[  122.516120][ T7657]  l2cap_unregister_user+0x6a/0x1b0
[  122.516130][ T7657]  hidp_session_thread+0x3c9/0x410
[  122.516142][ T7657]  ? __pfx_hidp_session_thread+0x10/0x10
[  122.516152][ T7657]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  122.516160][ T7657]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  122.516171][ T7657]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  122.516181][ T7657]  ? __kthread_parkme+0x7b/0x200
[  122.516188][ T7657]  ? __kthread_parkme+0x1a1/0x200
[  122.516195][ T7657]  kthread+0x711/0x8a0
[  122.516203][ T7657]  ? __pfx_hidp_session_thread+0x10/0x10
[  122.516213][ T7657]  ? __pfx_kthread+0x10/0x10
[  122.516220][ T7657]  ? _raw_spin_unlock_irq+0x23/0x50
[  122.516229][ T7657]  ? lockdep_hardirqs_on+0x9c/0x150
[  122.516238][ T7657]  ? __pfx_kthread+0x10/0x10
[  122.516245][ T7657]  ret_from_fork+0x3fc/0x770
[  122.516255][ T7657]  ? __pfx_ret_from_fork+0x10/0x10
[  122.516267][ T7657]  ? __switch_to_asm+0x39/0x70
[  122.516277][ T7657]  ? __switch_to_asm+0x33/0x70
[  122.516286][ T7657]  ? __pfx_kthread+0x10/0x10
[  122.516296][ T7657]  ret_from_fork_asm+0x1a/0x30
[  122.516310][ T7657]  </TASK>
[  122.516314][ T7657] 
[  122.607949][ T7657] Allocated by task 7590:
[  122.609702][ T7657]  kasan_save_track+0x3e/0x80
[  122.611714][ T7657]  __kasan_kmalloc+0x93/0xb0
[  122.613693][ T7657]  __kmalloc_noprof+0x27a/0x4f0
[  122.615767][ T7657]  hci_alloc_dev_priv+0x28/0x2040
[  122.617677][ T7657]  vhci_create_device+0x120/0x6e0
[  122.619422][ T7657]  vhci_write+0x3ce/0x4a0
[  122.620915][ T7657]  vfs_write+0x54b/0xa90
[  122.622322][ T7657]  ksys_write+0x145/0x250
[  122.623807][ T7657]  do_syscall_64+0xfa/0x3b0
[  122.625521][ T7657]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.627683][ T7657] 
[  122.628679][ T7657] Freed by task 7590:
[  122.630263][ T7657]  kasan_save_track+0x3e/0x80
[  122.631826][ T7657]  kasan_save_free_info+0x46/0x50
[  122.633659][ T7657]  __kasan_slab_free+0x62/0x70
[  122.635618][ T7657]  kfree+0x18e/0x440
[  122.636981][ T7657]  bt_host_release+0x82/0x90
[  122.638490][ T7657]  device_release+0x9c/0x1c0
[  122.640087][ T7657]  kobject_put+0x22b/0x480
[  122.641593][ T7657]  vhci_release+0x88/0xd0
[  122.643157][ T7657]  __fput+0x44c/0xa70
[  122.644619][ T7657]  task_work_run+0x1d4/0x260
[  122.646433][ T7657]  do_exit+0x6b5/0x22e0
[  122.648026][ T7657]  do_group_exit+0x21c/0x2d0
[  122.649827][ T7657]  __x64_sys_exit_group+0x3f/0x40
[  122.651676][ T7657]  x64_sys_call+0x21ba/0x21c0
[  122.653445][ T7657]  do_syscall_64+0xfa/0x3b0
[  122.655360][ T7657]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.657383][ T7657] 
[  122.658229][ T7657] Last potentially related work creation:
[  122.660362][ T7657]  kasan_save_stack+0x3e/0x60
[  122.662414][ T7657]  kasan_record_aux_stack+0xbd/0xd0
[  122.664613][ T7657]  insert_work+0x3d/0x330
[  122.666402][ T7657]  __queue_work+0xbd9/0xfe0
[  122.668272][ T7657]  queue_work_on+0x181/0x270
[  122.670256][ T7657]  process_scheduled_works+0xae1/0x17b0
[  122.672648][ T7657]  worker_thread+0x8a0/0xda0
[  122.674575][ T7657]  kthread+0x711/0x8a0
[  122.676246][ T7657]  ret_from_fork+0x3fc/0x770
[  122.678006][ T7657]  ret_from_fork_asm+0x1a/0x30
[  122.679628][ T7657] 
[  122.680559][ T7657] Second to last potentially related work creation:
[  122.682689][ T7657]  kasan_save_stack+0x3e/0x60
[  122.684283][ T7657]  kasan_record_aux_stack+0xbd/0xd0
[  122.686175][ T7657]  insert_work+0x3d/0x330
[  122.687840][ T7657]  __queue_work+0xcfc/0xfe0
[  122.689440][ T7657]  call_timer_fn+0x17e/0x5f0
[  122.690978][ T7657]  __run_timer_base+0x646/0x860
[  122.692585][ T7657]  run_timer_softirq+0xb7/0x180
[  122.694201][ T7657]  handle_softirqs+0x286/0x870
[  122.695792][ T7657]  __irq_exit_rcu+0xca/0x1f0
[  122.697536][ T7657]  irq_exit_rcu+0x9/0x30
[  122.698977][ T7657]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  122.701010][ T7657]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  122.703379][ T7657] 
[  122.704304][ T7657] The buggy address belongs to the object at ffff88811dffc000
[  122.704304][ T7657]  which belongs to the cache kmalloc-8k of size 8192
[  122.709136][ T7657] The buggy address is located 160 bytes inside of
[  122.709136][ T7657]  freed 8192-byte region [ffff88811dffc000, ffff88811dffe000)
[  122.713929][ T7657] 
[  122.714975][ T7657] The buggy address belongs to the physical page:
[  122.717284][ T7657] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11dff8
[  122.720636][ T7657] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  122.723938][ T7657] ksm flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  122.726591][ T7657] page_type: f5(slab)
[  122.727919][ T7657] raw: 057ff00000000040 ffff88801a442280 ffffea00044e0200 dead000000000003
[  122.731126][ T7657] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  122.734223][ T7657] head: 057ff00000000040 ffff88801a442280 ffffea00044e0200 dead000000000003
[  122.737524][ T7657] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  122.740712][ T7657] head: 057ff00000000003 ffffea000477fe01 00000000ffffffff 00000000ffffffff
[  122.743753][ T7657] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  122.747130][ T7657] page dumped because: kasan: bad access detected
[  122.749502][ T7657] page_owner tracks the page as allocated
[  122.751651][ T7657] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5559, tgid 5559 (dhcpcd), ts 100548972389, free_ts 100526375487
[  122.758951][ T7657]  post_alloc_hook+0x240/0x2a0
[  122.760844][ T7657]  get_page_from_freelist+0x21e4/0x22c0
[  122.763024][ T7657]  __alloc_frozen_pages_noprof+0x181/0x370
[  122.765393][ T7657]  alloc_pages_mpol+0x232/0x4a0
[  122.767419][ T7657]  allocate_slab+0x8a/0x3b0
[  122.769051][ T7657]  ___slab_alloc+0xbfc/0x1480
[  122.770665][ T7657]  __kmalloc_node_track_caller_noprof+0x2f8/0x4e0
[  122.772920][ T7657]  kmalloc_reserve+0x136/0x290
[  122.774668][ T7657]  __alloc_skb+0x142/0x2d0
[  122.776573][ T7657]  netlink_dump+0x1c7/0xe20
[  122.778117][ T7657]  netlink_recvmsg+0x676/0xa30
[  122.779716][ T7657]  sock_recvmsg+0x22c/0x270
[  122.781252][ T7657]  ____sys_recvmsg+0x1c9/0x460
[  122.782932][ T7657]  ___sys_recvmsg+0x1b5/0x510
[  122.784709][ T7657]  __x64_sys_recvmsg+0x198/0x260
[  122.786666][ T7657]  do_syscall_64+0xfa/0x3b0
[  122.788290][ T7657] page last free pid 6846 tgid 6845 stack trace:
[  122.790454][ T7657]  __free_frozen_pages+0xc71/0xe70
[  122.792483][ T7657]  __put_partials+0x161/0x1c0
[  122.794286][ T7657]  put_cpu_partial+0x17c/0x250
[  122.796080][ T7657]  __slab_free+0x2f7/0x400
[  122.797557][ T7657]  qlist_free_all+0x97/0x140
[  122.799317][ T7657]  kasan_quarantine_reduce+0x148/0x160
[  122.801610][ T7657]  __kasan_slab_alloc+0x22/0x80
[  122.803280][ T7657]  kmem_cache_alloc_lru_noprof+0x1c6/0x3d0
[  122.805646][ T7657]  sock_alloc_inode+0x28/0xc0
[  122.807689][ T7657]  alloc_inode+0x6a/0x1b0
[  122.809565][ T7657]  __sock_create+0x12d/0x9f0
[  122.811612][ T7657]  __sys_socket+0xd7/0x1b0
[  122.813527][ T7657]  __x64_sys_socket+0x7a/0x90
[  122.815569][ T7657]  do_syscall_64+0xfa/0x3b0
[  122.817539][ T7657]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.819973][ T7657] 
[  122.820970][ T7657] Memory state around the buggy address:
[  122.823265][ T7657]  ffff88811dffbf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  122.826600][ T7657]  ffff88811dffc000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  122.829952][ T7657] >ffff88811dffc080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  122.833335][ T7657]                                ^
[  122.835532][ T7657]  ffff88811dffc100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  122.838975][ T7657]  ffff88811dffc180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  122.842404][ T7657] ==================================================================
[  122.846610][ T7657] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  122.849716][ T7657] CPU: 0 UID: 0 PID: 7657 Comm: khidpd_04f38002 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  122.854831][ T7657] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  122.859161][ T7657] Call Trace:
[  122.860611][ T7657]  <TASK>
[  122.861856][ T7657]  dump_stack_lvl+0x99/0x250
[  122.863908][ T7657]  ? __asan_memcpy+0x40/0x70
[  122.865913][ T7657]  ? __pfx_dump_stack_lvl+0x10/0x10
[  122.868181][ T7657]  ? __pfx__printk+0x10/0x10
[  122.870110][ T7657]  panic+0x2db/0x790
[  122.871736][ T7657]  ? __pfx_panic+0x10/0x10
[  122.873583][ T7657]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  122.876327][ T7657]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  122.878877][ T7657]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  122.881399][ T7657]  ? print_memory_metadata+0x314/0x400
[  122.883320][ T7657]  ? __mutex_lock+0x738/0xe80
[  122.885261][ T7657]  check_panic_on_warn+0x89/0xb0
[  122.887353][ T7657]  ? __mutex_lock+0x738/0xe80
[  122.889321][ T7657]  end_report+0x78/0x160
[  122.891101][ T7657]  kasan_report+0x129/0x150
[  122.893093][ T7657]  ? __mutex_lock+0x738/0xe80
[  122.895161][ T7657]  __mutex_lock+0x738/0xe80
[  122.897176][ T7657]  ? __mutex_lock+0x51b/0xe80
[  122.899234][ T7657]  ? l2cap_unregister_user+0x6a/0x1b0
[  122.901577][ T7657]  ? __pfx___mutex_lock+0x10/0x10
[  122.903764][ T7657]  ? __pfx___timer_delete_sync+0x10/0x10
[  122.906176][ T7657]  l2cap_unregister_user+0x6a/0x1b0
[  122.908437][ T7657]  hidp_session_thread+0x3c9/0x410
[  122.910463][ T7657]  ? __pfx_hidp_session_thread+0x10/0x10
[  122.912249][ T7657]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  122.914601][ T7657]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  122.917326][ T7657]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  122.919453][ T7657]  ? __kthread_parkme+0x7b/0x200
[  122.921084][ T7657]  ? __kthread_parkme+0x1a1/0x200
[  122.922697][ T7657]  kthread+0x711/0x8a0
[  122.924094][ T7657]  ? __pfx_hidp_session_thread+0x10/0x10
[  122.925955][ T7657]  ? __pfx_kthread+0x10/0x10
[  122.927487][ T7657]  ? _raw_spin_unlock_irq+0x23/0x50
[  122.929176][ T7657]  ? lockdep_hardirqs_on+0x9c/0x150
[  122.930950][ T7657]  ? __pfx_kthread+0x10/0x10
[  122.932677][ T7657]  ret_from_fork+0x3fc/0x770
[  122.934688][ T7657]  ? __pfx_ret_from_fork+0x10/0x10
[  122.936748][ T7657]  ? __switch_to_asm+0x39/0x70
[  122.938348][ T7657]  ? __switch_to_asm+0x33/0x70
[  122.939959][ T7657]  ? __pfx_kthread+0x10/0x10
[  122.941525][ T7657]  ret_from_fork_asm+0x1a/0x30
[  122.943379][ T7657]  </TASK>
[  122.945221][ T7657] Kernel Offset: disabled
[  122.946676][ T7657] Rebooting in 86400 seconds..

VM DIAGNOSIS:
18:44:20  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90002aef370
R8 =ffff888021798237 R9 =1ffff110042f3046 R10=dffffc0000000000 R11=ffffffff85474610
R12=dffffc0000000000 R13=ffffffff99ac48e6 R14=ffffffff99dc9760 R15=0000000000000000
RIP=ffffffff8547468c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8650000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f593de4dd60 CR3=000000003a114000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00ff000000000000 ff00000000000000 XMM05=0000000000000030 0000000034303a00
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffff000000ff XMM09=313030302e323030 383a334634303a35
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=674154684b6c7b00 RBX=ffffffff81974d58 RCX=674154684b6c7b00 RDX=0000000000000001
RSI=ffffffff8d9822d0 RDI=ffffffff8be28d40 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f5b R9 =1ffff11026cc65eb R10=dffffc0000000000 R11=ffffed1026cc65ec
R12=ffffffff8fa10cf0 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d5000
RIP=ffffffff8b66b4a3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c50000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2f318ff8 CR3=0000000028468000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=306963682f68746f 6f7465756c622f6c XMM01=ffffffffffffffff ffffffffffffffff
XMM02=00007f4938df0068 746f6f7465756c62 XMM03=0000000000000000 ffff000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000030 0000000034303a00
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffff000000ff XMM09=313030302e323030 383a334634303a35
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
