last executing test programs:

35.071650402s ago: executing program 0 (id=292):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0)

28.241470286s ago: executing program 0 (id=292):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0)

22.026606676s ago: executing program 0 (id=292):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0)

16.108424656s ago: executing program 0 (id=292):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0)

10.196979626s ago: executing program 0 (id=292):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0)

4.603783081s ago: executing program 0 (id=292):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0)

1.0809642s ago: executing program 2 (id=627):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a0000000000c000", @ANYRES32=<r1=>0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000004"], 0xfc}}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="a0000000210001000000000000000000fc0200000000000000000000000000006401010200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="040000000000000050001100ac1414aa000000000000000000000000ffffffff000000ff8400000000000000e00000020000000000000000000000e38afa63042bfed20000000000000000aa3c040000", @ANYRESOCT=r1, @ANYRESHEX=r2], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x10800)

1.000896058s ago: executing program 2 (id=630):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg0\x00', <r1=>0x0})
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0)=0x4)
sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipmr_newroute={0x38, 0x18, 0x20, 0x70bd27, 0x25dfdbfd, {0x80, 0x80, 0x10, 0x3, 0xfe, 0x6, 0xfd, 0xc, 0x2d00}, [@RTA_IIF={0x8, 0x3, r1}, @RTA_MULTIPATH={0xc, 0x9, {0x6, 0x6, 0x0, r2}}, @RTA_DST={0x8, 0x1, @rand_addr=0x64010101}]}, 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x8000)
getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000001c0)={<r3=>0x0, 0x0, 0x7, 0x8, 0x1, 0x80000001}, &(0x7f0000000200)=0x14)
getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000240)={<r4=>r3, 0xfff, 0x5, 0x200, 0x15, 0x2}, &(0x7f0000000280)=0x14)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f00000002c0)={r3, 0x4, 0x9, 0x80000000}, &(0x7f0000000300)=0x10)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f0000000340)=[{{0x3, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x2, 0x1, 0x1}}, {{0x4, 0x1, 0x1, 0x1}, {0x2, 0x0, 0x1, 0x1}}], 0x18)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000400)={'wg2\x00', <r8=>0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x13c, r7, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000600)={<r9=>r4, @in6={{0xa, 0x4e24, 0x7, @mcast1, 0x5}}, [0x8, 0x1, 0x0, 0x7, 0x0, 0x6, 0xd, 0x100, 0xfffffffffffffffe, 0x0, 0x6, 0xffffffffffff0446, 0x4, 0x200]}, &(0x7f0000000700)=0x100)
getsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000740)={r9, 0x4, 0x800, 0x1}, &(0x7f0000000780)=0x10)
r10 = accept4(r6, &(0x7f00000007c0)=@caif=@dgm, &(0x7f0000000840)=0x80, 0x80000)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r10, 0x84, 0x1, &(0x7f0000000880)={r9, 0x2, 0x1, 0x0, 0x7, 0x1a1}, 0x14)
setsockopt$packet_add_memb(r10, 0x107, 0x1, &(0x7f00000008c0)={r2, 0x1, 0x6}, 0x10)
getsockopt$inet_sctp6_SCTP_RTOINFO(r10, 0x84, 0x0, &(0x7f0000000900)={<r11=>r3, 0xffffffff, 0x3f04, 0x2}, &(0x7f0000000940)=0x10)
write$bt_hci(r10, &(0x7f0000000980)={0x1, @remote_oob_data_neg_reply={{0x433, 0x6}}}, 0xa)
ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f00000009c0)={{0x2, 0x4e20, @multicast2}, {0x306, @remote}, 0x8, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xe}}, 'veth1_to_batadv\x00'})
getsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000a40)={r3, 0xfffffffb, 0x1}, &(0x7f0000000a80)=0x10)
close(r10)
r12 = accept4$x25(r10, 0x0, &(0x7f0000000ac0), 0x0)
setsockopt$X25_QBITINCL(r12, 0x106, 0x1, &(0x7f0000000b00), 0x4)
ioctl$EXT4_IOC_GET_ES_CACHE(r5, 0xc020662a, &(0x7f0000000b40)={0x214073be, 0x5, 0x2, 0x7f, 0x1, 0x0, [{0x10, 0xf104, 0x4, '\x00', 0x4}]})
close(r6)
r13 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000bc0)='syz0\x00', 0x200002, 0x0)
openat$cgroup_subtree(r13, &(0x7f0000000c00), 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000c40)={r11, 0x7ff, 0x3, 0x4}, &(0x7f0000000c80)=0x10)

921.72755ms ago: executing program 2 (id=632):
bind$alg(0xffffffffffffffff, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0x0, 0xd}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000040)="a428d7cd5550", 0x6, 0x4000, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10)

642.738589ms ago: executing program 2 (id=636):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4)
setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000080)=0x2, 0x4) (async)
setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000080)=0x2, 0x4)
sendmmsg$inet6(r0, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0xa}}, 0x1c, 0x0}}], 0x1, 0xc040) (async)
sendmmsg$inet6(r0, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0xa}}, 0x1c, 0x0}}], 0x1, 0xc040)
sendmmsg$inet6(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000) (async)
sendmmsg$inet6(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000d0400"/20, @ANYRES32=r3, @ANYBLOB="002000000000000024001280110001006272696467655f736c617665000000000c000580080022"], 0x44}}, 0x0)
r4 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, @mcast1, @mcast2={0xff, 0x3}, 0x0, 0x0, 0xfffffffe, 0xffffffff}})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000002958d3b8826cbc61e60000000000000061129000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000002958d3b8826cbc61e60000000000000061129000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x1d, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xa6}, 0x94)

529.129812ms ago: executing program 1 (id=638):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="84000000100001002cbd7000f4dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000080002001400030064756d6d7930000000000000000000000a000100aaaaaaaaaaaa0000440016804000018014000a00ab0000f2"], 0x84}, 0x1, 0x0, 0x0, 0x24044851}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040)=0xdc2658be)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0x98, 0x8, 0xfa04, 0x98, 0x6c02, 0x1e0, 0x194, 0x194, 0x1e0, 0x194, 0x3, 0x0, {[{{@ip={@broadcast, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'batadv_slave_0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268)
pipe(&(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r5)
socket$nl_route(0x10, 0x3, 0x0)
splice(r5, 0x0, r6, 0x0, 0x10500, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98000000100001002abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a009000000000000140003006e657464657673696d3000000000000008002800babc00005c0016805800018054000c8014"], 0x98}, 0x1, 0x0, 0x0, 0x24040854}, 0x40000)

527.529277ms ago: executing program 2 (id=639):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@deltaction={0x14, 0x18, 0x1, 0x70bd29, 0x25dfdbfe, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', <r4=>0x0})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'pim6reg\x00', <r5=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000140)={0x9c, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x401}}, {0x8, 0x6, r5}}}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000)={'team0\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x0)

411.354769ms ago: executing program 1 (id=640):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r1=>0x0}) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)={0x38, r2, 0x1, 0xffffffff, 0x0, {{}, {@void, @val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x240048d0)

292.561836ms ago: executing program 1 (id=641):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) (async, rerun: 32)
ioctl$sock_netdev_private(r0, 0x89fe, &(0x7f0000000000)) (rerun: 32)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c000000100001002bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="a921000001000500140003007465616d5f736c6176655f3000000000300016802c"], 0x6c}}, 0xc800)

171.486387ms ago: executing program 1 (id=642):
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0204fc020e00000000000000000000000500020032000e000a004e2000000e3dfe88ee00000000000000000000000001070000000000000200010000000000000000000007060005000500320000000a004e2000000004fe80f8a90000000000000200"/112], 0x70}}, 0x4)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572009c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000700003806c000080080003400000000260000b80440001800c000100636f756e746572"], 0x130}, 0x1, 0x0, 0x900000000000000, 0x8000}, 0x8880)

168.801819ms ago: executing program 1 (id=643):
socket$kcm(0x2c, 0x3, 0x0)
r0 = socket$xdp(0x2c, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000c4000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006b00000095"], &(0x7f00000005c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$netlink(0x10, 0x3, 0x400000000000004)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000fce5ffff0000000009"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
r3 = socket$inet(0x2, 0x4000000805, 0x0)
sendmmsg(r3, &(0x7f0000000180)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local, 0x2}, 0x80, &(0x7f0000000200)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000084"], 0x18}}], 0x2, 0x844)
writev(r1, &(0x7f0000019440)=[{&(0x7f0000000340)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed090f0000600000f3a1bc5603ca00000f7f89e3ff296aa1f6475322f000200000004a2471083ec6991778581acb6c0101ff00", 0x48}], 0x1)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), r1)
ioctl$EXT4_IOC_MIGRATE(r2, 0x6609)
r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), r1)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', <r5=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000400)={&(0x7f0000000240), 0xc, &(0x7f00000003c0)={&(0x7f0000000700)={0x708, r4, 0x331, 0x70bd29, 0x25dfdbfb, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r5}, @WGDEVICE_A_PEERS={0x6ec, 0x8, 0x0, 0x1, [{0x350, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x9c, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ALLOWEDIPS={0x28c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1f}}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2f}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}]}]}, {0x398, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x114, 0x9, 0x0, 0x1, [{0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x44}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x4}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x28}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ALLOWEDIPS={0x238, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}]}]}]}]}, 0x708}, 0x1, 0x0, 0x0, 0x4008040}, 0x4084)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)={0x6, [0x0, <r7=>0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x1c)
setsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000200)={r7, 0x20b}, 0x8)

146.25319ms ago: executing program 2 (id=644):
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) (async)
r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040890}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CCA_MODE(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}}, 0x4000)
syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r1)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000300)={'wpan0\x00', <r3=>0x0})
sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, r2, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_MAX_BE={0x5}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x5}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x9c}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{0xffffffffffffffff, <r4=>0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0xffffffffffffffff, <r5=>0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20)
r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700)=0xffffffffffffffff, 0x4)
r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000007c0)={0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0x19, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff8}, [@exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffffff}, @jmp={0x5, 0x0, 0x6, 0x9, 0x3, 0xfffffffffffffff8, 0xfffffffffffffffc}, @generic={0x0, 0x2, 0x1, 0x9, 0xffff094a}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_fd={0x18, 0x7}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f00000006c0)='syzkaller\x00', 0x83f, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x2f, r6, 0x8, &(0x7f0000000740)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000780)={0x3, 0xa, 0x1, 0x8}, 0x10, 0xffffffffffffffff, r7, 0x5, 0x0, &(0x7f0000000800)=[{0x1, 0x5, 0x8, 0x2}, {0x1, 0x1, 0x10, 0x9}, {0x2, 0x4, 0xc, 0x8}, {0x5, 0x5, 0xa, 0xb}, {0x3, 0x4, 0x8, 0x7}], 0x10, 0x8}, 0x94)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000980), r1)
sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x3c, r8, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x400}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7f}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '/'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000801}, 0x1)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000a80), r6)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x0, 0x4, 0x2)
sendmsg$tipc(r10, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000ac0)="a21df951ec41f9c80b07f6b0849ed772039febecd8a7df7464d168b2e12f74c521d03160489eb4c13c368490f282a808d94f28b9cb9f153d6e2b9e99adbfafb71dd1fc25b0fe2656c8600bfe687ca4e5078a06a0b2190b1c4cff991087ec7ef4a0af8cec18c066beb2117f1a3dccc6fdf7f2bf02bfb60f38b286c8cbaf0fc7f8159008730cf320020bbbc9d4ddd25c038141b1cbf2a9447cca45dbb9afee7d3e4938be39fa8697f0e53c18b98f09af6c43fe1b251eb8222dc4567fc3ab17244c3a77ebc83437e810f6", 0xc9}, {&(0x7f0000000bc0)="879282e6fcab58aa1c1842fed2e94acf65e64ed91c190e35c75e26e89c5b888fee73ab218c89757547412f0379a0aa99eb05457e6c8978fa8f530b686d4e212277435199bd73ee72102a3225deb9250b23a739ebc6ccd772fac633ae2f13d728", 0x60}], 0x2, &(0x7f0000000c80)="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", 0x1000, 0x40071}, 0x0) (async)
sendmsg$tipc(r10, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000ac0)="a21df951ec41f9c80b07f6b0849ed772039febecd8a7df7464d168b2e12f74c521d03160489eb4c13c368490f282a808d94f28b9cb9f153d6e2b9e99adbfafb71dd1fc25b0fe2656c8600bfe687ca4e5078a06a0b2190b1c4cff991087ec7ef4a0af8cec18c066beb2117f1a3dccc6fdf7f2bf02bfb60f38b286c8cbaf0fc7f8159008730cf320020bbbc9d4ddd25c038141b1cbf2a9447cca45dbb9afee7d3e4938be39fa8697f0e53c18b98f09af6c43fe1b251eb8222dc4567fc3ab17244c3a77ebc83437e810f6", 0xc9}, {&(0x7f0000000bc0)="879282e6fcab58aa1c1842fed2e94acf65e64ed91c190e35c75e26e89c5b888fee73ab218c89757547412f0379a0aa99eb05457e6c8978fa8f530b686d4e212277435199bd73ee72102a3225deb9250b23a739ebc6ccd772fac633ae2f13d728", 0x60}], 0x2, &(0x7f0000000c80)="b158a1094da86e2e2f755363fb3ffabb21ee0aa5918ff9c1b2e8e62768b90a6aa0bba6a53597037f814454101573e8c0712e2067e32e779d1bfd05dd7a40003b8ce55a22aa13f4570a8cda8def83beee717c03de81ff71623886a256024c76100aa318cc0073c4be6f880175abdb0f75a1b9f43a5c939a05c9d941a0efc5dcc862ddaba0ca7894dde4d31ba4c6791a21f1966e38b00a891502a0c53a36cc60e5d209b2055f680ee2678dc052ec9d95e4d3e89fa8809fc987df1a091b1be9d3b2c61bfca3ca36f2ef64320e2ba80da772e418749e467a87d95f77bc2f6f73b53c710704640e490dabb2681cef5c2b8ff8fa919211074ab7422296c5770cd96c2dbe18b78cd40a81a5f14517b09be0861bbba8b42d20e51c474d81c52b46851ca7db460691b38dfcab307e7d29f09d83ad889a0d93e72e5f0f8677f5d9afede6ec605c1bf90fc2a2db6e84afe60cef06220bbd46a3c15ed5318d8e1dcc10978b973d9a35cf7d963cdf8dd6205015b20493e207c9c9cb26ca8c1e7b8769f250c116ffa75aa75467afe60562eac88c6db97c78efcac360303646ee63ed58708c771114b0982eeec0423c9ccb6c7549fec47575db7dbff87f6b199d30619d2549a1172584b39252c41b94ccbad4b90998281deb8555f7296227d72b7dec9d345879ea70ff3d935768a84c30df3b674793c0efb45dcf399bf75a03f25ec9a381df128ca3533cae294948892b6d662a5e5ab38847cc4e7febfaf31e017ad40523470113a4301efb6f4fe995e7f71bb1318b038931534195e4bef66af952a1f46d41364020770c1dbe19543ec8ab831981e9d9adb837cf15bf4371d2ee46ac1bc3da18b87aadc6944c2f8d05a7e1f1180c0a53ad86483fc75e7658efc774fe8809201da54f88acfe60cea64cd1738b9cdcdb1032451f0f3dd5cc04cbe40a4065098da94662d31275d7558740d3c9f1dcdb2f7be88e178e1a2d5f227bc33e216ec1c00ecf198ea77d32bc3edaa29fa50c7934be42d11abf1025edc9e46d0d5ac37ee6618bfb96261f6fbd3f0bab4621b2174e7a6b80df38ee9ee17eabecf5197134a77892f966632fa2aad9c190b3b0b54017c3e57443fcbc4ef3d027a435888114310d7aa4447019b6ddea57500fa57d12cab9e62b19cf6576f729490da3278a24e6c8759036b84fdff269a8d31541fd20fc3931d2b2881367755b77d48e238ff2ed1698c570c4a42040e8621705f648fb49f6d3612fdbe77a6877da866c0c389e29b22ef48dd9f2555b22886e449eef268dcda53f5c1b932dc0dd2cc4c64c3b8ac3c7718f61191e0077a7735094f14c540fafb503a876d3d3ad8715cff095017467c7b882c4e60cb1693eb052e38e3621c654f0d6e25772a4fd495c552908985d3a4bbeea2bc11377d5d4ce4758d5e7313862d97ac55a864fa6042d6f989f923f8e608e1b190d26aee11d1a76596a636ff81dee6d76255baf0dc377f1f251d5fee22ee96a28d64f816a889ce279ef921a3c4ff800f93b997bddb515d43dadd9d68cb52ae569ad26cd1e435928480b6f1ee5d67cd3606f54463af55c069cb9c3dc3288dd850f61b25db0fe87e43ab881eaa5755e6513efb09f135eeadcec0b1a90fd5d9b03802a4b3763fe5fd2a21e3dc4a2b2e3823523beb04bc51bdb0f380b315cceee1d4c79d9ad81fea6d847dfcd24647080a85e77d861724996b9fdafb4276cc82a62ca3dc20361b22ef6c109a20cc7144d01c28b448209590624506c98563e6ca37983e0b8414a491acfe1c6e5746e6d90def96996e07ca1b8d987bddf75da7ec4ad8d3b31dcd7e6d7f660747ac1ba77eea5aa333a86d05ce05998c82c247ec8377d15f35818ede8661697feca09bc24ff042a38fc3c4a4ff5aa3d3d6d787bc74a8e2618ab57bae8605cf6efc42850f736091e574c074cca304f42ba3f179777cfe3368f12fe20fb860fb751fadba018fd2182ccb0a62dd8a3bd6dbccdb3f71f19a2d52ca58e896baff9826a1de549e388b5d2e5a04260ad0b02f92d43248c1742193a8502b01af499311d0c58086a8ea0a1a660e14e09f9d335fbd7d2ba3bfd35f06d0397194ad5609caf45abfe1d3f29593db2b72b7b3b399b03f9a7cbbef608dadab4e1a0a592c74ac33f922624e4abff94170d791f770de11b1d51a83cdffcf2f7186a0d87f0f24ccad411ef2490826d24610fde63ecb6c88c62e9e18873fab28cb6e4a4c580aec3e8cee9f3786f9e19d587985661493e8f1e305c05557b0e2bc53eb0d21019964e80246ea5da554210e9ac68515be858f9fb892e5288df12501645062d24674189b9a62a383486e54509923e20c297ed78608d50dc0a8a8225f8d14d1a2ecaba1cacffd60902f01f13de6ea882439f40eca65b40a99a73c9f262f9b3bf86b9d6540e694b28fa09eba2898ecb3da676fa35eae0e98b914814b00258bd914d91de0eed7dc177309a6249e01da2ab7735b24da7cad5a95bb943a98488e91b2ada0ddbb940bd4a7da2783efd99652c65c06dd683cf70eff41202f8786ec48f78c64f55c1e942b518bc885b69cf7adc571ea9effc7ffc7eb74ff24daae764709191e277d22f6eb0f5d674bc3ed139eefdcba5ff2f8025285f1be821f98dc9e39f7c18205603a4ca72e55908955c1e2d74c9f31e0b5f9949249f02d04b1a883f3833dfb86e764be9ca7685bd8451cbd78904c0d952e6caa8006b03fa3962aa2b0928ae85772b970c01098eac5df50e98692475f859197852d14d7f462b89c6626ba4fc36dc6a8491a0d17de74aae00ff8ab608190e4e80e29fc9ed21329c8ceb392d86b287e5bc89a38e6a967cb2feeb6af14e4bcbba30b997493d387685ab2c16272e34b7c4af1f8ce46e168f24cb49c936dc0709fc654a61c0bcb2c3004a7f20fff28ae2dcd7db7e95b3a85859bdce884bfb4b2c93a37db24eadf55e00e8c5b1b8ba5935a77d1abee1a930ff6212e0abca2de6717afa2da7feb14e711f71de80c415693ec1a64a0d0b1b7d380706e95aad5e343ea7ace0aa6ed75021ff6aa51d6616bdf21d4ebed9a60d27315af9eb2beefc6c1a5758d45cc529117369f5915838c8a8a83bd942189f85d882d2b80c7447b7ccb6d430ec880f3554ea0ec71fb10072f51dc8bf53a7145d68f393da214bc39df8c00abd0c70b321942d50dc2566cb40c2bf3886b568840ff7b470bc4e8326a5e63fd7c1c61425b46368c9cd2db6250dfb4ba1c433a9b75c1ba61e08efcb5613d590f76e499356d6d10f42e451039f8beb7054245f544d6246408e3df0f61b34dd6bcc6768249245b60116eb0b5f675ae9c8ee0ad31815988d1301ab60fa630562230a51d8d3018b2db8e87d3dbab9a6e6272ec478d01f3caee8d64bd79fee9b9838afb09b5c0f0393ecfd977eafaa031f1d805dc59d32c940209cdcc1c3c755123dee9b050eccf3b80e96cb8a7d0e65cf9b89084eaad08167e2ac57f35cfd37f829ce64395e01c17f654bb558898d680dd05a9fa2d1e118cab0083b3ce8a51e7d54b712e3f2aae4a9837bd212552a7c0b6e0bf48883f570a5e5f828662a27a593a98ae187216c7f49595e9bc57631ac1d11d6e4c3d0a2d21158766137512b1d6715c3f4968029fd88a46d817394c78def3f14890f1a103e217f10426e080cb99939f137c429416f94e2cd7a761d7ccdbbc227560af78f29c169000155fcaeb225a4f9a7a21d554d0f12be2dc2872997bc26d32addbd41171a528331477397c1afe38c7926388cd1ffaf32556cd691797e740f8b2e3010b75beda9cc20caabf52fb2c1fd10134a28284108618d797e218ababa0859e6b7fcf21b21767654aaf4d64996b7af4c5b1ff286548bd8b8726676b9cf187144797ef9876c340f06e7c2a6b57d3b4911a9313aca1bae58a2fe62119ba376eb8a00d116037c67fd0152979763c6df504dac07e40eda89809ef2cf4dce83ccfa26a644011b126a100d2efe62f142c26cd205f7bd1f20951337c3203a2fd4169cabdd91f01b7e8fcc3732bf4dfafd20f9c23ca46b715c35a93948ce78d2c0a6a049393823059e1cfe9dc3630c9384ee6a30abf2918a362db77a0aaafec6682c51597a70f42e1aaef8199bfe28b4951cbd349312275c36d535e6fe82320407eccd739bd2128eec234c870b6ee44adc78b0c175c6b872d9b52c872494be1ebd951525acd83b29ed695cf17fe045950b93dc5b71e4b5db995e3030fb911b050e0e87ce890a07c9d22b2ac6530a9f266a6b7580470d6bf71eebe4b90906df261242d97cdaea51d6a6dd7220f811a00036a884b87db9e0acce07e50b672132216b148a21cf13e99066cee67ed5eaf81b33bc2afbe725aa4dd06bf39e763ccfbd90e4944debd0a8c55b5c7eb8564175f241b809469086146cee91e4f7b43e2e59ee86a4ef33e28a649ac25fd0dedb7702b448c70cc8829281a164923049e175e37747be0d02bd4b08ec6d7ee29772bfc1bbffac7a57021461af8e42c0a68a3e3c3da437ce72b492379fa4dd41a098bc233bcc160ee230b5df096340c955c6300ca0e67040ea3730b8732eb2db3a4938b7c55fb26b73bbebfa56b0f185893b0718bfe9501d738c37390ce0d1c7f2aa74a77e344614a089b93a1e3e02bb3fd17faeb2999b8537a3fa14c43eb58faf39b8a024235624a4022c5a383357f04183cb5a09908f3bb470d40123455c90003e6bc8d81a61e640c29a3e1b3e8658e54ba4c833a400a379e1ac1781df71db601cf24cf8daf53e7f259ac374b4ff7d1b67dc18682d430a18a68a90d4ec92378e4ba1f5393fd350f617f165ee1a6052a02caafbcfae6f6d51ca9da4ecb271c12eacd2b7a5e31ac304bfdd6b9e00a54203d2a294d857aa890c471e93f07cc67480f4853c5d37677473de26ee6d48dd260f186b7dcadc154f47063553fb0800042d625ab4fa0b171b337cc267e52ba8bd853810a1e317b92cdb67e906a84fc98c84b1f09c347d1de42f9ae96d0e42c7d04a24ae7c934ba8e2e7b317a65d6bc60d29241c5c27625b114cf015d3caf0c5da236d5776353a4802fcdf2b1ac49425d6d18619d6eee5eb0120694b6d5f537657211b4379d760e9eaf0488b6c694605d96384720f33a92548b0e5d9ca0266997ae13f43048fd256d029d1fc40a0e6d4f88ebb6813c1ece5c0c3f9535998baf8f958c16c0c09c460a364e0a85733d498363d9847ddb7faa95793fc176d0fe050e7fefe69639c39310693ac8538c81db8fb8478c4e34de19e3a1020b40c25d5747ab2af4e73c201269b56fd42c0b1cc18bc01871b20c591e9ded1d987d7b78e384ae5a245d1fcb81819d97e85aed5640e402f45f9cba08f91102ff0c99994eb0f7017c2ed2d416c4b9099c1d28811eb8367690648ea48a95a8b129c9221099e341bd45930bc4297a346487ca889027ccb00235c251cd5e8a5bcbee7da82cab51aae11d89ed8c03e025e8d58a2584d311b680295c2c2ad1d748a73aa83aaaa6c0144aae33324a9cf2e5decabf99d09b8f549b39ae06827e5f6fad3552b3474f7d7167b5a1671a350289a3197fa769ff44af837c38945276baaa165fe1ec496b92c7e82e2617b82b89e23394014994d81bbb004f04b623e9177b02b2e70f9ecc89ad46361912c1190ebb6e19bb189f8b80d02c654a488b395521db3476230db111fb8e8ac83ebcf35ff3aa86f7e7489295067f6b85aeab4167c1dd9b6ea23ae7aa71113d1d9d2224b199d584d83ba165b5f90659cfe4b65a9e0be6ec0b03fd0ef119380d58312c65ef9a19148f08e290aa2627d2e0e2bc759b3d6c30b", 0x1000, 0x40071}, 0x0)
r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001d00), r10)
sendmsg$L2TP_CMD_SESSION_GET(r10, &(0x7f0000001e00)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d40)={0x58, r11, 0x100, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'vcan0\x00'}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r10}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0={0xfc, 0x0, '\x00', 0x1}}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x58}}, 0x48881) (async)
sendmsg$L2TP_CMD_SESSION_GET(r10, &(0x7f0000001e00)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d40)={0x58, r11, 0x100, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'vcan0\x00'}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r10}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0={0xfc, 0x0, '\x00', 0x1}}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x58}}, 0x48881)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001e80), r10) (async)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001e80), r10)
sendmsg$NL80211_CMD_SET_CQM(r10, &(0x7f0000002000)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001ec0)={0xd4, r12, 0x2, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x38, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x49}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x0, 0x6]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x72}]}, @NL80211_ATTR_CQM={0x30, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x2}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x0, 0x8]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x401, 0x7fffffff, 0x4]}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x57}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x400}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x4}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x679}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x160}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x18}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20000040}, 0x40000) (async)
sendmsg$NL80211_CMD_SET_CQM(r10, &(0x7f0000002000)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001ec0)={0xd4, r12, 0x2, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x38, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x49}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x0, 0x6]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x72}]}, @NL80211_ATTR_CQM={0x30, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x2}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x0, 0x8]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x401, 0x7fffffff, 0x4]}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x57}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x400}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x4}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x679}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x160}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x18}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20000040}, 0x40000)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002040), r1)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000020c0)={'wlan0\x00', <r14=>0x0})
sendmsg$NL80211_CMD_FRAME(r13, &(0x7f0000002540)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002500)={&(0x7f0000002100)={0x3d8, r12, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x80, 0x49}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x10, 0xcd, [0x2, 0x3ff, 0x6, 0x3, 0x3, 0xf]}, @NL80211_ATTR_FRAME={0x395, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xe}, @device_a, @broadcast, @random="6f92a08f1fa4", {0x1, 0x2}}, 0x100, 0x0, {0x0, 0x5, @random="eee93d1770"}, @val={0x1, 0x2, [{0x18}, {0x30, 0x1}]}, @val={0x2d, 0x1a, {0x40, 0x2, 0x2, 0x0, {0x2, 0x7, 0x0, 0x3, 0x0, 0x0, 0x1, 0x3, 0x1}, 0x800, 0x8, 0x1}}, [{0xdd, 0xe5, "e3b3e0b01c0520e521a5571c8efe0616b873c2cd97353a8d12f4c4848a79917c39baa8b1cc7c9ea82b4f315556ee94780218e3413aeb137d2115593b3f904ba634d040e4f411af4f663d2280b2553ef58ee2f9b8e29a6d2db421906ea801f2ccfb12bcbbe4873481c8ed70c5487afc0798b31884c5e130e79dba4ef81fb5a04209c6b6e3af3da5eded95d42c3cd59d8f5b28d6fbd3a3512d373538d80d2a349937b21e352bd7cdae23b9e1cea889f2314d43b9e74c0e514c217e1e34c4cd9254f274778871e219105f4f8b94d1484ff7662dfc2d9f4650ab7f8d2d0ac473520219c386c7a7"}, {0xdd, 0x73, "f1d9d1096dfc4196f30bf8fce16db6dc6d3087ae01060e6e880c83527adbb54e575cd9a2929b40fed6714f479458c87784cb9cd53b705a7a425a08836b1ffab930fcd9fe7e182163ea0205e90f7931c008299d7494c257c712d6181db13e0efd30850eec2fe8e92a74a53935448ca60f70c61a"}, {0xdd, 0x57, "2505a440de39a8cafc2627be93ea5707d857eda81c384ea9d31026c9fba5a1cdb9298243ba03f8aa3ca6fc670b9cc157086d298c6d98dbbf0174537a7d2b939445041ca734d40e00ef92abac0e8d6f5cdbbb076dfc22e7"}, {0xdd, 0xc8, "f5f10cd0486fc8d6935b2b73303462def43ee8529a61f2102c53e8473c1b77c105eae48bdfd5befa80602961934d63ea1a112dbd29689f23e3dbb944f8f0410dc1c47faae7cf5453a1a28656306d63a5c6aa48f85d4d40abaa8ed72953e7f97357a583765e4b748511dac21d0f26e19f06da73f0f2ef582b36ca4dcdce458c37c4671e7d1505fba346a732b045644acbff79f04aa787702871d835ef0c48f6f26f0da714dacd21ccdd5556563a6572c8b5c7e3a89d2cd4dd78660d766fe2580e1aeb431e63e88411"}, {0xdd, 0xcd, "e8b5ed52ff5f571e52943545bb416584f4ee0c285ebc56a24b2d0dfe3c3e6a7162a98a0e67b176fb2f80d189d3e7155f166e7c2ea4b43b1bb78e6128d6cdc429e0aa1b3c3f5b65b7544a45776089abe0f154611cff99423708083aa3fcd7e2379885e2096457d91721607d641a23565bfd05e47b9b1f53e93be85e02d6d50210e41cc59e65c7a3932734d900a1965a8ad36582b98523e5de0cc5efa232202116490c6df859c3e33955bfad42dbb20e0762645fd1602d34e4376444f171efbc91f53e26127d1196708c79569bef"}]}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x10d3}]}, 0x3d8}}, 0x810) (async)
sendmsg$NL80211_CMD_FRAME(r13, &(0x7f0000002540)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002500)={&(0x7f0000002100)={0x3d8, r12, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x80, 0x49}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x10, 0xcd, [0x2, 0x3ff, 0x6, 0x3, 0x3, 0xf]}, @NL80211_ATTR_FRAME={0x395, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xe}, @device_a, @broadcast, @random="6f92a08f1fa4", {0x1, 0x2}}, 0x100, 0x0, {0x0, 0x5, @random="eee93d1770"}, @val={0x1, 0x2, [{0x18}, {0x30, 0x1}]}, @val={0x2d, 0x1a, {0x40, 0x2, 0x2, 0x0, {0x2, 0x7, 0x0, 0x3, 0x0, 0x0, 0x1, 0x3, 0x1}, 0x800, 0x8, 0x1}}, [{0xdd, 0xe5, "e3b3e0b01c0520e521a5571c8efe0616b873c2cd97353a8d12f4c4848a79917c39baa8b1cc7c9ea82b4f315556ee94780218e3413aeb137d2115593b3f904ba634d040e4f411af4f663d2280b2553ef58ee2f9b8e29a6d2db421906ea801f2ccfb12bcbbe4873481c8ed70c5487afc0798b31884c5e130e79dba4ef81fb5a04209c6b6e3af3da5eded95d42c3cd59d8f5b28d6fbd3a3512d373538d80d2a349937b21e352bd7cdae23b9e1cea889f2314d43b9e74c0e514c217e1e34c4cd9254f274778871e219105f4f8b94d1484ff7662dfc2d9f4650ab7f8d2d0ac473520219c386c7a7"}, {0xdd, 0x73, "f1d9d1096dfc4196f30bf8fce16db6dc6d3087ae01060e6e880c83527adbb54e575cd9a2929b40fed6714f479458c87784cb9cd53b705a7a425a08836b1ffab930fcd9fe7e182163ea0205e90f7931c008299d7494c257c712d6181db13e0efd30850eec2fe8e92a74a53935448ca60f70c61a"}, {0xdd, 0x57, "2505a440de39a8cafc2627be93ea5707d857eda81c384ea9d31026c9fba5a1cdb9298243ba03f8aa3ca6fc670b9cc157086d298c6d98dbbf0174537a7d2b939445041ca734d40e00ef92abac0e8d6f5cdbbb076dfc22e7"}, {0xdd, 0xc8, "f5f10cd0486fc8d6935b2b73303462def43ee8529a61f2102c53e8473c1b77c105eae48bdfd5befa80602961934d63ea1a112dbd29689f23e3dbb944f8f0410dc1c47faae7cf5453a1a28656306d63a5c6aa48f85d4d40abaa8ed72953e7f97357a583765e4b748511dac21d0f26e19f06da73f0f2ef582b36ca4dcdce458c37c4671e7d1505fba346a732b045644acbff79f04aa787702871d835ef0c48f6f26f0da714dacd21ccdd5556563a6572c8b5c7e3a89d2cd4dd78660d766fe2580e1aeb431e63e88411"}, {0xdd, 0xcd, "e8b5ed52ff5f571e52943545bb416584f4ee0c285ebc56a24b2d0dfe3c3e6a7162a98a0e67b176fb2f80d189d3e7155f166e7c2ea4b43b1bb78e6128d6cdc429e0aa1b3c3f5b65b7544a45776089abe0f154611cff99423708083aa3fcd7e2379885e2096457d91721607d641a23565bfd05e47b9b1f53e93be85e02d6d50210e41cc59e65c7a3932734d900a1965a8ad36582b98523e5de0cc5efa232202116490c6df859c3e33955bfad42dbb20e0762645fd1602d34e4376444f171efbc91f53e26127d1196708c79569bef"}]}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x10d3}]}, 0x3d8}}, 0x810)
socket$l2tp(0x2, 0x2, 0x73) (async)
socket$l2tp(0x2, 0x2, 0x73)
getsockopt$inet6_mreq(r10, 0x29, 0x23, &(0x7f0000002580)={@dev}, &(0x7f00000025c0)=0x14) (async)
getsockopt$inet6_mreq(r10, 0x29, 0x23, &(0x7f0000002580)={@dev, <r15=>0x0}, &(0x7f00000025c0)=0x14)
bind$packet(r10, &(0x7f0000002600)={0x11, 0xf1, r15, 0x1, 0x48}, 0x14)

0s ago: executing program 1 (id=645):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a0000000000c000", @ANYRES32=<r1=>0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000004"], 0xfc}}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="a0000000210001000000000000000000fc0200000000000000000000000000006401010200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="040000000000000050001100ac1414aa000000000000000000000000ffffffff000000ff8800000000000000e00000020000000000000000000000e38afa63042bfed20000000000000000aa3c040000", @ANYRESOCT=r1, @ANYRESHEX=r2], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x10800)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:21467' (ED25519) to the list of known hosts.
syzkaller login: [   47.501042][ T5819] cgroup: Unknown subsys name 'net'
[   47.655914][ T5819] cgroup: Unknown subsys name 'cpuset'
[   47.661751][ T5819] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.103578][ T5819] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   52.836027][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   52.839475][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   52.842871][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   52.845955][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   52.849132][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   52.925602][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   52.928594][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   52.931809][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   52.942726][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   52.946611][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   52.950244][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   52.953159][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   52.957733][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   52.961311][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   52.968521][ T5221] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   53.093691][ T5829] chnl_net:caif_netlink_parms(): no params data found
[   53.207988][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.210725][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.214045][ T5829] bridge_slave_0: entered allmulticast mode
[   53.217078][ T5829] bridge_slave_0: entered promiscuous mode
[   53.226362][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.229077][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.233049][ T5829] bridge_slave_1: entered allmulticast mode
[   53.236955][ T5829] bridge_slave_1: entered promiscuous mode
[   53.282683][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.291286][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.350302][ T5834] chnl_net:caif_netlink_parms(): no params data found
[   53.357693][ T5829] team0: Port device team_slave_0 added
[   53.372151][ T5829] team0: Port device team_slave_1 added
[   53.395706][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.398419][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.407405][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.430796][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.437124][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.447380][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.457471][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   53.543778][ T5829] hsr_slave_0: entered promiscuous mode
[   53.546370][ T5829] hsr_slave_1: entered promiscuous mode
[   53.564164][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.567241][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.570377][ T5834] bridge_slave_0: entered allmulticast mode
[   53.575482][ T5834] bridge_slave_0: entered promiscuous mode
[   53.580136][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.583764][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.586674][ T5834] bridge_slave_1: entered allmulticast mode
[   53.590496][ T5834] bridge_slave_1: entered promiscuous mode
[   53.657441][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.660577][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.664288][ T5833] bridge_slave_0: entered allmulticast mode
[   53.667217][ T5833] bridge_slave_0: entered promiscuous mode
[   53.689812][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.706770][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.709856][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.713139][ T5833] bridge_slave_1: entered allmulticast mode
[   53.716035][ T5833] bridge_slave_1: entered promiscuous mode
[   53.720627][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.786887][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.796658][ T5834] team0: Port device team_slave_0 added
[   53.807700][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.813537][ T5834] team0: Port device team_slave_1 added
[   53.845838][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.848492][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.858391][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.895013][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.897936][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.909378][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.917518][ T5833] team0: Port device team_slave_0 added
[   53.944574][ T5833] team0: Port device team_slave_1 added
[   53.998708][ T5834] hsr_slave_0: entered promiscuous mode
[   54.002903][ T5834] hsr_slave_1: entered promiscuous mode
[   54.005826][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   54.008503][ T5834] Cannot create hsr debugfs directory
[   54.010948][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.015279][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.026022][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.043221][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.046179][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.058955][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.164055][ T5833] hsr_slave_0: entered promiscuous mode
[   54.167247][ T5833] hsr_slave_1: entered promiscuous mode
[   54.170192][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   54.173521][ T5833] Cannot create hsr debugfs directory
[   54.188568][ T5829] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   54.202617][ T5829] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   54.213300][ T5829] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   54.223358][ T5829] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   54.365880][ T5834] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   54.375450][ T5834] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   54.388524][ T5834] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   54.396648][ T5834] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   54.449525][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   54.459381][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   54.475761][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   54.480801][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   54.529144][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.573421][ T5829] 8021q: adding VLAN 0 to HW filter on device team0
[   54.578908][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.595827][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.598978][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.619804][ T5834] 8021q: adding VLAN 0 to HW filter on device team0
[   54.623600][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.625960][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.635599][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.637973][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.648865][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.651329][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.701270][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.718435][ T5834] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   54.732538][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   54.744715][   T79] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.746995][   T79] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.769369][   T79] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.771650][   T79] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.848492][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.899872][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.912368][ T5221] Bluetooth: hci0: command tx timeout
[   54.925056][ T5829] veth0_vlan: entered promiscuous mode
[   54.939893][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.950666][ T5829] veth1_vlan: entered promiscuous mode
[   54.974759][ T5834] veth0_vlan: entered promiscuous mode
[   54.989729][ T5834] veth1_vlan: entered promiscuous mode
[   54.998768][ T5829] veth0_macvtap: entered promiscuous mode
[   55.003324][ T5221] Bluetooth: hci1: command tx timeout
[   55.003456][ T5832] Bluetooth: hci2: command tx timeout
[   55.008717][ T5833] veth0_vlan: entered promiscuous mode
[   55.014699][ T5829] veth1_macvtap: entered promiscuous mode
[   55.019128][ T5833] veth1_vlan: entered promiscuous mode
[   55.041162][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.049226][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.054781][ T5834] veth0_macvtap: entered promiscuous mode
[   55.060731][ T5829] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.065123][ T5829] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.067925][ T5829] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.070708][ T5829] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.090045][ T5834] veth1_macvtap: entered promiscuous mode
[   55.094426][ T5833] veth0_macvtap: entered promiscuous mode
[   55.112975][ T5833] veth1_macvtap: entered promiscuous mode
[   55.134017][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.149346][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.155124][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.165375][ T5834] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.168212][ T5834] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.170956][ T5834] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.174122][ T5834] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.181144][ T3592] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.183519][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.189828][ T5833] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.194072][ T3592] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.196549][ T5833] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.199681][ T5833] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.203601][ T5833] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.257621][ T3592] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.262745][ T3592] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.302587][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   55.314010][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.316859][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.354632][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.357145][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.366992][ T5897] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'.
[   55.388679][ T3592] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.394009][ T3592] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.409702][   T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.413057][   T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.465551][ T5901] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3'.
[   55.596829][ T5915] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8'.
[   55.599756][ T5915] netlink: 10 bytes leftover after parsing attributes in process `syz.2.8'.
[   55.669129][ T5921] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   55.682515][ T5924] xt_TCPMSS: Only works on TCP SYN packets
[   55.716251][ T5926] vcan0: tx drop: invalid sa for name 0x0000000000000001
[   55.744533][ T5930] Illegal XDP return value 4294967294 on prog  (id 5) dev N/A, expect packet loss!
[   55.813540][ T5934] netlink: 52 bytes leftover after parsing attributes in process `syz.1.17'.
[   55.819909][ T5934] netlink: 10 bytes leftover after parsing attributes in process `syz.1.17'.
[   55.871014][ T5938] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   55.993027][ T5947] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[   55.997557][ T5947] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[   56.117959][ T5957] netlink: 52 bytes leftover after parsing attributes in process `syz.0.25'.
[   56.122674][ T5957] netlink: 10 bytes leftover after parsing attributes in process `syz.0.25'.
[   56.212546][ T5959] tipc: Started in network mode
[   56.214964][ T5959] tipc: Node identity 66f73c9632a4, cluster identity 4711
[   56.218273][ T5959] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   56.223223][ T5959] syzkaller0: entered promiscuous mode
[   56.227077][ T5959] syzkaller0: entered allmulticast mode
[   56.249305][ T5959] tipc: Resetting bearer <eth:syzkaller0>
[   56.270952][ T5867] IPVS: starting estimator thread 0...
[   56.312964][ T5959] tipc: Resetting bearer <eth:syzkaller0>
[   56.319394][ T5968] Zero length message leads to an empty skb
[   56.324487][ T5959] tipc: Disabling bearer <eth:syzkaller0>
[   56.363026][ T5963] IPVS: using max 80 ests per chain, 192000 per kthread
[   56.427257][ T5971] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[   56.429817][ T5867] IPVS: starting estimator thread 0...
[   56.495229][ T5975] syz.0.31 uses obsolete (PF_INET,SOCK_PACKET)
[   56.521563][ T5973] IPVS: using max 79 ests per chain, 189600 per kthread
[   56.691051][ T5991] netlink: 20 bytes leftover after parsing attributes in process `syz.2.35'.
[   56.716614][ T5993] netlink: 28 bytes leftover after parsing attributes in process `syz.0.36'.
[   56.905432][ T6008] netlink: 'syz.0.39': attribute type 13 has an invalid length.
[   56.907918][ T6008] netlink: 'syz.0.39': attribute type 17 has an invalid length.
[   56.946474][ T6008] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   56.956120][ T6008] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[   57.003029][ T5832] Bluetooth: hci0: command tx timeout
[   57.073553][ T5832] Bluetooth: hci2: command tx timeout
[   57.081871][ T5832] Bluetooth: hci1: command tx timeout
[   57.186489][ T6027] x_tables: duplicate underflow at hook 1
[   57.217534][ T6029] tipc: New replicast peer: 255.255.255.255
[   57.220693][ T6029] tipc: Enabled bearer <udp:syz2>, priority 10
[   57.328393][ T6029] vxcan3: entered allmulticast mode
[   57.469309][ T6046] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.655193][ T6059] netlink: 'syz.2.58': attribute type 5 has an invalid length.
[   57.664647][ T6059] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[   57.667650][ T6059] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[   57.670647][ T6059] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[   57.675748][ T6059] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[   57.679645][ T6059] geneve2: entered promiscuous mode
[   57.682232][ T6059] geneve2: entered allmulticast mode
[   58.119025][ T6077] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[   58.211337][ T6081] netlink: 'syz.2.65': attribute type 5 has an invalid length.
[   58.212930][ T5894] tipc: Node number set to 1414741142
[   58.577160][ T6105] netlink: 'syz.1.72': attribute type 5 has an invalid length.
[   58.611957][ T6103] team0 (unregistering): Port device team_slave_0 removed
[   58.617123][ T6103] team0 (unregistering): Port device team_slave_1 removed
[   58.636884][ T6105] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[   58.640450][ T6105] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[   58.646051][ T6105] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[   58.648972][ T6105] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[   58.652414][ T6105] geneve2: entered promiscuous mode
[   58.654770][ T6105] geneve2: entered allmulticast mode
[   58.818628][ T6117] bpf setsockopt: ignoring program buffer with optlen=5064 (max_optlen=4096)
[   58.849363][ T6117] x_tables: duplicate underflow at hook 2
[   58.938027][ T6123] netlink: 'syz.2.77': attribute type 11 has an invalid length.
[   59.012775][ T6046] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.045740][ T6046] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.072320][ T5832] Bluetooth: hci0: command tx timeout
[   59.107515][ T6046] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.151670][ T5832] Bluetooth: hci1: command tx timeout
[   59.153766][ T5221] Bluetooth: hci2: command tx timeout
[   59.199104][ T6046] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.206890][ T6046] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.215012][ T6046] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.223976][ T6046] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.415267][ T6138] ip6erspan0: entered allmulticast mode
[   59.935571][ T6167] netlink: 'syz.2.93': attribute type 58 has an invalid length.
[   60.122422][ T6181] lo speed is unknown, defaulting to 1000
[   60.126642][ T6181] lo speed is unknown, defaulting to 1000
[   60.130947][ T6181] lo speed is unknown, defaulting to 1000
[   60.202349][ T6182] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   60.217958][ T6185] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   60.387061][ T5895] lo speed is unknown, defaulting to 1000
[   60.390090][ T6181] infiniband syz0: set active
[   60.398963][ T6181] infiniband syz0: added lo
[   60.404995][ T6181] syz0: rxe_create_cq: returned err = -12
[   60.407642][ T6181] infiniband syz0: Couldn't create ib_mad CQ
[   60.410375][ T6181] infiniband syz0: Couldn't open port 1
[   60.472772][ T6181] RDS/IB: syz0: added
[   60.474412][ T6181] smc: adding ib device syz0 with port count 1
[   60.478329][ T6181] smc:    ib device syz0 port 1 has pnetid 
[   60.480938][ T5895] lo speed is unknown, defaulting to 1000
[   60.486172][ T6181] lo speed is unknown, defaulting to 1000
[   60.488262][ T6198] syzkaller0: entered promiscuous mode
[   60.490772][ T6198] syzkaller0: entered allmulticast mode
[   60.504835][ T6198] macvtap0: mtu less than device minimum
[   60.648059][ T6181] lo speed is unknown, defaulting to 1000
[   60.690249][ T6205] __nla_validate_parse: 36 callbacks suppressed
[   60.690266][ T6205] netlink: 24 bytes leftover after parsing attributes in process `syz.2.108'.
[   60.737682][ T6207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.109'.
[   60.740500][ T6207] netlink: 52 bytes leftover after parsing attributes in process `syz.0.109'.
[   60.778677][ T6181] lo speed is unknown, defaulting to 1000
[   60.863298][ T6211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.110'.
[   60.885075][ T6217] netlink: 52 bytes leftover after parsing attributes in process `syz.0.112'.
[   60.888345][ T6217] netlink: 10 bytes leftover after parsing attributes in process `syz.0.112'.
[   60.893088][ T6217] netlink: 52 bytes leftover after parsing attributes in process `syz.0.112'.
[   60.896710][ T6217] netlink: 10 bytes leftover after parsing attributes in process `syz.0.112'.
[   60.899841][ T6217] netlink: 52 bytes leftover after parsing attributes in process `syz.0.112'.
[   60.901189][ T6211] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   60.977395][ T6221] Bluetooth: MGMT ver 1.23
[   61.008239][ T5281] udevd[5281]: worker [5830] terminated by signal 33 (Unknown signal 33)
[   61.011084][ T5281] udevd[5281]: worker [5830] failed while handling '/devices/virtual/infiniband/syz0'
[   61.146667][ T6231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.117'.
[   61.151759][ T5832] Bluetooth: hci0: command tx timeout
[   61.198590][ T6234] netlink: 'syz.1.118': attribute type 1 has an invalid length.
[   61.203779][ T6234] netlink: 'syz.1.118': attribute type 4 has an invalid length.
[   61.241790][ T5832] Bluetooth: hci1: command tx timeout
[   61.244637][ T5832] Bluetooth: hci2: command tx timeout
[   61.477759][ T6256] bridge_slave_1: left allmulticast mode
[   61.479811][ T6256] bridge_slave_1: left promiscuous mode
[   61.482983][ T6256] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.488583][ T6256] bridge_slave_0: left allmulticast mode
[   61.490649][ T6256] bridge_slave_0: left promiscuous mode
[   61.493524][ T6256] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.341918][ T6269] nbd2: detected capacity change from 0 to 63
[   62.347853][ T6273] block nbd2: NBD_DISCONNECT
[   62.350885][ T6273] block nbd2: Disconnected due to user request.
[   62.362140][ T6273] block nbd2: shutting down sockets
[   62.372108][    C0] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   62.375269][    C0] Buffer I/O error on dev nbd2, logical block 0, async page read
[   62.378533][    C0] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   62.381628][    C0] Buffer I/O error on dev nbd2, logical block 1, async page read
[   62.384143][    C0] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   62.387143][    C0] Buffer I/O error on dev nbd2, logical block 2, async page read
[   62.389756][    C0] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   62.392792][    C0] Buffer I/O error on dev nbd2, logical block 3, async page read
[   62.396868][ T6094] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   62.400174][ T6094] Buffer I/O error on dev nbd2, logical block 0, async page read
[   62.404260][ T6276] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20000
[   62.410277][ T6094] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   62.420016][ T6094] Buffer I/O error on dev nbd2, logical block 1, async page read
[   62.428464][ T6094] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   62.441772][ T6094] Buffer I/O error on dev nbd2, logical block 2, async page read
[   62.457068][ T6094] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   62.460248][ T6094] Buffer I/O error on dev nbd2, logical block 3, async page read
[   62.478741][ T6094] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   62.483113][ T6094] Buffer I/O error on dev nbd2, logical block 0, async page read
[   62.486339][ T6094] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   62.489786][ T6094] Buffer I/O error on dev nbd2, logical block 1, async page read
[   62.497001][ T6094] ldm_validate_partition_table(): Disk read failed.
[   62.500483][ T6094] Dev nbd2: unable to read RDB block 0
[   62.505312][ T6094]  nbd2: unable to read partition table
[   62.510841][ T6094] ldm_validate_partition_table(): Disk read failed.
[   62.517230][ T6094] Dev nbd2: unable to read RDB block 0
[   62.524802][ T6094]  nbd2: unable to read partition table
[   62.595940][ T6287] lo speed is unknown, defaulting to 1000
[   62.629880][ T6290] netlink: 'syz.1.134': attribute type 5 has an invalid length.
[   63.274290][ T6307] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   63.277143][ T6307] syzkaller0: entered promiscuous mode
[   63.279437][ T6307] syzkaller0: entered allmulticast mode
[   63.294983][ T6307] tipc: Resetting bearer <eth:syzkaller0>
[   63.313864][ T6307] tipc: Resetting bearer <eth:syzkaller0>
[   63.322043][ T6307] tipc: Disabling bearer <eth:syzkaller0>
[   63.606907][ T6329] netlink: 'syz.1.148': attribute type 1 has an invalid length.
[   63.637460][ T6329] netlink: 'syz.1.148': attribute type 2 has an invalid length.
[   63.639883][ T6329] netlink: 'syz.1.148': attribute type 5 has an invalid length.
[   63.654382][ T6330] tipc: Started in network mode
[   63.656161][ T6330] tipc: Node identity fe347effc0ea, cluster identity 4711
[   63.666841][ T6330] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   63.670422][ T6331] syzkaller0: entered promiscuous mode
[   63.675449][ T6331] syzkaller0: entered allmulticast mode
[   63.698200][ T6329] veth3: entered promiscuous mode
[   63.702950][ T6331] tipc: Resetting bearer <eth:syzkaller0>
[   63.723604][ T6331] tipc: Disabling bearer <eth:syzkaller0>
[   64.321260][ T6400] netlink: 'syz.2.167': attribute type 3 has an invalid length.
[   64.573093][ T6418] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[   64.660372][ T6423] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[   64.716696][ T6425] netlink: 'syz.1.178': attribute type 10 has an invalid length.
[   64.726972][ T6425] batman_adv: batadv0: Adding interface: team0
[   64.728934][ T6425] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.739675][ T6425] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[   64.745044][ T6425] netlink: 'syz.1.178': attribute type 10 has an invalid length.
[   64.747593][ T6425] team0: entered promiscuous mode
[   64.749235][ T6425] team_slave_0: entered promiscuous mode
[   64.752814][ T6425] team_slave_1: entered promiscuous mode
[   64.757119][ T6425] 8021q: adding VLAN 0 to HW filter on device team0
[   64.759819][ T6425] batman_adv: batadv0: Interface activated: team0
[   64.762318][ T6425] batman_adv: batadv0: Interface deactivated: team0
[   64.764535][ T6425] batman_adv: batadv0: Removing interface: team0
[   64.767690][ T6425] bridge0: port 3(team0) entered blocking state
[   64.769929][ T6425] bridge0: port 3(team0) entered disabled state
[   64.772697][ T6425] team0: entered allmulticast mode
[   64.774823][ T6425] team_slave_0: entered allmulticast mode
[   64.777136][ T6425] team_slave_1: entered allmulticast mode
[   64.781997][ T6425] bridge0: port 3(team0) entered blocking state
[   64.784920][ T6425] bridge0: port 3(team0) entered forwarding state
[   65.496333][ T6487] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[   65.501091][ T6487] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   66.077479][ T6500] ipt_ECN: cannot use operation on non-tcp rule
[   66.159047][ T6503] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   66.194463][ T6505] __nla_validate_parse: 118 callbacks suppressed
[   66.194476][ T6505] netlink: 32 bytes leftover after parsing attributes in process `syz.2.202'.
[   66.236083][ T6511] syzkaller1: entered promiscuous mode
[   66.238615][ T6511] syzkaller1: entered allmulticast mode
[   66.296921][ T6514] netlink: 'syz.1.204': attribute type 21 has an invalid length.
[   66.300446][ T6514] netlink: 128 bytes leftover after parsing attributes in process `syz.1.204'.
[   66.311625][ T6514] netlink: 'syz.1.204': attribute type 5 has an invalid length.
[   66.316380][ T6514] netlink: 'syz.1.204': attribute type 6 has an invalid length.
[   66.329238][ T6514] netlink: 3 bytes leftover after parsing attributes in process `syz.1.204'.
[   66.449772][ T6525] syzkaller0: entered promiscuous mode
[   66.458321][ T6525] syzkaller0: entered allmulticast mode
[   66.683865][ T6543] netlink: 16 bytes leftover after parsing attributes in process `syz.1.213'.
[   66.746197][ T6553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.215'.
[   66.749266][ T6553] netlink: 20 bytes leftover after parsing attributes in process `syz.1.215'.
[   66.819091][ T6561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.218'.
[   66.834238][ T6561] netlink: 52 bytes leftover after parsing attributes in process `syz.0.218'.
[   66.853660][ T6559] vlan2: entered promiscuous mode
[   66.855342][ T6559] macvlan1: entered promiscuous mode
[   67.007182][ T6574] netlink: 44 bytes leftover after parsing attributes in process `syz.0.220'.
[   67.039288][ T6574] warning: `syz.0.220' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   67.045696][ T6574] xt_hashlimit: max too large, truncated to 1048576
[   67.048301][ T6580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.223'.
[   67.251754][ T6601] tipc: Enabling of bearer <et:g> rejected, media not registered
[   67.327785][ T5895] lo speed is unknown, defaulting to 1000
[   67.330024][ T5895] syz0: Port: 1 Link DOWN
[   67.333181][ T5895] lo speed is unknown, defaulting to 1000
[   67.506954][ T6616] C: renamed from team_slave_0 (while UP)
[   67.514529][ T6616] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   67.798569][ T6648] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 51004 - 0
[   67.801876][ T6648] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 51004 - 0
[   67.805642][ T6648] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 51004 - 0
[   67.809652][ T6648] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 51004 - 0
[   67.816191][ T6648] netdevsim netdevsim1 netdevsim0: set [1, 3] type 2 family 0 port 40958 - 0
[   67.817359][ T6652] x_tables: duplicate underflow at hook 2
[   67.819099][ T6648] netdevsim netdevsim1 netdevsim1: set [1, 3] type 2 family 0 port 40958 - 0
[   67.819158][ T6648] netdevsim netdevsim1 netdevsim2: set [1, 3] type 2 family 0 port 40958 - 0
[   67.819171][ T6648] netdevsim netdevsim1 netdevsim3: set [1, 3] type 2 family 0 port 40958 - 0
[   67.819226][ T6648] geneve3: entered promiscuous mode
[   67.819236][ T6648] geneve3: entered allmulticast mode
[   67.828211][ T6651] sit1: entered promiscuous mode
[   68.143319][ T6673] tipc: Started in network mode
[   68.145602][ T6673] tipc: Node identity 1ae6aa0bdb6f, cluster identity 4711
[   68.150025][ T6673] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   68.154082][ T6673] syzkaller0: entered promiscuous mode
[   68.156561][ T6673] syzkaller0: entered allmulticast mode
[   68.239732][ T6678] vlan2: entered allmulticast mode
[   68.251227][ T6678] bridge_slave_0: entered allmulticast mode
[   68.298524][ T6672] tipc: Resetting bearer <eth:syzkaller0>
[   68.314400][ T6685] netlink: 'syz.1.251': attribute type 11 has an invalid length.
[   68.319283][ T6672] tipc: Disabling bearer <eth:syzkaller0>
[   69.719728][ T6722] validate_nla: 6 callbacks suppressed
[   69.719739][ T6722] netlink: 'syz.0.265': attribute type 2 has an invalid length.
[   69.745306][ T6725] openvswitch: netlink: Unknown nsh attribute 0
[   69.747766][ T6725] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   69.781121][ T6725] ip6tnl2: entered promiscuous mode
[   69.791331][ T6725] ip6tnl2: entered allmulticast mode
[   69.906054][ T6741] Bluetooth: MGMT ver 1.23
[   70.093319][ T6756] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   70.132314][ T6763] syzkaller1: entered promiscuous mode
[   70.134167][ T6763] syzkaller1: entered allmulticast mode
[   70.149949][ T6763] xt_ecn: cannot match TCP bits for non-tcp packets
[   70.283300][ T6773] openvswitch: netlink: Message has 24 unknown bytes.
[   70.285588][ T6773] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   70.408443][ T6782] pimreg: entered allmulticast mode
[   70.418380][ T6783] pimreg: left allmulticast mode
[   70.469973][ T6791] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   70.715920][ T6807] veth4: entered allmulticast mode
[   70.723271][ T6807] veth5: entered promiscuous mode
[   70.738529][ T6812] xt_TCPMSS: Only works on TCP SYN packets
[   70.917477][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.002180][   T13] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.074947][   T13] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.148501][   T13] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.205731][   T13] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.391329][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   71.399668][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   71.405359][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   71.409678][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   71.415554][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   71.443462][ T6838] SET target dimension over the limit!
[   71.678081][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   71.682826][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   71.686477][   T13] bond0 (unregistering): Released all slaves
[   71.694558][   T13] bond1 (unregistering): Released all slaves
[   71.755110][ T6835] lo speed is unknown, defaulting to 1000
[   71.785386][   T13] tipc: Left network mode
[   72.070822][ T6865] __nla_validate_parse: 31 callbacks suppressed
[   72.070838][ T6865] netlink: 4 bytes leftover after parsing attributes in process `syz.1.301'.
[   72.345375][   T13] hsr_slave_0: left promiscuous mode
[   72.348255][   T13] hsr_slave_1: left promiscuous mode
[   72.351117][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   72.354202][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   72.357139][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   72.359785][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   72.376066][   T13] veth1_macvtap: left promiscuous mode
[   72.378568][   T13] veth0_macvtap: left promiscuous mode
[   72.382989][   T13] veth1_vlan: left promiscuous mode
[   72.385446][   T13] veth0_vlan: left promiscuous mode
[   72.670652][   T13] team0 (unregistering): Port device team_slave_1 removed
[   72.708723][   T13] team0 (unregistering): Port device C removed
[   72.979350][ T6877] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   73.021829][ T6878] syzkaller0: entered promiscuous mode
[   73.024148][ T6878] syzkaller0: entered allmulticast mode
[   73.027099][ T6878] tipc: Resetting bearer <eth:syzkaller0>
[   73.034269][ T6880] team0: left allmulticast mode
[   73.036204][ T6880] team_slave_0: left allmulticast mode
[   73.038327][ T6880] team_slave_1: left allmulticast mode
[   73.040655][ T6880] bridge0: port 3(team0) entered disabled state
[   73.049969][ T6880] bridge_slave_0: left allmulticast mode
[   73.053704][ T6880] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.059479][ T6880] bridge_slave_1: left allmulticast mode
[   73.061320][ T6880] bridge_slave_1: left promiscuous mode
[   73.072550][ T6880] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.084736][ T6880] bond0: (slave bond_slave_0): Releasing backup interface
[   73.093512][ T6880] bond0: (slave bond_slave_1): Releasing backup interface
[   73.100675][ T6880] team_slave_0: left promiscuous mode
[   73.112504][ T6880] team0: Port device team_slave_0 removed
[   73.115367][ T6880] team_slave_1: left promiscuous mode
[   73.123308][ T6880] team0: Port device team_slave_1 removed
[   73.126180][ T6880] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   73.128944][ T6880] batman_adv: batadv0: Removing interface: batadv_slave_0
[   73.133833][ T6880] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   73.136943][ T6880] batman_adv: batadv0: Removing interface: batadv_slave_1
[   73.146576][ T6880] tipc: Resetting bearer <eth:syzkaller0>
[   73.185959][ T3592] tipc: Resetting bearer <eth:syzkaller0>
[   73.198091][ T6874] tipc: Resetting bearer <eth:syzkaller0>
[   73.472171][ T5832] Bluetooth: hci2: command tx timeout
[   73.968385][ T6874] tipc: Disabling bearer <eth:syzkaller0>
[   74.003368][ T6880] syz.1.303 (6880) used greatest stack depth: 19928 bytes left
[   74.018617][ T6835] chnl_net:caif_netlink_parms(): no params data found
[   74.122886][ T6914] netlink: 4 bytes leftover after parsing attributes in process `syz.1.309'.
[   74.208948][ T6835] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.211536][ T6835] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.215718][ T6835] bridge_slave_0: entered allmulticast mode
[   74.218501][ T6835] bridge_slave_0: entered promiscuous mode
[   74.222849][ T6835] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.225182][ T6835] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.227552][ T6835] bridge_slave_1: entered allmulticast mode
[   74.230465][ T6835] bridge_slave_1: entered promiscuous mode
[   74.257218][ T6914] netlink: 'syz.1.309': attribute type 10 has an invalid length.
[   74.273370][ T6835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   74.290376][ T6914] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   74.296310][ T6835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   74.347365][   T13] IPVS: stop unused estimator thread 0...
[   74.364317][ T6835] team0: Port device team_slave_0 added
[   74.367462][ T6928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.312'.
[   74.371844][ T6926] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   74.378647][ T6835] team0: Port device team_slave_1 added
[   74.442052][ T6835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   74.444447][ T6835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.467412][ T6835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   74.477081][ T6835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   74.479384][ T6835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.501502][ T6835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   74.559597][ T6835] hsr_slave_0: entered promiscuous mode
[   74.575049][ T6835] hsr_slave_1: entered promiscuous mode
[   74.577773][ T6835] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   74.580887][ T6835] Cannot create hsr debugfs directory
[   74.627632][ T6948] netlink: 'syz.2.314': attribute type 5 has an invalid length.
[   74.630214][ T6948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.314'.
[   74.647402][ T6948] openvswitch: netlink: IP tunnel TTL not specified.
[   74.663555][ T6950] netlink: 52 bytes leftover after parsing attributes in process `syz.1.315'.
[   74.672185][ T6950] netlink: 10 bytes leftover after parsing attributes in process `syz.1.315'.
[   74.690369][ T6950] netlink: 52 bytes leftover after parsing attributes in process `syz.1.315'.
[   74.698862][ T6950] netlink: 10 bytes leftover after parsing attributes in process `syz.1.315'.
[   74.704072][ T6950] netlink: 52 bytes leftover after parsing attributes in process `syz.1.315'.
[   74.717953][ T6952] netlink: 12 bytes leftover after parsing attributes in process `syz.2.316'.
[   74.757798][ T6957] IPv6: NLM_F_REPLACE set, but no existing node found!
[   75.309328][ T6835] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   75.324246][ T6835] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   75.329279][ T6835] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   75.343410][ T6835] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   75.367283][ T6999] vlan2: entered promiscuous mode
[   75.369255][ T6999] vlan2: entered allmulticast mode
[   75.371053][ T6999] hsr_slave_1: entered allmulticast mode
[   75.518626][ T6835] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.540690][ T6835] 8021q: adding VLAN 0 to HW filter on device team0
[   75.555625][ T5832] Bluetooth: hci2: command tx timeout
[   75.557107][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.560782][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.576714][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.579648][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.769220][ T7035] macsec0: entered allmulticast mode
[   75.781271][ T7035] veth1_macvtap: entered allmulticast mode
[   75.819160][ T6835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.867822][ T6835] veth0_vlan: entered promiscuous mode
[   75.880490][ T6835] veth1_vlan: entered promiscuous mode
[   75.938711][ T6835] veth0_macvtap: entered promiscuous mode
[   75.957212][ T6835] veth1_macvtap: entered promiscuous mode
[   75.977723][ T6835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.998598][ T6835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.006053][ T6835] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.015691][ T6835] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.018565][ T6835] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.021910][ T6835] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.064663][ T7056] xt_recent: Unsupported userspace flags (00000048)
[   76.152639][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.160378][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.190838][ T7069] netlink: 'syz.2.335': attribute type 178 has an invalid length.
[   76.192770][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.197318][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.904258][ T7124] lo speed is unknown, defaulting to 1000
[   77.162877][ T7138] __nla_validate_parse: 8 callbacks suppressed
[   77.162897][ T7138] netlink: 8 bytes leftover after parsing attributes in process `syz.1.350'.
[   77.231358][ T7140] netlink: 104 bytes leftover after parsing attributes in process `syz.2.352'.
[   77.427864][ T7153] netlink: 'syz.2.356': attribute type 10 has an invalid length.
[   77.432576][ T7153] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.435811][ T7153] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.451039][ T7153] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.453911][ T7153] bridge0: port 2(bridge_slave_1) entered forwarding state
[   77.456856][ T7153] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.459818][ T7153] bridge0: port 1(bridge_slave_0) entered forwarding state
[   77.466894][ T7153] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   77.480365][ T7153] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.356'.
[   77.665867][ T7159] netlink: 47 bytes leftover after parsing attributes in process `syz.2.358'.
[   77.672287][ T7159] netlink: 24 bytes leftover after parsing attributes in process `syz.2.358'.
[   77.676261][ T7159] netlink: 16 bytes leftover after parsing attributes in process `syz.2.358'.
[   77.680089][ T7159] netlink: 28 bytes leftover after parsing attributes in process `syz.2.358'.
[   77.886016][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.903110][  T792] cfg80211: failed to load regulatory.db
[   78.146613][ T5221] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   78.150620][ T5221] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   78.154399][ T5221] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   78.157753][ T5221] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   78.160819][ T5221] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   78.187020][ T7181] lo speed is unknown, defaulting to 1000
[   78.341118][ T7181] chnl_net:caif_netlink_parms(): no params data found
[   78.390545][ T7181] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.393459][ T7181] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.395871][ T7181] bridge_slave_0: entered allmulticast mode
[   78.398701][ T7181] bridge_slave_0: entered promiscuous mode
[   78.407117][ T7181] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.409798][ T7181] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.412412][ T7181] bridge_slave_1: entered allmulticast mode
[   78.415424][ T7181] bridge_slave_1: entered promiscuous mode
[   78.436767][ T7181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.441863][ T7181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.462538][ T7181] team0: Port device team_slave_0 added
[   78.467415][ T7181] team0: Port device team_slave_1 added
[   78.485594][ T7181] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.488019][ T7181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.496711][ T7181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.501144][ T7181] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.503874][ T7181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.513226][ T7181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.539797][ T7181] hsr_slave_0: entered promiscuous mode
[   78.542337][ T7181] hsr_slave_1: entered promiscuous mode
[   78.544610][ T7181] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   78.547994][ T7181] Cannot create hsr debugfs directory
[   78.681031][ T7193] netlink: 332 bytes leftover after parsing attributes in process `syz.2.365'.
[   78.687017][ T7193] netlink: 104 bytes leftover after parsing attributes in process `syz.2.365'.
[   78.690650][ T7193] netlink: 40 bytes leftover after parsing attributes in process `syz.2.365'.
[   79.239491][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.417612][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.478096][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.635874][   T13] bridge_slave_1: left allmulticast mode
[   79.638396][   T13] bridge_slave_1: left promiscuous mode
[   79.641889][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.651190][   T13] bridge_slave_0: left allmulticast mode
[   79.655757][   T13] bridge_slave_0: left promiscuous mode
[   79.658370][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.027549][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   80.035632][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   80.043305][   T13] bond0 (unregistering): Released all slaves
[   80.069848][ T7237] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0
[   80.087625][ T7235] No such timeout policy "syz1"
[   80.193738][ T5832] Bluetooth: hci2: command tx timeout
[   80.746789][   T13] hsr_slave_0: left promiscuous mode
[   80.757240][   T13] hsr_slave_1: left promiscuous mode
[   80.760104][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   80.771533][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   80.776309][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   80.779404][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   80.805369][   T13] veth1_macvtap: left promiscuous mode
[   80.807794][   T13] veth0_macvtap: left promiscuous mode
[   80.810343][   T13] veth1_vlan: left promiscuous mode
[   80.822982][   T13] veth0_vlan: left promiscuous mode
[   81.269900][   T13] team0 (unregistering): Port device team_slave_1 removed
[   81.294540][   T13] team0 (unregistering): Port device team_slave_0 removed
[   81.513504][ T7181] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   81.525786][ T7181] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   81.535397][ T7181] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   81.544537][ T7181] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   81.660515][ T7181] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.675939][ T7181] 8021q: adding VLAN 0 to HW filter on device team0
[   81.683156][ T3589] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.685451][ T3589] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.696850][ T3589] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.699212][ T3589] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.718985][ T7181] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   81.729096][ T7181] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   81.817160][ T7181] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.847535][ T7181] veth0_vlan: entered promiscuous mode
[   81.859544][ T7181] veth1_vlan: entered promiscuous mode
[   81.887200][ T7181] veth0_macvtap: entered promiscuous mode
[   81.895289][ T7181] veth1_macvtap: entered promiscuous mode
[   81.907776][ T7181] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.914914][ T7181] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.920359][ T7181] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.924508][ T7181] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.927447][ T7181] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.930473][ T7181] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.975889][ T3589] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.978499][ T3589] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.000061][ T3589] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.003430][ T3589] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.615730][ T7309] netlink: 'syz.1.388': attribute type 23 has an invalid length.
[   82.827549][ T7313] xt_CT: You must specify a L4 protocol and not use inversions on it
[   82.936078][ T7321] __nla_validate_parse: 5 callbacks suppressed
[   82.936093][ T7321] netlink: 52 bytes leftover after parsing attributes in process `syz.1.392'.
[   82.943963][ T7321] netlink: 10 bytes leftover after parsing attributes in process `syz.1.392'.
[   82.947697][ T7321] netlink: 52 bytes leftover after parsing attributes in process `syz.1.392'.
[   82.950800][ T7321] netlink: 10 bytes leftover after parsing attributes in process `syz.1.392'.
[   82.954496][ T7321] netlink: 52 bytes leftover after parsing attributes in process `syz.1.392'.
[   83.118711][ T7336] netlink: 4 bytes leftover after parsing attributes in process `syz.1.398'.
[   83.167480][ T7340] netlink: 52 bytes leftover after parsing attributes in process `syz.1.399'.
[   83.170692][ T7340] netlink: 10 bytes leftover after parsing attributes in process `syz.1.399'.
[   83.173825][ T7340] netlink: 52 bytes leftover after parsing attributes in process `syz.1.399'.
[   83.176914][ T7340] netlink: 10 bytes leftover after parsing attributes in process `syz.1.399'.
[   83.243192][ T7346] netlink: 'syz.1.401': attribute type 30 has an invalid length.
[   83.257004][ T7346] openvswitch: netlink: Key 32 has unexpected len 0 expected 2
[   84.077135][ T5843] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.344590][ T5221] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   84.348351][ T5221] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   84.359081][ T5221] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   84.365754][ T5221] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   84.369684][ T5221] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   84.410691][ T7370] lo speed is unknown, defaulting to 1000
[   84.767661][ T7370] chnl_net:caif_netlink_parms(): no params data found
[   84.909989][ T7370] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.914186][ T7370] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.917705][ T7370] bridge_slave_0: entered allmulticast mode
[   84.929412][ T7370] bridge_slave_0: entered promiscuous mode
[   84.936376][ T7370] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.938766][ T7370] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.941138][ T7370] bridge_slave_1: entered allmulticast mode
[   84.945530][ T7370] bridge_slave_1: entered promiscuous mode
[   84.972166][ T7370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   84.979919][ T7370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.007493][ T7370] team0: Port device team_slave_0 added
[   85.011298][ T7370] team0: Port device team_slave_1 added
[   85.034630][ T7370] batman_adv: batadv0: Adding interface: batadv_slave_0
[   85.037497][ T7370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.048378][ T7370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   85.054553][ T7370] batman_adv: batadv0: Adding interface: batadv_slave_1
[   85.057516][ T7370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.058265][ T7406] netlink: 'syz.2.415': attribute type 1 has an invalid length.
[   85.067568][ T7370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   85.104788][ T7370] hsr_slave_0: entered promiscuous mode
[   85.107241][ T7370] hsr_slave_1: entered promiscuous mode
[   85.109817][ T7370] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   85.113167][ T7370] Cannot create hsr debugfs directory
[   85.136308][ T7410] netlink: 'syz.2.416': attribute type 10 has an invalid length.
[   85.628347][ T5843] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.702594][ T5843] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.791049][ T5843] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.934401][ T7421] bond2 (unregistering): Released all slaves
[   85.985572][ T5843] bridge_slave_1: left allmulticast mode
[   85.989809][ T5843] bridge_slave_1: left promiscuous mode
[   85.994719][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.003957][ T5843] bridge_slave_0: left allmulticast mode
[   86.006414][ T5843] bridge_slave_0: left promiscuous mode
[   86.010499][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.340182][ T5843] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   86.349146][ T5843] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   86.356635][ T5843] bond0 (unregistering): Released all slaves
[   86.431795][ T5221] Bluetooth: hci2: command tx timeout
[   86.671682][ T7438] xfrm1: entered promiscuous mode
[   86.673922][ T7438] xfrm1: entered allmulticast mode
[   86.902684][ T5843] hsr_slave_0: left promiscuous mode
[   86.907413][ T5843] hsr_slave_1: left promiscuous mode
[   86.919695][ T5843] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   86.929965][ T5843] batman_adv: batadv0: Removing interface: batadv_slave_0
[   86.936370][ T5843] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   86.939569][ T5843] batman_adv: batadv0: Removing interface: batadv_slave_1
[   86.951652][ T5843] veth1_macvtap: left promiscuous mode
[   86.954293][ T5843] veth0_macvtap: left promiscuous mode
[   86.956975][ T5843] veth1_vlan: left promiscuous mode
[   86.959460][ T5843] veth0_vlan: left promiscuous mode
[   87.246140][ T5843] team0 (unregistering): Port device team_slave_1 removed
[   87.266916][ T5843] team0 (unregistering): Port device team_slave_0 removed
[   87.556587][ T7370] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   87.563764][ T7370] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   87.582429][ T7370] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   87.600164][ T7370] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   87.727996][ T7466] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2
[   87.737701][ T7466] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0
[   87.754006][ T7370] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.765489][ T7370] 8021q: adding VLAN 0 to HW filter on device team0
[   87.794391][   T79] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.796835][   T79] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.808646][   T79] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.811159][   T79] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.940271][ T7370] 8021q: adding VLAN 0 to HW filter on device batadv0
[   87.944209][ T7479] __nla_validate_parse: 11 callbacks suppressed
[   87.944218][ T7479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.427'.
[   87.949729][ T7479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.427'.
[   87.957783][ T7479] netlink: 16 bytes leftover after parsing attributes in process `syz.1.427'.
[   87.973354][ T7370] veth0_vlan: entered promiscuous mode
[   87.980116][ T7370] veth1_vlan: entered promiscuous mode
[   87.997778][ T7487] netlink: 844 bytes leftover after parsing attributes in process `syz.1.428'.
[   88.004140][ T7487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.428'.
[   88.009587][ T7370] veth0_macvtap: entered promiscuous mode
[   88.014373][ T7370] veth1_macvtap: entered promiscuous mode
[   88.026054][ T7370] batman_adv: batadv0: Interface activated: batadv_slave_0
[   88.034304][ T7370] batman_adv: batadv0: Interface activated: batadv_slave_1
[   88.043315][ T7370] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.047873][ T7370] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.052450][ T7370] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.055743][ T7370] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.116754][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.120431][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.148352][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.151221][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.498874][ T7522] netlink: 16 bytes leftover after parsing attributes in process `syz.1.439'.
[   88.601249][ T7530] netlink: 'syz.1.442': attribute type 1 has an invalid length.
[   88.604013][ T7530] netlink: 224 bytes leftover after parsing attributes in process `syz.1.442'.
[   88.613065][ T7528] veth1_to_team: entered promiscuous mode
[   88.636412][ T7532] netlink: 36 bytes leftover after parsing attributes in process `syz.1.444'.
[   88.739361][ T7540] netlink: 24 bytes leftover after parsing attributes in process `syz.1.447'.
[   88.743138][ T7540] netlink: 8 bytes leftover after parsing attributes in process `syz.1.447'.
[   88.812954][ T7542] syzkaller0: entered promiscuous mode
[   88.814735][ T7542] syzkaller0: entered allmulticast mode
[   89.834416][ T7552] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   90.008927][ T5843] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.525438][ T7576] netlink: 'syz.1.456': attribute type 10 has an invalid length.
[   90.646174][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   90.649203][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   90.653066][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   90.656202][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   90.659243][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   90.684916][ T7587] lo speed is unknown, defaulting to 1000
[   90.694558][ T7590] trusted_key: syz.1.459 sent an empty control message without MSG_MORE.
[   90.898823][ T7587] chnl_net:caif_netlink_parms(): no params data found
[   90.983727][ T7587] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.986278][ T7587] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.988806][ T7587] bridge_slave_0: entered allmulticast mode
[   90.992809][ T7587] bridge_slave_0: entered promiscuous mode
[   90.996326][ T7587] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.998806][ T7587] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.004199][ T7587] bridge_slave_1: entered allmulticast mode
[   91.008731][ T7587] bridge_slave_1: entered promiscuous mode
[   91.032173][ T7587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   91.037198][ T7587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   91.077977][ T7587] team0: Port device team_slave_0 added
[   91.081519][ T7587] team0: Port device team_slave_1 added
[   91.109665][ T7587] batman_adv: batadv0: Adding interface: batadv_slave_0
[   91.114364][ T7587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.123409][ T7587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   91.130070][ T7587] batman_adv: batadv0: Adding interface: batadv_slave_1
[   91.134993][ T7587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.143982][ T7587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.189153][ T7587] hsr_slave_0: entered promiscuous mode
[   91.192804][ T7587] hsr_slave_1: entered promiscuous mode
[   91.195789][ T7587] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   91.199020][ T7587] Cannot create hsr debugfs directory
[   91.259427][ T5843] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.291498][ T7625] netlink: 'syz.1.469': attribute type 1 has an invalid length.
[   91.336804][ T7625] sch_tbf: peakrate 448116563466540888 is lower than or equals to rate 7872331296239939647 !
[   91.503979][ T5843] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.556043][ T5843] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.600248][ T7656] netlink: 'syz.2.478': attribute type 1 has an invalid length.
[   91.620454][ T7656] 8021q: adding VLAN 0 to HW filter on device bond1
[   91.659230][ T5843] bridge_slave_1: left allmulticast mode
[   91.661186][ T5843] bridge_slave_1: left promiscuous mode
[   91.663440][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.677517][ T5843] bridge_slave_0: left allmulticast mode
[   91.679453][ T5843] bridge_slave_0: left promiscuous mode
[   91.682502][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.344023][ T5843] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   92.369720][ T5843] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   92.382006][ T5843] bond0 (unregistering): Released all slaves
[   92.542538][ T7683] netlink: 'syz.1.483': attribute type 1 has an invalid length.
[   92.671649][ T5832] Bluetooth: hci2: command tx timeout
[   92.888379][ T7587] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   92.909302][ T5843] hsr_slave_0: left promiscuous mode
[   92.913157][ T5843] hsr_slave_1: left promiscuous mode
[   92.923970][ T5843] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   92.926783][ T5843] batman_adv: batadv0: Removing interface: batadv_slave_0
[   92.930342][ T5843] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   92.933104][ T5843] batman_adv: batadv0: Removing interface: batadv_slave_1
[   92.941507][ T5843] veth1_macvtap: left promiscuous mode
[   92.943485][ T5843] veth0_macvtap: left promiscuous mode
[   92.945786][ T5843] veth1_vlan: left promiscuous mode
[   92.947687][ T5843] veth0_vlan: left promiscuous mode
[   93.170241][ T5843] team0 (unregistering): Port device team_slave_1 removed
[   93.188353][ T5843] team0 (unregistering): Port device team_slave_0 removed
[   93.381630][ T7587] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   93.444168][ T7587] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   93.449683][ T7587] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   93.527216][ T7728] __nla_validate_parse: 6 callbacks suppressed
[   93.527229][ T7728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.490'.
[   93.535761][ T7728] bridge0: Device is already in use.
[   93.569672][ T7587] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.617521][ T7587] 8021q: adding VLAN 0 to HW filter on device team0
[   93.628511][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.631756][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.653517][ T3063] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.655889][ T3063] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.702662][ T7732] netlink: 24 bytes leftover after parsing attributes in process `syz.2.491'.
[   93.784305][ T7587] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.806285][ T7587] veth0_vlan: entered promiscuous mode
[   93.813368][ T7587] veth1_vlan: entered promiscuous mode
[   93.832703][ T7587] veth0_macvtap: entered promiscuous mode
[   93.836278][ T7587] veth1_macvtap: entered promiscuous mode
[   93.845792][ T7587] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.850595][ T7747] netlink: 24 bytes leftover after parsing attributes in process `syz.2.494'.
[   93.854299][ T7587] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.857757][ T7587] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.861275][ T7587] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.867432][ T7587] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.871102][ T7587] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.955607][ T3063] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.958971][ T3063] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.995485][ T3063] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.998783][ T3063] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.028689][ T7760] xt_bpf: check failed: parse error
[   94.331341][ T7773] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.335139][ T7773] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[   94.426695][ T7773] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.430374][ T7773] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[   94.474746][ T7773] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.478214][ T7773] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[   94.561901][ T7773] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.565255][ T7773] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[   94.668404][ T7773] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[   94.671183][ T7773] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[   94.691754][ T7773] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[   94.694537][ T7773] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[   94.713051][ T7773] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0
[   94.715915][ T7773] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[   94.725805][ T7773] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0
[   94.728420][ T7773] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[   94.736685][ T7786] netlink: 24 bytes leftover after parsing attributes in process `syz.1.508'.
[   94.823265][ T7794] netlink: 20 bytes leftover after parsing attributes in process `syz.2.511'.
[   94.954204][ T7807] netlink: 36 bytes leftover after parsing attributes in process `syz.1.515'.
[   94.954213][ T7806] netlink: 36 bytes leftover after parsing attributes in process `syz.1.515'.
[   94.957729][ T7807] netlink: 64 bytes leftover after parsing attributes in process `syz.1.515'.
[   94.963974][ T7807] netlink: 64 bytes leftover after parsing attributes in process `syz.1.515'.
[   94.967631][ T7808] netlink: 64 bytes leftover after parsing attributes in process `syz.1.515'.
[   95.205433][ T7833] xt_l2tp: invalid flags combination: 4
[   95.234621][ T7835] ip6gretap1: entered promiscuous mode
[   95.554339][ T7851] bond0: Unable to set down delay as MII monitoring is disabled
[   95.902521][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.585305][ T7867] 0X: renamed from caif0
[   96.589616][ T7867] 0X: entered allmulticast mode
[   96.594549][ T7867] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[   96.648134][ T5221] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   96.653643][ T5221] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   96.656747][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.659345][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.663504][ T5221] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   96.668195][ T5221] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   96.678845][ T5221] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   96.685995][ T7875] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:19998
[   96.720535][ T7870] lo speed is unknown, defaulting to 1000
[   96.852961][ T7881] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   96.855452][ T7881] syzkaller0: entered promiscuous mode
[   96.857214][ T7881] syzkaller0: entered allmulticast mode
[   96.867118][ T7881] tipc: Resetting bearer <eth:syzkaller0>
[   96.877895][ T7880] tipc: Resetting bearer <eth:syzkaller0>
[   96.894905][ T7880] tipc: Disabling bearer <eth:syzkaller0>
[   97.084766][ T7870] chnl_net:caif_netlink_parms(): no params data found
[   97.129815][ T7870] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.132456][ T7870] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.134732][ T7870] bridge_slave_0: entered allmulticast mode
[   97.137418][ T7870] bridge_slave_0: entered promiscuous mode
[   97.140565][ T7870] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.144310][ T7870] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.147112][ T7870] bridge_slave_1: entered allmulticast mode
[   97.149863][ T7870] bridge_slave_1: entered promiscuous mode
[   97.169591][ T7870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   97.175341][ T7870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   97.193807][ T7902] netlink: 'syz.1.543': attribute type 1 has an invalid length.
[   97.199523][ T7870] team0: Port device team_slave_0 added
[   97.203271][ T7870] team0: Port device team_slave_1 added
[   97.224153][ T7870] batman_adv: batadv0: Adding interface: batadv_slave_0
[   97.226783][ T7870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   97.239225][ T7870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   97.244174][ T7870] batman_adv: batadv0: Adding interface: batadv_slave_1
[   97.247861][ T7870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   97.257132][ T7870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   97.291083][ T7870] hsr_slave_0: entered promiscuous mode
[   97.294915][ T7870] hsr_slave_1: entered promiscuous mode
[   97.298167][ T7870] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   97.301701][ T7870] Cannot create hsr debugfs directory
[   97.311873][ T5221] Bluetooth: hci1: command tx timeout
[   97.667328][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.706385][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.767836][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.827334][ T7923] syz.1.553 (7923) used greatest stack depth: 19344 bytes left
[   97.863392][ T7925] netlink: 'syz.1.554': attribute type 13 has an invalid length.
[   97.898195][   T13] bridge_slave_1: left allmulticast mode
[   97.900085][   T13] bridge_slave_1: left promiscuous mode
[   97.913043][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.918823][   T13] bridge_slave_0: left allmulticast mode
[   97.920743][   T13] bridge_slave_0: left promiscuous mode
[   97.925132][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.126950][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   98.133178][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   98.137036][   T13] bond0 (unregistering): Released all slaves
[   98.389153][ T7938] syzkaller1: entered promiscuous mode
[   98.391017][ T7938] syzkaller1: entered allmulticast mode
[   98.517418][   T13] hsr_slave_0: left promiscuous mode
[   98.519775][   T13] hsr_slave_1: left promiscuous mode
[   98.522124][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   98.524502][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   98.527240][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   98.529607][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   98.564414][   T13] veth1_macvtap: left promiscuous mode
[   98.566622][   T13] veth0_macvtap: left promiscuous mode
[   98.568554][   T13] veth1_vlan: left promiscuous mode
[   98.570252][   T13] veth0_vlan: left promiscuous mode
[   98.763725][ T5221] Bluetooth: hci2: command tx timeout
[   98.849295][   T13] team0 (unregistering): Port device team_slave_1 removed
[   98.868457][   T13] team0 (unregistering): Port device team_slave_0 removed
[   99.149924][ T7870] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   99.156867][ T7870] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   99.166144][ T7870] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   99.180547][ T7870] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   99.269174][ T7870] 8021q: adding VLAN 0 to HW filter on device bond0
[   99.279344][ T7870] 8021q: adding VLAN 0 to HW filter on device team0
[   99.286213][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.288825][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   99.306885][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.309300][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   99.337342][ T7971] __nla_validate_parse: 16 callbacks suppressed
[   99.337351][ T7971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.558'.
[   99.345246][ T7971] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[   99.416034][ T7870] 8021q: adding VLAN 0 to HW filter on device batadv0
[   99.453591][ T7870] veth0_vlan: entered promiscuous mode
[   99.459902][ T7870] veth1_vlan: entered promiscuous mode
[   99.479054][ T7870] veth0_macvtap: entered promiscuous mode
[   99.485823][ T7870] veth1_macvtap: entered promiscuous mode
[   99.505205][ T7870] batman_adv: batadv0: Interface activated: batadv_slave_0
[   99.514290][ T7870] batman_adv: batadv0: Interface activated: batadv_slave_1
[   99.521132][ T7870] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.525741][ T7870] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.529376][ T7870] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.533875][ T7870] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.704579][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.707801][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.940284][ T3592] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.999915][ T3592] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.318782][ T8071] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  100.336697][ T8073] netlink: 96 bytes leftover after parsing attributes in process `syz.2.568'.
[  100.438820][ T8090] netlink: 12 bytes leftover after parsing attributes in process `syz.1.574'.
[  100.547123][ T8099] netlink: 16 bytes leftover after parsing attributes in process `syz.1.576'.
[  100.552132][ T8099] xt_policy: output policy not valid in PREROUTING and INPUT
[  100.655770][ T8113] netlink: 4 bytes leftover after parsing attributes in process `syz.2.581'.
[  100.684706][ T8113] netlink: 1004 bytes leftover after parsing attributes in process `syz.2.581'.
[  100.808457][ T8131] @: renamed from vlan0 (while UP)
[  100.988988][ T8143] netlink: 'syz.1.589': attribute type 3 has an invalid length.
[  100.991998][ T8143] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  100.999957][ T8143] netlink: 44 bytes leftover after parsing attributes in process `syz.1.589'.
[  101.052161][ T8152] netlink: 176 bytes leftover after parsing attributes in process `syz.2.591'.
[  101.468579][ T5843] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.495471][ T8176] netlink: 8 bytes leftover after parsing attributes in process `syz.2.599'.
[  102.340867][ T8187] netlink: 12 bytes leftover after parsing attributes in process `syz.2.602'.
[  102.371194][ T8190] netlink: 'syz.1.603': attribute type 10 has an invalid length.
[  102.466185][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  102.473293][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  102.477260][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  102.482678][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  102.486154][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  102.522416][ T8196] lo speed is unknown, defaulting to 1000
[  102.660460][ T8212] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  102.763537][ T8214] netlink: del zone limit has 4 unknown bytes
[  102.909364][ T8196] chnl_net:caif_netlink_parms(): no params data found
[  102.996297][ T8227] veth0_to_bond: entered allmulticast mode
[  103.001286][ T5880] hid-generic 0005:0458:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  103.040206][ T8234] wg2: entered allmulticast mode
[  103.043722][ T8196] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.050819][ T8196] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.055720][ T8196] bridge_slave_0: entered allmulticast mode
[  103.059633][ T8196] bridge_slave_0: entered promiscuous mode
[  103.086426][ T5843] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.096309][ T8196] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.100843][ T8196] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.104712][ T8196] bridge_slave_1: entered allmulticast mode
[  103.108436][ T8196] bridge_slave_1: entered promiscuous mode
[  103.146519][ T8236] lo speed is unknown, defaulting to 1000
[  103.149158][ T8196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  103.184500][ T5843] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.210296][ T8196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  103.300136][ T5843] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.330691][ T8196] team0: Port device team_slave_0 added
[  103.336983][ T8196] team0: Port device team_slave_1 added
[  103.369288][ T8196] batman_adv: batadv0: Adding interface: batadv_slave_0
[  103.372789][ T8196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  103.390433][ T8196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  103.395322][ T8196] batman_adv: batadv0: Adding interface: batadv_slave_1
[  103.397801][ T8196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  103.410386][ T8196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  103.484248][ T8196] hsr_slave_0: entered promiscuous mode
[  103.488053][ T8196] hsr_slave_1: entered promiscuous mode
[  103.490529][ T8196] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  103.494156][ T8196] Cannot create hsr debugfs directory
[  103.573636][ T5843] bridge_slave_1: left allmulticast mode
[  103.575835][ T5843] bridge_slave_1: left promiscuous mode
[  103.577857][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.584473][ T5843] bridge_slave_0: left allmulticast mode
[  103.586674][ T5843] bridge_slave_0: left promiscuous mode
[  103.588908][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.796507][ T5843] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  103.801714][ T5843] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  103.805777][ T5843] bond0 (unregistering): Released all slaves
[  104.199140][ T5843] hsr_slave_0: left promiscuous mode
[  104.210689][ T5843] hsr_slave_1: left promiscuous mode
[  104.220984][ T5843] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  104.224325][ T5843] batman_adv: batadv0: Removing interface: batadv_slave_0
[  104.227489][ T5843] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  104.229877][ T5843] batman_adv: batadv0: Removing interface: batadv_slave_1
[  104.244194][ T5843] veth1_macvtap: left promiscuous mode
[  104.246131][ T5843] veth0_macvtap: left promiscuous mode
[  104.247947][ T5843] veth1_vlan: left promiscuous mode
[  104.249687][ T5843] veth0_vlan: left promiscuous mode
[  104.273085][ T8264] raw_sendmsg: syz.2.622 forgot to set AF_INET. Fix it!
[  104.512389][ T5832] Bluetooth: hci2: command tx timeout
[  104.568279][ T5843] team0 (unregistering): Port device team_slave_1 removed
[  104.594102][ T5843] team0 (unregistering): Port device team_slave_0 removed
[  104.830980][ T8261] __nla_validate_parse: 8 callbacks suppressed
[  104.830995][ T8261] netlink: 20 bytes leftover after parsing attributes in process `syz.1.621'.
[  105.120383][ T8196] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  105.144302][ T8196] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  105.170793][ T8196] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  105.176487][ T8196] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  105.180394][ T8304] netlink: 24 bytes leftover after parsing attributes in process `syz.1.631'.
[  105.213871][ T8307] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  105.217700][ T8304] netlink: 44 bytes leftover after parsing attributes in process `syz.1.631'.
[  105.225025][ T8307] syzkaller0: entered promiscuous mode
[  105.227110][ T8307] syzkaller0: entered allmulticast mode
[  105.274605][ T8307] tipc: Resetting bearer <eth:syzkaller0>
[  105.289500][ T8306] tipc: Resetting bearer <eth:syzkaller0>
[  105.305005][ T8306] tipc: Disabling bearer <eth:syzkaller0>
[  105.401050][ T8196] 8021q: adding VLAN 0 to HW filter on device bond0
[  105.436855][ T8196] 8021q: adding VLAN 0 to HW filter on device team0
[  105.455724][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.458228][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[  105.464605][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.466905][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[  105.491927][ T8324] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.529642][ T8196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  105.560971][ T8332] netlink: 40 bytes leftover after parsing attributes in process `syz.1.638'.
[  105.581932][ T8332] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  105.646879][ T8336] bond0: (slave bridge0): Releasing backup interface
[  105.650392][ T8336] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.669915][ T8336] bridge_slave_0: left allmulticast mode
[  105.675954][ T8336] bridge_slave_0: left promiscuous mode
[  105.679617][ T8336] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.685568][ T8336] bridge_slave_1: left allmulticast mode
[  105.687429][ T8336] bridge_slave_1: left promiscuous mode
[  105.689394][ T8336] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.695578][ T8336] bond0: (slave bond_slave_0): Releasing backup interface
[  105.700422][ T8336] bond0: (slave bond_slave_1): Releasing backup interface
[  105.706869][ T8336] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  105.709137][ T8336] batman_adv: batadv0: Removing interface: batadv_slave_0
[  105.714211][ T8336] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  105.716914][ T8336] batman_adv: batadv0: Removing interface: batadv_slave_1
[  105.785700][ T8196] 8021q: adding VLAN 0 to HW filter on device batadv0
[  105.830514][ T8347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.641'.
[  105.833812][ T8196] veth0_vlan: entered promiscuous mode
[  105.839346][ T8196] veth1_vlan: entered promiscuous mode
[  105.914638][ T8196] veth0_macvtap: entered promiscuous mode
[  105.929137][ T8196] veth1_macvtap: entered promiscuous mode
[  105.943475][ T8196] batman_adv: batadv0: Interface activated: batadv_slave_0
[  105.952861][ T8196] batman_adv: batadv0: Interface activated: batadv_slave_1
[  105.963255][ T8196] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  105.966142][ T8196] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  105.969219][ T8196] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  105.974169][ T8196] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  106.026126][ T3063] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.039196][ T3063] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.080605][ T3063] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.085007][ T3063] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.147235][ T8232] ==================================================================
[  106.149856][ T8232] BUG: KASAN: slab-use-after-free in __mutex_lock+0x738/0xe80
[  106.152261][ T8232] Read of size 8 at addr ffff88803dc900a0 by task khidpd_04585505/8232
[  106.155917][ T8232] 
[  106.156757][ T8232] CPU: 0 UID: 0 PID: 8232 Comm: khidpd_04585505 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  106.156767][ T8232] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  106.156772][ T8232] Call Trace:
[  106.156778][ T8232]  <TASK>
[  106.156781][ T8232]  dump_stack_lvl+0x189/0x250
[  106.156795][ T8232]  ? __virt_addr_valid+0x1c8/0x5c0
[  106.156806][ T8232]  ? rcu_is_watching+0x15/0xb0
[  106.156815][ T8232]  ? __kasan_check_byte+0x12/0x40
[  106.156825][ T8232]  ? __pfx_dump_stack_lvl+0x10/0x10
[  106.156833][ T8232]  ? rcu_is_watching+0x15/0xb0
[  106.156840][ T8232]  ? lock_release+0x4b/0x3e0
[  106.156849][ T8232]  ? __virt_addr_valid+0x1c8/0x5c0
[  106.156857][ T8232]  ? __virt_addr_valid+0x4a5/0x5c0
[  106.156866][ T8232]  print_report+0xd2/0x2b0
[  106.156874][ T8232]  ? __mutex_lock+0x738/0xe80
[  106.156881][ T8232]  kasan_report+0x118/0x150
[  106.156890][ T8232]  ? __mutex_lock+0x738/0xe80
[  106.156898][ T8232]  __mutex_lock+0x738/0xe80
[  106.156905][ T8232]  ? __mutex_lock+0x51b/0xe80
[  106.156913][ T8232]  ? l2cap_unregister_user+0x6a/0x1b0
[  106.156921][ T8232]  ? __pfx___mutex_lock+0x10/0x10
[  106.156928][ T8232]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  106.156941][ T8232]  l2cap_unregister_user+0x6a/0x1b0
[  106.156948][ T8232]  hidp_session_thread+0x3c9/0x410
[  106.156958][ T8232]  ? __pfx_hidp_session_thread+0x10/0x10
[  106.156964][ T8232]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  106.156974][ T8232]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  106.156981][ T8232]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  106.156988][ T8232]  ? __kthread_parkme+0x7b/0x200
[  106.156998][ T8232]  ? __kthread_parkme+0x1a1/0x200
[  106.157007][ T8232]  kthread+0x711/0x8a0
[  106.157017][ T8232]  ? __pfx_hidp_session_thread+0x10/0x10
[  106.157024][ T8232]  ? __pfx_kthread+0x10/0x10
[  106.157033][ T8232]  ? _raw_spin_unlock_irq+0x23/0x50
[  106.157042][ T8232]  ? lockdep_hardirqs_on+0x9c/0x150
[  106.157048][ T8232]  ? __pfx_kthread+0x10/0x10
[  106.157057][ T8232]  ret_from_fork+0x3fc/0x770
[  106.157066][ T8232]  ? __pfx_ret_from_fork+0x10/0x10
[  106.157074][ T8232]  ? __switch_to_asm+0x39/0x70
[  106.157082][ T8232]  ? __switch_to_asm+0x33/0x70
[  106.157090][ T8232]  ? __pfx_kthread+0x10/0x10
[  106.157099][ T8232]  ret_from_fork_asm+0x1a/0x30
[  106.157110][ T8232]  </TASK>
[  106.157113][ T8232] 
[  106.235923][ T8232] Allocated by task 8196:
[  106.237339][ T8232]  kasan_save_track+0x3e/0x80
[  106.238913][ T8232]  __kasan_kmalloc+0x93/0xb0
[  106.240651][ T8232]  __kmalloc_noprof+0x27a/0x4f0
[  106.242515][ T8232]  hci_alloc_dev_priv+0x28/0x2040
[  106.244557][ T8232]  vhci_create_device+0x120/0x6e0
[  106.246387][ T8232]  vhci_write+0x3ce/0x4a0
[  106.248067][ T8232]  vfs_write+0x54b/0xa90
[  106.249647][ T8232]  ksys_write+0x145/0x250
[  106.251352][ T8232]  do_syscall_64+0xfa/0x3b0
[  106.252956][ T8232]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  106.255201][ T8232] 
[  106.256186][ T8232] Freed by task 8196:
[  106.257770][ T8232]  kasan_save_track+0x3e/0x80
[  106.259367][ T8232]  kasan_save_free_info+0x46/0x50
[  106.261365][ T8232]  __kasan_slab_free+0x62/0x70
[  106.263329][ T8232]  kfree+0x18e/0x440
[  106.264883][ T8232]  bt_host_release+0x82/0x90
[  106.266732][ T8232]  device_release+0x9c/0x1c0
[  106.268519][ T8232]  kobject_put+0x22b/0x480
[  106.270291][ T8232]  vhci_release+0x88/0xd0
[  106.271957][ T8232]  __fput+0x44c/0xa70
[  106.273572][ T8232]  task_work_run+0x1d4/0x260
[  106.275391][ T8232]  do_exit+0x6b5/0x22e0
[  106.276997][ T8232]  do_group_exit+0x21c/0x2d0
[  106.278780][ T8232]  __x64_sys_exit_group+0x3f/0x40
[  106.280737][ T8232]  x64_sys_call+0x21ba/0x21c0
[  106.282390][ T8232]  do_syscall_64+0xfa/0x3b0
[  106.284152][ T8232]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  106.286286][ T8232] 
[  106.287234][ T8232] Last potentially related work creation:
[  106.289462][ T8232]  kasan_save_stack+0x3e/0x60
[  106.291307][ T8232]  kasan_record_aux_stack+0xbd/0xd0
[  106.293334][ T8232]  insert_work+0x3d/0x330
[  106.295041][ T8232]  __queue_work+0xbd9/0xfe0
[  106.296822][ T8232]  queue_work_on+0x181/0x270
[  106.298636][ T8232]  process_scheduled_works+0xae1/0x17b0
[  106.300790][ T8232]  worker_thread+0x8a0/0xda0
[  106.302682][ T8232]  kthread+0x711/0x8a0
[  106.304300][ T8232]  ret_from_fork+0x3fc/0x770
[  106.306119][ T8232]  ret_from_fork_asm+0x1a/0x30
[  106.308006][ T8232] 
[  106.308995][ T8232] Second to last potentially related work creation:
[  106.311577][ T8232]  kasan_save_stack+0x3e/0x60
[  106.313407][ T8232]  kasan_record_aux_stack+0xbd/0xd0
[  106.315424][ T8232]  insert_work+0x3d/0x330
[  106.317130][ T8232]  __queue_work+0xcfc/0xfe0
[  106.318931][ T8232]  call_timer_fn+0x17e/0x5f0
[  106.320748][ T8232]  __run_timer_base+0x646/0x860
[  106.322677][ T8232]  run_timer_softirq+0xb7/0x180
[  106.324565][ T8232]  handle_softirqs+0x286/0x870
[  106.326430][ T8232]  __irq_exit_rcu+0xca/0x1f0
[  106.328196][ T8232]  irq_exit_rcu+0x9/0x30
[  106.329886][ T8232]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  106.331918][ T8232]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  106.333906][ T8232] 
[  106.334718][ T8232] The buggy address belongs to the object at ffff88803dc90000
[  106.334718][ T8232]  which belongs to the cache kmalloc-8k of size 8192
[  106.339200][ T8232] The buggy address is located 160 bytes inside of
[  106.339200][ T8232]  freed 8192-byte region [ffff88803dc90000, ffff88803dc92000)
[  106.343942][ T8232] 
[  106.344753][ T8232] The buggy address belongs to the physical page:
[  106.346970][ T8232] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3dc90
[  106.349857][ T8232] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  106.352597][ T8232] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  106.354977][ T8232] page_type: f5(slab)
[  106.356257][ T8232] raw: 00fff00000000040 ffff88801a442280 ffffea0000f5b000 0000000000000004
[  106.358962][ T8232] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  106.361695][ T8232] head: 00fff00000000040 ffff88801a442280 ffffea0000f5b000 0000000000000004
[  106.364471][ T8232] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  106.367218][ T8232] head: 00fff00000000003 ffffea0000f72401 00000000ffffffff 00000000ffffffff
[  106.369986][ T8232] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  106.372717][ T8232] page dumped because: kasan: bad access detected
[  106.374723][ T8232] page_owner tracks the page as allocated
[  106.376699][ T8232] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x528c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP), pid 7587, tgid 7587 (syz-executor), ts 90941200537, free_ts 90880747807
[  106.383898][ T8232]  post_alloc_hook+0x240/0x2a0
[  106.385449][ T8232]  get_page_from_freelist+0x21e4/0x22c0
[  106.387271][ T8232]  __alloc_frozen_pages_noprof+0x181/0x370
[  106.389237][ T8232]  alloc_pages_mpol+0x232/0x4a0
[  106.391081][ T8232]  allocate_slab+0x8a/0x3b0
[  106.392752][ T8232]  ___slab_alloc+0xbfc/0x1480
[  106.394567][ T8232]  __kvmalloc_node_noprof+0x429/0x5f0
[  106.396409][ T8232]  wg_packet_queue_init+0xb7/0x320
[  106.398071][ T8232]  wg_newlink+0x326/0x650
[  106.399464][ T8232]  rtnl_newlink_create+0x310/0xb00
[  106.401129][ T8232]  rtnl_newlink+0x16d6/0x1c70
[  106.402613][ T8232]  rtnetlink_rcv_msg+0x7cf/0xb70
[  106.404148][ T8232]  netlink_rcv_skb+0x208/0x470
[  106.405730][ T8232]  netlink_unicast+0x75b/0x8d0
[  106.407263][ T8232]  netlink_sendmsg+0x805/0xb30
[  106.408829][ T8232]  __sock_sendmsg+0x21c/0x270
[  106.410366][ T8232] page last free pid 7605 tgid 7605 stack trace:
[  106.412390][ T8232]  __free_frozen_pages+0xc71/0xe70
[  106.414129][ T8232]  __slab_free+0x326/0x400
[  106.415878][ T8232]  qlist_free_all+0x97/0x140
[  106.417521][ T8232]  kasan_quarantine_reduce+0x148/0x160
[  106.419245][ T8232]  __kasan_slab_alloc+0x22/0x80
[  106.420750][ T8232]  __kmalloc_noprof+0x224/0x4f0
[  106.422264][ T8232]  tomoyo_realpath_from_path+0xe3/0x5d0
[  106.424367][ T8232]  tomoyo_path_perm+0x213/0x4b0
[  106.426211][ T8232]  security_inode_getattr+0x12f/0x330
[  106.427964][ T8232]  vfs_fstatat+0xb1/0x170
[  106.429317][ T8232]  __x64_sys_newfstatat+0x116/0x190
[  106.431020][ T8232]  do_syscall_64+0xfa/0x3b0
[  106.432648][ T8232]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  106.434736][ T8232] 
[  106.435641][ T8232] Memory state around the buggy address:
[  106.437420][ T8232]  ffff88803dc8ff80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  106.439933][ T8232]  ffff88803dc90000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  106.442423][ T8232] >ffff88803dc90080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  106.444931][ T8232]                                ^
[  106.446659][ T8232]  ffff88803dc90100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  106.449229][ T8232]  ffff88803dc90180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  106.451736][ T8232] ==================================================================
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  106.455241][ T8232] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  106.457740][ T8232] CPU: 0 UID: 0 PID: 8232 Comm: khidpd_04585505 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  106.461701][ T8232] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  106.464882][ T8232] Call Trace:
[  106.465965][ T8232]  <TASK>
[  106.467048][ T8232]  dump_stack_lvl+0x99/0x250
[  106.468660][ T8232]  ? __asan_memcpy+0x40/0x70
[  106.470384][ T8232]  ? __pfx_dump_stack_lvl+0x10/0x10
[  106.472261][ T8232]  ? __pfx__printk+0x10/0x10
[  106.473850][ T8232]  panic+0x2db/0x790
[  106.475204][ T8232]  ? __pfx_panic+0x10/0x10
[  106.476897][ T8232]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  106.478993][ T8232]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  106.481089][ T8232]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  106.483402][ T8232]  ? print_memory_metadata+0x314/0x400
[  106.485346][ T8232]  ? __mutex_lock+0x738/0xe80
[  106.486995][ T8232]  check_panic_on_warn+0x89/0xb0
[  106.488614][ T8232]  ? __mutex_lock+0x738/0xe80
[  106.490313][ T8232]  end_report+0x78/0x160
[  106.491874][ T8232]  kasan_report+0x129/0x150
[  106.493348][ T8232]  ? __mutex_lock+0x738/0xe80
[  106.494964][ T8232]  __mutex_lock+0x738/0xe80
[  106.496727][ T8232]  ? __mutex_lock+0x51b/0xe80
[  106.498376][ T8232]  ? l2cap_unregister_user+0x6a/0x1b0
[  106.500375][ T8232]  ? __pfx___mutex_lock+0x10/0x10
[  106.502051][ T8232]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  106.504011][ T8232]  l2cap_unregister_user+0x6a/0x1b0
[  106.505855][ T8232]  hidp_session_thread+0x3c9/0x410
[  106.507484][ T8232]  ? __pfx_hidp_session_thread+0x10/0x10
[  106.509660][ T8232]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  106.511889][ T8232]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  106.514151][ T8232]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  106.516455][ T8232]  ? __kthread_parkme+0x7b/0x200
[  106.518142][ T8232]  ? __kthread_parkme+0x1a1/0x200
[  106.519797][ T8232]  kthread+0x711/0x8a0
[  106.521104][ T8232]  ? __pfx_hidp_session_thread+0x10/0x10
[  106.522908][ T8232]  ? __pfx_kthread+0x10/0x10
[  106.524378][ T8232]  ? _raw_spin_unlock_irq+0x23/0x50
[  106.526360][ T8232]  ? lockdep_hardirqs_on+0x9c/0x150
[  106.528084][ T8232]  ? __pfx_kthread+0x10/0x10
[  106.529937][ T8232]  ret_from_fork+0x3fc/0x770
[  106.531829][ T8232]  ? __pfx_ret_from_fork+0x10/0x10
[  106.533925][ T8232]  ? __switch_to_asm+0x39/0x70
[  106.535952][ T8232]  ? __switch_to_asm+0x33/0x70
[  106.537919][ T8232]  ? __pfx_kthread+0x10/0x10
[  106.539790][ T8232]  ret_from_fork_asm+0x1a/0x30
[  106.541563][ T8232]  </TASK>
[  106.543279][ T8232] Kernel Offset: disabled
[  106.544883][ T8232] Rebooting in 86400 seconds..

VM DIAGNOSIS:
12:37:43  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000064 RBX=0000000000000064 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000423f370
R8 =ffff8880210e8237 R9 =1ffff1100421d046 R10=dffffc0000000000 R11=ffffffff85475610
R12=dffffc0000000000 R13=ffffffff99af78f8 R14=ffffffff99dfc760 R15=0000000000000000
RIP=ffffffff8547568c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=0000000040e48000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00ff000000000000 ff00000000000000 XMM05=0000000000000135 0000000034303a00
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffff0000 ffffffff000000ff XMM09=313030302e353035 353a383534303a35
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff9035e35c RBX=ffffffff9035e35c RCX=0000000000000000 RDX=ffffffff9035e35d
RSI=0000000000000001 RDI=ffffc90003aaf688 RBP=dffffc0000000000 RSP=ffffc90003aaf558
R8 =ffffc90003aaf687 R9 =0000000000000000 R10=ffffc90003aaf678 R11=fffff52000755ed1
R12=ffffc90003aaf760 R13=ffffc90003aaf678 R14=ffffc90003aaf628 R15=1ffffffff206bc6b
RIP=ffffffff8172b17c RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00005555705a9500 ffffffff 00c00000
GS =0000 ffff8881a3c1d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c27982a CR3=000000002a3cc000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
