last executing test programs:

32.92966272s ago: executing program 2 (id=38):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1700000000000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00f3ffff"], 0x50)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c00000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYRES8=r3, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0)
r5 = socket$igmp6(0xa, 0x3, 0x2)
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}})
write$tun(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESHEX=r2], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r7}, &(0x7f0000000240), &(0x7f0000000280)='%pS    \x00'}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r7, &(0x7f0000000300), 0x0}, 0x20)
close(0xffffffffffffffff)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000001a000000611220bc000004003106000000000000"], &(0x7f0000000040)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r8}, 0x38)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140))
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r8, &(0x7f0000000140), &(0x7f0000000000)=""/48}, 0x20)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010c2dbd7000fedbdf257b00000008000300", @ANYRES32=0x0, @ANYBLOB="ae1ade2cb6cdb9c4f7ec668973ede7db5bec6d39d4f3d89cdea1172006748e3eb2589edd170b1b3731f76510431ec1a26a54ab1e560001dec6d01dcefc3a72b4466ea68022df31f0ce708ab8181c65aa24ed9eaf1311d3695c82f95a40f07f3500affc9a867b4e8923040d34d88bb24b747d5ea52dc50fcef134ae2e1142b6c539d76fa4530000010003a4bfce"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x48000)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0xffffffffffffff73)

27.310994891s ago: executing program 2 (id=38):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1700000000000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00f3ffff"], 0x50)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c00000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYRES8=r3, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0)
r5 = socket$igmp6(0xa, 0x3, 0x2)
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}})
write$tun(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESHEX=r2], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r7}, &(0x7f0000000240), &(0x7f0000000280)='%pS    \x00'}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r7, &(0x7f0000000300), 0x0}, 0x20)
close(0xffffffffffffffff)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000001a000000611220bc000004003106000000000000"], &(0x7f0000000040)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r8}, 0x38)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140))
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r8, &(0x7f0000000140), &(0x7f0000000000)=""/48}, 0x20)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010c2dbd7000fedbdf257b00000008000300", @ANYRES32=0x0, @ANYBLOB="ae1ade2cb6cdb9c4f7ec668973ede7db5bec6d39d4f3d89cdea1172006748e3eb2589edd170b1b3731f76510431ec1a26a54ab1e560001dec6d01dcefc3a72b4466ea68022df31f0ce708ab8181c65aa24ed9eaf1311d3695c82f95a40f07f3500affc9a867b4e8923040d34d88bb24b747d5ea52dc50fcef134ae2e1142b6c539d76fa4530000010003a4bfce"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x48000)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0xffffffffffffff73)

21.639030626s ago: executing program 2 (id=38):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1700000000000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00f3ffff"], 0x50)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c00000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYRES8=r3, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0)
r5 = socket$igmp6(0xa, 0x3, 0x2)
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}})
write$tun(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESHEX=r2], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r7}, &(0x7f0000000240), &(0x7f0000000280)='%pS    \x00'}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r7, &(0x7f0000000300), 0x0}, 0x20)
close(0xffffffffffffffff)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000001a000000611220bc000004003106000000000000"], &(0x7f0000000040)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r8}, 0x38)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140))
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r8, &(0x7f0000000140), &(0x7f0000000000)=""/48}, 0x20)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010c2dbd7000fedbdf257b00000008000300", @ANYRES32=0x0, @ANYBLOB="ae1ade2cb6cdb9c4f7ec668973ede7db5bec6d39d4f3d89cdea1172006748e3eb2589edd170b1b3731f76510431ec1a26a54ab1e560001dec6d01dcefc3a72b4466ea68022df31f0ce708ab8181c65aa24ed9eaf1311d3695c82f95a40f07f3500affc9a867b4e8923040d34d88bb24b747d5ea52dc50fcef134ae2e1142b6c539d76fa4530000010003a4bfce"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x48000)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0xffffffffffffff73)

15.840876198s ago: executing program 2 (id=38):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1700000000000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00f3ffff"], 0x50)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c00000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYRES8=r3, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0)
r5 = socket$igmp6(0xa, 0x3, 0x2)
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}})
write$tun(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESHEX=r2], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r7}, &(0x7f0000000240), &(0x7f0000000280)='%pS    \x00'}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r7, &(0x7f0000000300), 0x0}, 0x20)
close(0xffffffffffffffff)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000001a000000611220bc000004003106000000000000"], &(0x7f0000000040)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r8}, 0x38)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140))
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r8, &(0x7f0000000140), &(0x7f0000000000)=""/48}, 0x20)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010c2dbd7000fedbdf257b00000008000300", @ANYRES32=0x0, @ANYBLOB="ae1ade2cb6cdb9c4f7ec668973ede7db5bec6d39d4f3d89cdea1172006748e3eb2589edd170b1b3731f76510431ec1a26a54ab1e560001dec6d01dcefc3a72b4466ea68022df31f0ce708ab8181c65aa24ed9eaf1311d3695c82f95a40f07f3500affc9a867b4e8923040d34d88bb24b747d5ea52dc50fcef134ae2e1142b6c539d76fa4530000010003a4bfce"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x48000)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0xffffffffffffff73)

9.787594763s ago: executing program 2 (id=38):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1700000000000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00f3ffff"], 0x50)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c00000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYRES8=r3, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0)
r5 = socket$igmp6(0xa, 0x3, 0x2)
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}})
write$tun(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESHEX=r2], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r7}, &(0x7f0000000240), &(0x7f0000000280)='%pS    \x00'}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r7, &(0x7f0000000300), 0x0}, 0x20)
close(0xffffffffffffffff)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000001a000000611220bc000004003106000000000000"], &(0x7f0000000040)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r8}, 0x38)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140))
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r8, &(0x7f0000000140), &(0x7f0000000000)=""/48}, 0x20)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010c2dbd7000fedbdf257b00000008000300", @ANYRES32=0x0, @ANYBLOB="ae1ade2cb6cdb9c4f7ec668973ede7db5bec6d39d4f3d89cdea1172006748e3eb2589edd170b1b3731f76510431ec1a26a54ab1e560001dec6d01dcefc3a72b4466ea68022df31f0ce708ab8181c65aa24ed9eaf1311d3695c82f95a40f07f3500affc9a867b4e8923040d34d88bb24b747d5ea52dc50fcef134ae2e1142b6c539d76fa4530000010003a4bfce"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x48000)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0xffffffffffffff73)

9.088667807s ago: executing program 0 (id=317):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x758, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async)
r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000140)={r1, r1, 0x8, 0x0, 0x0, 0x82, 0xa, 0x3, 0x5886, 0x7fff, 0x1, 0xac, 'syz0\x00'}) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) (async)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r5) (async)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000027c0)={0x18, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}]}, 0x18}, 0x1, 0x0, 0x0, 0x4048011}, 0xc014)
listen(r6, 0x0)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) (async)
r11 = socket(0x11, 0x3, 0xdc1)
setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) (async)
sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@ipv4_getrule={0x1c, 0x22, 0x4, 0x70bd2d, 0x25dfdbfd, {0x2, 0x14, 0x10, 0xf2, 0xf, 0x0, 0x0, 0x3, 0x3}, ["", "", "", "", "", "", ""]}, 0x1c}}, 0x0) (async)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094)

8.999547501s ago: executing program 0 (id=318):
r0 = socket$kcm(0x29, 0x5, 0x0)
socketpair(0x10, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bind$unix(r2, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e)
r3 = socket(0x5, 0x800, 0x9)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r1)
sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x174, r4, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdb6d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xde}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4d1f58e5}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xa03f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x98ad}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x360, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e20, @private=0xa010102}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_PUBL={0x4}]}, 0x174}, 0x1, 0x0, 0x0, 0x805}, 0x4)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r2)
sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r5, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffff8000}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x682}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x44840)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000480}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x40, 0x3, 0x3, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0xc}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xff}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000600))
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000640)={<r8=>0x0, 0x7}, &(0x7f0000000680)=0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000006c0)={r8, 0x5}, 0x8)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'team_slave_0\x00', <r9=>0x0})
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x16, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x81}, [@exit, @jmp={0x5, 0x0, 0x4, 0xb, 0x5, 0x2}, @map_idx={0x18, 0x3}, @map_fd={0x18, 0x0, 0x1, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}]}, &(0x7f0000000800)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000880)={0x5, 0xf, 0x3bc5, 0x200}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f00000008c0)=[{0x2, 0x4, 0x2, 0xa}], 0x10, 0x3}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000009c0)=r10, 0x4)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, r11, 0x800, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}]}, 0x2c}}, 0x20004001)
ioctl$sock_inet_SIOCGIFDSTADDR(r6, 0x8917, &(0x7f0000000b80)={'veth0_macvtap\x00', {0x2, 0x0, @initdev}})
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route_sched(r3, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)=@newchain={0x2c, 0x64, 0x2, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x1, 0x9}, {0xfff3, 0x10}, {0x7, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x80}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000002}, 0x40800)
gettid()
sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x24, r5, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x1)
sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, r11, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200080c4}, 0x4009000)
syz_genetlink_get_family_id$devlink(&(0x7f0000000ec0), r2)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000f40)={<r13=>0x0}, &(0x7f0000000f80)=0xc)
sendmsg$AUDIT_SET(r3, &(0x7f0000001040)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x3c, 0x3e9, 0x400, 0x70bd2b, 0x25dfdbfd, {0xa, 0x0, 0x0, r13, 0x0, 0x10, 0x1fc000, 0x1000, 0x0, 0x6, 0x10}, ["", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0xc4}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001700)={0x18, 0x27, &(0x7f0000001200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x5d5e}, {}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001340)='GPL\x00', 0x5, 0xe1, &(0x7f0000001380)=""/225, 0x41000, 0x4a, '\x00', r9, 0x0, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001480)={0x0, 0x1, 0xffff, 0x7ff}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000001640)=[0xffffffffffffffff, r7, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001680)=[{0x5, 0x2, 0x4, 0x2}, {0x0, 0x5, 0x3, 0x4}, {0x4, 0x3, 0xb}, {0x5, 0x3, 0xe, 0x4}, {0x3, 0x3, 0x9, 0x5}], 0x10, 0x7}, 0x94)

8.995530469s ago: executing program 0 (id=319):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000420000003c00128008000100677470003000028008000200", @ANYRES32=r2], 0x5c}, 0x1, 0xba01}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r3, 0x2}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r6=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_KEY(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)={0x1f0, r5, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0x10c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "20c18bf4c1ddf0e6e482b03a9d811314a4dbe153c74efeea6f698ec938df2978"}, @NL802154_KEY_ATTR_ID={0x44, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "fc2072042a6665804a5ab1b3ef39559da6f3b28adf88ff1f2be811f881b8dca9"}, @NL802154_KEY_ATTR_ID={0x40, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x10001}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x100}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}]}, @NL802154_KEY_ATTR_ID={0x10, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "8c67e065cef98f3c9cbadeeba6ee67fac353439cf3cfc03dd3a3be34240069cd"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xef}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000003}, @NL802154_ATTR_SEC_KEY={0x28, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3d140c42adea7a3178bac750eec79610"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x7}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xde}]}, @NL802154_ATTR_SEC_KEY={0x38, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "1d0da344d5d384dd603b802ecdba505f67c8d996267d1305521008968e1768fe"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xe}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x6}]}, @NL802154_ATTR_SEC_KEY={0x50, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "fb22461f0c09f346c182368d087b21ce254a990af15acb1d1a17823919491eac"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3d571ef7598fd343bc0c52ebe9d078ec"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "082acba5f39ed1f491051a9c0991a51f"}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x48084}, 0x80)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r6, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}}, 0x0)
r7 = socket$inet6(0xa, 0x400000000001, 0x100)
setsockopt$inet6_int(r7, 0x29, 0x2, &(0x7f0000000340)=0x101, 0x4)

8.881479851s ago: executing program 0 (id=320):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10}, [@ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xfffffffffffffff8}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37) (async)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x317, 0x0, 0x0, {{@in=@local, @in=@dev={0xac, 0x14, 0x14, 0x3b}, 0xffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffc}, {0x5, 0x200000, 0x7, 0xffff}, {0x40000, 0x0, 0xae8}, 0xbfffffff, 0x0, 0x2, 0x4, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x104}}, 0x0) (async, rerun: 32)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'nr0\x00', &(0x7f0000000200)=@ethtool_flash={0x33, 0x37, './file0\x00'}}) (rerun: 32)

8.750382535s ago: executing program 0 (id=321):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x2, 0xa, 0xe, 0x3, 0x2, 0x0, 0x70bd27, 0x25dfdbff}, 0x10}}, 0x8890)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x2416, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff02000000000000000000000000000102000003"], 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r4 = socket$kcm(0x2, 0xa, 0x2)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0xc4}}, 0x20050800)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x0, 0x25, 0x148, 0x130, 0x60, 0x220, 0x2a8, 0x2a8, 0x220, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc0, 0x108, 0x0, {0x200003ae, 0x7f00}, [@inet=@rpfilter={{0x28}, {0x5}}, @common=@inet=@set3={{}, {{0x3, 0x5, 0x1}, {0x4, 0x3}, {0x5, 0x400}}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xa, 'syz0\x00'}}}, {{@uncond, 0x0, 0xe0, 0x110, 0x0, {}, [@common=@inet=@dccp={{}, {[0x4e23, 0x4e22], [0x4e20, 0x4e22], 0xf, 0x8, 0x9}}, @inet=@rpfilter={{}, {0x3}}]}, @common=@unspec=@MARK={0x0, 'MARK\x00', 0x2, {0x7f, 0x9}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x31f)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(0xffffffffffffffff, &(0x7f0000002700)={@void, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @dccp={{0x1a, 0x4, 0x3, 0x7, 0x1078, 0x64, 0x200, 0x81, 0x21, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, {[@cipso={0x86, 0x54, 0x2, [{0x0, 0xc, "4d23722258229293b616"}, {0x6, 0x11, "746df147168d1d003c762e8c97376d"}, {0x7, 0x9, "030e8445e50eee"}, {0x7, 0xf, "a1f4121fde1c9b7abe3131e384"}, {0x1, 0xf, "8ae035df4b675388ccfba5ad15"}, {0x0, 0xa, "b0a323255334036d"}]}]}}, {{0x4e23, 0x4e22, 0x4, 0x1, 0x7, 0x0, 0x0, 0x2, 0x6, "59d82c", 0x41, "30b4d2"}, "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"}}}}}}, 0x108a)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000070a09"], 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x884)

4.667544228s ago: executing program 2 (id=38):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1700000000000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00f3ffff"], 0x50)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c00000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYRES8=r3, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0)
r5 = socket$igmp6(0xa, 0x3, 0x2)
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}})
write$tun(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESHEX=r2], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r7}, &(0x7f0000000240), &(0x7f0000000280)='%pS    \x00'}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r7, &(0x7f0000000300), 0x0}, 0x20)
close(0xffffffffffffffff)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000001a000000611220bc000004003106000000000000"], &(0x7f0000000040)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r8}, 0x38)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140))
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r8, &(0x7f0000000140), &(0x7f0000000000)=""/48}, 0x20)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010c2dbd7000fedbdf257b00000008000300", @ANYRES32=0x0, @ANYBLOB="ae1ade2cb6cdb9c4f7ec668973ede7db5bec6d39d4f3d89cdea1172006748e3eb2589edd170b1b3731f76510431ec1a26a54ab1e560001dec6d01dcefc3a72b4466ea68022df31f0ce708ab8181c65aa24ed9eaf1311d3695c82f95a40f07f3500affc9a867b4e8923040d34d88bb24b747d5ea52dc50fcef134ae2e1142b6c539d76fa4530000010003a4bfce"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x48000)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0xffffffffffffff73)

4.49916529s ago: executing program 0 (id=321):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x2, 0xa, 0xe, 0x3, 0x2, 0x0, 0x70bd27, 0x25dfdbff}, 0x10}}, 0x8890)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x2416, &(0x7f0000000580)=ANY=[@ANYBLOB="e727dc07001f391e7dd7a2d786dd609907a623e02c03cb697a653e336f000000500000000000ff0200000000000000000000000000013200001200000000020090780000000369c46dea0006ff0800000000000000000000000000000001ff0200000000000000000000000000011d000000000000000502040100000000625d0000000000000502200010d492385c3783d3afa4087aac07f72281b3b12267af7a3550aa1c3df47e5193806438916ec2e867d21394d0ececf9700962d3e17e4bb578aafd31a3f1955010879ee9079424526f222aa9e6477366d11ceda8cc0a4a1008153a04ddaa531db1dc129d6fb8f95c13d752d80f25ce2b253934d9a86bdf503653d3730ada1509d9536c165576ddde5926db915dd86eb3e2a03a7e56c01f4067638d6b7a6b4e9712c66ed550b77c6e655dc71d08ae40755d11b56963a28dce50181d34e7c4b0caae8cf4b947526eecd89735717604ae"], 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff02000000000000000000000000000102000003"], 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r4 = socket$kcm(0x2, 0xa, 0x2)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0xc4}}, 0x20050800)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x0, 0x25, 0x148, 0x130, 0x60, 0x220, 0x2a8, 0x2a8, 0x220, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc0, 0x108, 0x0, {0x200003ae, 0x7f00}, [@inet=@rpfilter={{0x28}, {0x5}}, @common=@inet=@set3={{}, {{0x3, 0x5, 0x1}, {0x4, 0x3}, {0x5, 0x400}}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xa, 'syz0\x00'}}}, {{@uncond, 0x0, 0xe0, 0x110, 0x0, {}, [@common=@inet=@dccp={{}, {[0x4e23, 0x4e22], [0x4e20, 0x4e22], 0xf, 0x8, 0x9}}, @inet=@rpfilter={{}, {0x3}}]}, @common=@unspec=@MARK={0x0, 'MARK\x00', 0x2, {0x7f, 0x9}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x31f)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(0xffffffffffffffff, &(0x7f0000002700)={@void, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @dccp={{0x1a, 0x4, 0x3, 0x7, 0x1078, 0x64, 0x200, 0x81, 0x21, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, {[@cipso={0x86, 0x54, 0x2, [{0x0, 0xc, "4d23722258229293b616"}, {0x6, 0x11, "746df147168d1d003c762e8c97376d"}, {0x7, 0x9, "030e8445e50eee"}, {0x7, 0xf, "a1f4121fde1c9b7abe3131e384"}, {0x1, 0xf, "8ae035df4b675388ccfba5ad15"}, {0x0, 0xa, "b0a323255334036d"}]}]}}, {{0x4e23, 0x4e22, 0x4, 0x1, 0x7, 0x0, 0x0, 0x2, 0x6, "59d82c", 0x41, "30b4d2"}, "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"}}}}}}, 0x108a)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000070a09"], 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x884)

2.929415237s ago: executing program 1 (id=360):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@can_delroute={0x34, 0x19, 0x1, 0x70bd28, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_CS_XOR={0x8, 0x5, {0x7, 0x7, 0xfffffffffffffffc, 0xc}}, @CGW_MOD_AND={0x15, 0x1, {{{0x2, 0x1, 0x1, 0x1}, 0x6, 0x1, 0x0, 0x0, "fc0600f8ae754ae2"}, 0x1}}]}, 0x34}}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0xa, &(0x7f0000000000)=0xfffffffd, 0x4)
recvfrom(r2, 0x0, 0x0, 0x1, 0x0, 0x0)
shutdown(r0, 0x1)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f001600060004e0a7000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b31d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025cc40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de603000000e4edef3d93452a92954b43370e9703920723f9a94100"/216, 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x54, 0x10, 0x609, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffa7, 0x10008}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_LOCAL6={0x14, 0x8, @ipv4={'\x00', '\xff\xff', @empty}}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x20000040)
connect$bt_rfcomm(r0, &(0x7f0000000200)={0x1f, @any, 0x15}, 0xa)
close(r0)

2.801592721s ago: executing program 1 (id=361):
bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r3, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r6=>0x0})
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000300af4e31acf33f0000610200000210000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r6, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r7, &(0x7f0000000400)="c7", &(0x7f0000000380)=@tcp6}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r7}, &(0x7f0000000d00), &(0x7f00000003c0)='%pS    \x00'}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f00000000c0)={r7, &(0x7f00000001c0), 0x0}, 0x20)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094)

1.976665585s ago: executing program 1 (id=362):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0xfffffffffffffdd1, r2, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0x0, 0x99, {0x2, 0x58}}}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x2c}}, 0x48804)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r6, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r7 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10)
sendmmsg$inet(r7, &(0x7f0000005240), 0x4000095, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, 0x0, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="500000000206030000000000000000000100ffff050001000700000005000400020000000c00078008001200000000000900020073797a30000000000c000300686173683a697000050005000a"], 0x50}, 0x1, 0x0, 0x0, 0x844}, 0x4040004)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5)
sendfile(r0, r5, 0x0, 0xffffffff000)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@map, 0x4, 0x1, 0x9, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000030a0102000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c080001"], 0x122}}, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300), 0x4)
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400eaff0700000001100000808b55ec", @ANYRES32=0x0, @ANYBLOB="008000"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x11, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000060000000000000000000000850000007d000000b700b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b705000008000000850000006a0000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r11}, 0xc)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000340)={0xd}, 0x8)

1.260602117s ago: executing program 1 (id=363):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c)
recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={<r3=>0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10)
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x0)
r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000340)={r5, r5, 0x1, 0x0, 0x0, 0x31, 0x1, 0x10cf, 0x5df, 0x8b, 0x2, 0x3, 'syz0\x00'})
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r4, 0x800448d2, &(0x7f0000000c80)={0x17, &(0x7f0000001040)})
getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000180)=0x8)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000040)={r3, 0x5, 0x1, 0x6, 0x9, 0x8b}, 0x14)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x77)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r6, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r7 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x61, &(0x7f0000000340)=ANY=[@ANYBLOB="66696c744572000000000000000000000000000000000000000000100000000002"], 0x48)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r8, 0x0)
setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r9, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c)
listen(r9, 0x204)
socket$netlink(0x10, 0x3, 0x4)

280.192009ms ago: executing program 1 (id=364):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYRES8=r0], &(0x7f0000000200)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r1}, 0x18)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r2, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xf}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xb, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0)
sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x20, r4, 0x501, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000054}, 0x44)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
socket$packet(0x11, 0x2, 0x300)

0s ago: executing program 1 (id=365):
socket$nl_route(0x10, 0x3, 0x0)
r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000001c0)=0x1c, 0x100800)
getsockname$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000240)=0x1c)
socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f00000002c0)=0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1004e22}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ppoll(&(0x7f0000000000)=[{r3, 0x8104}], 0x1, 0x0, 0x0, 0x0)
r4 = socket(0x1e, 0x4, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000a80)={0x0, 0x800, 0xf00, "cf46ce6bf41dbff9c948d34dad288777c365c0880192fb678c7384a2941104603d1fa838a15837ddd676cd730862b0f1d9d7a1d8ce220200a451809e11218d1749c718174abdc2eef5a24376037bcc001b9fee4e6b9ccf0b06cd68ae649b69d0b7beb0e5f68703932e044f8265816fb993f0ad3543706762f23c3524cf375a395279a371771155bee6681336ee1fb05d32b59356eb77dae21a6ec1849bd3a720eb14a85ad4e18f3a143eebccb6539af99f8e90c958e2f41c6d99f340483c6c4a208c34f5c4576c15741d70f0f74b0832eb47c025e819e5b6fffcbac1e8893beeb133602e75e9861e84e9d3906d785c59a8ba054d96432be3d6029e42411f6701200fa43b3925fb66fcde18be0fa808233fa3eff325de2634fd014d96490d059e7ca622909be5fa2a72a6457e816ffc521df6a4444c896b97431fd2a75e4026e893797ddecbfc83c6c2ba859e03e7061bd20dd9cfa952199f2d6cb66678a7b37f7d98bbcbea73b12120534cc927788a25ad7ba1739398e3eac3d8bd518e57c1174648ced665b0374d257de99e247c2e4ea371b857d3c930e3088b0ab69463b14c9d37949a140f850306cb7316671ad023d6793f6a819b0b7ce02e7ac3e813c2bd5190fb5cb61c1d10512638085fd8b9d41b23ac652be86de64cb3199df3a137a01c23b3e082f233bf4a819b0ebee6f9d09bced19346bc804009fb9a2b97b82bc47e436b999bfdde0237326ed8f7922f900b0b6eab61d92a068a537f031ee484553ea9a87214924d4817324c1b48ca99350be1d7056bfcc6b63380e31f7562f1df2613057aeb89ea111e5b259a282456391231a188f13d67c2803923d3094a84d562a079ceed684be3e701ba648f001f76e53e21bd5de6da3e94a4f5e0da2cd9c74556b343ccca76ba61914cc6b33e499aefe7209cf968b1db9fa51cfabfb2937716bc89021495b726854b020e316063cdec8b860036e41b8bd16e7ad7b1d1ea87e1875f35f2852e39802fb1df4457cc55aefec53fcc1d7e104c874a0740b9110c4dbf94237780a7544e5fea07bca3ff6a56b07a9e585cd54d2e0b0637e16506e5e44428a575d6f7957ff4c8507e31b1ca530e0dc37b8f1a4b9c2a72b71563dd4f1d40013202cdef9f24fb43764e2616709cfece918cfa484c45d2f435a484b94a686b104deff11b4b9f07115197d1bb99992c619cbe176dc013bc9d67ba90257748b66cdaadeca364a198f8327c116ec37852939fac139d48e434980371949e9b1d07cebda257104de4d923764fd67ef6bde99a00cd3762b9d93438aa07da27dc146cc5eb997d2f739525441fe2c6cd6585ef8c33552e35e5933cb27bb5e5dfe165a7577074e8053bdf1d38a2503cf6980383fbf2ced570f2123e813f37056f139d7cd52bef036ba38d36256e836e07b57e051667eda864afe059157e6a6ef09ca1eb4b8eaedd60db19a1226e51b188dd5f23afaa418052d7c4f9b7b06440ef025a4f6bc3df99a06c72d433d18fcf38f873caa62c1b70b33b533d98361886c7339350df5184c0ba92cee1e0b21b9e5455193aff56096f3124463932a909c2953add05c6fc9a9c1aa4f2829594f9e9203183b761ceb4d8f32eb7219b16160066ad6c21c4a831f95cb57b3150e1ce0bc9a97df50d3ab9690e44cec8f998d940b5a509c364868ab7498115fece61cf5e13390eb5f4b6290040afadb9f84d69679c3006febd799ca0111ce64da1417cd45cc51f8764b5564f279ae0d5fd12ce29033beeb6c7c8bd4490d1845e04347e80a05efabe18cf94a1df0b49a931e52117e61d7108082bfda4ceeafbe26747dfce3bdc2827eb8172ca68314a9479d43f3c396a64be58a12f70bad30775d9fc0731969d01208e38e15eaaecf3bcdb748ba1db85b808ed1eadc2c4029a3d4554da17f01de40dee37ae590de89ed518c1172284399a41e0742c0105b1180e8ab1dabb8de849ebc9418cb5e8b6cf653aabf8d6393e7184ea649ba3771829fb97ea3d2d7003ac3bb251a37a46a1876f66f465885532158d42fc2bd4b4ad4be01a916995da4fd16a5f229df7785d3db26589f1f4d55bf07b90a2a3cc64e247a5eb745fd82a14829a9e698c39e8f5517f5113d51b707accee44070d669c0c73034b4de94c20c12589b795ff20fe6906bc090b0ea55db4cbc0aab14cc31475308dc913abef7d6c0cfd3b5d59328a6127ae5e1c2cbfafa18380975f6a7805484f8236ca1036d43dee5fb127779f62cd1188b410027644341ad74c7e3c4d013822192b5fe292565a8bcf70dbc61172a55bafbcb0c2cab492092f9c9d140f34278ac0446973a0ffe35c49eb21f57fd8c9abd0bfeef2c9bde737b4afa9db2c215a8a0337ca7a30cfac0817b005d54fdfcb56c132af71046104538b8d36115e0d148267228293badd6e6c14e44c6b5df8fbe77e892454ffcfb7559767f9bfb79c6ae0d3475f72122558125149447a97fa1c03e2bb0275c68597364743cf63e9ef6426a1601f1e9fc5ed6fda28fe701bab6bd56d9c258e9ff22984890f414d49a11368d51ed86921df6b69bf77d3b28c73c12e29da327a481f836bca77d8fe6a4f71afc8efdaf18884cf28e835edae9112e51d4d9404f31371c3f3b5276f6b0771e72c16bd3291a2d53ef332a6e11f1b584ae254fe4c76c9b0c86294fa6d8095fc6e87c3f79c7efea7ddb9f4b10e677d417ebb049483a5ad0a63a1b5eb1a91b052df3f84ccc61f8867bf08c5ec9007851914176577c26b56b587b4f6355ec89a5279099b160cc66122461242c23c901f47abea9b2939a417f378b04d89114e710f1109712f63dfe1e818a31fd9f3afa76e6bd01a7f3f35ac5097ddfcb6e4e8f2af23179acdf930e6ca31d3e998e649a98a76d48d96c5a874d1da7bb2d654d325c9f74beffe05ba69efc494e3acad39c5a7dfc6ce5e10cd3f7dcfe6f9621aa0176eba661a9e3a0aa55da21d09330412e760a0f000dcc5f6610251bd6df043544b9e86e9699b7e5113d4974dab4a278f6a7077a43522ccd8ef57a0ff9de4f2a5339189d8ab67aa3cf335bdc69df2549f0af7231ce6e0235b2d9f2b5d50541c876dc59000f2cfa4b97aeaf8c352dc62b9f47d6368f395ce3d64bc8196554428de08bd3c2e43c55a55c2b0415724d1fc703a3fae29c64bd8d77bf32b76aee0d74bc447d26b2e049ddaa3fa50c19b6e7f90263bbae1c860212d9dc91fcd52c8b51fd002f86f07e4f96f045858af8d028b34c7bd05e5494a3efe92eb1dbc6120aa4556be0dddf60f298085e33eef5fff42b1cb20b075d41353058921445cfbdd6b64d53087b20d2dd122f3989021303edcb19b33729d221d1300903d93e960d896ed014b87425020fb64bb4f722be66b615e00b773f3858e291d433d59215ced9771307dd94cc20e8ceeb75bc1607671977f18f4c0b2b2dee2f25b76a0883d75f0beee7ca6ec0bc1d1abe0fcc813933e03ae9952e3dd95f6c3b82b3edeaeebc2486a2adba97a2526267112a3afb43c36634436539f902d903b23058b12d5519151916ca9c7712062cad67e58ad2028bd47548c4203d600b2aa4ae4079c05adb6002fe3067a3ead8f80aa955cd2e5b9e2cf3b39e5195ee6c9504f258c0c4ee4ebca258641c7a1fb5611a020d8fd607f9db0ca8c02a8a9072fb34174fe938b79714db3c0dd2a22a538f334eda2c46436ef8c12d24100a1314c627d738a758dd71526ce61bf4b0c6a1b4df9cac2107c8247224078771f14d816c86f3695ca25013a3e8627f70362f28a48920c08d23dcd09265c180f44a7abd2dbcb6b8742bbc29012aeeed25bdb50ede9884ffd94a9bb4188d71f8f6ca7c9d1b733ae31ba3504d6934f4c203b4c781348d78dc38b89f91351b2dba27fdf9cf1ff15c9b2a24d992fdc96d6c02b4bf8d7cc2f59c351b0c7a6315c8990c5ad5244bef776a9b6fe744444b41a1d43f5a6a46c2534ddcbefe21070f4ac466e6ed37ccce46616f22729e2c0d8f875135c23401e120066e33120e15c0564356b8dedd42e8c944c4fab4056e974115e6ed6aea409573cc4c02efaf80274ef7bbef282c76690fe0d6f162ceb0f5d14cbb007862bbc66d6cc39038f6249ee8c67a49457a919dfe4e87f729d2d8c78fe8655162302974e5274852a2443ec0aa6d86dd7764690d2b45164ce1a386efc8c9fc252d47cf5ce63fca872f99e42ade160707ef864ed79c6e3e7f482522e8923a6d1bdc8c4357282205da0a165359306bf14c0daa2318c14e6e4e87790848130b4ee42ed28dfb7718a1218bf30aff48b9773de29dbca28a5f94b8e26b86420d82f7dd16e23f09ef43ebd493d78f2de07fdfbd8ec695d9764138bb6b12b7a9bd056c09395faeedf8716cb2f5e8d27f72b980540ed5f64249d123c35c37172c8ae2ba68cefb7abade4416c776988ab76b715356e8859eeee5ed8ca6de5fa27e57b69b96c820271fbecd0f229f8fb2648422e2a96d0d67be1f2e31b1eef5a88d02f5309a0eb68493ab8e249fe0f4df7187ba62f5c45d7430b4ce5fffe9b72f7ade7d0fa1210697a7d7578b59abda74b413d8d41f49e37fa6859d9898087206da46d2d6ddb9a465eb83bd6606a3ca493a70043baaad391336b084c455fdae0ec5d8a0922064b23353e94e723b1f29ded9c91755c9914c8f44a3eb345d4a9d2df9dc7e772c3cb12631a253aa307d0ae8f84af44d746a226579ed0af74c220d0c73eff434a74ec3440ea5bf09d84c902dd553d50355d849410b7912a64645f3a23fdb856e3fd18b98ebde8efc203dbf4cdfb5974d9f8d0adaf21579a40e1bbae3dc693fa0adb13f47e23cc2ac7ad7d55efd42ce9d88de94ee7d811dff71c0bb9d31fbd568b4dd7efe97b48d6143bff4b5fec059be1f67419f4de86078e8955f9c20976e97ddd004f2e7fd00c14f9f69ee6e628a6c37cd976f9788ae48ee285cc04600ded94c71f5b9ed03593dc19e3d00efa0b11c1c485b32643a1ba49fd97c81d912d5559dead6bdf85e08d776aa3c7ea9235f7e1994cdcf6e990f8b53ee961997a3c53c7301609975747e7253f73ec80c1fe38656b28b98b29fe0d2f265aff37b32a8001a00ad899dabf2d4f15275664cdfe130424171ec154d13fd914154d840e0a2c922285644b8141a44324950e2eaf952b350cd9e3e134b7347de8bb3f14a62bd645481cc04ca46014e47d59ad8d45c48fd3f644708ce33657e078d8f8f0c02aed7d6d87d72d6fefdc0e55a933b1ffb8c39678ad3c13868e840bd7ad72130e18ac27d0ae1fc6d91ff37ff712006f791eac570636ef3e8d589a7af9f41e836150e112457f4a71e6487d0d87deac15478e3784659e9b3c90b350b1cb736ba13e4e14b1ac2cceeede25eab9584b8fe198385cb19fb5f1762c6bdf8b12dc9a74d263300af103c7596b61469372e635a2d7077d4866671172f130d067"}, 0xf08)
writev(0xffffffffffffffff, &(0x7f0000000300)=[{0x0}], 0x1)
socket$inet(0x2, 0x2, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r5, 0x0, 0x0)
close(0x3)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
recvmsg$unix(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20)
sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:11957' (ED25519) to the list of known hosts.
syzkaller login: [   41.990213][ T5767] cgroup: Unknown subsys name 'net'
[   42.109627][ T5767] cgroup: Unknown subsys name 'cpuset'
[   42.118758][ T5767] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   43.403468][ T5767] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   46.708304][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   46.711756][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   46.714305][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   46.717059][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   46.719950][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   46.734707][ T5219] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   46.740288][ T5219] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   46.742904][ T5219] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   46.745813][ T5219] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   46.750090][ T5219] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   46.765256][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   46.770207][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   46.774092][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   46.778314][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   46.781901][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   46.942080][ T5827] chnl_net:caif_netlink_parms(): no params data found
[   46.988552][ T5831] chnl_net:caif_netlink_parms(): no params data found
[   47.068119][ T5835] chnl_net:caif_netlink_parms(): no params data found
[   47.083231][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.085517][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.088758][ T5827] bridge_slave_0: entered allmulticast mode
[   47.091493][ T5827] bridge_slave_0: entered promiscuous mode
[   47.106445][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.109534][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.111784][ T5831] bridge_slave_0: entered allmulticast mode
[   47.114525][ T5831] bridge_slave_0: entered promiscuous mode
[   47.117656][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.119998][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.122511][ T5827] bridge_slave_1: entered allmulticast mode
[   47.125288][ T5827] bridge_slave_1: entered promiscuous mode
[   47.134762][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.137581][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.139931][ T5831] bridge_slave_1: entered allmulticast mode
[   47.142680][ T5831] bridge_slave_1: entered promiscuous mode
[   47.173344][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.194624][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.199807][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.210203][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.212537][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.214952][ T5835] bridge_slave_0: entered allmulticast mode
[   47.217950][ T5835] bridge_slave_0: entered promiscuous mode
[   47.229941][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.239403][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.241694][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.244090][ T5835] bridge_slave_1: entered allmulticast mode
[   47.246758][ T5835] bridge_slave_1: entered promiscuous mode
[   47.258223][ T5827] team0: Port device team_slave_0 added
[   47.274658][ T5827] team0: Port device team_slave_1 added
[   47.278898][ T5831] team0: Port device team_slave_0 added
[   47.290011][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.294552][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.305226][ T5831] team0: Port device team_slave_1 added
[   47.336302][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.338745][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.347159][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.359698][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.362109][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.372279][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.376594][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.379725][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.389304][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.393875][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.396196][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.405822][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.411374][ T5835] team0: Port device team_slave_0 added
[   47.436453][ T5835] team0: Port device team_slave_1 added
[   47.449164][ T5831] hsr_slave_0: entered promiscuous mode
[   47.451594][ T5831] hsr_slave_1: entered promiscuous mode
[   47.462560][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.464904][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.473644][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.491741][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.494012][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.503374][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.523294][ T5827] hsr_slave_0: entered promiscuous mode
[   47.526686][ T5827] hsr_slave_1: entered promiscuous mode
[   47.530438][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   47.533663][ T5827] Cannot create hsr debugfs directory
[   47.613748][ T5835] hsr_slave_0: entered promiscuous mode
[   47.616237][ T5835] hsr_slave_1: entered promiscuous mode
[   47.618743][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   47.621289][ T5835] Cannot create hsr debugfs directory
[   47.752667][ T5831] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   47.771295][ T5831] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   47.791855][ T5831] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   47.796118][ T5831] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   47.822131][ T5827] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   47.831392][ T5827] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   47.836182][ T5827] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   47.854583][ T5827] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   47.869176][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.871618][ T5831] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.874354][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.876669][ T5831] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.889369][ T5835] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   47.898619][ T5835] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   47.902643][ T5835] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   47.916844][ T5835] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   47.929940][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.932290][ T5827] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.934721][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.937126][ T5827] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.960352][   T64] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.963564][   T64] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.966597][   T64] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.970513][   T64] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.003737][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.030991][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.034340][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   48.045239][ T1224] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.047780][ T1224] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.059558][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.061912][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.081739][ T5831] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   48.085159][ T5831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   48.100287][ T5827] 8021q: adding VLAN 0 to HW filter on device team0
[   48.115132][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.124331][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.126701][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.136135][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.138613][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.152113][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   48.170226][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.172773][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.206653][ T5827] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   48.213409][ T5827] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   48.221461][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.223917][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.248022][ T5835] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   48.252501][ T5835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   48.269976][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.309658][ T5831] veth0_vlan: entered promiscuous mode
[   48.317985][ T5831] veth1_vlan: entered promiscuous mode
[   48.350420][ T5831] veth0_macvtap: entered promiscuous mode
[   48.355902][ T5831] veth1_macvtap: entered promiscuous mode
[   48.372715][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.383166][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.388589][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.393640][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.396301][ T5831] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.399714][ T5831] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.402668][ T5831] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.405610][ T5831] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.437715][ T5827] veth0_vlan: entered promiscuous mode
[   48.464606][ T5827] veth1_vlan: entered promiscuous mode
[   48.466927][ T5835] veth0_vlan: entered promiscuous mode
[   48.476537][ T5835] veth1_vlan: entered promiscuous mode
[   48.501747][   T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.505794][   T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.523058][ T5835] veth0_macvtap: entered promiscuous mode
[   48.529183][ T5827] veth0_macvtap: entered promiscuous mode
[   48.532549][ T5835] veth1_macvtap: entered promiscuous mode
[   48.535668][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.539547][ T5827] veth1_macvtap: entered promiscuous mode
[   48.541684][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.552891][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.558888][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.579579][ T5835] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.582476][ T5835] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.585343][ T5835] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.589205][ T5835] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.600969][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.605452][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   48.614869][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.631492][ T5827] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.634394][ T5827] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.643122][ T5827] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.653214][ T5827] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.705938][ T3965] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.711611][ T3965] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.758115][   T54] Bluetooth: hci0: command tx timeout
[   48.763478][ T3965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.766056][ T3965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.776887][   T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.782962][   T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.811259][ T1227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.813780][ T1227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.839591][   T54] Bluetooth: hci2: command tx timeout
[   49.253516][ T5943] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17'.
[   49.286906][ T5943] netlink: 'syz.1.17': attribute type 1 has an invalid length.
[   49.291355][ T5943] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17'.
[   49.294584][ T5943] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17'.
[   49.350327][ T5955] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19'.
[   49.501387][ T5971] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.504281][ T5971] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.543946][ T5971] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   49.550428][ T5971] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   49.570944][ T5978] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma?
[   49.585332][ T5971] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   49.588976][ T5971] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   49.591959][ T5971] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   49.594846][ T5971] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   49.672644][ T5983] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   49.683725][ T5986] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[   49.686865][ T5986] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   49.823090][ T6000] netlink: 'syz.1.33': attribute type 1 has an invalid length.
[   49.881195][ T6000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.33'.
[   49.893663][ T6000] Zero length message leads to an empty skb
[   49.953175][ T6009] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   50.064215][ T5858] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.258210][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   50.261861][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   50.264619][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   50.269601][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   50.272630][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   50.373775][ T6015] chnl_net:caif_netlink_parms(): no params data found
[   50.419717][ T6015] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.422234][ T6015] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.424554][ T6015] bridge_slave_0: entered allmulticast mode
[   50.427552][ T6015] bridge_slave_0: entered promiscuous mode
[   50.430873][ T6015] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.433367][ T6015] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.435793][ T6015] bridge_slave_1: entered allmulticast mode
[   50.439247][ T6015] bridge_slave_1: entered promiscuous mode
[   50.460692][ T6015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   50.465258][ T6015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   50.483682][ T6015] team0: Port device team_slave_0 added
[   50.487851][ T6015] team0: Port device team_slave_1 added
[   50.503601][ T6015] batman_adv: batadv0: Adding interface: batadv_slave_0
[   50.505832][ T6015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   50.515567][ T6015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   50.520786][ T6015] batman_adv: batadv0: Adding interface: batadv_slave_1
[   50.523082][ T6015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   50.532238][ T6015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   50.557064][ T6015] hsr_slave_0: entered promiscuous mode
[   50.559903][ T6015] hsr_slave_1: entered promiscuous mode
[   50.562203][ T6015] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   50.565082][ T6015] Cannot create hsr debugfs directory
[   50.848050][   T54] Bluetooth: hci0: command tx timeout
[   50.848519][ T6024] netlink: 'syz.1.39': attribute type 1 has an invalid length.
[   50.852417][ T6024] netlink: 'syz.1.39': attribute type 3 has an invalid length.
[   50.854992][ T6024] netlink: 224 bytes leftover after parsing attributes in process `syz.1.39'.
[   50.861726][ T6024] Cannot find add_set index 0 as target
[   50.908307][ T6028] netlink: 'syz.1.41': attribute type 4 has an invalid length.
[   50.910847][ T6028] netlink: 152 bytes leftover after parsing attributes in process `syz.1.41'.
[   50.917495][   T54] Bluetooth: hci2: command tx timeout
[   50.918776][ T6028] : renamed from bond0 (while UP)
[   50.926222][ T6030] netlink: 'syz.1.41': attribute type 4 has an invalid length.
[   50.929027][ T6030] netlink: 152 bytes leftover after parsing attributes in process `syz.1.41'.
[   51.006425][ T6041] netlink: 12 bytes leftover after parsing attributes in process `syz.1.44'.
[   51.140793][ T6045] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   51.225940][ T6051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.49'.
[   51.574213][ T5858] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.632536][ T5858] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.696560][ T5858] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.819403][ T5858] bridge_slave_1: left allmulticast mode
[   51.821771][ T5858] bridge_slave_1: left promiscuous mode
[   51.824570][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.840600][ T5858] bridge_slave_0: left allmulticast mode
[   51.842540][ T5858] bridge_slave_0: left promiscuous mode
[   51.845608][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.054342][ T5858] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   52.058984][ T5858] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   52.062877][ T5858] bond0 (unregistering): Released all slaves
[   52.277906][   T54] Bluetooth: hci1: command tx timeout
[   52.288477][ T6095] veth1: entered promiscuous mode
[   52.291690][ T6095] veth0: entered promiscuous mode
[   52.342540][ T5858] hsr_slave_0: left promiscuous mode
[   52.345683][ T5858] hsr_slave_1: left promiscuous mode
[   52.349297][ T5858] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   52.352152][ T5858] batman_adv: batadv0: Removing interface: batadv_slave_0
[   52.355877][ T5858] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   52.361100][ T5858] batman_adv: batadv0: Removing interface: batadv_slave_1
[   52.371532][ T5858] veth1_macvtap: left promiscuous mode
[   52.373490][ T5858] veth0_macvtap: left promiscuous mode
[   52.375925][ T5858] veth1_vlan: left promiscuous mode
[   52.379374][ T5858] veth0_vlan: left promiscuous mode
[   52.614576][ T5858] team0 (unregistering): Port device team_slave_1 removed
[   52.633088][ T5858] team0 (unregistering): Port device team_slave_0 removed
[   52.859702][ T6015] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   52.864709][ T6015] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   52.870201][ T6015] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   52.874248][ T6015] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   52.917421][   T54] Bluetooth: hci0: command tx timeout
[   52.938271][ T6015] 8021q: adding VLAN 0 to HW filter on device bond0
[   52.948068][ T6015] 8021q: adding VLAN 0 to HW filter on device team0
[   52.953043][   T67] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.955380][   T67] bridge0: port 1(bridge_slave_0) entered forwarding state
[   52.978857][ T3965] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.981380][ T3965] bridge0: port 2(bridge_slave_1) entered forwarding state
[   52.998711][   T54] Bluetooth: hci2: command tx timeout
[   53.003325][ T6015] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   53.015825][ T6015] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   53.144159][ T6015] 8021q: adding VLAN 0 to HW filter on device batadv0
[   53.183625][ T6015] veth0_vlan: entered promiscuous mode
[   53.192520][ T6015] veth1_vlan: entered promiscuous mode
[   53.211669][ T6015] veth0_macvtap: entered promiscuous mode
[   53.216457][ T6015] veth1_macvtap: entered promiscuous mode
[   53.228124][ T6015] batman_adv: batadv0: Interface activated: batadv_slave_0
[   53.233989][ T6015] batman_adv: batadv0: Interface activated: batadv_slave_1
[   53.242092][ T6015] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   53.246247][ T6015] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   53.249568][ T6015] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   53.252493][ T6015] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   53.315303][ T6137] syzkaller0: entered promiscuous mode
[   53.318592][ T6137] syzkaller0: entered allmulticast mode
[   53.899704][ T1227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   53.905575][ T1227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   53.920332][ T3965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   53.923405][ T3965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.000265][ T6142] netlink: 'syz.1.69': attribute type 1 has an invalid length.
[   54.042862][ T6142] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[   54.195359][ T6146] vxcan1: tx address claim with dest, not broadcast
[   54.307066][ T6155] netlink: 'syz.1.73': attribute type 7 has an invalid length.
[   54.332768][ T6159] x_tables: duplicate entry at hook 1
[   54.334661][ T6160] x_tables: duplicate entry at hook 1
[   54.395121][ T6165] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_virt_wifi, syncid = 0, id = 0
[   54.476450][ T6168] __nla_validate_parse: 6 callbacks suppressed
[   54.476460][ T6168] netlink: 4 bytes leftover after parsing attributes in process `syz.1.76'.
[   54.562104][ T6170] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[   54.766521][ T6181] netlink: 'syz.1.80': attribute type 1 has an invalid length.
[   54.856678][ T6193] xt_CT: You must specify a L4 protocol and not use inversions on it
[   54.864892][ T6193] warning: `syz.1.83' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   55.001888][   T54] Bluetooth: hci0: command tx timeout
[   55.028690][ T6213] syz.1.89 uses obsolete (PF_INET,SOCK_PACKET)
[   55.028706][ T6211] netlink: 100 bytes leftover after parsing attributes in process `syz.0.88'.
[   55.058542][ T6216] netlink: 16 bytes leftover after parsing attributes in process `syz.0.90'.
[   55.063591][ T6216] xt_hashlimit: max too large, truncated to 1048576
[   55.077736][   T54] Bluetooth: hci2: command tx timeout
[   55.730539][ T5858] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   55.929471][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.931630][ T6241] netlink: 'syz.1.96': attribute type 1 has an invalid length.
[   55.934618][ T6241] netlink: 224 bytes leftover after parsing attributes in process `syz.1.96'.
[   55.935362][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.939013][ T6241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.96'.
[   55.943330][ T6241] netlink: 24 bytes leftover after parsing attributes in process `syz.1.96'.
[   55.943468][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.951814][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.955305][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.986979][ T6245] netlink: 92 bytes leftover after parsing attributes in process `syz.1.97'.
[   55.990918][ T6245] tc_dump_action: action bad kind
[   56.029880][ T6249] IPv6: addrconf: prefix option has invalid lifetime
[   56.064726][ T6242] chnl_net:caif_netlink_parms(): no params data found
[   56.095817][ T6253] netlink: zone id is out of range
[   56.100592][ T6253] netlink: zone id is out of range
[   56.102312][ T6253] netlink: zone id is out of range
[   56.120492][ T6253] netlink: zone id is out of range
[   56.122247][ T6253] netlink: zone id is out of range
[   56.123969][ T6253] netlink: zone id is out of range
[   56.125707][ T6253] netlink: zone id is out of range
[   56.127773][ T6253] netlink: zone id is out of range
[   56.130735][ T6253] netlink: 'syz.1.98': attribute type 72 has an invalid length.
[   56.133287][ T6253] netlink: 1016 bytes leftover after parsing attributes in process `syz.1.98'.
[   56.164270][ T6242] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.166740][ T6242] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.172894][ T6242] bridge_slave_0: entered allmulticast mode
[   56.176809][ T6242] bridge_slave_0: entered promiscuous mode
[   56.182030][ T6242] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.184705][ T6242] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.188102][ T6242] bridge_slave_1: entered allmulticast mode
[   56.192687][ T6242] bridge_slave_1: entered promiscuous mode
[   56.236289][ T6242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.243329][ T6242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.301011][ T6242] team0: Port device team_slave_0 added
[   56.306230][ T6242] team0: Port device team_slave_1 added
[   56.343603][ T6242] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.346031][ T6242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.355617][ T6242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.363259][ T6242] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.365781][ T6242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.374568][ T6242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.434921][ T6242] hsr_slave_0: entered promiscuous mode
[   56.438396][ T6242] hsr_slave_1: entered promiscuous mode
[   56.503250][ T6261] tipc: Started in network mode
[   56.505086][ T6261] tipc: Node identity 9e2049ab57b4, cluster identity 4711
[   56.507885][ T6261] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   56.514860][ T6260] syzkaller0: entered promiscuous mode
[   56.516866][ T6260] syzkaller0: entered allmulticast mode
[   56.548987][ T6261] tipc: Resetting bearer <eth:syzkaller0>
[   56.559805][ T6261] tipc: Disabling bearer <eth:syzkaller0>
[   56.637095][ T6265] netlink: 'syz.1.101': attribute type 6 has an invalid length.
[   56.642019][ T6265] netlink: 'syz.1.101': attribute type 6 has an invalid length.
[   56.856351][ T6276] delete_channel: no stack
[   57.458780][ T5858] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.527739][ T5858] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.576901][ T5858] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.672861][ T5858] bridge_slave_1: left allmulticast mode
[   57.675008][ T5858] bridge_slave_1: left promiscuous mode
[   57.677060][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.683422][ T5858] bridge_slave_0: left allmulticast mode
[   57.685688][ T5858] bridge_slave_0: left promiscuous mode
[   57.688918][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.834936][ T6303] syz.1.111 uses old SIOCAX25GETINFO
[   57.864646][ T5858] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   57.870028][ T5858] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   57.873885][ T5858] bond0 (unregistering): Released all slaves
[   57.966602][ T6304] ip6t_srh: unknown srh invflags 4449
[   58.047768][ T5836] Bluetooth: hci1: command tx timeout
[   58.074369][ T6317] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[   58.084445][ T6317] netlink: 'syz.0.113': attribute type 21 has an invalid length.
[   58.098829][ T6317] netlink: 132 bytes leftover after parsing attributes in process `syz.0.113'.
[   58.104760][ T6317] netlink: 28 bytes leftover after parsing attributes in process `syz.0.113'.
[   58.108022][ T6317] netlink: 'syz.0.113': attribute type 7 has an invalid length.
[   58.110590][ T6317] netlink: 'syz.0.113': attribute type 8 has an invalid length.
[   58.150971][ T5858] hsr_slave_0: left promiscuous mode
[   58.153728][ T5858] hsr_slave_1: left promiscuous mode
[   58.156243][ T5858] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   58.160500][ T5858] batman_adv: batadv0: Removing interface: batadv_slave_0
[   58.163972][ T5858] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   58.166511][ T5858] batman_adv: batadv0: Removing interface: batadv_slave_1
[   58.184688][ T5858] veth1_macvtap: left promiscuous mode
[   58.187505][ T5858] veth0_macvtap: left promiscuous mode
[   58.189481][ T5858] veth1_vlan: left promiscuous mode
[   58.191308][ T5858] veth0_vlan: left promiscuous mode
[   58.408438][ T5858] team0 (unregistering): Port device team_slave_1 removed
[   58.423650][ T5858] team0 (unregistering): Port device team_slave_0 removed
[   58.618649][ T6242] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   58.626810][ T6242] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   58.640015][ T6242] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   58.643850][ T6242] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   58.651107][ T6338] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[   58.653622][ T6338] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   58.713250][ T6242] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.724462][ T6242] 8021q: adding VLAN 0 to HW filter on device team0
[   58.741842][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.744193][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.747820][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.750090][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.789873][ T6348] netlink: 'syz.0.120': attribute type 11 has an invalid length.
[   58.854661][ T6242] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.891617][ T6242] veth0_vlan: entered promiscuous mode
[   58.896977][ T6242] veth1_vlan: entered promiscuous mode
[   58.901879][ T6361] netlink: 'syz.0.123': attribute type 4 has an invalid length.
[   58.912189][ T6242] veth0_macvtap: entered promiscuous mode
[   58.916279][ T6242] veth1_macvtap: entered promiscuous mode
[   58.926910][ T6242] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.942115][ T6242] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.951048][ T6242] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.953885][ T6242] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.956762][ T6242] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.960567][ T6242] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.998766][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.001383][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.047128][   T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.050912][   T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.625129][ T6407] validate_nla: 1 callbacks suppressed
[   59.625139][ T6407] netlink: 'syz.1.137': attribute type 16 has an invalid length.
[   59.629911][ T6407] netlink: 'syz.1.137': attribute type 17 has an invalid length.
[   59.636615][ T6407] 8021q: adding VLAN 0 to HW filter on device 
[   60.052307][ T6419] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   60.094184][ T6419] __nla_validate_parse: 10 callbacks suppressed
[   60.094193][ T6419] netlink: 24 bytes leftover after parsing attributes in process `syz.0.142'.
[   60.184675][ T6428] netlink: 28 bytes leftover after parsing attributes in process `syz.0.145'.
[   60.187763][ T6428] netlink: 'syz.0.145': attribute type 7 has an invalid length.
[   60.190351][ T6428] netlink: 'syz.0.145': attribute type 8 has an invalid length.
[   60.192992][ T6428] netlink: 8 bytes leftover after parsing attributes in process `syz.0.145'.
[   60.220431][ T6432] netlink: 20 bytes leftover after parsing attributes in process `syz.0.146'.
[   60.266166][ T6436] xt_CT: You must specify a L4 protocol and not use inversions on it
[   60.295184][ T6439] netlink: 36 bytes leftover after parsing attributes in process `syz.0.149'.
[   60.394890][ T6447] netlink: 9280 bytes leftover after parsing attributes in process `syz.1.150'.
[   60.424051][ T6450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.151'.
[   60.445561][ T6450] netlink: 20 bytes leftover after parsing attributes in process `syz.1.151'.
[   60.513471][ T6458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.154'.
[   60.592406][ T6462] macvtap1: entered allmulticast mode
[   60.594252][ T6462] veth0_macvtap: entered allmulticast mode
[   60.601554][ T6463] macvtap2: entered allmulticast mode
[   60.640476][ T6466] netlink: 12 bytes leftover after parsing attributes in process `syz.1.156'.
[   60.869953][ T6508] ip6gretap2: entered promiscuous mode
[   60.884407][ T6509] netlink: 'syz.1.168': attribute type 10 has an invalid length.
[   60.894199][ T6509] 8021q: adding VLAN 0 to HW filter on device 
[   60.898771][ T6509] team0: Port device  added
[   61.012655][ T6520] netlink: 'syz.0.172': attribute type 4 has an invalid length.
[   61.400555][ T5857] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.602946][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   61.605764][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   61.609136][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   61.612086][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   61.614860][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   61.741691][ T6567] chnl_net:caif_netlink_parms(): no params data found
[   61.784179][ T6567] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.786621][ T6567] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.789123][ T6567] bridge_slave_0: entered allmulticast mode
[   61.792046][ T6567] bridge_slave_0: entered promiscuous mode
[   61.795709][ T6567] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.798686][ T6567] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.801125][ T6567] bridge_slave_1: entered allmulticast mode
[   61.803919][ T6567] bridge_slave_1: entered promiscuous mode
[   61.822590][ T6567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.827451][ T6567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.846217][ T6567] team0: Port device team_slave_0 added
[   61.849722][ T6567] team0: Port device team_slave_1 added
[   61.865719][ T6567] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.868530][ T6567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.876746][ T6567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.882893][ T6567] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.885100][ T6567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.893659][ T6567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.922155][ T6567] hsr_slave_0: entered promiscuous mode
[   61.924543][ T6567] hsr_slave_1: entered promiscuous mode
[   61.926704][ T6567] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   61.929816][ T6567] Cannot create hsr debugfs directory
[   62.121294][ T6586] netlink: 'syz.0.188': attribute type 10 has an invalid length.
[   62.137076][ T6586] bridge0: port 3(dummy0) entered blocking state
[   62.149919][ T6586] bridge0: port 3(dummy0) entered disabled state
[   62.161091][ T6586] dummy0: entered allmulticast mode
[   62.169137][ T6586] dummy0: entered promiscuous mode
[   62.734213][ T6614] net_ratelimit: 1 callbacks suppressed
[   62.734223][ T6614] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check.
[   62.819722][ T6619] netlink: 'syz.1.199': attribute type 12 has an invalid length.
[   63.318580][ T5857] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.365343][ T5857] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.406387][ T5857] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.494154][ T5857] bridge_slave_1: left allmulticast mode
[   63.499808][ T5857] bridge_slave_1: left promiscuous mode
[   63.501924][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.505966][ T5857] bridge_slave_0: left allmulticast mode
[   63.509883][ T5857] bridge_slave_0: left promiscuous mode
[   63.512773][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.639993][   T54] Bluetooth: hci1: command tx timeout
[   63.682528][ T5857] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   63.686833][ T5857] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   63.691958][ T5857] bond0 (unregistering): Released all slaves
[   63.709639][ T6629] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   63.882349][ T6647] openvswitch: netlink: Key type 253 is out of range max 32
[   63.927504][ T5857] hsr_slave_0: left promiscuous mode
[   63.937633][ T5857] hsr_slave_1: left promiscuous mode
[   63.940847][ T5857] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   63.943189][ T5857] batman_adv: batadv0: Removing interface: batadv_slave_0
[   63.946098][ T5857] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   63.953494][ T5857] batman_adv: batadv0: Removing interface: batadv_slave_1
[   63.963452][ T5857] veth1_macvtap: left promiscuous mode
[   63.966093][ T5857] veth0_macvtap: left promiscuous mode
[   63.968207][ T5857] veth1_vlan: left promiscuous mode
[   63.970020][ T5857] veth0_vlan: left promiscuous mode
[   63.975128][ T6657] netlink: 'syz.1.206': attribute type 2 has an invalid length.
[   64.173969][ T5857] team0 (unregistering): Port device team_slave_1 removed
[   64.193339][ T5857] team0 (unregistering): Port device team_slave_0 removed
[   64.438734][ T6567] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   64.446846][ T6662] netlink: 'syz.0.209': attribute type 1 has an invalid length.
[   64.449784][ T6567] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   64.454446][ T6567] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   64.459639][ T6567] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   64.475927][ T6672] bond0: entered promiscuous mode
[   64.477806][ T6672] bond_slave_0: entered promiscuous mode
[   64.479878][ T6672] bond_slave_1: entered promiscuous mode
[   64.482295][ T6672] bond0: entered allmulticast mode
[   64.484469][ T6672] bond_slave_0: entered allmulticast mode
[   64.486416][ T6672] bond_slave_1: entered allmulticast mode
[   64.491218][ T6672] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.553810][ T6567] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.566319][ T6567] 8021q: adding VLAN 0 to HW filter on device team0
[   64.578541][ T1224] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.580948][ T1224] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.586656][ T1224] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.589003][ T1224] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.689937][ T6567] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.740659][ T6567] veth0_vlan: entered promiscuous mode
[   64.746910][ T6567] veth1_vlan: entered promiscuous mode
[   64.755318][ T6691] ip6t_srh: unknown srh invflags 4449
[   64.758120][ T6691] ip6t_REJECT: TCP_RESET illegal for non-tcp
[   64.781679][ T6567] veth0_macvtap: entered promiscuous mode
[   64.786859][ T6567] veth1_macvtap: entered promiscuous mode
[   64.799102][ T6567] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.806524][ T6567] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.811628][ T6567] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.815199][ T6567] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.818495][ T6567] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.821381][ T6567] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.866210][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.870353][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.885016][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.889392][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.330370][ T6700] __nla_validate_parse: 13 callbacks suppressed
[   65.330381][ T6700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.216'.
[   65.408529][ T6710] netlink: 24 bytes leftover after parsing attributes in process `syz.1.217'.
[   65.412069][ T6710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.217'.
[   65.526173][ T6711] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[   65.653320][ T6723] validate_nla: 1 callbacks suppressed
[   65.653330][ T6723] netlink: 'syz.1.221': attribute type 1 has an invalid length.
[   65.667485][ T6723] 8021q: adding VLAN 0 to HW filter on device bond1
[   65.676135][ T6723] bond1: (slave ip6gretap1): making interface the new active one
[   65.680378][ T6723] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[   65.750032][ T6731] netlink: 'syz.0.223': attribute type 15 has an invalid length.
[   66.500625][ T6737] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   66.503479][ T6737] syzkaller0: entered promiscuous mode
[   66.505334][ T6737] syzkaller0: entered allmulticast mode
[   66.511095][ T6737] tipc: Resetting bearer <eth:syzkaller0>
[   66.662038][ T6742] netlink: 240 bytes leftover after parsing attributes in process `syz.0.226'.
[   66.665483][ T6742] netlink: 48 bytes leftover after parsing attributes in process `syz.0.226'.
[   66.674490][ T6742] netlink: 104 bytes leftover after parsing attributes in process `syz.0.226'.
[   66.730573][ T6749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.228'.
[   66.734780][ T6749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.228'.
[   66.779780][ T6751] netlink: 48 bytes leftover after parsing attributes in process `syz.0.229'.
[   66.808569][ T6753] netlink: 28 bytes leftover after parsing attributes in process `syz.0.230'.
[   67.099332][ T6765] x_tables: duplicate underflow at hook 3
[   67.102961][ T6766] x_tables: duplicate underflow at hook 3
[   67.193387][ T5697] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.317810][ T6774] netlink: 'syz.0.238': attribute type 1 has an invalid length.
[   67.321151][ T6774] netlink: 'syz.0.238': attribute type 1 has an invalid length.
[   67.329727][ T6736] tipc: Resetting bearer <eth:syzkaller0>
[   67.344298][ T6736] tipc: Disabling bearer <eth:syzkaller0>
[   67.694499][ T6780] netlink: 'syz.0.239': attribute type 5 has an invalid length.
[   67.719340][ T6788] syz_tun: entered allmulticast mode
[   67.721380][ T6788] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[   67.758702][ T6784] xt_bpf: check failed: parse error
[   67.801653][   T54] Bluetooth: hci2: command tx timeout
[   67.857622][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   67.860863][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   67.863624][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   67.866542][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   67.869802][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   67.984871][ T6801] chnl_net:caif_netlink_parms(): no params data found
[   68.030987][ T6801] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.033721][ T6801] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.036080][ T6801] bridge_slave_0: entered allmulticast mode
[   68.039052][ T6801] bridge_slave_0: entered promiscuous mode
[   68.042115][ T6801] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.044450][ T6801] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.046751][ T6801] bridge_slave_1: entered allmulticast mode
[   68.049652][ T6801] bridge_slave_1: entered promiscuous mode
[   68.066962][ T6801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   68.072085][ T6801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   68.093069][ T6801] team0: Port device team_slave_0 added
[   68.096649][ T6801] team0: Port device team_slave_1 added
[   68.114040][ T6801] batman_adv: batadv0: Adding interface: batadv_slave_0
[   68.116321][ T6801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.125109][ T6801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   68.129650][ T6801] batman_adv: batadv0: Adding interface: batadv_slave_1
[   68.132055][ T6801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.141051][ T6801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   68.168837][ T6801] hsr_slave_0: entered promiscuous mode
[   68.171091][ T6801] hsr_slave_1: entered promiscuous mode
[   68.399457][ T6849] veth0: entered promiscuous mode
[   68.408447][ T6849] veth0 (unregistering): left promiscuous mode
[   68.454645][ T6850] netlink: 'syz.0.257': attribute type 1 has an invalid length.
[   69.006145][ T6871] netlink: 'syz.1.265': attribute type 6 has an invalid length.
[   69.009252][ T6871] netlink: 'syz.1.265': attribute type 7 has an invalid length.
[   69.011725][ T6871] netlink: 'syz.1.265': attribute type 8 has an invalid length.
[   69.091573][ T5697] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.150332][ T5697] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.188598][ T5697] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.201830][ T6886] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   69.293882][ T5697] bridge_slave_1: left allmulticast mode
[   69.297481][ T5697] bridge_slave_1: left promiscuous mode
[   69.299578][ T5697] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.314176][ T5697] bridge_slave_0: left allmulticast mode
[   69.316182][ T5697] bridge_slave_0: left promiscuous mode
[   69.328865][ T5697] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.451666][ T6919] netlink: 'syz.0.279': attribute type 4 has an invalid length.
[   69.469224][ T6922] sctp: [Deprecated]: syz.1.277 (pid 6922) Use of int in max_burst socket option.
[   69.469224][ T6922] Use struct sctp_assoc_value instead
[   69.545672][ T6929] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   69.565992][ T5697] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   69.572250][ T5697] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   69.575877][ T5697] bond0 (unregistering): Released all slaves
[   69.875648][ T5697] hsr_slave_0: left promiscuous mode
[   69.878028][   T54] Bluetooth: hci1: command tx timeout
[   69.900059][ T5697] hsr_slave_1: left promiscuous mode
[   69.904634][ T5697] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   69.907126][ T5697] batman_adv: batadv0: Removing interface: batadv_slave_0
[   69.912470][ T5697] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   69.914933][ T5697] batman_adv: batadv0: Removing interface: batadv_slave_1
[   69.926085][ T5697] veth1_macvtap: left promiscuous mode
[   69.929415][ T5697] veth0_macvtap: left promiscuous mode
[   69.931421][ T5697] veth1_vlan: left promiscuous mode
[   69.933213][ T5697] veth0_vlan: left promiscuous mode
[   70.135006][ T5697] team0 (unregistering): Port device team_slave_1 removed
[   70.151443][ T5697] team0 (unregistering): Port device team_slave_0 removed
[   70.399699][ T6801] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   70.404011][ T6801] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   70.412804][ T6801] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   70.424786][ T6801] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   70.492344][ T6801] 8021q: adding VLAN 0 to HW filter on device bond0
[   70.507040][ T6801] 8021q: adding VLAN 0 to HW filter on device team0
[   70.515274][ T6967] x_tables: duplicate underflow at hook 1
[   70.528901][   T67] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.531267][   T67] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.548482][   T67] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.550796][   T67] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.581595][ T6969] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   70.584609][ T6969] syzkaller0: entered promiscuous mode
[   70.586473][ T6969] syzkaller0: entered allmulticast mode
[   70.645481][ T5897] IPVS: starting estimator thread 0...
[   70.649429][ T6975] tipc: Resetting bearer <eth:syzkaller0>
[   70.675423][ T6801] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.721512][ T6801] veth0_vlan: entered promiscuous mode
[   70.726606][ T6801] veth1_vlan: entered promiscuous mode
[   70.737313][ T6976] IPVS: using max 78 ests per chain, 187200 per kthread
[   70.743593][ T6801] veth0_macvtap: entered promiscuous mode
[   70.748957][ T6801] veth1_macvtap: entered promiscuous mode
[   70.761031][ T6801] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.771739][ T6801] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.775551][ T6801] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.779022][ T6801] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.781810][ T6801] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.784588][ T6801] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.827036][   T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.830022][   T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.839957][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   70.859599][ T3965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.862286][ T3965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.399918][ T6968] tipc: Resetting bearer <eth:syzkaller0>
[   71.408877][ T6968] tipc: Disabling bearer <eth:syzkaller0>
[   71.455204][ T6980] xt_connbytes: Forcing CT accounting to be enabled
[   71.462473][ T6980] set match dimension is over the limit!
[   71.468999][ T6980] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[   71.525527][ T6985] --map-set only usable from mangle table
[   71.866515][ T7001] __nla_validate_parse: 9 callbacks suppressed
[   71.866526][ T7001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.295'.
[   71.960203][   T54] Bluetooth: hci1: command 0x041b tx timeout
[   72.082727][ T7010] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   72.300376][ T7025] netlink: 4 bytes leftover after parsing attributes in process `syz.1.303'.
[   72.304521][ T7025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.303'.
[   72.335155][ T7029] netlink: 52 bytes leftover after parsing attributes in process `syz.1.305'.
[   72.340223][ T7029] netlink: 48 bytes leftover after parsing attributes in process `syz.1.305'.
[   72.368400][ T7031] syzkaller0: refused to change device tx_queue_len
[   72.439079][ T7038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.308'.
[   72.443015][ T7038] netlink: 56 bytes leftover after parsing attributes in process `syz.1.308'.
[   72.445923][ T7038] netlink: 56 bytes leftover after parsing attributes in process `syz.1.308'.
[   72.453233][ T7038] netlink: 209592 bytes leftover after parsing attributes in process `syz.1.308'.
[   72.483142][ T7040] netlink: 4 bytes leftover after parsing attributes in process `syz.1.309'.
[   73.251469][ T5858] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.266203][ T7046] macvtap3: entered allmulticast mode
[   73.955584][ T7062] openvswitch: netlink: Flow key attr not present in new flow.
[   73.963462][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   73.966394][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   73.969612][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   73.972641][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   73.975760][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   74.015244][ T7071] veth1_macvtap: left promiscuous mode
[   74.017103][ T7071] macsec0: entered allmulticast mode
[   74.030582][ T7071] veth1_macvtap: entered promiscuous mode
[   74.032463][ T7071] veth1_macvtap: entered allmulticast mode
[   74.036130][ T7071] macsec0: left allmulticast mode
[   74.039357][ T7071] veth1_macvtap: left allmulticast mode
[   74.094268][ T7065] chnl_net:caif_netlink_parms(): no params data found
[   74.156857][ T7065] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.160144][ T7065] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.162493][ T7065] bridge_slave_0: entered allmulticast mode
[   74.165166][ T7065] bridge_slave_0: entered promiscuous mode
[   74.168545][ T7065] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.170883][ T7065] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.173228][ T7065] bridge_slave_1: entered allmulticast mode
[   74.175947][ T7065] bridge_slave_1: entered promiscuous mode
[   74.193085][ T7065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   74.198187][ T7065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   74.216736][ T7065] team0: Port device team_slave_0 added
[   74.222535][ T7065] team0: Port device team_slave_1 added
[   74.242448][ T7065] batman_adv: batadv0: Adding interface: batadv_slave_0
[   74.244697][ T7065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.253374][ T7065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   74.259171][ T7065] batman_adv: batadv0: Adding interface: batadv_slave_1
[   74.261460][ T7065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.270006][ T7065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   74.297109][ T7065] hsr_slave_0: entered promiscuous mode
[   74.300870][ T7065] hsr_slave_1: entered promiscuous mode
[   74.302995][ T7065] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   74.305673][ T7065] Cannot create hsr debugfs directory
[   74.444870][ T5858] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.480360][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   74.483305][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   74.486068][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   74.490211][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   74.493366][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   74.504422][ T5858] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.555862][ T5858] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.611995][ T7083] chnl_net:caif_netlink_parms(): no params data found
[   74.673374][ T5858] bridge_slave_1: left allmulticast mode
[   74.675184][ T5858] bridge_slave_1: left promiscuous mode
[   74.677025][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.681252][ T5858] bridge_slave_0: left allmulticast mode
[   74.683082][ T5858] bridge_slave_0: left promiscuous mode
[   74.684940][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.805913][ T7092] tipc: Can't bind to reserved service type 33
[   74.845351][ T5858] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   74.850526][ T5858] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   74.854085][ T5858] bond0 (unregistering): Released all slaves
[   74.887658][ T7083] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.889925][ T7083] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.892193][ T7083] bridge_slave_0: entered allmulticast mode
[   74.894889][ T7083] bridge_slave_0: entered promiscuous mode
[   74.910019][ T7083] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.912601][ T7083] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.914920][ T7083] bridge_slave_1: entered allmulticast mode
[   74.917725][ T7083] bridge_slave_1: entered promiscuous mode
[   74.952002][ T7083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   74.956675][ T7083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   75.021644][ T7083] team0: Port device team_slave_0 added
[   75.050421][ T7083] team0: Port device team_slave_1 added
[   75.084091][ T7083] batman_adv: batadv0: Adding interface: batadv_slave_0
[   75.086351][ T7083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   75.095602][ T7083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   75.101835][ T7083] batman_adv: batadv0: Adding interface: batadv_slave_1
[   75.104469][ T7083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   75.112778][ T7083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   75.156894][ T5858] hsr_slave_0: left promiscuous mode
[   75.166171][ T5858] hsr_slave_1: left promiscuous mode
[   75.174417][ T5858] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   75.176792][ T5858] batman_adv: batadv0: Removing interface: batadv_slave_0
[   75.180086][ T5858] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   75.182492][ T5858] batman_adv: batadv0: Removing interface: batadv_slave_1
[   75.192746][ T5858] veth1_macvtap: left promiscuous mode
[   75.194690][ T5858] veth0_macvtap: left promiscuous mode
[   75.196922][ T5858] veth1_vlan: left promiscuous mode
[   75.199492][ T5858] veth0_vlan: left promiscuous mode
[   75.325647][ T7113] netlink: 'syz.1.327': attribute type 2 has an invalid length.
[   75.425397][ T5858] team0 (unregistering): Port device team_slave_1 removed
[   75.444698][ T5858] team0 (unregistering): Port device team_slave_0 removed
[   75.673831][ T7113] : entered promiscuous mode
[   75.685593][ T7083] hsr_slave_0: entered promiscuous mode
[   75.688122][ T7083] hsr_slave_1: entered promiscuous mode
[   75.851266][ T7065] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   75.869409][ T7065] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   75.873757][ T7065] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   75.882421][ T7065] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   75.938767][ T7065] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.964784][ T7065] 8021q: adding VLAN 0 to HW filter on device team0
[   75.974469][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.976895][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.003919][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.006376][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.037539][   T54] Bluetooth: hci1: command tx timeout
[   76.146767][ T7065] 8021q: adding VLAN 0 to HW filter on device batadv0
[   76.196677][ T7065] veth0_vlan: entered promiscuous mode
[   76.210252][ T7150] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[   76.213286][ T7150] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   76.221107][ T7083] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   76.229389][ T7083] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   76.237055][ T7065] veth1_vlan: entered promiscuous mode
[   76.240462][ T7083] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   76.244572][ T7083] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   76.291294][ T7065] veth0_macvtap: entered promiscuous mode
[   76.300135][ T7065] veth1_macvtap: entered promiscuous mode
[   76.318539][ T7065] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.333395][ T7065] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.335894][ T7155] tap0: tun_chr_ioctl cmd 1074025677
[   76.339113][ T7155] tap0: linktype set to 823
[   76.343176][ T7065] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.345967][ T7065] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.350556][ T7065] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.353287][ T7065] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.385500][ T7083] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.411913][ T7083] 8021q: adding VLAN 0 to HW filter on device team0
[   76.423318][ T1224] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.425639][ T1224] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.434400][ T1224] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.436851][ T1224] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.456779][ T1224] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.467617][ T1224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.482821][ T3965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.487516][ T3965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.518104][   T54] Bluetooth: hci2: command tx timeout
[   76.654359][ T7083] 8021q: adding VLAN 0 to HW filter on device batadv0
[   76.697615][ T7083] veth0_vlan: entered promiscuous mode
[   76.707026][ T7083] veth1_vlan: entered promiscuous mode
[   76.732802][ T7083] veth0_macvtap: entered promiscuous mode
[   76.741285][ T7083] veth1_macvtap: entered promiscuous mode
[   76.756095][ T7083] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.769044][ T7083] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.775406][ T7083] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.779810][ T7083] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.782614][ T7083] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.785358][ T7083] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.860910][   T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.871181][   T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.902092][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.904657][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.440817][ T7183] netlink: 'syz.1.339': attribute type 1 has an invalid length.
[   77.460550][ T7183] 8021q: adding VLAN 0 to HW filter on device bond2
[   77.471051][ T7183] 8021q: VLANs not supported on tunl0
[   77.500102][ T7186] __nla_validate_parse: 12 callbacks suppressed
[   77.500111][ T7186] netlink: 40 bytes leftover after parsing attributes in process `syz.1.340'.
[   77.533073][ T7188] netlink: 'syz.1.341': attribute type 21 has an invalid length.
[   77.629374][ T7195] netlink: 20 bytes leftover after parsing attributes in process `syz.1.344'.
[   77.662362][ T7195] netlink: 44 bytes leftover after parsing attributes in process `syz.1.344'.
[   77.715794][ T7201] netlink: 24 bytes leftover after parsing attributes in process `syz.1.345'.
[   77.780930][ T7202] netlink: 16 bytes leftover after parsing attributes in process `syz.1.345'.
[   78.373851][ T5858] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.657987][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   78.661082][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   78.663867][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   78.670132][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   78.672882][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   78.704266][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   78.708438][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   78.712025][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   78.715125][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   78.722978][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   78.880246][ T7211] chnl_net:caif_netlink_parms(): no params data found
[   78.916187][ T7213] chnl_net:caif_netlink_parms(): no params data found
[   78.969247][ T7211] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.971743][ T7211] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.974141][ T7211] bridge_slave_0: entered allmulticast mode
[   78.976924][ T7211] bridge_slave_0: entered promiscuous mode
[   78.995488][ T7211] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.000144][ T7211] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.002736][ T7211] bridge_slave_1: entered allmulticast mode
[   79.005919][ T7211] bridge_slave_1: entered promiscuous mode
[   79.008962][ T7213] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.011579][ T7213] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.014289][ T7213] bridge_slave_0: entered allmulticast mode
[   79.018572][ T7213] bridge_slave_0: entered promiscuous mode
[   79.030004][ T7213] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.032280][ T7213] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.034612][ T7213] bridge_slave_1: entered allmulticast mode
[   79.037639][ T7213] bridge_slave_1: entered promiscuous mode
[   79.056394][ T7211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   79.067743][ T7211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.073073][ T7213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   79.090938][ T7213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.105552][ T7211] team0: Port device team_slave_0 added
[   79.125863][ T7211] team0: Port device team_slave_1 added
[   79.134125][ T7213] team0: Port device team_slave_0 added
[   79.149690][ T7213] team0: Port device team_slave_1 added
[   79.169325][ T7211] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.171595][ T7211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.179927][ T7211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.191582][ T7211] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.193810][ T7211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.202268][ T7211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.206221][ T7213] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.209619][ T7213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.219385][ T7213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.227927][ T7213] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.230448][ T7213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.240011][ T7213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.275746][ T7211] hsr_slave_0: entered promiscuous mode
[   79.278205][ T7211] hsr_slave_1: entered promiscuous mode
[   79.280521][ T7211] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   79.283005][ T7211] Cannot create hsr debugfs directory
[   79.295835][ T7213] hsr_slave_0: entered promiscuous mode
[   79.299035][ T7213] hsr_slave_1: entered promiscuous mode
[   79.301256][ T7213] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   79.304061][ T7213] Cannot create hsr debugfs directory
[   79.436064][ T7211] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.659575][ T7237] netlink: 'syz.1.351': attribute type 4 has an invalid length.
[   79.736867][ T7241] 8021q: adding VLAN 0 to HW filter on device bond3
[   79.752748][ T7243] team0: Port device  removed
[   79.756908][ T7243] bridge_slave_0: left allmulticast mode
[   79.759705][ T7243] bridge_slave_0: left promiscuous mode
[   79.761835][ T7243] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.765716][ T7243] bridge_slave_1: left allmulticast mode
[   79.768453][ T7243] bridge_slave_1: left promiscuous mode
[   79.770316][ T7243] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.774673][ T7243] : (slave bond_slave_0): Releasing backup interface
[   79.781105][ T7243] : (slave bond_slave_1): Releasing backup interface
[   79.790822][ T7243] team0: Port device team_slave_0 removed
[   79.797988][ T7243] team0: Port device team_slave_1 removed
[   79.800556][ T7243] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   79.803004][ T7243] batman_adv: batadv0: Removing interface: batadv_slave_0
[   79.806148][ T7243] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   79.811495][ T7243] batman_adv: batadv0: Removing interface: batadv_slave_1
[   79.819096][ T7243] bond1: (slave ip6gretap1): Releasing active interface
[   79.904528][ T7248] netlink: 4 bytes leftover after parsing attributes in process `syz.1.354'.
[   79.909238][ T7248] chnl_net:caif_netlink_parms(): no params data found
[   80.051545][ T7257] netlink: 128 bytes leftover after parsing attributes in process `syz.1.358'.
[   80.101469][ T7262] netlink: 'syz.1.360': attribute type 21 has an invalid length.
[   80.104129][ T7262] netlink: 128 bytes leftover after parsing attributes in process `syz.1.360'.
[   80.108079][ T7262] netlink: 3 bytes leftover after parsing attributes in process `syz.1.360'.
[   80.255657][ T7211] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.259717][ T7266] netlink: 8 bytes leftover after parsing attributes in process `syz.1.361'.
[   80.326243][ T7211] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.342214][ T5858] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.389579][ T7211] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.425833][ T5858] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.539588][ T5858] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.639006][ T5858] bridge_slave_1: left allmulticast mode
[   80.641168][ T5858] bridge_slave_1: left promiscuous mode
[   80.643322][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.648533][ T5858] bridge_slave_0: left allmulticast mode
[   80.650484][ T5858] bridge_slave_0: left promiscuous mode
[   80.652763][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.757524][   T54] Bluetooth: hci2: command tx timeout
[   80.757644][ T5836] Bluetooth: hci1: command tx timeout
[   80.845886][ T5858] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   80.852110][ T5858] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   80.855610][ T5858] bond0 (unregistering): Released all slaves
[   81.081545][   T10] cfg80211: failed to load regulatory.db
[   81.153640][ T5858] hsr_slave_0: left promiscuous mode
[   81.160315][ T5858] hsr_slave_1: left promiscuous mode
[   81.162631][ T5858] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   81.165283][ T5858] batman_adv: batadv0: Removing interface: batadv_slave_0
[   81.179437][ T5858] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   81.181842][ T5858] batman_adv: batadv0: Removing interface: batadv_slave_1
[   81.190301][ T5858] veth1_macvtap: left promiscuous mode
[   81.192109][ T5858] veth0_macvtap: left promiscuous mode
[   81.193922][ T5858] veth1_vlan: left promiscuous mode
[   81.195636][ T5858] veth0_vlan: left promiscuous mode
[   81.449597][ T5858] team0 (unregistering): Port device team_slave_1 removed
[   81.469320][ T5858] team0 (unregistering): Port device team_slave_0 removed
[   81.710156][ T7213] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   81.719713][ T7213] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   81.725750][ T7213] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   81.750957][ T7213] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   81.831530][ T7211] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   81.842634][ T7211] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   81.859150][ T7211] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   81.863202][ T7211] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   81.903885][ T7213] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.919485][ T7213] 8021q: adding VLAN 0 to HW filter on device team0
[   81.926837][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.929360][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.936448][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.938869][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.964009][ T7298] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[   81.995877][ T7211] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.016878][ T7211] 8021q: adding VLAN 0 to HW filter on device team0
[   82.033189][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.035599][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.050108][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.052601][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.075218][ T5858] bridge_slave_1: left allmulticast mode
[   82.078012][ T5858] bridge_slave_1: left promiscuous mode
[   82.080507][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.084444][ T5858] bridge_slave_0: left allmulticast mode
[   82.086410][ T5858] bridge_slave_0: left promiscuous mode
[   82.090516][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.261018][ T5858] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   82.265136][ T5858] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   82.269545][ T5858] bond0 (unregistering): Released all slaves
[   82.296286][ T7213] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.339554][ T7213] veth0_vlan: entered promiscuous mode
[   82.344629][ T7213] veth1_vlan: entered promiscuous mode
[   82.411806][ T7211] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.423167][ T7213] veth0_macvtap: entered promiscuous mode
[   82.454231][ T7213] veth1_macvtap: entered promiscuous mode
[   82.473953][ T7213] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.481492][ T5858] hsr_slave_0: left promiscuous mode
[   82.483708][ T5858] hsr_slave_1: left promiscuous mode
[   82.485738][ T5858] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   82.489511][ T5858] batman_adv: batadv0: Removing interface: batadv_slave_0
[   82.492200][ T5858] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   82.494631][ T5858] batman_adv: batadv0: Removing interface: batadv_slave_1
[   82.503726][ T5858] veth1_macvtap: left promiscuous mode
[   82.505582][ T5858] veth0_macvtap: left promiscuous mode
[   82.509189][ T5858] veth1_vlan: left promiscuous mode
[   82.510930][ T5858] veth0_vlan: left promiscuous mode
[   82.724949][ T5858] team0 (unregistering): Port device team_slave_1 removed
[   82.742403][ T5858] team0 (unregistering): Port device team_slave_0 removed
[   82.837911][ T5836] Bluetooth: hci1: command tx timeout
[   82.848767][ T5836] Bluetooth: hci2: command tx timeout
[   82.967985][ T7211] veth0_vlan: entered promiscuous mode
[   82.980073][ T7213] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.985043][ T7213] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.996530][ T7213] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.002935][ T7213] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.005737][ T7213] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.014751][ T7211] veth1_vlan: entered promiscuous mode
[   83.064780][ T7211] veth0_macvtap: entered promiscuous mode
[   83.069557][ T7211] veth1_macvtap: entered promiscuous mode
[   83.087549][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.091116][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.109162][ T7211] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.117585][   T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.120583][ T7211] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.125318][ T7211] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.128659][   T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.129465][ T7211] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.134011][ T7211] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.136767][ T7211] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.222227][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.224767][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.255590][ T3965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.258655][ T3965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.262434][ T7317] netlink: 'syz.1.365': attribute type 4 has an invalid length.
[   83.312811][ T7299] ==================================================================
[   83.315452][ T7299] BUG: KASAN: slab-use-after-free in __mutex_lock+0x738/0xe80
[   83.317839][ T7299] Read of size 8 at addr ffff88803440c0a0 by task khidpd_10cf05df/7299
[   83.321692][ T7299] 
[   83.322713][ T7299] CPU: 0 UID: 0 PID: 7299 Comm: khidpd_10cf05df Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[   83.322727][ T7299] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   83.322733][ T7299] Call Trace:
[   83.322739][ T7299]  <TASK>
[   83.322745][ T7299]  dump_stack_lvl+0x189/0x250
[   83.322763][ T7299]  ? __virt_addr_valid+0x1c8/0x5c0
[   83.322778][ T7299]  ? rcu_is_watching+0x15/0xb0
[   83.322791][ T7299]  ? __kasan_check_byte+0x12/0x40
[   83.322805][ T7299]  ? __pfx_dump_stack_lvl+0x10/0x10
[   83.322815][ T7299]  ? rcu_is_watching+0x15/0xb0
[   83.322825][ T7299]  ? lock_release+0x4b/0x3e0
[   83.322836][ T7299]  ? __virt_addr_valid+0x1c8/0x5c0
[   83.322848][ T7299]  ? __virt_addr_valid+0x4a5/0x5c0
[   83.322860][ T7299]  print_report+0xd2/0x2b0
[   83.322870][ T7299]  ? __mutex_lock+0x738/0xe80
[   83.322880][ T7299]  kasan_report+0x118/0x150
[   83.322893][ T7299]  ? __mutex_lock+0x738/0xe80
[   83.322904][ T7299]  __mutex_lock+0x738/0xe80
[   83.322915][ T7299]  ? __mutex_lock+0x51b/0xe80
[   83.322926][ T7299]  ? l2cap_unregister_user+0x6a/0x1b0
[   83.322943][ T7299]  ? __pfx___mutex_lock+0x10/0x10
[   83.322955][ T7299]  ? __pfx___timer_delete_sync+0x10/0x10
[   83.322972][ T7299]  l2cap_unregister_user+0x6a/0x1b0
[   83.322989][ T7299]  hidp_session_thread+0x3c9/0x410
[   83.323001][ T7299]  ? __pfx_hidp_session_thread+0x10/0x10
[   83.323011][ T7299]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   83.323026][ T7299]  ? __pfx_hidp_session_wake_function+0x10/0x10
[   83.323038][ T7299]  ? __pfx_hidp_session_wake_function+0x10/0x10
[   83.323049][ T7299]  ? __kthread_parkme+0x7b/0x200
[   83.323061][ T7299]  ? __kthread_parkme+0x1a1/0x200
[   83.323070][ T7299]  kthread+0x711/0x8a0
[   83.323079][ T7299]  ? __pfx_hidp_session_thread+0x10/0x10
[   83.323086][ T7299]  ? __pfx_kthread+0x10/0x10
[   83.323095][ T7299]  ? _raw_spin_unlock_irq+0x23/0x50
[   83.323104][ T7299]  ? lockdep_hardirqs_on+0x9c/0x150
[   83.323114][ T7299]  ? __pfx_kthread+0x10/0x10
[   83.323123][ T7299]  ret_from_fork+0x3fc/0x770
[   83.323131][ T7299]  ? __pfx_ret_from_fork+0x10/0x10
[   83.323139][ T7299]  ? __switch_to_asm+0x39/0x70
[   83.323148][ T7299]  ? __switch_to_asm+0x33/0x70
[   83.323156][ T7299]  ? __pfx_kthread+0x10/0x10
[   83.323165][ T7299]  ret_from_fork_asm+0x1a/0x30
[   83.323176][ T7299]  </TASK>
[   83.323179][ T7299] 
[   83.397858][ T7299] Allocated by task 7213:
[   83.399300][ T7299]  kasan_save_track+0x3e/0x80
[   83.400835][ T7299]  __kasan_kmalloc+0x93/0xb0
[   83.402315][ T7299]  __kmalloc_noprof+0x27a/0x4f0
[   83.403890][ T7299]  hci_alloc_dev_priv+0x28/0x2040
[   83.405592][ T7299]  vhci_create_device+0x120/0x6e0
[   83.407229][ T7299]  vhci_write+0x3ce/0x4a0
[   83.408666][ T7299]  vfs_write+0x54b/0xa90
[   83.410026][ T7299]  ksys_write+0x145/0x250
[   83.411464][ T7299]  do_syscall_64+0xfa/0x3b0
[   83.412918][ T7299]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   83.414828][ T7299] 
[   83.415650][ T7299] Freed by task 7213:
[   83.417084][ T7299]  kasan_save_track+0x3e/0x80
[   83.418653][ T7299]  kasan_save_free_info+0x46/0x50
[   83.420274][ T7299]  __kasan_slab_free+0x62/0x70
[   83.421844][ T7299]  kfree+0x18e/0x440
[   83.423145][ T7299]  bt_host_release+0x82/0x90
[   83.424697][ T7299]  device_release+0x9c/0x1c0
[   83.426179][ T7299]  kobject_put+0x22b/0x480
[   83.427666][ T7299]  vhci_release+0x88/0xd0
[   83.429098][ T7299]  __fput+0x44c/0xa70
[   83.430423][ T7299]  task_work_run+0x1d4/0x260
[   83.431907][ T7299]  do_exit+0x6b5/0x22e0
[   83.433263][ T7299]  do_group_exit+0x21c/0x2d0
[   83.434754][ T7299]  __x64_sys_exit_group+0x3f/0x40
[   83.436367][ T7299]  x64_sys_call+0x21ba/0x21c0
[   83.437884][ T7299]  do_syscall_64+0xfa/0x3b0
[   83.439312][ T7299]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   83.441195][ T7299] 
[   83.442000][ T7299] Last potentially related work creation:
[   83.443855][ T7299]  kasan_save_stack+0x3e/0x60
[   83.445405][ T7299]  kasan_record_aux_stack+0xbd/0xd0
[   83.447085][ T7299]  insert_work+0x3d/0x330
[   83.448495][ T7299]  __queue_work+0xbd9/0xfe0
[   83.449963][ T7299]  queue_work_on+0x181/0x270
[   83.451513][ T7299]  process_scheduled_works+0xae1/0x17b0
[   83.453403][ T7299]  worker_thread+0x8a0/0xda0
[   83.454962][ T7299]  kthread+0x711/0x8a0
[   83.456342][ T7299]  ret_from_fork+0x3fc/0x770
[   83.457930][ T7299]  ret_from_fork_asm+0x1a/0x30
[   83.459564][ T7299] 
[   83.460344][ T7299] Second to last potentially related work creation:
[   83.462469][ T7299]  kasan_save_stack+0x3e/0x60
[   83.464010][ T7299]  kasan_record_aux_stack+0xbd/0xd0
[   83.465749][ T7299]  insert_work+0x3d/0x330
[   83.467165][ T7299]  __queue_work+0xcfc/0xfe0
[   83.468671][ T7299]  call_timer_fn+0x17e/0x5f0
[   83.470196][ T7299]  __run_timer_base+0x646/0x860
[   83.471797][ T7299]  run_timer_softirq+0xb7/0x180
[   83.473410][ T7299]  handle_softirqs+0x286/0x870
[   83.475006][ T7299]  __irq_exit_rcu+0xca/0x1f0
[   83.476529][ T7299]  irq_exit_rcu+0x9/0x30
[   83.477940][ T7299]  sysvec_apic_timer_interrupt+0xa6/0xc0
[   83.479801][ T7299]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[   83.481717][ T7299] 
[   83.482518][ T7299] The buggy address belongs to the object at ffff88803440c000
[   83.482518][ T7299]  which belongs to the cache kmalloc-8k of size 8192
[   83.486971][ T7299] The buggy address is located 160 bytes inside of
[   83.486971][ T7299]  freed 8192-byte region [ffff88803440c000, ffff88803440e000)
[   83.491444][ T7299] 
[   83.492261][ T7299] The buggy address belongs to the physical page:
[   83.494438][ T7299] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x34408
[   83.497170][ T7299] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[   83.499845][ T7299] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[   83.502428][ T7299] page_type: f5(slab)
[   83.503720][ T7299] raw: 00fff00000000040 ffff88801a442280 0000000000000000 dead000000000001
[   83.506641][ T7299] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[   83.509436][ T7299] head: 00fff00000000040 ffff88801a442280 0000000000000000 dead000000000001
[   83.512171][ T7299] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[   83.514925][ T7299] head: 00fff00000000003 ffffea0000d10201 00000000ffffffff 00000000ffffffff
[   83.517828][ T7299] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[   83.520614][ T7299] page dumped because: kasan: bad access detected
[   83.522696][ T7299] page_owner tracks the page as allocated
[   83.524519][ T7299] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x528c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP), pid 6969, tgid 6968 (syz.1.289), ts 70584579589, free_ts 70378756286
[   83.530738][ T7299]  post_alloc_hook+0x240/0x2a0
[   83.532326][ T7299]  get_page_from_freelist+0x21e4/0x22c0
[   83.534143][ T7299]  __alloc_frozen_pages_noprof+0x181/0x370
[   83.535996][ T7299]  alloc_pages_mpol+0x232/0x4a0
[   83.537635][ T7299]  allocate_slab+0x8a/0x3b0
[   83.539114][ T7299]  ___slab_alloc+0xbfc/0x1480
[   83.540678][ T7299]  __kvmalloc_node_noprof+0x429/0x5f0
[   83.542443][ T7299]  pfifo_fast_init+0x238/0x6b0
[   83.544002][ T7299]  qdisc_create_dflt+0x13b/0x4e0
[   83.545638][ T7299]  dev_activate+0x378/0x1150
[   83.547156][ T7299]  __dev_open+0x69c/0x880
[   83.548574][ T7299]  __dev_change_flags+0x1ea/0x6d0
[   83.550199][ T7299]  netif_change_flags+0x88/0x1a0
[   83.551795][ T7299]  dev_change_flags+0x130/0x260
[   83.553362][ T7299]  dev_ioctl+0x7b4/0x1150
[   83.554787][ T7299]  sock_do_ioctl+0x22c/0x300
[   83.556310][ T7299] page last free pid 6954 tgid 6954 stack trace:
[   83.558316][ T7299]  __free_frozen_pages+0xc71/0xe70
[   83.560010][ T7299]  __put_partials+0x161/0x1c0
[   83.561548][ T7299]  put_cpu_partial+0x17c/0x250
[   83.563081][ T7299]  __slab_free+0x2f7/0x400
[   83.564562][ T7299]  qlist_free_all+0x97/0x140
[   83.566082][ T7299]  kasan_quarantine_reduce+0x148/0x160
[   83.567867][ T7299]  __kasan_slab_alloc+0x22/0x80
[   83.569464][ T7299]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[   83.571261][ T7299]  __anon_vma_prepare+0xcb/0x4a0
[   83.572868][ T7299]  __handle_mm_fault+0x4d02/0x5620
[   83.574527][ T7299]  handle_mm_fault+0x40a/0x8e0
[   83.576032][ T7299]  do_user_addr_fault+0xa81/0x1390
[   83.577680][ T7299]  exc_page_fault+0x76/0xf0
[   83.579130][ T7299]  asm_exc_page_fault+0x26/0x30
[   83.580768][ T7299] 
[   83.581572][ T7299] Memory state around the buggy address:
[   83.583330][ T7299]  ffff88803440bf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   83.585932][ T7299]  ffff88803440c000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   83.588949][ T7299] >ffff88803440c080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   83.591619][ T7299]                                ^
[   83.593313][ T7299]  ffff88803440c100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   83.596042][ T7299]  ffff88803440c180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   83.598623][ T7299] ==================================================================
[   83.602308][ T7299] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   83.604662][ T7299] CPU: 0 UID: 0 PID: 7299 Comm: khidpd_10cf05df Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[   83.608937][ T7299] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   83.612227][ T7299] Call Trace:
[   83.613304][ T7299]  <TASK>
[   83.614301][ T7299]  dump_stack_lvl+0x99/0x250
[   83.615893][ T7299]  ? __asan_memcpy+0x40/0x70
[   83.617472][ T7299]  ? __pfx_dump_stack_lvl+0x10/0x10
[   83.619506][ T7299]  ? __pfx__printk+0x10/0x10
[   83.621083][ T7299]  panic+0x2db/0x790
[   83.622394][ T7299]  ? __pfx_panic+0x10/0x10
[   83.624000][ T7299]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[   83.625951][ T7299]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   83.627843][ T7299]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   83.629925][ T7299]  ? print_memory_metadata+0x314/0x400
[   83.631728][ T7299]  ? __mutex_lock+0x738/0xe80
[   83.633270][ T7299]  check_panic_on_warn+0x89/0xb0
[   83.634855][ T7299]  ? __mutex_lock+0x738/0xe80
[   83.636416][ T7299]  end_report+0x78/0x160
[   83.637805][ T7299]  kasan_report+0x129/0x150
[   83.639300][ T7299]  ? __mutex_lock+0x738/0xe80
[   83.640900][ T7299]  __mutex_lock+0x738/0xe80
[   83.642413][ T7299]  ? __mutex_lock+0x51b/0xe80
[   83.643965][ T7299]  ? l2cap_unregister_user+0x6a/0x1b0
[   83.645699][ T7299]  ? __pfx___mutex_lock+0x10/0x10
[   83.647317][ T7299]  ? __pfx___timer_delete_sync+0x10/0x10
[   83.649157][ T7299]  l2cap_unregister_user+0x6a/0x1b0
[   83.650879][ T7299]  hidp_session_thread+0x3c9/0x410
[   83.652608][ T7299]  ? __pfx_hidp_session_thread+0x10/0x10
[   83.654431][ T7299]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   83.656404][ T7299]  ? __pfx_hidp_session_wake_function+0x10/0x10
[   83.658459][ T7299]  ? __pfx_hidp_session_wake_function+0x10/0x10
[   83.660475][ T7299]  ? __kthread_parkme+0x7b/0x200
[   83.662069][ T7299]  ? __kthread_parkme+0x1a1/0x200
[   83.663702][ T7299]  kthread+0x711/0x8a0
[   83.665013][ T7299]  ? __pfx_hidp_session_thread+0x10/0x10
[   83.666784][ T7299]  ? __pfx_kthread+0x10/0x10
[   83.668276][ T7299]  ? _raw_spin_unlock_irq+0x23/0x50
[   83.669969][ T7299]  ? lockdep_hardirqs_on+0x9c/0x150
[   83.671692][ T7299]  ? __pfx_kthread+0x10/0x10
[   83.673180][ T7299]  ret_from_fork+0x3fc/0x770
[   83.674696][ T7299]  ? __pfx_ret_from_fork+0x10/0x10
[   83.676352][ T7299]  ? __switch_to_asm+0x39/0x70
[   83.677923][ T7299]  ? __switch_to_asm+0x33/0x70
[   83.679495][ T7299]  ? __pfx_kthread+0x10/0x10
[   83.680982][ T7299]  ret_from_fork_asm+0x1a/0x30
[   83.682553][ T7299]  </TASK>
[   83.684202][ T7299] Kernel Offset: disabled
[   83.685623][ T7299] Rebooting in 86400 seconds..

VM DIAGNOSIS:
19:18:46  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000034 RBX=0000000000000034 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90002a9f370
R8 =ffff888108a88237 R9 =1ffff11021151046 R10=dffffc0000000000 R11=ffffffff85478780
R12=dffffc0000000000 R13=ffffffff99af98b9 R14=ffffffff99dfe6e0 R15=0000000000000000
RIP=ffffffff854787fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055bea419d1b8 CR3=0000000025c50000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffff0000000000ff ffff00ff00000000 XMM05=0000000000000051 0000000031323038
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffff00000000 XMM09=696b66722f363279 68702f3131323038
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000006a92d03a RBX=0000000000000004 RCX=0000000017404dc8 RDX=00000000c00d42a6
RSI=000000009302b244 RDI=ffff888020c2b980 RBP=0000000000000000 RSP=ffffc90002c7f2b8
R8 =0000000000000000 R9 =ffffffff819c56f5 R10=dffffc0000000000 R11=ffffed1004e95891
R12=000000003628aeaf R13=ffff888020c2c470 R14=ffff888020c2c510 R15=00000000469982db
RIP=ffffffff819e4a68 RFL=00000816 [-O--AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f169110e6c0 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00002000001cb030 CR3=00000001216e6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f1690411c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
