last executing test programs:

16.12151741s ago: executing program 2 (id=159):
r0 = socket(0x840000000002, 0x3, 0x100)
setsockopt$sock_int(r0, 0x1, 0x1b, &(0x7f0000000200)=0x2, 0x4)

16.050047741s ago: executing program 2 (id=161):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="02"], 0x10)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r2, 0x2, 0x0, 0x0, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40)

15.919389702s ago: executing program 2 (id=164):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000003c000b0000000000fcffffff04000000040000800c000100091c", @ANYRES16], 0x24}}, 0x0)

15.570113698s ago: executing program 2 (id=167):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0xe, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="660a00000000000061114c0000000000850000009900000095"], &(0x7f0000000080)='GPL\x00'}, 0x94)

10.119306093s ago: executing program 2 (id=167):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0xe, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="660a00000000000061114c0000000000850000009900000095"], &(0x7f0000000080)='GPL\x00'}, 0x94)

4.192373649s ago: executing program 2 (id=167):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0xe, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="660a00000000000061114c0000000000850000009900000095"], &(0x7f0000000080)='GPL\x00'}, 0x94)

1.359375833s ago: executing program 1 (id=439):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000022bf"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r0, <r1=>0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000380), 0xffffd6c0, r1}, 0x38)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)

1.197236252s ago: executing program 1 (id=443):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01021800"], 0x0, 0x26}, 0x28)

1.139523824s ago: executing program 1 (id=445):
socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x4)
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="fe", 0x1}, {&(0x7f0000001240)="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", 0x480}], 0x2}, 0x0)
sendmsg$alg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='contention_end\x00', r1}, 0x18)
r2 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0))
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
pselect6(0x40, &(0x7f0000001640)={0xe3f0, 0x9, 0x9, 0x3, 0x200, 0x7, 0x8, 0x800}, &(0x7f0000000040)={0x95fc, 0x2, 0x1b4, 0x4, 0x1000, 0xf9, 0x1000, 0x381d930a}, 0x0, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0)
recvmmsg(r4, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0)

530.089762ms ago: executing program 0 (id=451):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f00000029c0)=ANY=[@ANYBLOB="b700000064000000bca3000000000000240300001afeffff720af0fff80200ff71a4f0ff000000001f030000000000002e040200000000002604fdffffff000a6114080e000000001d430000000000007a0a00fe003d001f61141c0000000000b503f7fff80000009500000000000000033bc065b78111c6dfa035f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6d46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16fe8ddf44572a3996e7f653da18ec0ae564162a27afea62d84f3a10076443d601009393bf52d2105bd901128c7e0ec82701c8204a09eeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081dad507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39b21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6e78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f6193804b3e0a1053abdc31282dfb15eb6841bb64a1b2045024a982f3c48153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98812106dec28eaeb883418f5624e93aca9e560efa826e5d0c4bd26ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ffc48899b212c55318294270a1ad10c80fef7c24d4c5e65a6d7afcc829ba0f85da6d888f18ea40ab959f6074ab2540d85d1501783a7ab51380d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d5ef903a554d651186a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a687b8bd9259bc31b6b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700e89a56fe8e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f692192571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09d28c853c28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5cd2baf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a896192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf799b37463f000000a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12b92d7ae633d44086b3f03b20d54abc46271a30f1240fc52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a44434000000000000000000000000000000000021000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67df3943df80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c2f63453c7e228919b7500001a0000000000000000000017350000c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b512e34182084a3a3b2beb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a316572e92d44ca450b1457c64baeaf8d23f30097126ef7586ed63dd92005c79e4a8ab8a94f0b74903580ac987fd630780d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddffff070000d0288ec3899f1e3ba0151c4037148fb479de703fd52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23541320d8579c5ab42bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267c451ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de01fdee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d00000000caf2b6789509b1bacfd4fa812fc341875cfa5e798bbf59770000000000000000c8a594ce3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795d35f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af620000232ec06f7170009d92bb7eddd12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe88100000000000003568bbc2f89596ceacbcbd1c76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0044f57d15e37e34fc5915499b88ae780a7bae4df603bd3c72808cf300440b1b63615b454a161d5fc1d1308f39b3aff5c03eef2e63a013f8a5bf4da6aa1b7d5ec55e8c7a0405fe718e42d4d613f992a0cbc16cb251386acae02f665544c9c02adae5839f1e00006e42fc051a0cb8685667c2edf4522f0f2a8eb7c7b56063a959c4b881e3dbff3c911435e84bc57f36afb8ff78168719dc5ed47eb309f8a12db461beffd0d091a132330579c9afac1a4ad2794987927eb61ad82a61a144d33283eaeda4836a684a6e2716d83e60f5e0e1ab6376960224dc96c839a1fef49475cc0e3053eeb4aebd0e1696f20d458f1aac2d2d871221d3a2d0e1790584ba14b9145a3f81298ae7871f0191a740a8e53b0b6f152dc4d8f28eaa2a5acadd2313f55287aa6ea469b90575839cd763b4703e87fbd6bd134c2cb62996c5d28e73df35744f19143c0b57a26d692dd9a5cf3ab615e432e38b0cbbcced5c39a73fc8e50e6590605cc0b7db1dbca3ea6fbcdff0e18fdeeb5360642d77171433e78bd9300fd171fc83700f0e92b116e7846719eecd94331354b35b9aac42b34fac350decfe5c2eac926f0a007cb6e3bda3effb84b4607468aaad19dcf0d54e5f4ed4ade1fca17d39be192a10516fb34eb6cde71136bb2b4ce1306c17744fefc2b884bdfebad173147780d8b0129f194a60ed6935400000000000000000000000000000000000000000000000000000000000004c8653a0befb2c2795c52e0efae157f1bb138dc7f7d566c964ecfaf388bd173e0174bc5a49d0595de6e1cb51ead265b156412045a00f396d3e180a71897028714e8730d44895d12589a2e0d8d7e4e6f03633ef0f714edad8a2515ac4886efe8c5e006ef4638a4c52577e7d04c2ca9b714aaabde444490ff17d8baad3e65a716a16492b9a887613426ef82e371f531f18d48a4dee61380595792dc07194a4184a76e1e5d1cb39e58f391af74825f4893f063ac0c722bd6e162b8e7ac7a0f7eb13b5267335fd87e13dda7aa19157a0a1a1c2905358c8fc2cd066ea0680b013109f06c293eb1867fbf919fa12364f5ca680bc96cc326e5d757305595bc124b824897524cdcf000000000000535ea43fde79c90f5ffb0e2b67a25b7d83"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48)

430.107462ms ago: executing program 0 (id=452):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0x3}, 0x6)
ioctl$sock_bt_hci(r0, 0x800448d5, 0x0)

429.88664ms ago: executing program 0 (id=453):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000020711143000000000016000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x48)

339.477239ms ago: executing program 0 (id=454):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000005680), &(0x7f0000009980)=0x40)

289.63457ms ago: executing program 0 (id=455):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7}]}, 0x3c}}, 0x0)

288.464958ms ago: executing program 0 (id=456):
unshare(0x62040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
pipe(0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x5f501}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x40004)

189.346966ms ago: executing program 1 (id=457):
unshare(0x480)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000001c0)={0x0, 0x1, 0x3f, @local}, 0x10)

101.719172ms ago: executing program 1 (id=458):
socket$inet6(0xa, 0x80003, 0x0)

0s ago: executing program 1 (id=459):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:5601' (ED25519) to the list of known hosts.
syzkaller login: [   50.055921][ T5816] cgroup: Unknown subsys name 'net'
[   50.162335][ T5816] cgroup: Unknown subsys name 'cpuset'
[   50.166982][ T5816] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.801826][ T5816] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   56.038045][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   56.041655][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   56.049332][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   56.053311][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   56.067355][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   56.070761][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   56.080108][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   56.083499][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   56.087027][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   56.090544][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   56.117326][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   56.126186][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   56.130882][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   56.137341][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   56.140217][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   56.385966][ T5831] chnl_net:caif_netlink_parms(): no params data found
[   56.438360][ T5828] chnl_net:caif_netlink_parms(): no params data found
[   56.537144][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.540740][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.544074][ T5831] bridge_slave_0: entered allmulticast mode
[   56.547892][ T5831] bridge_slave_0: entered promiscuous mode
[   56.578802][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.581950][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.584875][ T5831] bridge_slave_1: entered allmulticast mode
[   56.588556][ T5831] bridge_slave_1: entered promiscuous mode
[   56.635904][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.645721][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.662821][ T5840] chnl_net:caif_netlink_parms(): no params data found
[   56.693429][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.696405][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.700216][ T5828] bridge_slave_0: entered allmulticast mode
[   56.703865][ T5828] bridge_slave_0: entered promiscuous mode
[   56.716941][ T5831] team0: Port device team_slave_0 added
[   56.722164][ T5831] team0: Port device team_slave_1 added
[   56.737596][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.740620][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.743578][ T5828] bridge_slave_1: entered allmulticast mode
[   56.747411][ T5828] bridge_slave_1: entered promiscuous mode
[   56.794756][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.798222][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.801518][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.810287][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.823238][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.826956][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.829583][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.837775][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.867588][ T5828] team0: Port device team_slave_0 added
[   56.884575][ T5828] team0: Port device team_slave_1 added
[   56.927346][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.930578][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.933515][ T5840] bridge_slave_0: entered allmulticast mode
[   56.937224][ T5840] bridge_slave_0: entered promiscuous mode
[   56.943194][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.945577][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.954247][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.965216][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.967665][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.970472][ T5840] bridge_slave_1: entered allmulticast mode
[   56.973492][ T5840] bridge_slave_1: entered promiscuous mode
[   56.983918][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.986162][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.995675][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.007582][ T5831] hsr_slave_0: entered promiscuous mode
[   57.011087][ T5831] hsr_slave_1: entered promiscuous mode
[   57.030293][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.048295][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.087342][ T5828] hsr_slave_0: entered promiscuous mode
[   57.090710][ T5828] hsr_slave_1: entered promiscuous mode
[   57.093543][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   57.096859][ T5828] Cannot create hsr debugfs directory
[   57.122053][ T5840] team0: Port device team_slave_0 added
[   57.144620][ T5840] team0: Port device team_slave_1 added
[   57.213274][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.216105][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.227651][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.249335][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.252160][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.262565][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.374184][ T5840] hsr_slave_0: entered promiscuous mode
[   57.377206][ T5840] hsr_slave_1: entered promiscuous mode
[   57.380701][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   57.383806][ T5840] Cannot create hsr debugfs directory
[   57.472111][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   57.486207][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   57.492957][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   57.504165][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   57.582630][ T5828] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   57.588095][ T5828] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   57.597695][ T5828] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   57.614325][ T5828] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   57.655546][ T5840] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   57.662502][ T5840] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   57.673135][ T5840] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   57.681725][ T5840] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   57.763051][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.785902][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.794088][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   57.813584][ T1898] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.816690][ T1898] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.828335][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.836306][ T1898] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.839261][ T1898] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.846410][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   57.871949][   T88] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.874280][   T88] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.885295][ T5840] 8021q: adding VLAN 0 to HW filter on device team0
[   57.892451][   T88] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.894794][   T88] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.910407][   T88] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.913083][   T88] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.931377][ T1898] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.934359][ T1898] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.001019][ T5840] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   58.108752][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.114198][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.132604][   T55] Bluetooth: hci0: command tx timeout
[   58.132612][ T5832] Bluetooth: hci1: command tx timeout
[   58.183352][ T5831] veth0_vlan: entered promiscuous mode
[   58.187612][ T5840] veth0_vlan: entered promiscuous mode
[   58.202407][ T5840] veth1_vlan: entered promiscuous mode
[   58.208163][ T5831] veth1_vlan: entered promiscuous mode
[   58.219380][ T5832] Bluetooth: hci2: command tx timeout
[   58.232715][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.255085][ T5831] veth0_macvtap: entered promiscuous mode
[   58.273504][ T5831] veth1_macvtap: entered promiscuous mode
[   58.284618][ T5840] veth0_macvtap: entered promiscuous mode
[   58.304208][ T5840] veth1_macvtap: entered promiscuous mode
[   58.318628][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.332426][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.343687][ T5831] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.347396][ T5831] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.351771][ T5831] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.355307][ T5831] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.361658][ T5828] veth0_vlan: entered promiscuous mode
[   58.377615][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.386860][ T5828] veth1_vlan: entered promiscuous mode
[   58.406518][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.426346][ T5840] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.434703][ T5840] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.438929][ T5840] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.444348][ T5840] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.522100][ T1898] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.526670][ T1898] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.534397][ T5828] veth0_macvtap: entered promiscuous mode
[   58.556066][ T5828] veth1_macvtap: entered promiscuous mode
[   58.575188][ T1898] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.578202][ T1898] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.603316][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.623037][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.637301][   T88] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.638030][ T5828] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.648475][   T88] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.649888][ T5828] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.656649][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   58.662587][ T5828] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.665857][ T5828] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.724574][ T5897] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2'.
[   58.749840][   T88] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.763081][   T88] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.836935][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.843627][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.897175][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.905197][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.031610][ T5911] Zero length message leads to an empty skb
[   59.106148][ T5917] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10'.
[   59.192192][ T5923] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14'.
[   59.731981][ T5962] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.33'.
[   59.975283][ T5983] IPv4: Oversized IP packet from 127.202.26.0
[   60.133666][ T5995] syz.2.49 uses obsolete (PF_INET,SOCK_PACKET)
[   60.200103][ T5999] netlink: 'syz.1.51': attribute type 3 has an invalid length.
[   60.210409][ T5832] Bluetooth: hci0: command tx timeout
[   60.212716][ T5832] Bluetooth: hci1: command tx timeout
[   60.290090][ T5832] Bluetooth: hci2: command tx timeout
[   60.353746][ T6014] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   60.448527][ T6026] netlink: 4 bytes leftover after parsing attributes in process `syz.2.58'.
[   60.552876][ T6033] 8021q: adding VLAN 0 to HW filter on device bond1
[   60.555423][ T6033] bridge0: port 3(bond1) entered blocking state
[   60.557568][ T6033] bridge0: port 3(bond1) entered disabled state
[   60.560229][ T6033] bond1: entered allmulticast mode
[   60.563783][ T6033] bond1: entered promiscuous mode
[   60.565902][ T6033] bridge0: port 3(bond1) entered blocking state
[   60.568102][ T6033] bridge0: port 3(bond1) entered forwarding state
[   60.577401][ T6036] tipc: Started in network mode
[   60.578591][ T6033] netlink: 20 bytes leftover after parsing attributes in process `syz.2.60'.
[   60.580505][ T6036] tipc: Node identity f2658298a026, cluster identity 4711
[   60.581998][ T6033] netlink: 28 bytes leftover after parsing attributes in process `syz.2.60'.
[   60.584404][ T6036] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   60.592202][ T6033] dummy0: entered promiscuous mode
[   60.594494][ T6033] team0: entered promiscuous mode
[   60.596204][ T6033] team_slave_0: entered promiscuous mode
[   60.598604][ T6033] team_slave_1: entered promiscuous mode
[   60.602269][ T6033] bridge0: port 4(hsr1) entered blocking state
[   60.604481][ T6033] bridge0: port 4(hsr1) entered disabled state
[   60.606489][ T6033] hsr1: entered allmulticast mode
[   60.608208][ T6033] dummy0: entered allmulticast mode
[   60.611205][ T6033] team0: entered allmulticast mode
[   60.613083][ T6033] team_slave_0: entered allmulticast mode
[   60.615064][ T6033] team_slave_1: entered allmulticast mode
[   60.618273][ T6033] hsr1: entered promiscuous mode
[   60.620864][ T6033] bridge0: port 4(hsr1) entered blocking state
[   60.623220][ T6033] bridge0: port 4(hsr1) entered forwarding state
[   60.626575][ T6036] syzkaller0: entered promiscuous mode
[   60.628723][ T6036] syzkaller0: entered allmulticast mode
[   60.636912][   T27] bridge0: port 3(bond1) entered disabled state
[   60.648883][ T6036] tipc: Resetting bearer <eth:syzkaller0>
[   60.655437][ T6034] tipc: Resetting bearer <eth:syzkaller0>
[   60.679958][ T6034] tipc: Disabling bearer <eth:syzkaller0>
[   61.199004][ T6057] netlink: 'syz.2.71': attribute type 3 has an invalid length.
[   61.202174][ T6057] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.71'.
[   61.240424][ T6061] netlink: 8 bytes leftover after parsing attributes in process `syz.1.73'.
[   61.360634][ T6071] netlink: 'syz.2.78': attribute type 1 has an invalid length.
[   61.370426][ T6071] netlink: 136 bytes leftover after parsing attributes in process `syz.2.78'.
[   61.373366][ T6071] netlink: 'syz.2.78': attribute type 2 has an invalid length.
[   61.376742][ T6071] netlink: 'syz.2.78': attribute type 1 has an invalid length.
[   61.596469][ T6089] netdevsim netdevsim1: Direct firmware load for .
[   61.596469][ T6089]  failed with error -2
[   61.601336][ T6089] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[   61.601336][ T6089] 
[   61.968764][ T6109] Cannot find set identified by id 0 to match
[   62.041195][ T6113] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[   62.045532][ T6113] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   62.087562][    C0] vcan0: j1939_tp_rxtimer: 0xffff888109fbac00: rx timeout, send abort
[   62.091692][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888109fbac00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[   62.096929][    C0] vcan0: j1939_tp_rxtimer: 0xffff888039336800: rx timeout, send abort
[   62.099547][    C0] vcan0: j1939_tp_rxtimer: 0xffff888039336c00: rx timeout, send abort
[   62.103322][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888039336c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   62.108363][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888039336800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   62.289470][ T5832] Bluetooth: hci0: command tx timeout
[   62.301020][ T5832] Bluetooth: hci1: command tx timeout
[   62.371224][ T5832] Bluetooth: hci2: command tx timeout
[   62.605011][ T6151] warning: `syz.2.118' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   62.644932][ T6153] Cannot find del_set index 0 as target
[   63.383563][ T6225] xt_hashlimit: size too large, truncated to 1048576
[   63.422613][ T6230] netlink: 'syz.2.155': attribute type 30 has an invalid length.
[   63.432065][ T6230] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   63.435120][ T6230] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   63.438050][ T6230] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   63.441203][ T6230] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   63.458805][ T6230] netlink: 'syz.2.155': attribute type 30 has an invalid length.
[   63.742910][ T6246] xt_bpf: check failed: parse error
[   64.077132][ T6253] veth2: entered allmulticast mode
[   64.185939][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   64.194826][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.267861][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   64.271683][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.347213][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   64.370513][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.375952][ T5832] Bluetooth: hci1: command tx timeout
[   64.375996][   T55] Bluetooth: hci0: command tx timeout
[   64.433634][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   64.436879][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.513766][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   64.518253][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   64.521800][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   64.527289][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   64.539929][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.606135][   T12] hsr1: left allmulticast mode
[   64.613768][   T12] dummy0: left allmulticast mode
[   64.615849][   T12] team0: left allmulticast mode
[   64.628854][   T12] team_slave_0: left allmulticast mode
[   64.631603][   T12] team_slave_1: left allmulticast mode
[   64.634277][   T12] hsr1: left promiscuous mode
[   64.637052][   T12] bridge0: port 4(hsr1) entered disabled state
[   64.677238][   T12] bond1: left allmulticast mode
[   64.679288][   T12] bond1: left promiscuous mode
[   64.681124][   T12] bridge0: port 3(bond1) entered disabled state
[   64.685852][   T12] bridge_slave_1: left allmulticast mode
[   64.687884][   T12] bridge_slave_1: left promiscuous mode
[   64.691321][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.697551][   T12] bridge_slave_0: left allmulticast mode
[   64.700529][   T12] bridge_slave_0: left promiscuous mode
[   64.702568][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.004125][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   65.012942][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   65.018224][   T12] bond0 (unregistering): Released all slaves
[   65.077888][   T12] bond1 (unregistering): Released all slaves
[   65.412129][ T6296] __nla_validate_parse: 8 callbacks suppressed
[   65.412141][ T6296] netlink: 24 bytes leftover after parsing attributes in process `syz.1.178'.
[   65.431733][ T6267] chnl_net:caif_netlink_parms(): no params data found
[   65.508785][   T12] dummy0: left promiscuous mode
[   65.514929][   T12] team0: left promiscuous mode
[   65.517000][   T12] team_slave_0: left promiscuous mode
[   65.518996][   T12] team_slave_1: left promiscuous mode
[   65.533254][   T12] hsr_slave_0: left promiscuous mode
[   65.535457][   T12] hsr_slave_1: left promiscuous mode
[   65.537529][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   65.540812][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   65.543770][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   65.547063][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   65.564040][   T12] veth1_macvtap: left promiscuous mode
[   65.566293][ T6303] xt_limit: Overflow, try lower: 0/0
[   65.566315][   T12] veth0_macvtap: left promiscuous mode
[   65.570632][   T12] veth1_vlan: left promiscuous mode
[   65.572443][   T12] veth0_vlan: left promiscuous mode
[   65.817409][   T12] team0 (unregistering): Port device team_slave_1 removed
[   65.844434][   T12] team0 (unregistering): Port device team_slave_0 removed
[   66.145933][ T6267] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.155135][ T6267] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.157639][ T6267] bridge_slave_0: entered allmulticast mode
[   66.161429][ T6267] bridge_slave_0: entered promiscuous mode
[   66.164928][ T6267] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.167283][ T6267] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.169822][ T6267] bridge_slave_1: entered allmulticast mode
[   66.173353][ T6267] bridge_slave_1: entered promiscuous mode
[   66.227652][ T6267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.242451][ T6267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.335140][ T6267] team0: Port device team_slave_0 added
[   66.338303][ T6267] team0: Port device team_slave_1 added
[   66.387998][ T6267] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.390530][ T6267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.400568][ T6267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.414333][ T6267] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.416645][ T6267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.429637][ T6267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.501208][ T6267] hsr_slave_0: entered promiscuous mode
[   66.504162][ T6267] hsr_slave_1: entered promiscuous mode
[   66.508650][ T6267] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   66.522600][ T6267] Cannot create hsr debugfs directory
[   66.592575][ T6347] netlink: 165 bytes leftover after parsing attributes in process `syz.0.195'.
[   66.620086][   T55] Bluetooth: hci2: command tx timeout
[   67.065908][ T6267] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   67.075161][ T6267] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   67.080502][ T6267] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   67.087294][ T6267] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   67.192468][ T6267] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.205354][ T6267] 8021q: adding VLAN 0 to HW filter on device team0
[   67.214288][ T6406] xt_hashlimit: max too large, truncated to 1048576
[   67.216459][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.219432][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.223272][ T6406] xt_hashlimit: overflow, rate too high: 0
[   67.225567][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.228223][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.406061][ T6267] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.444122][ T6267] veth0_vlan: entered promiscuous mode
[   67.450543][ T6267] veth1_vlan: entered promiscuous mode
[   67.470849][ T6267] veth0_macvtap: entered promiscuous mode
[   67.477940][ T6267] veth1_macvtap: entered promiscuous mode
[   67.513066][ T6267] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.528252][ T6267] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.541186][ T6267] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.544731][ T6267] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.558643][ T6267] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.562412][ T6267] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.645584][ T1898] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.652551][ T1898] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.680215][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.691567][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.921265][ T6445] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.924610][ T6445] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.057935][ T6445] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   68.075651][ T6445] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   68.164146][ T6445] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.168117][ T6445] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.172275][ T6445] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.176078][ T6445] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.659270][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.909671][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   69.913503][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   69.916844][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   69.925978][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   69.932935][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   70.074062][ T6519] chnl_net:caif_netlink_parms(): no params data found
[   70.151917][ T6519] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.154924][ T6519] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.157683][ T6519] bridge_slave_0: entered allmulticast mode
[   70.163763][ T6519] bridge_slave_0: entered promiscuous mode
[   70.168537][ T6519] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.171804][ T6519] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.174281][ T6519] bridge_slave_1: entered allmulticast mode
[   70.177054][ T6519] bridge_slave_1: entered promiscuous mode
[   70.223120][ T6519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.232038][ T6519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.267689][ T6519] team0: Port device team_slave_0 added
[   70.280532][ T6519] team0: Port device team_slave_1 added
[   70.329538][ T6519] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.334121][ T6519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.346485][ T6519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.357874][ T6519] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.364212][ T6519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.380411][ T6519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.454949][ T6519] hsr_slave_0: entered promiscuous mode
[   70.458344][ T6519] hsr_slave_1: entered promiscuous mode
[   70.461645][ T6519] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   70.464999][ T6519] Cannot create hsr debugfs directory
[   70.512013][ T6565] tipc: Started in network mode
[   70.513814][ T6565] tipc: Node identity 9a60d99769ef, cluster identity 4711
[   70.516150][ T6565] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   70.532284][ T6565] syzkaller0: entered promiscuous mode
[   70.534340][ T6565] syzkaller0: entered allmulticast mode
[   70.570302][ T6565] tipc: Resetting bearer <eth:syzkaller0>
[   70.576341][ T6564] tipc: Resetting bearer <eth:syzkaller0>
[   70.594113][ T6564] tipc: Disabling bearer <eth:syzkaller0>
[   70.825056][    T9] IPVS: starting estimator thread 0...
[   70.909247][ T6580] IPVS: using max 80 ests per chain, 192000 per kthread
[   70.943216][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   70.945882][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   70.990022][ T6586] netlink: 16 bytes leftover after parsing attributes in process `syz.1.282'.
[   71.122169][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.190626][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.199835][ T6595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.286'.
[   71.246381][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.257953][ T6597] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   71.310301][   T13] bridge_slave_1: left allmulticast mode
[   71.312323][   T13] bridge_slave_1: left promiscuous mode
[   71.314640][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.321357][   T13] bridge_slave_0: left allmulticast mode
[   71.323417][   T13] bridge_slave_0: left promiscuous mode
[   71.325556][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.361710][ T6600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.288'.
[   71.368714][ T6602] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   71.506710][ T6610] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[   71.647403][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   71.654471][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   71.658409][   T13] bond0 (unregistering): Released all slaves
[   71.733058][ T6623] netlink: 'syz.1.295': attribute type 21 has an invalid length.
[   71.740929][ T6623] IPv6: NLM_F_CREATE should be specified when creating new route
[   71.925402][   T13] hsr_slave_0: left promiscuous mode
[   71.930456][   T13] hsr_slave_1: left promiscuous mode
[   71.937175][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   71.944548][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   71.950097][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   71.953100][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   71.967038][   T13] veth1_macvtap: left promiscuous mode
[   71.970405][   T13] veth0_macvtap: left promiscuous mode
[   71.973432][   T13] veth1_vlan: left promiscuous mode
[   71.975660][   T13] veth0_vlan: left promiscuous mode
[   71.980986][   T55] Bluetooth: hci2: command tx timeout
[   72.424885][   T13] team0 (unregistering): Port device team_slave_1 removed
[   72.456123][   T13] team0 (unregistering): Port device team_slave_0 removed
[   72.853601][ T6519] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   72.865028][ T6519] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   72.884584][ T6519] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   72.895207][ T6519] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   73.026148][ T6519] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.046198][ T6519] 8021q: adding VLAN 0 to HW filter on device team0
[   73.065216][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.067564][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.090589][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.092950][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.105706][ T6519] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   73.111418][ T6519] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   73.263651][ T6519] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.300460][ T6519] veth0_vlan: entered promiscuous mode
[   73.307868][ T6519] veth1_vlan: entered promiscuous mode
[   73.326280][ T6519] veth0_macvtap: entered promiscuous mode
[   73.334568][ T6519] veth1_macvtap: entered promiscuous mode
[   73.354070][ T6519] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.363403][ T6519] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.370921][ T6519] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.374401][ T6519] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.377813][ T6519] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.386959][ T6519] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.506337][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.511033][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.538858][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.538872][ T6717] tap0: tun_chr_ioctl cmd 1074025677
[   73.541687][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.548816][ T6717] tap0: linktype set to 769
[   73.728060][ T6731] netlink: 8 bytes leftover after parsing attributes in process `syz.1.337'.
[   74.706579][ T6759] netlink: 8 bytes leftover after parsing attributes in process `syz.0.350'.
[   74.710694][ T6759] netlink: 4 bytes leftover after parsing attributes in process `syz.0.350'.
[   75.591028][ T5861] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.923973][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   75.928734][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   75.932812][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   75.937751][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   75.942115][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   75.993431][ T6808] netlink: 16 bytes leftover after parsing attributes in process `syz.1.370'.
[   76.123450][ T6803] chnl_net:caif_netlink_parms(): no params data found
[   76.398006][ T6803] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.403664][ T6803] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.406865][ T6803] bridge_slave_0: entered allmulticast mode
[   76.413298][ T6803] bridge_slave_0: entered promiscuous mode
[   76.418023][ T6803] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.423057][ T6803] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.426149][ T6803] bridge_slave_1: entered allmulticast mode
[   76.433922][ T6803] bridge_slave_1: entered promiscuous mode
[   76.482628][ T6832] xt_socket: unknown flags 0xfc
[   76.497796][ T6803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   76.508006][ T6803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   76.587325][ T6803] team0: Port device team_slave_0 added
[   76.592882][ T6803] team0: Port device team_slave_1 added
[   76.643387][ T6803] batman_adv: batadv0: Adding interface: batadv_slave_0
[   76.646330][ T6803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.661929][ T6803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   76.671648][ T6803] batman_adv: batadv0: Adding interface: batadv_slave_1
[   76.674521][ T6803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.688191][ T6803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   76.695399][ T6839] netlink: 248 bytes leftover after parsing attributes in process `syz.0.382'.
[   76.730148][ T6803] hsr_slave_0: entered promiscuous mode
[   76.732481][ T6803] hsr_slave_1: entered promiscuous mode
[   76.735827][ T6803] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   76.738734][ T6803] Cannot create hsr debugfs directory
[   76.863548][ T6843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.383'.
[   76.914879][ T6849] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   77.176252][ T6875] netlink: 'syz.1.400': attribute type 21 has an invalid length.
[   77.178926][ T6875] netlink: 'syz.1.400': attribute type 6 has an invalid length.
[   77.185900][ T6875] netlink: 64 bytes leftover after parsing attributes in process `syz.1.400'.
[   77.325536][ T6887] pim6reg1: entered promiscuous mode
[   77.329356][ T6887] pim6reg1: entered allmulticast mode
[   77.440402][ T5861] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.465641][ T6897] netlink: 4 bytes leftover after parsing attributes in process `syz.0.411'.
[   77.520531][ T6901] sock: sock_set_timeout: `syz.1.414' (pid 6901) tries to set negative timeout
[   77.530719][ T5861] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.595726][ T5861] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.597752][ T6908] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[   77.750000][ T5861] bridge_slave_1: left allmulticast mode
[   77.751952][ T5861] bridge_slave_1: left promiscuous mode
[   77.754105][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.778309][ T5861] bridge_slave_0: left allmulticast mode
[   77.781294][ T5861] bridge_slave_0: left promiscuous mode
[   77.783772][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.979529][   T55] Bluetooth: hci2: command tx timeout
[   78.098072][ T6942] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   78.166021][ T5861] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   78.172796][ T5861] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   78.177815][ T5861] bond0 (unregistering): Released all slaves
[   78.228871][ T6946] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[   78.334257][ T6954] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[   78.477709][ T5861] hsr_slave_0: left promiscuous mode
[   78.482783][ T5861] hsr_slave_1: left promiscuous mode
[   78.489678][ T5861] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   78.492235][ T5861] batman_adv: batadv0: Removing interface: batadv_slave_0
[   78.499591][ T5861] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   78.502482][ T5861] batman_adv: batadv0: Removing interface: batadv_slave_1
[   78.522321][ T5861] veth1_macvtap: left promiscuous mode
[   78.524615][ T5861] veth0_macvtap: left promiscuous mode
[   78.527728][ T5861] veth1_vlan: left promiscuous mode
[   78.532856][ T5861] veth0_vlan: left promiscuous mode
[   78.632292][ T6973] netlink: 4 bytes leftover after parsing attributes in process `syz.0.446'.
[   78.706067][ T6976] xt_hashlimit: size too large, truncated to 1048576
[   78.908165][ T5861] team0 (unregistering): Port device team_slave_1 removed
[   78.925002][ T5861] team0 (unregistering): Port device team_slave_0 removed
[   79.121139][ T6803] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   79.135986][ T6803] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   79.152405][ T6803] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   79.158738][ T6803] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   79.260907][ T6803] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.274291][ T6803] 8021q: adding VLAN 0 to HW filter on device team0
[   79.301536][ T1898] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.303832][ T1898] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.307281][ T1898] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.309598][ T1898] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.432625][ T6803] 8021q: adding VLAN 0 to HW filter on device batadv0
[   79.482081][ T6803] veth0_vlan: entered promiscuous mode
[   79.499478][ T6803] veth1_vlan: entered promiscuous mode
[   79.518558][ T6803] veth0_macvtap: entered promiscuous mode
[   79.523761][ T6803] veth1_macvtap: entered promiscuous mode
[   79.535825][ T6803] batman_adv: batadv0: Interface activated: batadv_slave_0
[   79.545334][ T6803] batman_adv: batadv0: Interface activated: batadv_slave_1
[   79.551320][ T6803] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   79.554297][ T6803] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   79.557136][ T6803] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   79.561270][ T6803] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   79.615072][ T7006] geneve0: entered promiscuous mode
[   79.645813][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.648264][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.674201][ T1898] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.676833][ T1898] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.753999][ T6910] ==================================================================
[   79.756653][ T6910] BUG: KASAN: slab-use-after-free in __mutex_lock+0x738/0xe80
[   79.759084][ T6910] Read of size 8 at addr ffff88811b3a40a0 by task khidpd_15c25886/6910
[   79.762487][ T6910] 
[   79.763307][ T6910] CPU: 1 UID: 0 PID: 6910 Comm: khidpd_15c25886 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[   79.763318][ T6910] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   79.763322][ T6910] Call Trace:
[   79.763326][ T6910]  <TASK>
[   79.763330][ T6910]  dump_stack_lvl+0x189/0x250
[   79.763342][ T6910]  ? __virt_addr_valid+0x1c8/0x5c0
[   79.763353][ T6910]  ? rcu_is_watching+0x15/0xb0
[   79.763362][ T6910]  ? __kasan_check_byte+0x12/0x40
[   79.763371][ T6910]  ? __pfx_dump_stack_lvl+0x10/0x10
[   79.763379][ T6910]  ? rcu_is_watching+0x15/0xb0
[   79.763387][ T6910]  ? lock_release+0x4b/0x3e0
[   79.763395][ T6910]  ? __virt_addr_valid+0x1c8/0x5c0
[   79.763404][ T6910]  ? __virt_addr_valid+0x4a5/0x5c0
[   79.763413][ T6910]  print_report+0xd2/0x2b0
[   79.763420][ T6910]  ? __mutex_lock+0x738/0xe80
[   79.763427][ T6910]  kasan_report+0x118/0x150
[   79.763436][ T6910]  ? __mutex_lock+0x738/0xe80
[   79.763444][ T6910]  __mutex_lock+0x738/0xe80
[   79.763451][ T6910]  ? __mutex_lock+0x51b/0xe80
[   79.763463][ T6910]  ? l2cap_unregister_user+0x6a/0x1b0
[   79.763472][ T6910]  ? __pfx___mutex_lock+0x10/0x10
[   79.763480][ T6910]  ? __pfx___timer_delete_sync+0x10/0x10
[   79.763492][ T6910]  l2cap_unregister_user+0x6a/0x1b0
[   79.763499][ T6910]  hidp_session_thread+0x3c9/0x410
[   79.763507][ T6910]  ? __pfx_hidp_session_thread+0x10/0x10
[   79.763514][ T6910]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   79.763524][ T6910]  ? __pfx_hidp_session_wake_function+0x10/0x10
[   79.763533][ T6910]  ? __pfx_hidp_session_wake_function+0x10/0x10
[   79.763540][ T6910]  ? __kthread_parkme+0x7b/0x200
[   79.763549][ T6910]  ? __kthread_parkme+0x1a1/0x200
[   79.763559][ T6910]  kthread+0x711/0x8a0
[   79.763568][ T6910]  ? __pfx_hidp_session_thread+0x10/0x10
[   79.763575][ T6910]  ? __pfx_kthread+0x10/0x10
[   79.763584][ T6910]  ? _raw_spin_unlock_irq+0x23/0x50
[   79.763593][ T6910]  ? lockdep_hardirqs_on+0x9c/0x150
[   79.763600][ T6910]  ? __pfx_kthread+0x10/0x10
[   79.763609][ T6910]  ret_from_fork+0x3fc/0x770
[   79.763618][ T6910]  ? __pfx_ret_from_fork+0x10/0x10
[   79.763625][ T6910]  ? __switch_to_asm+0x39/0x70
[   79.763656][ T6910]  ? __switch_to_asm+0x33/0x70
[   79.763666][ T6910]  ? __pfx_kthread+0x10/0x10
[   79.763675][ T6910]  ret_from_fork_asm+0x1a/0x30
[   79.763687][ T6910]  </TASK>
[   79.763690][ T6910] 
[   79.844824][ T6910] Allocated by task 6803:
[   79.846391][ T6910]  kasan_save_track+0x3e/0x80
[   79.848092][ T6910]  __kasan_kmalloc+0x93/0xb0
[   79.849762][ T6910]  __kmalloc_noprof+0x27a/0x4f0
[   79.851598][ T6910]  hci_alloc_dev_priv+0x28/0x2040
[   79.853510][ T6910]  vhci_create_device+0x120/0x6e0
[   79.855399][ T6910]  vhci_write+0x3ce/0x4a0
[   79.856994][ T6910]  vfs_write+0x54b/0xa90
[   79.858536][ T6910]  ksys_write+0x145/0x250
[   79.860127][ T6910]  do_syscall_64+0xfa/0x3b0
[   79.861767][ T6910]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   79.863906][ T6910] 
[   79.864791][ T6910] Freed by task 6803:
[   79.866197][ T6910]  kasan_save_track+0x3e/0x80
[   79.867860][ T6910]  kasan_save_free_info+0x46/0x50
[   79.869631][ T6910]  __kasan_slab_free+0x62/0x70
[   79.871365][ T6910]  kfree+0x18e/0x440
[   79.872812][ T6910]  bt_host_release+0x82/0x90
[   79.874497][ T6910]  device_release+0x9c/0x1c0
[   79.876279][ T6910]  kobject_put+0x22b/0x480
[   79.877961][ T6910]  vhci_release+0x88/0xd0
[   79.879612][ T6910]  __fput+0x44c/0xa70
[   79.881120][ T6910]  task_work_run+0x1d4/0x260
[   79.882872][ T6910]  do_exit+0x6b5/0x22e0
[   79.884432][ T6910]  do_group_exit+0x21c/0x2d0
[   79.886109][ T6910]  __x64_sys_exit_group+0x3f/0x40
[   79.887929][ T6910]  x64_sys_call+0x21ba/0x21c0
[   79.889668][ T6910]  do_syscall_64+0xfa/0x3b0
[   79.891302][ T6910]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   79.893434][ T6910] 
[   79.894360][ T6910] Last potentially related work creation:
[   79.896479][ T6910]  kasan_save_stack+0x3e/0x60
[   79.898234][ T6910]  kasan_record_aux_stack+0xbd/0xd0
[   79.900187][ T6910]  insert_work+0x3d/0x330
[   79.901781][ T6910]  __queue_work+0xbd9/0xfe0
[   79.903406][ T6910]  queue_work_on+0x181/0x270
[   79.905134][ T6910]  process_scheduled_works+0xae1/0x17b0
[   79.907195][ T6910]  worker_thread+0x8a0/0xda0
[   79.908893][ T6910]  kthread+0x711/0x8a0
[   79.910394][ T6910]  ret_from_fork+0x3fc/0x770
[   79.912058][ T6910]  ret_from_fork_asm+0x1a/0x30
[   79.913826][ T6910] 
[   79.914730][ T6910] Second to last potentially related work creation:
[   79.917034][ T6910]  kasan_save_stack+0x3e/0x60
[   79.918714][ T6910]  kasan_record_aux_stack+0xbd/0xd0
[   79.920568][ T6910]  insert_work+0x3d/0x330
[   79.922154][ T6910]  __queue_work+0xcfc/0xfe0
[   79.923785][ T6910]  call_timer_fn+0x17e/0x5f0
[   79.925441][ T6910]  __run_timer_base+0x646/0x860
[   79.927218][ T6910]  run_timer_softirq+0xb7/0x180
[   79.928996][ T6910]  handle_softirqs+0x286/0x870
[   79.930735][ T6910]  __irq_exit_rcu+0xca/0x1f0
[   79.932398][ T6910]  irq_exit_rcu+0x9/0x30
[   79.933929][ T6910]  sysvec_apic_timer_interrupt+0xa6/0xc0
[   79.935951][ T6910]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[   79.938103][ T6910] 
[   79.938994][ T6910] The buggy address belongs to the object at ffff88811b3a4000
[   79.938994][ T6910]  which belongs to the cache kmalloc-8k of size 8192
[   79.943895][ T6910] The buggy address is located 160 bytes inside of
[   79.943895][ T6910]  freed 8192-byte region [ffff88811b3a4000, ffff88811b3a6000)
[   79.948846][ T6910] 
[   79.949763][ T6910] The buggy address belongs to the physical page:
[   79.952081][ T6910] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11b3a0
[   79.955255][ T6910] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[   79.958243][ T6910] ksm flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[   79.961084][ T6910] page_type: f5(slab)
[   79.962559][ T6910] raw: 057ff00000000040 ffff88801a442280 ffffea00046ce400 dead000000000003
[   79.965589][ T6910] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[   79.968603][ T6910] head: 057ff00000000040 ffff88801a442280 ffffea00046ce400 dead000000000003
[   79.971689][ T6910] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[   79.974740][ T6910] head: 057ff00000000003 ffffea00046ce801 00000000ffffffff 00000000ffffffff
[   79.977851][ T6910] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[   79.980933][ T6910] page dumped because: kasan: bad access detected
[   79.983192][ T6910] page_owner tracks the page as allocated
[   79.985283][ T6910] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x528c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP), pid 6267, tgid 6267 (syz-executor), ts 65162762828, free_ts 65128220811
[   79.992435][ T6910]  post_alloc_hook+0x240/0x2a0
[   79.994261][ T6910]  get_page_from_freelist+0x21e4/0x22c0
[   79.996357][ T6910]  __alloc_frozen_pages_noprof+0x181/0x370
[   79.998449][ T6910]  alloc_pages_mpol+0x232/0x4a0
[   80.000231][ T6910]  allocate_slab+0x8a/0x3b0
[   80.001934][ T6910]  ___slab_alloc+0xbfc/0x1480
[   80.003624][ T6910]  __kvmalloc_node_noprof+0x429/0x5f0
[   80.005629][ T6910]  pfifo_fast_init+0x238/0x6b0
[   80.007462][ T6910]  qdisc_create_dflt+0x13b/0x4e0
[   80.009381][ T6910]  dev_activate+0x378/0x1150
[   80.011135][ T6910]  __dev_open+0x69c/0x880
[   80.012744][ T6910]  __dev_change_flags+0x1ea/0x6d0
[   80.014567][ T6910]  netif_change_flags+0x88/0x1a0
[   80.016428][ T6910]  do_setlink+0xc55/0x41c0
[   80.018132][ T6910]  rtnl_newlink+0x160b/0x1c70
[   80.019930][ T6910]  rtnetlink_rcv_msg+0x7cf/0xb70
[   80.021787][ T6910] page last free pid 5576 tgid 5576 stack trace:
[   80.024140][ T6910]  __free_frozen_pages+0xc71/0xe70
[   80.026025][ T6910]  __put_partials+0x161/0x1c0
[   80.027787][ T6910]  put_cpu_partial+0x17c/0x250
[   80.029584][ T6910]  __slab_free+0x2f7/0x400
[   80.031172][ T6910]  qlist_free_all+0x97/0x140
[   80.032928][ T6910]  kasan_quarantine_reduce+0x148/0x160
[   80.034975][ T6910]  __kasan_slab_alloc+0x22/0x80
[   80.036815][ T6910]  kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[   80.038958][ T6910]  __alloc_skb+0x112/0x2d0
[   80.040652][ T6910]  alloc_skb_with_frags+0xca/0x890
[   80.042598][ T6910]  sock_alloc_send_pskb+0x857/0x990
[   80.044367][ T6910]  unix_dgram_sendmsg+0x4f6/0x1870
[   80.046351][ T6910]  __sock_sendmsg+0x21c/0x270
[   80.047949][ T6910]  sock_write_iter+0x258/0x330
[   80.049573][ T6910]  do_iter_readv_writev+0x56e/0x7f0
[   80.051298][ T6910]  vfs_writev+0x31a/0x960
[   80.052762][ T6910] 
[   80.053561][ T6910] Memory state around the buggy address:
[   80.055431][ T6910]  ffff88811b3a3f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   80.058074][ T6910]  ffff88811b3a4000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   80.060833][ T6910] >ffff88811b3a4080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   80.063668][ T6910]                                ^
[   80.065361][ T6910]  ffff88811b3a4100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   80.067892][ T6910]  ffff88811b3a4180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   80.070462][ T6910] ==================================================================
[   80.074189][ T6910] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   80.076526][ T6910] CPU: 1 UID: 0 PID: 6910 Comm: khidpd_15c25886 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[   80.080447][ T6910] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   80.083603][ T6910] Call Trace:
[   80.084706][ T6910]  <TASK>
[   80.085682][ T6910]  dump_stack_lvl+0x99/0x250
[   80.087186][ T6910]  ? __asan_memcpy+0x40/0x70
[   80.088706][ T6910]  ? __pfx_dump_stack_lvl+0x10/0x10
[   80.090355][ T6910]  ? __pfx__printk+0x10/0x10
[   80.091822][ T6910]  panic+0x2db/0x790
[   80.093054][ T6910]  ? __pfx_panic+0x10/0x10
[   80.094500][ T6910]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[   80.096443][ T6910]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   80.098313][ T6910]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   80.100326][ T6910]  ? print_memory_metadata+0x314/0x400
[   80.102036][ T6910]  ? __mutex_lock+0x738/0xe80
[   80.103533][ T6910]  check_panic_on_warn+0x89/0xb0
[   80.105155][ T6910]  ? __mutex_lock+0x738/0xe80
[   80.106663][ T6910]  end_report+0x78/0x160
[   80.108032][ T6910]  kasan_report+0x129/0x150
[   80.109520][ T6910]  ? __mutex_lock+0x738/0xe80
[   80.111089][ T6910]  __mutex_lock+0x738/0xe80
[   80.112655][ T6910]  ? __mutex_lock+0x51b/0xe80
[   80.114144][ T6910]  ? l2cap_unregister_user+0x6a/0x1b0
[   80.116252][ T6910]  ? __pfx___mutex_lock+0x10/0x10
[   80.118301][ T6910]  ? __pfx___timer_delete_sync+0x10/0x10
[   80.120603][ T6910]  l2cap_unregister_user+0x6a/0x1b0
[   80.122754][ T6910]  hidp_session_thread+0x3c9/0x410
[   80.124854][ T6910]  ? __pfx_hidp_session_thread+0x10/0x10
[   80.126921][ T6910]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   80.128774][ T6910]  ? __pfx_hidp_session_wake_function+0x10/0x10
[   80.130792][ T6910]  ? __pfx_hidp_session_wake_function+0x10/0x10
[   80.132812][ T6910]  ? __kthread_parkme+0x7b/0x200
[   80.134474][ T6910]  ? __kthread_parkme+0x1a1/0x200
[   80.136502][ T6910]  kthread+0x711/0x8a0
[   80.137858][ T6910]  ? __pfx_hidp_session_thread+0x10/0x10
[   80.139647][ T6910]  ? __pfx_kthread+0x10/0x10
[   80.141176][ T6910]  ? _raw_spin_unlock_irq+0x23/0x50
[   80.142963][ T6910]  ? lockdep_hardirqs_on+0x9c/0x150
[   80.144718][ T6910]  ? __pfx_kthread+0x10/0x10
[   80.146697][ T6910]  ret_from_fork+0x3fc/0x770
[   80.148408][ T6910]  ? __pfx_ret_from_fork+0x10/0x10
[   80.150111][ T6910]  ? __switch_to_asm+0x39/0x70
[   80.151678][ T6910]  ? __switch_to_asm+0x33/0x70
[   80.153218][ T6910]  ? __pfx_kthread+0x10/0x10
[   80.154827][ T6910]  ret_from_fork_asm+0x1a/0x30
[   80.156700][ T6910]  </TASK>
[   80.158371][ T6910] Kernel Offset: disabled
[   80.159760][ T6910] Rebooting in 86400 seconds..

VM DIAGNOSIS:
16:27:03  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=ffff88801a499d80 RCX=b781d601f7105001 RDX=ffffc90003ccf6e8
RSI=ffff88801a499d80 RDI=ffff88801b68eb40 RBP=0000000000000001 RSP=ffffc90003ccf618
R8 =ffffffff8fa1dff7 R9 =1ffffffff1f43bfe R10=dffffc0000000000 R11=fffffbfff1f43bff
R12=0000000000000000 R13=ffff88801b68eb40 R14=ffff88804b040680 R15=ffff88804b0406a0
RIP=ffffffff82199149 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fec1c956068 CR3=0000000029f92000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffff0000 0000000000000000
XMM02=ffff000000000000 ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000069 RBX=0000000000000069 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90003b5f370
R8 =ffff888107f08237 R9 =1ffff11020fe1046 R10=dffffc0000000000 R11=ffffffff85475610
R12=dffffc0000000000 R13=ffffffff99af790a R14=ffffffff99dfc760 R15=0000000000000000
RIP=ffffffff8547568c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fbdce30d3b0 CR3=0000000029008000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=000055a37fdd46a8 0000000000000009 XMM01=0000000000000000 000055a387af1460
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=3f3f3f3f3f3f3f3f 3f3f3f3f3f3f3f3f
XMM06=9999999999999999 9999999999999999 XMM07=2020202020202020 2020202020202020
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
