last executing test programs:

28.457094141s ago: executing program 1 (id=157):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
syz_emit_ethernet(0x75, &(0x7f0000000200)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @local, @val={@val={0x88a8, 0x1, 0x1, 0x4}, {0x8100, 0x6}}, {@mpls_uc={0x8847, {[{0x400, 0x0, 0x1}, {0xc}, {0x1ff, 0x0, 0x1}, {0x4}, {0x6, 0x0, 0x1}, {0xa}, {0xd}, {0x7fc0}, {0x81}, {0x1000}], @generic="c1e3eae279d615df7fa5e52024fe8493ee27527a6e58320c2c4a0215e927c0ba85b6951d714f838b8eebe28e4828aa5fd4e45572897fca"}}}}, &(0x7f0000000000)={0x0, 0x4, [0x3dc, 0x6d, 0xf90, 0x28e]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002b80)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0, 0x0, 0xffffffffffffffff}, 0x18)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
syz_open_procfs$namespace(0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffefb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r4}, 0x10)
close(r3)

28.341752819s ago: executing program 1 (id=159):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0x8, 0x0, 0x2, 0x0, 0x8}, &(0x7f0000000180)={0x80009, 0x2, 0x7fff, 0x22c, 0x5, 0x0, 0xa9e, 0x7}, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10)
socket$inet_smc(0x2b, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x5)
sendmmsg(r2, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x4000000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000340)={'gre0\x00', &(0x7f00000002c0)={'gretap0\x00', <r3=>0x0, 0x20, 0x7, 0xa, 0x2, {{0xf, 0x4, 0x3, 0x12, 0x3c, 0x68, 0x0, 0x0, 0x29, 0x0, @private=0xa010101, @loopback, {[@timestamp={0x44, 0x18, 0x90, 0x0, 0x0, [0xfe, 0x4, 0x200, 0x727, 0x80]}, @generic={0x83, 0x10, "67052d95ea5b109b35118c970c07"}]}}}}})
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0)=0xffffffffffffffff, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e80)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYRESOCT=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r3, 0x25, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f00000000c0)={0x0, 0xe1}, 0x8)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$can_bcm(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="e0be4cab22000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="000000000100000000000000000000005b979e01d2038d84"], 0x48}}, 0x0)
sendmsg$can_bcm(r6, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006b04000000d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003680601000008000300ff000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000240)={'veth0_vlan\x00', 0x2000})
socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0xf00)

22.767799734s ago: executing program 1 (id=159):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0x8, 0x0, 0x2, 0x0, 0x8}, &(0x7f0000000180)={0x80009, 0x2, 0x7fff, 0x22c, 0x5, 0x0, 0xa9e, 0x7}, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10)
socket$inet_smc(0x2b, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x5)
sendmmsg(r2, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x4000000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000340)={'gre0\x00', &(0x7f00000002c0)={'gretap0\x00', <r3=>0x0, 0x20, 0x7, 0xa, 0x2, {{0xf, 0x4, 0x3, 0x12, 0x3c, 0x68, 0x0, 0x0, 0x29, 0x0, @private=0xa010101, @loopback, {[@timestamp={0x44, 0x18, 0x90, 0x0, 0x0, [0xfe, 0x4, 0x200, 0x727, 0x80]}, @generic={0x83, 0x10, "67052d95ea5b109b35118c970c07"}]}}}}})
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0)=0xffffffffffffffff, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e80)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYRESOCT=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r3, 0x25, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f00000000c0)={0x0, 0xe1}, 0x8)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$can_bcm(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="e0be4cab22000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="000000000100000000000000000000005b979e01d2038d84"], 0x48}}, 0x0)
sendmsg$can_bcm(r6, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006b04000000d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003680601000008000300ff000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000240)={'veth0_vlan\x00', 0x2000})
socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0xf00)

16.738478771s ago: executing program 1 (id=159):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0x8, 0x0, 0x2, 0x0, 0x8}, &(0x7f0000000180)={0x80009, 0x2, 0x7fff, 0x22c, 0x5, 0x0, 0xa9e, 0x7}, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10)
socket$inet_smc(0x2b, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x5)
sendmmsg(r2, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x4000000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000340)={'gre0\x00', &(0x7f00000002c0)={'gretap0\x00', <r3=>0x0, 0x20, 0x7, 0xa, 0x2, {{0xf, 0x4, 0x3, 0x12, 0x3c, 0x68, 0x0, 0x0, 0x29, 0x0, @private=0xa010101, @loopback, {[@timestamp={0x44, 0x18, 0x90, 0x0, 0x0, [0xfe, 0x4, 0x200, 0x727, 0x80]}, @generic={0x83, 0x10, "67052d95ea5b109b35118c970c07"}]}}}}})
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0)=0xffffffffffffffff, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e80)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYRESOCT=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r3, 0x25, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f00000000c0)={0x0, 0xe1}, 0x8)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$can_bcm(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="e0be4cab22000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="000000000100000000000000000000005b979e01d2038d84"], 0x48}}, 0x0)
sendmsg$can_bcm(r6, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006b04000000d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003680601000008000300ff000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000240)={'veth0_vlan\x00', 0x2000})
socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0xf00)

10.865314749s ago: executing program 1 (id=159):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0x8, 0x0, 0x2, 0x0, 0x8}, &(0x7f0000000180)={0x80009, 0x2, 0x7fff, 0x22c, 0x5, 0x0, 0xa9e, 0x7}, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10)
socket$inet_smc(0x2b, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x5)
sendmmsg(r2, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x4000000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000340)={'gre0\x00', &(0x7f00000002c0)={'gretap0\x00', <r3=>0x0, 0x20, 0x7, 0xa, 0x2, {{0xf, 0x4, 0x3, 0x12, 0x3c, 0x68, 0x0, 0x0, 0x29, 0x0, @private=0xa010101, @loopback, {[@timestamp={0x44, 0x18, 0x90, 0x0, 0x0, [0xfe, 0x4, 0x200, 0x727, 0x80]}, @generic={0x83, 0x10, "67052d95ea5b109b35118c970c07"}]}}}}})
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0)=0xffffffffffffffff, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e80)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYRESOCT=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r3, 0x25, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f00000000c0)={0x0, 0xe1}, 0x8)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$can_bcm(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="e0be4cab22000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="000000000100000000000000000000005b979e01d2038d84"], 0x48}}, 0x0)
sendmsg$can_bcm(r6, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006b04000000d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003680601000008000300ff000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000240)={'veth0_vlan\x00', 0x2000})
socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0xf00)

4.587628951s ago: executing program 1 (id=159):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0x8, 0x0, 0x2, 0x0, 0x8}, &(0x7f0000000180)={0x80009, 0x2, 0x7fff, 0x22c, 0x5, 0x0, 0xa9e, 0x7}, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10)
socket$inet_smc(0x2b, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x5)
sendmmsg(r2, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x4000000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000340)={'gre0\x00', &(0x7f00000002c0)={'gretap0\x00', <r3=>0x0, 0x20, 0x7, 0xa, 0x2, {{0xf, 0x4, 0x3, 0x12, 0x3c, 0x68, 0x0, 0x0, 0x29, 0x0, @private=0xa010101, @loopback, {[@timestamp={0x44, 0x18, 0x90, 0x0, 0x0, [0xfe, 0x4, 0x200, 0x727, 0x80]}, @generic={0x83, 0x10, "67052d95ea5b109b35118c970c07"}]}}}}})
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0)=0xffffffffffffffff, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e80)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYRESOCT=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r3, 0x25, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f00000000c0)={0x0, 0xe1}, 0x8)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$can_bcm(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="e0be4cab22000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="000000000100000000000000000000005b979e01d2038d84"], 0x48}}, 0x0)
sendmsg$can_bcm(r6, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006b04000000d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003680601000008000300ff000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000240)={'veth0_vlan\x00', 0x2000})
socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0xf00)

819.167375ms ago: executing program 0 (id=389):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket(0x1, 0x80802, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00', <r2=>0x0})
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x8)
r4 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r4, &(0x7f00000001c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x8)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) (async)
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a40)=@nat={'nat\x00', 0x6a0, 0x5, 0x348, 0x1b8, 0x1b8, 0xfeffffff, 0xb8, 0x0, 0x308, 0x308, 0xffffffff, 0x308, 0x308, 0x5, 0x0, {[{{@ip={@multicast1, @broadcast, 0xffffff00, 0xff000000, 'gretap0\x00', 'team0\x00', {}, {0xff}, 0x1d, 0x3, 0x11}, 0x3e7, 0x70, 0xb8, 0xe000000}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote, @gre_key}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_to_batadv\x00', 'xfrm0\x00', {}, {}, 0x1d}, 0x0, 0x70, 0xa8, 0x0, {0x0, 0x7}, [@common=@icmp={{}, {0xb, "83c8"}}, @common=@addrtype={{}, {0x142, 0x400, 0x0, 0x1}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @rand_addr=0x64010101, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x1, @broadcast, @remote, @gre_key}}}}, {{@ip={@dev, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'batadv_slave_0\x00', 'ipvlan1\x00', {}, {}, 0x0, 0x0, 0x5}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @loopback}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xffffffffffffffb3)
sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, 0x0, 0x8000) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0x100, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0x4}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x3, [0x0, 0x10, 0x37, 0x0, 0xa, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1], 0x0, [0x7f, 0x8, 0xfffd, 0x8001, 0x8, 0x2, 0x693, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xff, 0x6], [0x0, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3c1, 0x0, 0xfffc, 0x100, 0xffff]}}]}}]}, 0x8c}}, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa8}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39)
r6 = socket$inet_udp(0x2, 0x2, 0x0) (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r7, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) (async)
sendmmsg$inet(r7, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10, &(0x7f0000001580)=[{&(0x7f0000000040)}, {0x0}], 0x2}}], 0x1, 0x2000c000)
r8 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet_opts(r8, 0x0, 0x2, 0x0, 0x0) (async)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0x98, 0x8, 0xfa04, 0x98, 0x6c02, 0x1e0, 0x194, 0x194, 0x1e0, 0x194, 0x3, 0x0, {[{{@ip={@broadcast, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'batadv_slave_0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) (async)
syz_emit_ethernet(0x288, &(0x7f0000000780)={@empty, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x252, 0x3a, 0xff, @private0, @mcast2, {[@hopopts={0x2f, 0x16, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @ra={0x5, 0x2, 0xa}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @generic={0xdb, 0x8c, "8e3df98e489245b6aeee94ff63bde3b37c4dacea23715135d2b573436ea617dca9b1f6669980d42ec2c1612dac15def0da332554875028a7600862644f6079ef3c891994e53c1554fa15f0e697c387c74d3eec602c3696d18229a65d15bf0c909536db69deeea57da027bb85861445ddc650e44acc06ae1b1721ac5224505cb84cdde3fed4b0f41a9119a8a5"}, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @pad1, @ra={0x5, 0x2, 0x2}]}, @hopopts={0x0, 0x7, '\x00', [@jumbo={0xc2, 0x4, 0x2}, @calipso={0x7, 0x30, {0x3, 0xa, 0x3, 0x1ff, [0x9, 0x768a, 0x7, 0xf8b5, 0x8]}}, @pad1]}, @routing={0x29, 0xa, 0x0, 0x1, 0x0, [@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x34}]}, @srh={0x29, 0x2, 0x4, 0x1, 0x8, 0x50, 0x2, [@private1]}], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0xdb0b, 0x0, 0x0, [{0x0, 0x7, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x5, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a3"}, {0x3}, {0x21, 0x7, "b8a3e10090cf6164000000020000000000000000000000ffff008879e66485201a0015ca837c7357a0274500f700"/55}, {}, {0x18, 0x2, "d5170000dce9674a36da018dff16e70b8b"}]}}}}}}, 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)

730.202749ms ago: executing program 0 (id=391):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xd8, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000040)="e7000200006b652572499d8b824b", 0x0, 0x3008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000020000006d050000021f000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r2}, 0x38)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r2, &(0x7f0000000140), 0x0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, <r3=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00', 0x0, 0x1c}, 0x18)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_tracing={0x1a, 0x21, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x1b}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, &(0x7f0000000200), 0x1d1a445beeaaed56, 0x15, '\x00', 0x0, 0x19, r0, 0x8, &(0x7f0000000240)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0x1, 0x8, 0x9d5}, 0x10, 0x1f292, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000300)=[{0x0, 0x5, 0x9, 0xc}, {0x4, 0x5, 0x0, 0x8}], 0x10, 0x15c0}, 0x94)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'hsr0\x00', <r5=>0x0})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0782010000000000280012800a000100767863616e000000180002801400010000000000", @ANYBLOB="d8529ae589a1900a66a514433855632d9d5f4815fd4a3785b09b8eb1f6f4959122ab5389b18115b739edec9deb1bad09b4a951a723ac697c75c7d8e993efbbfcc59efcfc24a23109e96f64a8c9a0229e3fca777528c2122d31cb115be4c3", @ANYBLOB="08b1d8bf4265f05edd000a00", @ANYRES32=r5, @ANYBLOB], 0x50}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xd8, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000040)="e7000200006b652572499d8b824b", 0x0, 0x3008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000020000006d050000021f000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r2}, 0x38) (async)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r2, &(0x7f0000000140), 0x0}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) (async)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00', 0x0, 0x1c}, 0x18) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_tracing={0x1a, 0x21, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x1b}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, &(0x7f0000000200), 0x1d1a445beeaaed56, 0x15, '\x00', 0x0, 0x19, r0, 0x8, &(0x7f0000000240)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0x1, 0x8, 0x9d5}, 0x10, 0x1f292, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000300)=[{0x0, 0x5, 0x9, 0xc}, {0x4, 0x5, 0x0, 0x8}], 0x10, 0x15c0}, 0x94) (async)
socket$inet_udplite(0x2, 0x2, 0x88) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'hsr0\x00'}) (async)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0782010000000000280012800a000100767863616e000000180002801400010000000000", @ANYBLOB="d8529ae589a1900a66a514433855632d9d5f4815fd4a3785b09b8eb1f6f4959122ab5389b18115b739edec9deb1bad09b4a951a723ac697c75c7d8e993efbbfcc59efcfc24a23109e96f64a8c9a0229e3fca777528c2122d31cb115be4c3", @ANYBLOB="08b1d8bf4265f05edd000a00", @ANYRES32=r5, @ANYBLOB], 0x50}}, 0x0) (async)

559.200935ms ago: executing program 2 (id=392):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703360000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004002)

480.734958ms ago: executing program 0 (id=393):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={<r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', <r2=>0x0})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r3, &(0x7f00000004c0)={@val={0x0, 0x88f8}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @val={@void, {0x8100, 0x0, 0x0, 0xfff}}, {@generic={0x88fb}}}}, 0x16)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c000580050019"], 0x4c}}, 0x0)

480.277865ms ago: executing program 2 (id=394):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$nl80211(0xfffffffffffffffc, 0xffffffffffffffff)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="64000000020601080000000400000000000000001400078008001140000000000500150009ab0000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574"], 0x64}}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendfile(r4, r3, 0x0, 0x9c)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001240)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000200)={0x2c, r5, 0x1, 0x71bd25, 0x3, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x2c}}, 0x4)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000200)={0x34, r9, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_TX={0x8}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x34}}, 0x0)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r8, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r10, 0x30, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x371}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0xa5c, 0x8, 0x800]}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x9}]}, 0x40}}, 0x8041)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a05000000000000000000020000000900020073797a310008000008000440000000000900010073797a30000000000800034000000009"], 0x64}, 0x1, 0x0, 0x0, 0x20048800}, 0x0)
getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRESHEX=r12, @ANYRES16=r12, @ANYRES16=r12], 0x40}}, 0x200080d4)
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r13, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x90, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x7c, 0x1, [@m_connmark={0x34, 0x2, 0x0, 0x0, {{0xd}, {0x4, 0xf5}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

351.015319ms ago: executing program 2 (id=395):
socket$netlink(0x10, 0x3, 0x0) (async)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000340)={r1, r1, 0xc, 0x1, &(0x7f0000000140)="c0", 0x9, 0x52, 0x10cb, 0x7, 0x9, 0x0, 0x4, 'syz1\x00'}) (async)
ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000340)={r1, r1, 0xc, 0x1, &(0x7f0000000140)="c0", 0x9, 0x52, 0x10cb, 0x7, 0x9, 0x0, 0x4, 'syz1\x00'})
setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000400)=[{0x0, 0x1, {0x0, 0xff, 0x4}, {0x2, 0xf0}, 0x2, 0xff}, {0x2, 0x2, {0x2, 0x0, 0x4}, {0x1, 0xff, 0x1}, 0x1, 0x1}, {0x3, 0x0, {0x2, 0x0, 0x1}, {0x2, 0x1, 0x1}, 0x2, 0x1}, {0x0, 0x3, {0x2, 0xff, 0x3}, {0x0, 0x0, 0x1}, 0x0, 0xfd}, {0x0, 0x0, {0x0, 0xf0, 0x1}, {0x1, 0xff}, 0x2}], 0xa0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x1}, 0x50)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="58000000100023ff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000010560100300012800b000100697036746e6c0000200002801400020000000000000000000000ffffac14142a05000900290000000800040000054000f5"], 0x58}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000)

280.964968ms ago: executing program 2 (id=396):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000010000a80000000060a0904000000000000000002000000540004802c0001800e000100696d6d656469617465000000180002800c00028005000100c4000000080001400000000924000180090001006d6574610000000014000280080002400000000808000140000000100900010073797a30000000000900020073797a320000000020000000080a05000000000000000000020000000900010073797a30"], 0xc8}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r1)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000007c0)={0x20, r3, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x24080001}, 0x4000)
r5 = accept(r0, &(0x7f00000000c0)=@xdp, &(0x7f0000000140)=0x80)
sendmsg$rds(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)=""/147, 0x93}, {&(0x7f0000000500)=""/205, 0xcd}, {&(0x7f0000000300)=""/155, 0x9b}], 0x3, &(0x7f00000001c0)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x7f}], 0x18, 0x4084080}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000006080)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000000)={0x44, r2, 0x11, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xfffffffb, 0xfffffffc}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pimreg\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x20004014)

279.200621ms ago: executing program 0 (id=397):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r1, 0x6, 0x4, 0x0, &(0x7f0000000240))
r2 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r3=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r3}, 0x90)
pipe(&(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0e0000000400000004"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r6, &(0x7f00000007c0), &(0x7f00000000c0)=""/79}, 0x20)
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00', <r8=>0x0})
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000b00)={r4, 0x20, &(0x7f0000000900)={&(0x7f0000000800)=""/221, 0xdd, <r9=>0x0, &(0x7f0000000a40)=""/171, 0xab}}, 0x10) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000bc0)={{r5, <r10=>0xffffffffffffffff}, &(0x7f0000000b40), &(0x7f0000000b80)='%+9llu \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x15, 0x12, &(0x7f0000000600)=@raw=[@ldst={0x0, 0x3, 0x6, 0x1, 0x2, 0x20, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @generic={0x0, 0x6, 0xf, 0x7fff, 0x8}], &(0x7f0000000080)='GPL\x00', 0xfffffffd, 0x0, &(0x7f00000006c0), 0x41000, 0x4, '\x00', r8, @sk_reuseport=0x27, r5, 0x8, &(0x7f0000000700)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000740)={0x4, 0xf, 0x9070, 0x4}, 0x10, r9, r4, 0x4, &(0x7f0000000c00)=[r10], &(0x7f0000000c40)=[{0x2, 0x5, 0x10, 0x5}, {0x5, 0x1, 0xe, 0x8}, {0x2, 0x3, 0x7, 0x4}, {0x0, 0x5, 0x0, 0x8}], 0x10, 0x4}, 0x94) (async)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r9, 0x4) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x1, &(0x7f00000000c0)=@raw=[@generic={0x1, 0x8, 0x4, 0x0, 0x4}], &(0x7f0000000140)='syzkaller\x00', 0x60000, 0x0, 0x0, 0x41100, 0x51, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) (async)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5800160010000304000000000000000002e88eb17060a95a2186d1d7282f2628f797c69448c9951b6cf4d5", @ANYRES32=0x0, @ANYBLOB="1502000000000000380012800b00010067656e657665000028000280140007000000000000000000000000000000000005000d000200000008000b4000000080"], 0x58}, 0x1, 0xba01, 0x0, 0x20000000}, 0x0)

153.570409ms ago: executing program 0 (id=398):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff000000007110a7000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async, rerun: 32)
r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x3}, 0x50) (async, rerun: 64)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000040)={@empty, @broadcast, <r2=>0x0}, &(0x7f0000000240)=0xc) (rerun: 64)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x401, 0x7, 0xffffffbe, 0x22000, r1, 0x9, '\x00', r2, 0xffffffffffffffff, 0x3, 0x5, 0x1, 0x9}, 0x50) (async)
r4 = socket(0x1, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r3, &(0x7f0000000100), &(0x7f00000001c0)=@tcp=r4, 0x2}, 0x20) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x9f}, [@ldst={0x6}]}, 0x0, 0x5}, 0x94) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (rerun: 64)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r5, 0x8b1a, &(0x7f0000000040))
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000013000100000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00020000000000000c001a80080102800400018014003500776c616e31000000000000000000000005002700"], 0x48}}, 0x0)

152.968387ms ago: executing program 2 (id=399):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e1f, 0x6, @loopback, 0x2}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$inet6_tcp_int(r0, 0x11a, 0x3, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000840)={0x0, 0xe1}, 0x8)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000053a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)

90.5201ms ago: executing program 0 (id=400):
socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d}, 0x94)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000300)={'ip6gre0\x00', <r1=>0x0, 0x29, 0x5, 0x2, 0x3, 0x41, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0xb}, 0x40, 0x7, 0x80000001, 0x401}})
r2 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20)
setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4)
sendmmsg(r2, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="100000000000000029"], 0x10}}], 0x1, 0x4044084)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000400)={@mcast2, r1}, 0x14)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000140)=ANY=[], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r4, 0x84, 0x23, &(0x7f0000000040)="1875008e80d51858", 0x8)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000700)=@o_path={&(0x7f0000000200)='./file0\x00', 0x0, 0x4000, r0}, 0x18)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000740)={&(0x7f0000000440)="fb067fdef3ff4ed0071949f2a003c91982e1fd4f8b15f47643a25560499a5dbd93122de78f14c330eefd9c1f979af6d90cb90e8ba6b16fe5e28768be8b39f1dfd9a0ec925da51884b2180fd4abacd4238b8362e66546d9dd0080bc955155d24af8d474aff267c23ddb65d482fc4367c8578915bab3856cb71e8199c83c6cd519c17515a6d4e072c5f07f2f393cd7abb06d52e06cc2ea9592b023e6c603cdcb29d8fef11ca60bff3973d52fd61e4078159504d30e0674f01d2a2645426625bb01a2c853c074bd1aadc30810104485d70f1a89991da0532e57adaadbd4", &(0x7f0000000540)=""/173, &(0x7f0000001540)="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", &(0x7f0000000600)="6636a6396fc9c805df4d572856d64b566dc724905917e65aaee31e00dd501851e19cd4ec921bf78d011b584d5a7efb7f8dd13f5aa9c1a72b06ed4a29097ee1ccb91ae04dcfc2ced9c306e02239e24591c622b1363454629cb18e9c0e5d8c9e6285d0a363f3ac8201b64f27c82232c44b42871c0c9ea48813e4f70e4697e05aec98a984f29a48fbc216166cb4dbf44b59efad7254afb20ba136566c3b5dd26e7ece2e423956924fc24219729538427fdb4271f917589c7b1c54257758e6fae797c1cab0a4d35a197aed6ed2e87389c1674f22d5c6e8ed54281f8d9983765c0f", 0x4, r6}, 0x38)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000040)={0x400, 0xf, 0x75ca, 0x6000}, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40c4}, 0x4048040)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000180029020000000000004854626dd322fef1217a0ac3c2422b0e0000"], 0x20}}, 0x0)
r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'})
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0xfffffffffffffde2, &(0x7f0000001140)={&(0x7f0000000780)=ANY=[@ANYBLOB="7000000010ea02051000"/20, @ANYRES8, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRESOCT=r3], 0x70}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0d0000e0"], 0x50)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000300)={'wlan0\x00'})
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000840)=ANY=[@ANYRESOCT=r7, @ANYRES16, @ANYRESOCT=r8, @ANYRES32, @ANYRESDEC=r10], 0x4c}, 0x1, 0x0, 0x0, 0x4081}, 0x4)

0s ago: executing program 2 (id=401):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r2=>0x0}) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (async)
ioctl(0xffffffffffffffff, 0x8b2a, &(0x7f0000000040))
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x5, 0x28}, 0x50)
r4 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x150, 0x150, 0x270, 0xf8010000, 0x340, 0x238, 0x238, 0x340, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @empty, [], [], 'veth0_to_team\x00', 'macvlan1\x00', {}, {}, 0x84}, 0x0, 0x228, 0x270, 0x0, {}, [@common=@unspec=@quota={{0x38}, {0x1, 0x0, 0x0, {0x2}}}, @common=@inet=@sctp={{0x148}, {[0x4e21], [], [0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0xfd68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, [], 0x0, 0x2000000}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x1, 0x0, 'snmp\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='fib6_table_lookup\x00', r5, 0x0, 0x8000000000000000}, 0x18) (async)
connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @remote, 0x1c3}, 0x1c) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'syztnl0\x00', r2, 0x29, 0x6, 0x7, 0x1, 0xc, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x8, 0xdd, 0x9}})

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:19911' (ED25519) to the list of known hosts.
syzkaller login: [   50.409031][ T5814] cgroup: Unknown subsys name 'net'
[   50.538453][ T5814] cgroup: Unknown subsys name 'cpuset'
[   50.544096][ T5814] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   52.133294][ T5814] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   56.752144][ T5221] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   56.755389][ T5221] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   56.759457][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   56.762435][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   56.765097][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   56.780451][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   56.783295][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   56.786115][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   56.789430][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   56.791894][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   56.802497][ T5221] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   56.805240][ T5221] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   56.807639][ T5221] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   56.810412][ T5221] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   56.813704][ T5221] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   56.957661][ T5828] chnl_net:caif_netlink_parms(): no params data found
[   57.081235][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.085749][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.088803][ T5828] bridge_slave_0: entered allmulticast mode
[   57.092568][ T5828] bridge_slave_0: entered promiscuous mode
[   57.097869][ T5832] chnl_net:caif_netlink_parms(): no params data found
[   57.104008][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.107129][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.109569][ T5828] bridge_slave_1: entered allmulticast mode
[   57.112571][ T5828] bridge_slave_1: entered promiscuous mode
[   57.145622][ T5836] chnl_net:caif_netlink_parms(): no params data found
[   57.188173][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.205182][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.263405][ T5828] team0: Port device team_slave_0 added
[   57.280025][ T5828] team0: Port device team_slave_1 added
[   57.282086][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.285324][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.288214][ T5836] bridge_slave_0: entered allmulticast mode
[   57.291849][ T5836] bridge_slave_0: entered promiscuous mode
[   57.296069][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.298668][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.301325][ T5832] bridge_slave_0: entered allmulticast mode
[   57.304642][ T5832] bridge_slave_0: entered promiscuous mode
[   57.315857][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.318426][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.321310][ T5836] bridge_slave_1: entered allmulticast mode
[   57.324910][ T5836] bridge_slave_1: entered promiscuous mode
[   57.328049][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.330375][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.332771][ T5832] bridge_slave_1: entered allmulticast mode
[   57.336481][ T5832] bridge_slave_1: entered promiscuous mode
[   57.355059][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.357231][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.365421][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.390481][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.394026][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.396165][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.404650][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.426907][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.433086][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.454062][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.474067][ T5832] team0: Port device team_slave_0 added
[   57.505012][ T5832] team0: Port device team_slave_1 added
[   57.524358][ T5836] team0: Port device team_slave_0 added
[   57.554027][ T5836] team0: Port device team_slave_1 added
[   57.561279][ T5828] hsr_slave_0: entered promiscuous mode
[   57.565084][ T5828] hsr_slave_1: entered promiscuous mode
[   57.568879][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.571722][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.583251][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.603948][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.606820][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.617400][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.623011][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.626141][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.636842][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.655815][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.658716][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.669279][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.722777][ T5832] hsr_slave_0: entered promiscuous mode
[   57.725962][ T5832] hsr_slave_1: entered promiscuous mode
[   57.728605][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   57.731610][ T5832] Cannot create hsr debugfs directory
[   57.776453][ T5836] hsr_slave_0: entered promiscuous mode
[   57.779821][ T5836] hsr_slave_1: entered promiscuous mode
[   57.782751][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   57.785998][ T5836] Cannot create hsr debugfs directory
[   57.998467][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   58.030477][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   58.042101][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   58.057105][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   58.086834][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   58.108097][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   58.117232][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   58.121929][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   58.181221][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   58.189230][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   58.196066][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   58.210943][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   58.318310][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.339591][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   58.349535][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.365277][ T4349] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.367819][ T4349] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.376698][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.388990][ T4349] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.391851][ T4349] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.400573][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   58.427041][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[   58.435078][ T4349] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.438144][ T4349] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.455940][ T4349] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.459064][ T4349] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.477925][ T4349] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.480928][ T4349] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.488491][ T4349] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.491545][ T4349] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.559842][ T5832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   58.675601][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.680086][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.736520][ T5832] veth0_vlan: entered promiscuous mode
[   58.741827][ T5828] veth0_vlan: entered promiscuous mode
[   58.750161][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.756458][ T5832] veth1_vlan: entered promiscuous mode
[   58.767119][ T5828] veth1_vlan: entered promiscuous mode
[   58.804600][ T5835] Bluetooth: hci1: command tx timeout
[   58.808106][ T5832] veth0_macvtap: entered promiscuous mode
[   58.813612][ T5221] Bluetooth: hci0: command tx timeout
[   58.824537][ T5832] veth1_macvtap: entered promiscuous mode
[   58.830648][ T5836] veth0_vlan: entered promiscuous mode
[   58.840674][ T5828] veth0_macvtap: entered promiscuous mode
[   58.854726][ T5828] veth1_macvtap: entered promiscuous mode
[   58.862450][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.874048][ T5836] veth1_vlan: entered promiscuous mode
[   58.879655][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.883772][ T5835] Bluetooth: hci2: command tx timeout
[   58.887908][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.898036][ T5832] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.901120][ T5832] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.906214][ T5832] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.909043][ T5832] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.920438][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.939410][ T5828] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.943021][ T5828] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.948047][ T5828] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.951708][ T5828] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.018557][ T5836] veth0_macvtap: entered promiscuous mode
[   59.029225][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.038795][ T5836] veth1_macvtap: entered promiscuous mode
[   59.041156][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.056253][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.066792][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.085178][ T5836] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.088154][ T5836] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.090927][ T5836] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.098215][ T5836] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.115043][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.119106][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.155432][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.158814][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.185990][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   59.221603][ T3551] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.228295][ T3551] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.232000][ T3551] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.236984][ T3551] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.256934][ T5897] netlink: 'syz.0.1': attribute type 1 has an invalid length.
[   59.264353][ T5897] netlink: 216 bytes leftover after parsing attributes in process `syz.0.1'.
[   59.280859][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.286528][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.325220][ T5903] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   59.372512][ T5906] veth0: entered promiscuous mode
[   59.375556][ T5905] veth0: left promiscuous mode
[   59.415158][ T5910] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6'.
[   59.420724][ T5910] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6'.
[   59.429359][ T5910] ipvlan2: entered promiscuous mode
[   59.433801][ T5912] netlink: 'syz.0.7': attribute type 4 has an invalid length.
[   59.441325][ T5912] netlink: 'syz.0.7': attribute type 4 has an invalid length.
[   59.492180][ T5914] syz.2.8 uses obsolete (PF_INET,SOCK_PACKET)
[   59.588750][ T5922] No such timeout policy "syz1"
[   59.602669][ T5923] netlink: 248 bytes leftover after parsing attributes in process `syz.1.12'.
[   59.631399][ T5924] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   59.649991][ T5922] netlink: 248 bytes leftover after parsing attributes in process `syz.1.12'.
[   59.656717][ T5924] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11'.
[   59.739460][ T5935] netlink: 'syz.1.14': attribute type 1 has an invalid length.
[   59.766742][ T5937] ip6gretap0: entered promiscuous mode
[   59.769960][ T5937] ip6gretap0: entered allmulticast mode
[   59.777433][ T5940] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15'.
[   59.785670][ T5940] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15'.
[   59.877035][ T5946] netlink: 3 bytes leftover after parsing attributes in process `syz.1.16'.
[   59.895977][ T5946] batadv1: entered promiscuous mode
[   59.900093][ T5946] batadv1: entered allmulticast mode
[   60.059832][ T5946] netlink: 48 bytes leftover after parsing attributes in process `syz.1.16'.
[   60.143806][ T5959] netlink: 'syz.2.17': attribute type 1 has an invalid length.
[   60.512121][ T5979] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   60.518557][ T5979] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   60.524379][ T5979] bond0 (unregistering): Released all slaves
[   60.572531][ T5983] pim6reg1: entered promiscuous mode
[   60.575919][ T5983] pim6reg1: entered allmulticast mode
[   60.883642][ T5221] Bluetooth: hci1: command tx timeout
[   60.885910][ T5835] Bluetooth: hci0: command tx timeout
[   60.963524][ T5835] Bluetooth: hci2: command tx timeout
[   61.376890][ T6023] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   62.038246][ T6042] bridge_slave_1: left allmulticast mode
[   62.040372][ T6042] bridge_slave_1: left promiscuous mode
[   62.043528][ T6042] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.049137][ T6042] bridge_slave_0: left allmulticast mode
[   62.051355][ T6042] bridge_slave_0: left promiscuous mode
[   62.055875][ T6042] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.319851][ T6046] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   62.607314][ T6060] ipvlan2: entered promiscuous mode
[   62.655209][ T6063] netlink: 'syz.1.37': attribute type 1 has an invalid length.
[   62.684201][ T6063] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.713538][ T6070] tipc: Started in network mode
[   62.715157][ T6070] tipc: Node identity 2ea1bd8dc15a, cluster identity 4711
[   62.717623][ T6070] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   62.721864][ T6072] syzkaller0: entered promiscuous mode
[   62.725984][ T6072] syzkaller0: entered allmulticast mode
[   62.825737][ T6071] delete_channel: no stack
[   62.830357][ T6071] tipc: Resetting bearer <eth:syzkaller0>
[   62.845399][ T6071] tipc: Disabling bearer <eth:syzkaller0>
[   62.863071][ T6082] netlink: 'syz.2.40': attribute type 64 has an invalid length.
[   62.966737][ T6085] bond0: (slave bond_slave_0): Releasing backup interface
[   62.966849][ T5835] Bluetooth: hci0: command tx timeout
[   62.971377][ T5221] Bluetooth: hci1: command tx timeout
[   62.976908][ T6085] bond0: (slave bond_slave_1): Releasing backup interface
[   62.989887][ T6085] team0: Port device team_slave_0 removed
[   62.994729][ T6085] team0: Port device team_slave_1 removed
[   62.996964][ T6085] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   62.999886][ T6085] batman_adv: batadv0: Removing interface: batadv_slave_0
[   63.006748][ T6085] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   63.009533][ T6085] batman_adv: batadv0: Removing interface: batadv_slave_1
[   63.045826][ T5835] Bluetooth: hci2: command tx timeout
[   63.170115][ T6109] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   63.257217][ T6115] Zero length message leads to an empty skb
[   63.695034][ T6158] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   63.707790][ T6158] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   63.806330][ T6166] batadv_slave_0: entered promiscuous mode
[   63.827661][ T6171] pimreg: entered allmulticast mode
[   63.854599][ T6171] pimreg: left allmulticast mode
[   64.535491][ T6214] netlink: 'syz.0.61': attribute type 1 has an invalid length.
[   64.575659][ T6214] veth3: entered promiscuous mode
[   64.578819][ T6219] __nla_validate_parse: 13 callbacks suppressed
[   64.578828][ T6219] netlink: 4 bytes leftover after parsing attributes in process `syz.2.62'.
[   64.596777][ T6215] erspan0: entered allmulticast mode
[   64.610892][ T6219] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 50089 - 0
[   64.616093][ T6219] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 50089 - 0
[   64.619821][ T6219] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 50089 - 0
[   64.623444][ T6219] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 50089 - 0
[   64.627150][ T6219] geneve2: entered promiscuous mode
[   64.630814][ T6219] geneve2: entered allmulticast mode
[   64.655896][ T6221] bridge_slave_0: left allmulticast mode
[   64.658033][ T6221] bridge_slave_0: left promiscuous mode
[   64.660531][ T6221] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.682067][ T6221] bridge_slave_1: left allmulticast mode
[   64.688595][ T6221] bridge_slave_1: left promiscuous mode
[   64.691203][ T6221] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.711836][ T6221] team0: Port device team_slave_0 removed
[   64.718799][ T6221] team0: Port device team_slave_1 removed
[   64.721135][ T6221] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   64.726718][ T6221] batman_adv: batadv0: Removing interface: batadv_slave_0
[   64.730030][ T6221] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   64.732712][ T6221] batman_adv: batadv0: Removing interface: batadv_slave_1
[   64.809558][ T6235] netlink: 'syz.1.66': attribute type 39 has an invalid length.
[   64.811373][ T6236] netlink: 4 bytes leftover after parsing attributes in process `syz.2.65'.
[   64.814389][ T6235] netlink: 12 bytes leftover after parsing attributes in process `syz.1.66'.
[   64.918075][ T6248] netlink: 20 bytes leftover after parsing attributes in process `syz.1.70'.
[   64.948127][ T6250] tipc: Started in network mode
[   64.950081][ T6250] tipc: Node identity 5667dae399ec, cluster identity 4711
[   64.953850][ T6250] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   64.957289][ T6250] syzkaller0: entered promiscuous mode
[   64.959169][ T6250] syzkaller0: entered allmulticast mode
[   64.987577][ T6250] tipc: Resetting bearer <eth:syzkaller0>
[   64.994585][ T6250] tipc: Resetting bearer <eth:syzkaller0>
[   65.002718][ T6250] tipc: Disabling bearer <eth:syzkaller0>
[   65.054005][ T5835] Bluetooth: hci1: command tx timeout
[   65.064161][ T6246] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[   65.127003][ T5835] Bluetooth: hci2: command tx timeout
[   65.221777][ T6268] netlink: 200 bytes leftover after parsing attributes in process `syz.2.76'.
[   65.227058][ T6268] netlink: 4 bytes leftover after parsing attributes in process `syz.2.76'.
[   65.310810][ T6268] xt_CT: No such helper "snmp"
[   66.430607][ T6295] netlink: 28 bytes leftover after parsing attributes in process `syz.1.80'.
[   66.436277][ T6295] netlink: 28 bytes leftover after parsing attributes in process `syz.1.80'.
[   66.439664][ T6295] netlink: 8 bytes leftover after parsing attributes in process `syz.1.80'.
[   66.452127][ T6293] veth0_to_team: entered promiscuous mode
[   66.459161][ T6293] veth0_to_team: entered allmulticast mode
[   66.466662][ T6293] netlink: 40 bytes leftover after parsing attributes in process `syz.1.80'.
[   66.579989][ T6301] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   66.584134][ T6301] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   66.587647][ T6301] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   66.591276][ T6301] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   66.646251][ T6309] netlink: 'syz.2.85': attribute type 10 has an invalid length.
[   66.650407][ T6309] bridge0: port 3(dummy0) entered blocking state
[   66.652763][ T6309] bridge0: port 3(dummy0) entered disabled state
[   66.658090][ T6309] dummy0: entered allmulticast mode
[   66.660880][ T6309] dummy0: entered promiscuous mode
[   66.662902][ T6309] bridge0: port 3(dummy0) entered blocking state
[   66.665100][ T6309] bridge0: port 3(dummy0) entered forwarding state
[   67.457600][ T6323] syz.1.87 (6323) used greatest stack depth: 18648 bytes left
[   67.637177][ T6334] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   67.656323][ T6327] lo speed is unknown, defaulting to 1000
[   67.660988][ T6327] lo speed is unknown, defaulting to 1000
[   67.666747][ T6327] lo speed is unknown, defaulting to 1000
[   67.674171][ T6334] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   67.719668][ T6332] ip6gretap0: left promiscuous mode
[   67.721909][ T6332] ip6gretap0: left allmulticast mode
[   67.754126][ T6340] netlink: 'syz.0.93': attribute type 7 has an invalid length.
[   67.769275][ T6332] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   67.787385][ T6340] : entered promiscuous mode
[   67.842324][ T6343] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   67.846002][ T6343] batadv_slave_0: entered promiscuous mode
[   67.870674][ T6345] Illegal XDP return value 4294967294 on prog  (id 70) dev N/A, expect packet loss!
[   67.880909][ T6345] netlink: 'syz.0.95': attribute type 10 has an invalid length.
[   67.918012][ T6345] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   68.047929][ T6327] infiniband syz0: set active
[   68.051004][   T24] lo speed is unknown, defaulting to 1000
[   68.061522][ T6327] infiniband syz0: added lo
[   68.114960][ T6327] RDS/IB: syz0: added
[   68.120877][ T6327] smc: adding ib device syz0 with port count 1
[   68.125814][ T6327] smc:    ib device syz0 port 1 has pnetid 
[   68.129537][   T24] lo speed is unknown, defaulting to 1000
[   68.144958][ T6327] lo speed is unknown, defaulting to 1000
[   68.388226][ T6327] lo speed is unknown, defaulting to 1000
[   68.583944][ T6374] bond1: entered promiscuous mode
[   68.586532][ T6374] 8021q: adding VLAN 0 to HW filter on device bond1
[   68.617416][ T6327] lo speed is unknown, defaulting to 1000
[   69.012694][ T6393] lo speed is unknown, defaulting to 1000
[   69.052611][ T6406] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[   69.331578][ T6416] veth0_to_team: left promiscuous mode
[   69.335659][ T6416] veth0_to_team: left allmulticast mode
[   69.423241][ T6416] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.426495][ T6416] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.429687][ T6416] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.432642][ T6416] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.440591][ T6416] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[   69.475046][ T6416] ipvlan2: left promiscuous mode
[   69.480649][ T6416] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   69.483800][ T6416] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   69.486608][ T6416] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   69.489650][ T6416] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   69.496202][ T5894] lo speed is unknown, defaulting to 1000
[   69.502222][ T5894] syz0: Port: 1 Link DOWN
[   69.508003][ T5894] lo speed is unknown, defaulting to 1000
[   69.664351][ T6431] __nla_validate_parse: 8 callbacks suppressed
[   69.664365][ T6431] netlink: 12 bytes leftover after parsing attributes in process `syz.1.116'.
[   69.685689][ T6431] bridge1: port 1(veth3) entered blocking state
[   69.687892][ T6431] bridge1: port 1(veth3) entered disabled state
[   69.690081][ T6431] veth3: entered allmulticast mode
[   69.693059][ T6431] veth3: entered promiscuous mode
[   69.700485][ T6431] bridge1: port 2(veth0_to_bond) entered blocking state
[   69.703029][ T6431] bridge1: port 2(veth0_to_bond) entered disabled state
[   69.706053][ T6431] veth0_to_bond: entered allmulticast mode
[   69.708789][ T6431] veth0_to_bond: entered promiscuous mode
[   69.747913][ T6434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.118'.
[   69.956508][ T6443] netlink: 12 bytes leftover after parsing attributes in process `syz.2.120'.
[   70.074616][ T6447] netlink: 'syz.2.122': attribute type 1 has an invalid length.
[   70.118207][ T6449] netlink: 'syz.1.121': attribute type 10 has an invalid length.
[   70.122698][ T6449] netlink: 40 bytes leftover after parsing attributes in process `syz.1.121'.
[   70.129304][ T6449] batman_adv: batadv0: Adding interface: virt_wifi0
[   70.132220][ T6449] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.132564][ T6451] netlink: 'syz.2.123': attribute type 9 has an invalid length.
[   70.143556][ T6449] batman_adv: batadv0: Interface activated: virt_wifi0
[   70.619482][ T6456] netlink: 16 bytes leftover after parsing attributes in process `syz.0.125'.
[   70.627570][ T6456] @: renamed from veth0_vlan (while UP)
[   70.725426][ T6466] netlink: 'syz.0.126': attribute type 29 has an invalid length.
[   70.729058][ T6466] netlink: 'syz.0.126': attribute type 29 has an invalid length.
[   70.786420][ T6470] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   70.796797][ T6470] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   70.942638][ T6483] netlink: 32 bytes leftover after parsing attributes in process `syz.1.127'.
[   70.969304][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.112273][ T6497] netlink: 'syz.2.128': attribute type 10 has an invalid length.
[   71.124710][ T6497] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.131643][ T6497] bridge_slave_1: left allmulticast mode
[   71.136141][ T6497] bridge_slave_1: left promiscuous mode
[   71.138509][ T6497] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.150364][ T6497] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[   71.430326][ T6516] netlink: 212 bytes leftover after parsing attributes in process `syz.2.131'.
[   71.440506][ T6516] tipc: Started in network mode
[   71.444879][ T6516] tipc: Node identity , cluster identity 4711
[   71.448518][ T6516] tipc: Failed to obtain node identity
[   71.454443][ T6516] tipc: Enabling of bearer <eth:gre0> rejected, failed to enable media
[   71.512737][ T6466] netlink: 500 bytes leftover after parsing attributes in process `syz.0.126'.
[   71.668653][ T6546] xt_policy: output policy not valid in PREROUTING and INPUT
[   71.831988][ T6573] lo speed is unknown, defaulting to 1000
[   72.001419][ T6585] netlink: 9 bytes leftover after parsing attributes in process `syz.1.135'.
[   72.008775][ T6589] netlink: 14 bytes leftover after parsing attributes in process `syz.2.136'.
[   72.015794][ T6585] 0: renamed from hsr0
[   72.019105][ T6585] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   72.022486][ T6585] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   72.027657][ T6585] 0: entered allmulticast mode
[   72.029353][ T6585] hsr_slave_0: entered allmulticast mode
[   72.031235][ T6585] hsr_slave_1: entered allmulticast mode
[   72.033969][ T6585] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[   72.092823][ T6589] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   72.098488][ T6589] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   72.103882][ T6589] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[   72.108209][ T6589] bond0 (unregistering): Released all slaves
[   72.236898][ T6598] vlan2: entered promiscuous mode
[   72.238855][ T6598] vlan2: entered allmulticast mode
[   72.275561][ T6598] netlink: 'syz.1.139': attribute type 11 has an invalid length.
[   72.330230][ T6602] x_tables: duplicate underflow at hook 2
[   72.728381][ T6625] xt_CT: No such helper "snmp"
[   73.049617][ T6645] netlink: 'syz.1.152': attribute type 1 has an invalid length.
[   73.263726][ T6655] netlink: 'syz.1.155': attribute type 10 has an invalid length.
[   73.271557][ T6655] veth0_vlan: left promiscuous mode
[   73.275010][ T6655] veth0_vlan: entered promiscuous mode
[   73.278251][ T6655] team0: Device veth0_vlan failed to register rx_handler
[   73.582011][ T6667] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[   73.585830][ T6667] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   73.619561][ T6669] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[   73.621940][ T6669] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[   73.757194][ T5221] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   73.760460][ T5221] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   73.761794][ T5859] veth0_to_bond: left allmulticast mode
[   73.764947][ T5221] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   73.767775][ T5859] veth0_to_bond: left promiscuous mode
[   73.768805][ T5221] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   73.770044][ T5859] bridge1: port 2(veth0_to_bond) entered disabled state
[   73.774298][ T5221] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   73.787768][ T5859] veth3: left allmulticast mode
[   73.789391][ T5859] veth3: left promiscuous mode
[   73.790986][ T5859] bridge1: port 1(veth3) entered disabled state
[   74.011199][ T5859] bond0 (unregistering): Released all slaves
[   74.025579][ T5859] bond1 (unregistering): Released all slaves
[   74.036970][ T5859] bond2 (unregistering): Released all slaves
[   74.048605][ T5859] bond3 (unregistering): Released all slaves
[   74.092800][ T6680] lo speed is unknown, defaulting to 1000
[   74.111070][ T5859] tipc: Left network mode
[   74.344990][ T6677] lo speed is unknown, defaulting to 1000
[   74.729595][ T5859] hsr_slave_0: left promiscuous mode
[   74.731688][ T5859] batman_adv: batadv0: Interface deactivated: virt_wifi0
[   74.736425][ T5859] batman_adv: batadv0: Removing interface: virt_wifi0
[   75.076133][ T6556] smc: removing ib device syz0
[   75.078346][ T6705] C: renamed from lo
[   75.080836][ T6705] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   75.122117][ T6711] netlink: 'syz.2.168': attribute type 9 has an invalid length.
[   75.184117][ T6719] warning: `syz.2.170' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   75.307229][ T6677] chnl_net:caif_netlink_parms(): no params data found
[   75.410881][ T6726] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   75.430169][ T6728] netlink: 'syz.0.172': attribute type 12 has an invalid length.
[   75.678544][ T6677] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.681774][ T6677] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.686113][ T6677] bridge_slave_0: entered allmulticast mode
[   75.689514][ T6677] bridge_slave_0: entered promiscuous mode
[   75.692897][ T6677] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.696126][ T6677] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.698925][ T6677] bridge_slave_1: entered allmulticast mode
[   75.701632][ T6677] bridge_slave_1: entered promiscuous mode
[   75.751535][ T6677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   75.756900][ T6677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   75.801585][ T6677] team0: Port device team_slave_0 added
[   75.829195][ T6677] team0: Port device team_slave_1 added
[   75.843435][ T5221] Bluetooth: hci0: command tx timeout
[   75.871433][ T6677] batman_adv: batadv0: Adding interface: batadv_slave_0
[   75.874713][ T6677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   75.885229][ T6677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   75.889923][ T6677] batman_adv: batadv0: Adding interface: batadv_slave_1
[   75.892488][ T6677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   75.901282][ T6677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   76.013025][ T6677] hsr_slave_0: entered promiscuous mode
[   76.015936][ T6677] hsr_slave_1: entered promiscuous mode
[   76.264226][ T6771] __nla_validate_parse: 16 callbacks suppressed
[   76.264885][ T6771] netlink: 20 bytes leftover after parsing attributes in process `syz.0.179'.
[   76.458750][ T6677] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   76.462775][ T6677] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   76.472433][ T6677] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   76.477983][ T6677] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   76.531880][ T6677] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.547131][ T6677] 8021q: adding VLAN 0 to HW filter on device team0
[   76.554590][ T6541] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.556917][ T6541] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.564974][ T6541] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.567372][ T6541] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.626612][ T6677] 8021q: adding VLAN 0 to HW filter on device batadv0
[   76.647656][ T6677] veth0_vlan: entered promiscuous mode
[   76.652192][ T6677] veth1_vlan: entered promiscuous mode
[   76.670699][ T6677] veth0_macvtap: entered promiscuous mode
[   76.676820][ T6677] veth1_macvtap: entered promiscuous mode
[   76.689286][ T6677] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.699635][ T6677] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.708797][ T6677] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.712136][ T6677] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.716153][ T6677] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.719437][ T6677] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.773595][ T6556] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.776720][ T6556] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.804046][ T6556] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.807157][ T6556] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.389796][ T6802] netlink: 12 bytes leftover after parsing attributes in process `syz.0.183'.
[   77.409243][ T6802] netlink: 64 bytes leftover after parsing attributes in process `syz.0.183'.
[   77.417894][ T6802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.183'.
[   77.420912][ T6802] netlink: 4 bytes leftover after parsing attributes in process `syz.0.183'.
[   77.444432][ T6556] wlan1: Trigger new scan to find an IBSS to join
[   77.463797][ T6804] netlink: 4 bytes leftover after parsing attributes in process `syz.0.184'.
[   77.580324][ T6806] netlink: 12 bytes leftover after parsing attributes in process `syz.0.185'.
[   77.586167][ T6806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.185'.
[   77.594146][ T6806] pim6reg: entered allmulticast mode
[   77.597409][ T6806] pim6reg: left allmulticast mode
[   77.761941][ T6817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.189'.
[   77.762768][ T6816] netlink: 24 bytes leftover after parsing attributes in process `syz.0.190'.
[   77.811370][ T6819] 8021q: adding VLAN 0 to HW filter on device macvtap1
[   77.813901][ T6819] team0: Device macvtap1 is already an upper device of the team interface
[   78.265285][ T6841] netlink: 'syz.2.196': attribute type 1 has an invalid length.
[   78.270789][ T6841] netlink: 'syz.2.196': attribute type 1 has an invalid length.
[   78.277826][ T6841] xt_hashlimit: max too large, truncated to 1048576
[   78.282069][ T6841] netlink: 'syz.2.196': attribute type 4 has an invalid length.
[   78.288917][ T6841] netlink: 'syz.2.196': attribute type 4 has an invalid length.
[   78.437026][ T6845] can: request_module (can-proto-0) failed.
[   78.585418][ T6862] netlink: 'syz.2.199': attribute type 10 has an invalid length.
[   79.059595][ T5859] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.082921][ T6879] netlink: 'syz.2.204': attribute type 4 has an invalid length.
[   79.309240][ T6885] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   79.339850][ T6885] dummy0: left allmulticast mode
[   79.342520][ T6885] dummy0: left promiscuous mode
[   79.345221][ T6885] bridge0: port 3(dummy0) entered disabled state
[   79.350330][ T6885] bridge_slave_0: left allmulticast mode
[   79.352305][ T6885] bridge_slave_0: left promiscuous mode
[   79.354351][ T6885] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.367227][ T6885] team0: Port device team_slave_0 removed
[   79.372619][ T6885] team0: Port device team_slave_1 removed
[   79.376546][ T6885] batman_adv: batadv0: Removing interface: batadv_slave_0
[   79.379708][ T6885] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   79.382232][ T6885] batman_adv: batadv0: Removing interface: batadv_slave_1
[   79.393458][ T6886] netlink: 'syz.2.206': attribute type 10 has an invalid length.
[   79.396693][ T6886] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[   79.434609][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   79.437910][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   79.441651][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   79.448476][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   79.452247][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   79.618485][ T6896] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   79.622013][ T6896] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   79.625751][ T6896] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   79.629444][ T6896] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   79.675700][ T6887] chnl_net:caif_netlink_parms(): no params data found
[   79.773542][ T6887] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.785314][ T6887] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.788309][ T6887] bridge_slave_0: entered allmulticast mode
[   79.791904][ T6887] bridge_slave_0: entered promiscuous mode
[   79.796334][ T6887] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.799258][ T6887] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.802313][ T6887] bridge_slave_1: entered allmulticast mode
[   79.811271][ T6887] bridge_slave_1: entered promiscuous mode
[   79.872942][ T6887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   79.882929][ T6887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.925711][ T6887] team0: Port device team_slave_0 added
[   79.943641][ T6887] team0: Port device team_slave_1 added
[   79.975928][ T6887] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.978850][ T6887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.990340][ T6887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.024596][ T6887] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.028402][ T6887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.042466][ T6887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.129510][ T6887] hsr_slave_0: entered promiscuous mode
[   80.132695][ T6887] hsr_slave_1: entered promiscuous mode
[   80.144481][ T6887] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   80.147619][ T6887] Cannot create hsr debugfs directory
[   80.339839][ T6942] C: renamed from team_slave_0
[   80.342922][ T6942] netlink: 'syz.0.220': attribute type 3 has an invalid length.
[   80.346981][ T6942] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   80.476365][ T6951] syzkaller0: entered promiscuous mode
[   80.478367][ T6951] syzkaller0: entered allmulticast mode
[   80.543967][ T6959] veth1_macvtap: left promiscuous mode
[   80.545732][ T6959] macsec0: entered promiscuous mode
[   80.552674][ T6959] veth1_macvtap: entered promiscuous mode
[   80.556774][ T6959] macsec0: left promiscuous mode
[   80.596845][   T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   80.601069][   T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   80.623370][ T2318] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   80.667512][ T6976] netlink: 'syz.0.230': attribute type 18 has an invalid length.
[   80.843964][ T2318] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   81.003795][ T5859] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.060343][ T5859] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.063445][ T2318] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   81.104832][ T5859] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.194667][ T5859] bridge_slave_1: left allmulticast mode
[   81.197016][ T5859] bridge_slave_1: left promiscuous mode
[   81.199447][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.205426][  T790] cfg80211: failed to load regulatory.db
[   81.210058][ T5859] bridge_slave_0: left allmulticast mode
[   81.211950][ T5859] bridge_slave_0: left promiscuous mode
[   81.214133][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.413416][ T5859] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   81.417630][ T5859] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   81.421278][ T5859] bond0 (unregistering): Released all slaves
[   81.494226][ T6982] __nla_validate_parse: 153 callbacks suppressed
[   81.494241][ T6982] netlink: 12 bytes leftover after parsing attributes in process `syz.2.231'.
[   81.523616][ T5835] Bluetooth: hci0: command tx timeout
[   81.655942][ T6988] xt_ecn: cannot match TCP bits for non-tcp packets
[   81.656468][ T6987] xt_ecn: cannot match TCP bits for non-tcp packets
[   81.677324][ T5859] hsr_slave_0: left promiscuous mode
[   81.679828][ T5859] hsr_slave_1: left promiscuous mode
[   81.681983][ T5859] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   81.685362][ T5859] batman_adv: batadv0: Removing interface: batadv_slave_0
[   81.688110][ T5859] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   81.690614][ T5859] batman_adv: batadv0: Removing interface: batadv_slave_1
[   81.699795][ T5859] veth1_macvtap: left promiscuous mode
[   81.702458][ T5859] veth0_macvtap: left promiscuous mode
[   81.706837][ T5859] veth1_vlan: left promiscuous mode
[   81.709005][ T5859] veth0_vlan: left promiscuous mode
[   82.022670][ T5859] team0 (unregistering): Port device team_slave_1 removed
[   82.049736][ T5859] team0 (unregistering): Port device team_slave_0 removed
[   82.343675][ T6987] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   82.348651][ T6988] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   82.454887][ T6887] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   82.462604][ T6887] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   82.477191][ T6887] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   82.557660][ T6887] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   82.639260][ T6887] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.650312][ T6887] 8021q: adding VLAN 0 to HW filter on device team0
[   82.656191][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.658501][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.669950][ T7016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.237'.
[   82.674873][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.677293][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.689107][ T7016] syz_tun: entered allmulticast mode
[   82.714508][ T6887] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   82.737319][ T7018] netlink: 12 bytes leftover after parsing attributes in process `syz.0.238'.
[   82.802745][ T7022] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   82.871632][ T6887] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.916541][ T6887] veth0_vlan: entered promiscuous mode
[   82.937477][ T6887] veth1_vlan: entered promiscuous mode
[   82.951864][ T7030] netlink: 28 bytes leftover after parsing attributes in process `syz.0.243'.
[   82.958975][ T7030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.243'.
[   82.970025][ T6887] veth0_macvtap: entered promiscuous mode
[   82.985656][ T6887] veth1_macvtap: entered promiscuous mode
[   83.002973][ T6887] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.018611][ T6887] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.026402][ T7032] netlink: 'syz.2.242': attribute type 9 has an invalid length.
[   83.031290][ T6887] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.035166][ T6887] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.038990][ T6887] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.042831][ T6887] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.122346][ T6556] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.130091][ T6556] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.164997][ T6556] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.168268][ T6556] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.344270][   T24] tipc: Node number set to 3482049251
[   83.655556][ T7052] netlink: 8 bytes leftover after parsing attributes in process `syz.2.246'.
[   83.673662][ T7052] netlink: 8 bytes leftover after parsing attributes in process `syz.2.246'.
[   83.677949][ T7052] netlink: 8 bytes leftover after parsing attributes in process `syz.2.246'.
[   83.987501][ T7072] pim6reg1: entered promiscuous mode
[   83.989773][ T7072] pim6reg1: entered allmulticast mode
[   84.039657][ T7075] netlink: 24 bytes leftover after parsing attributes in process `syz.2.252'.
[   84.061365][ T7075] bond0: entered promiscuous mode
[   84.065162][ T7075] 8021q: adding VLAN 0 to HW filter on device bond0
[   84.142281][ T7075] bond0 (unregistering): Released all slaves
[   84.159587][ T7082] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (2)
[   84.207148][ T7084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.254'.
[   84.323426][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   84.360818][ T7097] xt_NFQUEUE: number of total queues is 0
[   85.092018][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.457680][ T5221] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   85.462664][ T5221] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   85.466734][ T5221] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   85.469607][ T5221] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   85.472392][ T5221] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   85.618224][ T7123] chnl_net:caif_netlink_parms(): no params data found
[   85.685008][ T7123] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.687411][ T7123] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.691840][ T7123] bridge_slave_0: entered allmulticast mode
[   85.696646][ T7123] bridge_slave_0: entered promiscuous mode
[   85.703755][ T7123] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.710865][ T7123] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.713462][ T7123] bridge_slave_1: entered allmulticast mode
[   85.718989][ T7123] bridge_slave_1: entered promiscuous mode
[   85.762787][ T7123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.782852][ T7123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.806233][ T7123] team0: Port device team_slave_0 added
[   85.810139][ T7123] team0: Port device team_slave_1 added
[   85.832208][ T7123] batman_adv: batadv0: Adding interface: batadv_slave_0
[   85.834692][ T7123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.842918][ T7123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   85.850335][ T7123] batman_adv: batadv0: Adding interface: batadv_slave_1
[   85.852602][ T7123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.861139][ T7123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   85.888700][ T7123] hsr_slave_0: entered promiscuous mode
[   85.891048][ T7123] hsr_slave_1: entered promiscuous mode
[   86.531439][ T7144] __nla_validate_parse: 9 callbacks suppressed
[   86.531452][ T7144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.267'.
[   86.612649][ T7146] batadv1: entered allmulticast mode
[   86.655919][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.721759][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.739649][ T7148] netlink: 12 bytes leftover after parsing attributes in process `syz.0.269'.
[   86.767444][ T7148] 8021q: adding VLAN 0 to HW filter on device bond2
[   86.771390][ T7148] bond1: (slave bond2): Enslaving as an active interface with an up link
[   86.778255][ T7148] netlink: 28 bytes leftover after parsing attributes in process `syz.0.269'.
[   86.789524][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.800163][ T7148] 8021q: adding VLAN 0 to HW filter on device bond1
[   86.830635][ T7155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.270'.
[   86.838320][ T7155] netlink: 44 bytes leftover after parsing attributes in process `syz.0.270'.
[   86.937065][   T12] bridge_slave_1: left allmulticast mode
[   86.940165][   T12] bridge_slave_1: left promiscuous mode
[   86.942128][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.947944][   T12] bridge_slave_0: left allmulticast mode
[   86.950112][   T12] bridge_slave_0: left promiscuous mode
[   86.952149][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.194238][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   87.198839][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   87.202602][   T12] bond0 (unregistering): Released all slaves
[   87.220119][ T7169] netlink: 'syz.0.272': attribute type 1 has an invalid length.
[   87.222666][ T7169] netlink: 20 bytes leftover after parsing attributes in process `syz.0.272'.
[   87.228669][ T7169] netlink: 'syz.0.272': attribute type 1 has an invalid length.
[   87.231348][ T7169] netlink: 20 bytes leftover after parsing attributes in process `syz.0.272'.
[   87.237726][ T7169] netlink: 'syz.0.272': attribute type 1 has an invalid length.
[   87.240317][ T7169] netlink: 20 bytes leftover after parsing attributes in process `syz.0.272'.
[   87.243704][ T7169] netlink: 'syz.0.272': attribute type 1 has an invalid length.
[   87.246190][ T7169] netlink: 20 bytes leftover after parsing attributes in process `syz.0.272'.
[   87.249342][ T7169] netlink: 'syz.0.272': attribute type 1 has an invalid length.
[   87.251910][ T7169] netlink: 20 bytes leftover after parsing attributes in process `syz.0.272'.
[   87.260764][ T7169] netlink: 'syz.0.272': attribute type 1 has an invalid length.
[   87.266954][ T7169] netlink: 'syz.0.272': attribute type 1 has an invalid length.
[   87.270300][ T7169] netlink: 'syz.0.272': attribute type 1 has an invalid length.
[   87.276951][ T7169] netlink: 'syz.0.272': attribute type 1 has an invalid length.
[   87.279780][ T7169] netlink: 'syz.0.272': attribute type 1 has an invalid length.
[   87.323561][    T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   87.374767][ T7188] syzkaller1: entered promiscuous mode
[   87.378950][ T7188] syzkaller1: entered allmulticast mode
[   87.482612][   T12] hsr_slave_0: left promiscuous mode
[   87.490520][   T12] hsr_slave_1: left promiscuous mode
[   87.498320][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   87.502296][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   87.511732][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   87.526287][ T5221] Bluetooth: hci0: command tx timeout
[   87.527961][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   87.543821][    T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   87.557733][   T12] veth1_macvtap: left promiscuous mode
[   87.560119][   T12] veth0_macvtap: left promiscuous mode
[   87.562555][   T12] veth1_vlan: left promiscuous mode
[   87.573842][   T12] veth0_vlan: left promiscuous mode
[   87.995403][   T12] team0 (unregistering): Port device team_slave_1 removed
[   88.014093][   T12] team0 (unregistering): Port device team_slave_0 removed
[   88.218177][ T7210] : renamed from bond_slave_0
[   88.305027][ T7212] 8021q: adding VLAN 0 to HW filter on device bond3
[   88.324992][ T7212] 8021q: adding VLAN 0 to HW filter on device bond3
[   88.328078][ T7212] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address
[   88.334138][ T7212] bond3: (slave vxcan1): Error -95 calling set_mac_address
[   88.370862][ T7219] gretap1: entered promiscuous mode
[   88.378425][ T7219] bond3: (slave gretap1): making interface the new active one
[   88.382119][ T7219] bond3: (slave gretap1): Enslaving as an active interface with an up link
[   88.389267][ T7123] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   88.396304][ T7123] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   88.403654][ T7123] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   88.410585][ T7123] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   88.474281][ T7123] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.488762][ T7123] 8021q: adding VLAN 0 to HW filter on device team0
[   88.494429][ T6556] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.496708][ T6556] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.508009][ T6556] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.510491][ T6556] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.828221][ T7123] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.913652][ T7123] veth0_vlan: entered promiscuous mode
[   88.928528][ T7123] veth1_vlan: entered promiscuous mode
[   88.975962][ T7123] veth0_macvtap: entered promiscuous mode
[   88.988340][ T7123] veth1_macvtap: entered promiscuous mode
[   89.015745][ T7123] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.029754][ T7123] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.045689][ T7123] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.048497][ T7123] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.051251][ T7123] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.063610][ T7123] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.086332][ T7248] wg2: entered promiscuous mode
[   89.087961][ T7248] wg2: entered allmulticast mode
[   89.127701][ T7253] af_packet: tpacket_rcv: packet too big, clamped from 144 to 4294967272. macoff=96
[   89.165166][ T6556] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.167895][ T6556] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.186609][ T6556] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.189143][ T6556] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.290756][ T7264] trusted_key: syz.2.287 sent an empty control message without MSG_MORE.
[   89.405194][ T7277] pim6reg: entered allmulticast mode
[   89.409207][ T7277] pim6reg: left allmulticast mode
[   89.496698][ T7287] 8021q: adding VLAN 0 to HW filter on device team0
[   89.501791][ T7287] bond0: (slave team0): Enslaving as an active interface with an up link
[   89.707676][ T7307] tipc: Resetting bearer <eth:syzkaller0>
[   89.710301][ T7307] tipc: Resetting bearer <eth:syzkaller0>
[   89.943064][ T7325] syz_tun: left allmulticast mode
[   89.992317][ T7325] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   90.036889][ T7325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   90.091939][ T7325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   90.147821][ T7325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   90.210728][ T7336] team0: Device is already in use.
[   90.524823][ T7363] syz_tun: entered allmulticast mode
[   90.527420][ T7363] xt_policy: too many policy elements
[   90.532971][ T7362] syz_tun: left allmulticast mode
[   90.792507][ T7381] IPv6: NLM_F_REPLACE set, but no existing node found!
[   90.806608][ T7383] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   90.888254][ T7387] batadv0: entered promiscuous mode
[   90.889939][ T7387] batadv0: entered allmulticast mode
[   90.891772][ T7387] bridge0: port 1(batadv0) entered blocking state
[   90.896662][ T7387] bridge0: port 1(batadv0) entered disabled state
[   90.917555][   T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[   90.920505][   T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[   90.966232][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.574940][ T7403] __nla_validate_parse: 136 callbacks suppressed
[   91.574949][ T7403] netlink: 12 bytes leftover after parsing attributes in process `syz.0.325'.
[   91.624306][ T7403] 8021q: adding VLAN 0 to HW filter on device bond5
[   91.634142][ T7403] bond4: (slave bond5): Enslaving as an active interface with an up link
[   91.638904][ T7403] netlink: 28 bytes leftover after parsing attributes in process `syz.0.325'.
[   91.647897][ T7403] 8021q: adding VLAN 0 to HW filter on device bond4
[   91.763594][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   91.766318][ T7419] netlink: 52 bytes leftover after parsing attributes in process `syz.2.329'.
[   91.770250][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   91.774130][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   91.778262][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   91.783104][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   91.802820][ T7424] netlink: 24 bytes leftover after parsing attributes in process `syz.2.330'.
[   91.813244][ T7424] netlink: 24 bytes leftover after parsing attributes in process `syz.2.330'.
[   91.822303][ T7424] batadv_slave_0: entered allmulticast mode
[   91.826989][ T7424] netlink: 40 bytes leftover after parsing attributes in process `syz.2.330'.
[   91.869267][ T7426] bond6: entered promiscuous mode
[   91.871560][ T7426] bond6: entered allmulticast mode
[   91.875759][ T7426] 8021q: adding VLAN 0 to HW filter on device bond6
[   91.937708][ T7433] netlink: 12 bytes leftover after parsing attributes in process `syz.0.333'.
[   91.963837][ T7433] netlink: 40 bytes leftover after parsing attributes in process `syz.0.333'.
[   91.994508][ T7416] chnl_net:caif_netlink_parms(): no params data found
[   92.071452][ T7416] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.074175][ T7416] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.076527][ T7416] bridge_slave_0: entered allmulticast mode
[   92.079717][ T7416] bridge_slave_0: entered promiscuous mode
[   92.082935][ T7416] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.086294][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   92.090807][ T7416] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.094474][ T7416] bridge_slave_1: entered allmulticast mode
[   92.097343][ T7416] bridge_slave_1: entered promiscuous mode
[   92.116818][ T7416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   92.124261][ T7416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   92.157643][ T7416] team0: Port device team_slave_0 added
[   92.165401][ T7416] team0: Port device team_slave_1 added
[   92.173785][ T7449] netlink: 28 bytes leftover after parsing attributes in process `syz.0.334'.
[   92.213357][ T7416] batman_adv: batadv0: Adding interface: batadv_slave_0
[   92.218570][ T7416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.232143][ T7416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   92.237845][ T7416] batman_adv: batadv0: Adding interface: batadv_slave_1
[   92.240147][ T7416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.249698][ T7416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   92.283781][ T7416] hsr_slave_0: entered promiscuous mode
[   92.286860][ T7416] hsr_slave_1: entered promiscuous mode
[   92.289451][ T7416] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   92.292819][ T7416] Cannot create hsr debugfs directory
[   92.309598][ T7452] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   92.314287][ T7452] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[   92.318122][ T7452] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[   92.468475][ T7460] batman_adv: batadv0: Adding interface: dummy0
[   92.471238][ T7460] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.481905][ T7460] batman_adv: batadv0: Interface activated: dummy0
[   92.549039][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.624230][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.684887][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.817268][   T13] bridge_slave_1: left allmulticast mode
[   92.819756][   T13] bridge_slave_1: left promiscuous mode
[   92.822712][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.832323][   T13] bridge_slave_0: left allmulticast mode
[   92.835400][   T13] bridge_slave_0: left promiscuous mode
[   92.837828][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.122380][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   93.128092][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   93.132014][   T13] bond0 (unregistering): Released all slaves
[   93.177616][ T7478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.344'.
[   93.189231][ T7478] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 40069 - 0
[   93.192589][ T7478] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 40069 - 0
[   93.197051][ T7478] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 40069 - 0
[   93.200721][ T7478] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 40069 - 0
[   93.206595][ T7478] geneve3: entered promiscuous mode
[   93.209135][ T7478] geneve3: entered allmulticast mode
[   93.370760][ T7483] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[   93.385553][ T7483] bond0: entered promiscuous mode
[   93.387266][ T7483] bond0: entered allmulticast mode
[   93.389103][ T7483] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.427472][   T13] hsr_slave_0: left promiscuous mode
[   93.429793][   T13] hsr_slave_1: left promiscuous mode
[   93.432293][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   93.435638][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   93.439412][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   93.442694][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   93.465781][   T13] veth1_macvtap: left promiscuous mode
[   93.468263][   T13] veth0_macvtap: left promiscuous mode
[   93.470739][   T13] veth1_vlan: left promiscuous mode
[   93.472748][   T13] veth0_vlan: left promiscuous mode
[   93.772585][   T13] team0 (unregistering): Port device team_slave_1 removed
[   93.796241][   T13] team0 (unregistering): Port device team_slave_0 removed
[   93.845365][ T5835] Bluetooth: hci0: command tx timeout
[   94.078423][ T7497] validate_nla: 87 callbacks suppressed
[   94.078439][ T7497] netlink: 'syz.0.348': attribute type 10 has an invalid length.
[   94.127755][ T7497] team0: Port device geneve0 added
[   94.284651][ T7499] erspan0: left allmulticast mode
[   94.310685][ T7499] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   94.371093][ T7504] wireguard0: entered promiscuous mode
[   94.373083][ T7504] wireguard0: entered allmulticast mode
[   94.404345][ T7416] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   94.436254][ T7416] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   94.442037][ T7509] netlink: 'syz.2.352': attribute type 4 has an invalid length.
[   94.446423][ T7509] netlink: 'syz.2.352': attribute type 17 has an invalid length.
[   94.448711][ T7416] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   94.469088][ T7416] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   94.599255][ T7519] netlink: 'syz.0.354': attribute type 5 has an invalid length.
[   94.671363][ T7416] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.708724][ T7416] 8021q: adding VLAN 0 to HW filter on device team0
[   94.737693][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.740098][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.770019][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.772583][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.039031][ T7416] 8021q: adding VLAN 0 to HW filter on device batadv0
[   95.079892][ T7540] netlink: 'syz.2.356': attribute type 4 has an invalid length.
[   95.249090][ T7416] veth0_vlan: entered promiscuous mode
[   95.268547][ T7416] veth1_vlan: entered promiscuous mode
[   95.287094][ T7416] veth0_macvtap: entered promiscuous mode
[   95.291176][ T7416] veth1_macvtap: entered promiscuous mode
[   95.304482][ T7416] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.311478][ T7416] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.321313][ T7416] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.324408][ T7416] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.327363][ T7416] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.330267][ T7416] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.386894][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.392913][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.408570][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.411451][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.879564][ T7566] netlink: 'syz.0.362': attribute type 2 has an invalid length.
[   95.924596][ T5835] Bluetooth: hci0: command 0x041b tx timeout
[   96.346262][ T7569] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   96.429607][ T7569] batadv_slave_0: left allmulticast mode
[   96.664794][ T7573] __nla_validate_parse: 16 callbacks suppressed
[   96.664804][ T7573] netlink: 4 bytes leftover after parsing attributes in process `syz.0.366'.
[   96.792073][ T7579] netlink: 'syz.0.368': attribute type 1 has an invalid length.
[   96.803269][ T7579] netlink: 72 bytes leftover after parsing attributes in process `syz.0.368'.
[   96.875837][ T7583] netlink: 4 bytes leftover after parsing attributes in process `syz.2.369'.
[   96.878830][ T7582] netlink: 4 bytes leftover after parsing attributes in process `syz.2.369'.
[   96.914062][ T7582] netlink: 4 bytes leftover after parsing attributes in process `syz.2.369'.
[   96.921785][ T7583] netlink: 4 bytes leftover after parsing attributes in process `syz.2.369'.
[   97.079975][ T7590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.370'.
[   97.082951][ T7590] netlink: 4 bytes leftover after parsing attributes in process `syz.2.370'.
[   97.103478][ T7590] netlink: 'syz.2.370': attribute type 15 has an invalid length.
[   97.107995][ T7590] netlink: 'syz.2.370': attribute type 18 has an invalid length.
[   97.212910][ T7595] bridge0: port 2(gretap0) entered blocking state
[   97.234267][ T7595] bridge0: port 2(gretap0) entered disabled state
[   97.236835][ T7595] gretap0: entered allmulticast mode
[   97.243352][ T7595] gretap0: entered promiscuous mode
[   97.263853][ T7595] bridge0: port 2(gretap0) entered blocking state
[   97.266099][ T7595] bridge0: port 2(gretap0) entered forwarding state
[   97.435976][ T7495] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.047118][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   98.050528][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   98.055468][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   98.059664][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   98.062733][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   98.288480][ T7605] chnl_net:caif_netlink_parms(): no params data found
[   98.389702][ T7605] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.393022][ T7605] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.396996][ T7605] bridge_slave_0: entered allmulticast mode
[   98.401289][ T7605] bridge_slave_0: entered promiscuous mode
[   98.411471][ T7605] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.415031][ T7605] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.418379][ T7605] bridge_slave_1: entered allmulticast mode
[   98.422568][ T7605] bridge_slave_1: entered promiscuous mode
[   98.476814][ T7605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   98.494804][ T7605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   98.543041][ T7605] team0: Port device team_slave_0 added
[   98.554321][ T7605] team0: Port device team_slave_1 added
[   98.597377][ T7605] batman_adv: batadv0: Adding interface: batadv_slave_0
[   98.600566][ T7605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   98.614047][ T7605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   98.620943][ T7605] batman_adv: batadv0: Adding interface: batadv_slave_1
[   98.625753][ T7605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   98.636197][ T7605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   98.677062][ T7605] hsr_slave_0: entered promiscuous mode
[   98.679494][ T7605] hsr_slave_1: entered promiscuous mode
[   98.832197][ T5881] IPVS: starting estimator thread 0...
[   98.934942][ T7621] IPVS: using max 80 ests per chain, 192000 per kthread
[   98.990777][ T7495] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.081787][ T7495] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.156079][ T7495] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.418033][ T7495] bridge_slave_1: left allmulticast mode
[   99.420501][ T7495] bridge_slave_1: left promiscuous mode
[   99.423955][ T7495] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.429100][ T7495] bridge_slave_0: left allmulticast mode
[   99.436478][ T7495] bridge_slave_0: left promiscuous mode
[   99.441079][ T7495] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.764528][ T7495] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   99.770551][ T7495] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   99.778837][ T7495] bond0 (unregistering): Released all slaves
[   99.813623][ T7648] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   99.881069][ T7655] pim6reg1: entered promiscuous mode
[   99.882782][ T7655] pim6reg1: entered allmulticast mode
[  100.083300][ T5835] Bluetooth: hci0: command tx timeout
[  100.102999][ T7662] netlink: 'syz.0.385': attribute type 1 has an invalid length.
[  100.110209][ T7495] hsr_slave_0: left promiscuous mode
[  100.115358][ T7495] hsr_slave_1: left promiscuous mode
[  100.117593][ T7495] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  100.120647][ T7495] batman_adv: batadv0: Removing interface: batadv_slave_0
[  100.133623][ T7495] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  100.133646][ T7664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.386'.
[  100.136947][ T7495] batman_adv: batadv0: Removing interface: batadv_slave_1
[  100.159337][ T7495] veth1_macvtap: left promiscuous mode
[  100.161726][ T7495] veth0_macvtap: left promiscuous mode
[  100.167066][ T7495] veth1_vlan: left promiscuous mode
[  100.169531][ T7495] veth0_vlan: left promiscuous mode
[  100.450594][ T7495] team0 (unregistering): Port device team_slave_1 removed
[  100.472342][ T7495] team0 (unregistering): Port device team_slave_0 removed
[  100.708335][ T7662] 8021q: adding VLAN 0 to HW filter on device bond8
[  100.721289][ T7665] 8021q: adding VLAN 0 to HW filter on device bond8
[  100.727132][ T7665] bond8: (slave vxcan1): The slave device specified does not support setting the MAC address
[  100.731362][ T7665] bond8: (slave vxcan1): Error -95 calling set_mac_address
[  100.750788][ T7664] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  100.950403][ T7605] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  100.957910][ T7605] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  100.974959][ T7605] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  100.981492][ T7605] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  101.069382][ T7693] netlink: 44 bytes leftover after parsing attributes in process `syz.2.390'.
[  101.204848][ T7605] 8021q: adding VLAN 0 to HW filter on device bond0
[  101.219498][ T7605] 8021q: adding VLAN 0 to HW filter on device team0
[  101.225400][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.227761][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[  101.239948][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.242412][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[  101.281943][ T7701] netlink: 'syz.2.392': attribute type 10 has an invalid length.
[  101.438552][ T5881] hid-generic 0005:10CB:0007.0001: collection stack underflow
[  101.441160][ T5881] hid-generic 0005:10CB:0007.0001: item 0 0 0 12 parsing failed
[  101.450199][ T5881] hid-generic 0005:10CB:0007.0001: probe with driver hid-generic failed with error -22
[  101.468050][ T7605] 8021q: adding VLAN 0 to HW filter on device batadv0
[  101.525305][ T7605] veth0_vlan: entered promiscuous mode
[  101.532228][ T7605] veth1_vlan: entered promiscuous mode
[  101.557120][ T7605] veth0_macvtap: entered promiscuous mode
[  101.576537][ T7605] veth1_macvtap: entered promiscuous mode
[  101.604983][ T7605] batman_adv: batadv0: Interface activated: batadv_slave_0
[  101.625736][ T7605] batman_adv: batadv0: Interface activated: batadv_slave_1
[  101.634452][ T7605] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.637477][ T7605] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  101.640339][ T7605] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.643049][ T7605] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  101.681493][ T7730] gretap0: left allmulticast mode
[  101.689682][ T7730] gretap0: left promiscuous mode
[  101.692100][ T7730] bridge0: port 2(gretap0) entered disabled state
[  101.704362][ T7730] bridge0: port 1(batadv0) entered disabled state
[  101.756763][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.772182][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.797307][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.799916][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.858439][ T7717] ==================================================================
[  101.861053][ T7717] BUG: KASAN: slab-use-after-free in __mutex_lock+0x738/0xe80
[  101.863485][ T7717] Read of size 8 at addr ffff88803d1440a0 by task khidpd_10cb0007/7717
[  101.867128][ T7717] 
[  101.867972][ T7717] CPU: 1 UID: 0 PID: 7717 Comm: khidpd_10cb0007 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  101.867982][ T7717] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  101.867987][ T7717] Call Trace:
[  101.867991][ T7717]  <TASK>
[  101.867994][ T7717]  dump_stack_lvl+0x189/0x250
[  101.868005][ T7717]  ? __virt_addr_valid+0x1c8/0x5c0
[  101.868015][ T7717]  ? rcu_is_watching+0x15/0xb0
[  101.868024][ T7717]  ? __kasan_check_byte+0x12/0x40
[  101.868033][ T7717]  ? __pfx_dump_stack_lvl+0x10/0x10
[  101.868041][ T7717]  ? rcu_is_watching+0x15/0xb0
[  101.868048][ T7717]  ? lock_release+0x4b/0x3e0
[  101.868057][ T7717]  ? __virt_addr_valid+0x1c8/0x5c0
[  101.868065][ T7717]  ? __virt_addr_valid+0x4a5/0x5c0
[  101.868074][ T7717]  print_report+0xd2/0x2b0
[  101.868081][ T7717]  ? __mutex_lock+0x738/0xe80
[  101.868088][ T7717]  kasan_report+0x118/0x150
[  101.868097][ T7717]  ? __mutex_lock+0x738/0xe80
[  101.868104][ T7717]  __mutex_lock+0x738/0xe80
[  101.868111][ T7717]  ? __mutex_lock+0x51b/0xe80
[  101.868119][ T7717]  ? l2cap_unregister_user+0x6a/0x1b0
[  101.868127][ T7717]  ? __pfx___mutex_lock+0x10/0x10
[  101.868135][ T7717]  ? __pfx___timer_delete_sync+0x10/0x10
[  101.868147][ T7717]  l2cap_unregister_user+0x6a/0x1b0
[  101.868154][ T7717]  hidp_session_thread+0x3c9/0x410
[  101.868162][ T7717]  ? __pfx_hidp_session_thread+0x10/0x10
[  101.868169][ T7717]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  101.868179][ T7717]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  101.868186][ T7717]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  101.868193][ T7717]  ? __kthread_parkme+0x7b/0x200
[  101.868202][ T7717]  ? __kthread_parkme+0x1a1/0x200
[  101.868211][ T7717]  kthread+0x711/0x8a0
[  101.868221][ T7717]  ? __pfx_hidp_session_thread+0x10/0x10
[  101.868227][ T7717]  ? __pfx_kthread+0x10/0x10
[  101.868237][ T7717]  ? _raw_spin_unlock_irq+0x23/0x50
[  101.868246][ T7717]  ? lockdep_hardirqs_on+0x9c/0x150
[  101.868252][ T7717]  ? __pfx_kthread+0x10/0x10
[  101.868262][ T7717]  ret_from_fork+0x3fc/0x770
[  101.868270][ T7717]  ? __pfx_ret_from_fork+0x10/0x10
[  101.868278][ T7717]  ? __switch_to_asm+0x39/0x70
[  101.868286][ T7717]  ? __switch_to_asm+0x33/0x70
[  101.868294][ T7717]  ? __pfx_kthread+0x10/0x10
[  101.868303][ T7717]  ret_from_fork_asm+0x1a/0x30
[  101.868315][ T7717]  </TASK>
[  101.868318][ T7717] 
[  101.957090][ T7717] Allocated by task 7605:
[  101.958915][ T7717]  kasan_save_track+0x3e/0x80
[  101.960938][ T7717]  __kasan_kmalloc+0x93/0xb0
[  101.962937][ T7717]  __kmalloc_noprof+0x27a/0x4f0
[  101.964955][ T7717]  hci_alloc_dev_priv+0x28/0x2040
[  101.966727][ T7717]  vhci_create_device+0x120/0x6e0
[  101.968787][ T7717]  vhci_write+0x3ce/0x4a0
[  101.970543][ T7717]  vfs_write+0x54b/0xa90
[  101.972287][ T7717]  ksys_write+0x145/0x250
[  101.974028][ T7717]  do_syscall_64+0xfa/0x3b0
[  101.975891][ T7717]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  101.978262][ T7717] 
[  101.979289][ T7717] Freed by task 7605:
[  101.980997][ T7717]  kasan_save_track+0x3e/0x80
[  101.982937][ T7717]  kasan_save_free_info+0x46/0x50
[  101.984941][ T7717]  __kasan_slab_free+0x62/0x70
[  101.986961][ T7717]  kfree+0x18e/0x440
[  101.988661][ T7717]  bt_host_release+0x82/0x90
[  101.990637][ T7717]  device_release+0x9c/0x1c0
[  101.992619][ T7717]  kobject_put+0x22b/0x480
[  101.994553][ T7717]  vhci_release+0x88/0xd0
[  101.996466][ T7717]  __fput+0x44c/0xa70
[  101.998203][ T7717]  task_work_run+0x1d4/0x260
[  102.000125][ T7717]  do_exit+0x6b5/0x22e0
[  102.001911][ T7717]  do_group_exit+0x21c/0x2d0
[  102.003889][ T7717]  __x64_sys_exit_group+0x3f/0x40
[  102.006060][ T7717]  x64_sys_call+0x21ba/0x21c0
[  102.008086][ T7717]  do_syscall_64+0xfa/0x3b0
[  102.010034][ T7717]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  102.012517][ T7717] 
[  102.013560][ T7717] Last potentially related work creation:
[  102.015997][ T7717]  kasan_save_stack+0x3e/0x60
[  102.018023][ T7717]  kasan_record_aux_stack+0xbd/0xd0
[  102.020115][ T7717]  insert_work+0x3d/0x330
[  102.021913][ T7717]  __queue_work+0xbd9/0xfe0
[  102.023810][ T7717]  queue_work_on+0x181/0x270
[  102.025706][ T7717]  process_scheduled_works+0xae1/0x17b0
[  102.027973][ T7717]  worker_thread+0x8a0/0xda0
[  102.029918][ T7717]  kthread+0x711/0x8a0
[  102.031664][ T7717]  ret_from_fork+0x3fc/0x770
[  102.033599][ T7717]  ret_from_fork_asm+0x1a/0x30
[  102.035602][ T7717] 
[  102.036649][ T7717] Second to last potentially related work creation:
[  102.039409][ T7717]  kasan_save_stack+0x3e/0x60
[  102.041412][ T7717]  kasan_record_aux_stack+0xbd/0xd0
[  102.043654][ T7717]  insert_work+0x3d/0x330
[  102.045516][ T7717]  __queue_work+0xcfc/0xfe0
[  102.047460][ T7717]  call_timer_fn+0x17e/0x5f0
[  102.049425][ T7717]  __run_timer_base+0x646/0x860
[  102.051461][ T7717]  run_timer_softirq+0xb7/0x180
[  102.053537][ T7717]  handle_softirqs+0x286/0x870
[  102.055622][ T7717]  __irq_exit_rcu+0xca/0x1f0
[  102.057626][ T7717]  irq_exit_rcu+0x9/0x30
[  102.059437][ T7717]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  102.061792][ T7717]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  102.064318][ T7717] 
[  102.065360][ T7717] The buggy address belongs to the object at ffff88803d144000
[  102.065360][ T7717]  which belongs to the cache kmalloc-8k of size 8192
[  102.071166][ T7717] The buggy address is located 160 bytes inside of
[  102.071166][ T7717]  freed 8192-byte region [ffff88803d144000, ffff88803d146000)
[  102.076904][ T7717] 
[  102.077957][ T7717] The buggy address belongs to the physical page:
[  102.080684][ T7717] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3d140
[  102.084276][ T7717] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  102.087746][ T7717] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  102.090890][ T7717] page_type: f5(slab)
[  102.092576][ T7717] raw: 00fff00000000040 ffff88801a442280 dead000000000100 dead000000000122
[  102.096105][ T7717] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  102.099691][ T7717] head: 00fff00000000040 ffff88801a442280 dead000000000100 dead000000000122
[  102.103299][ T7717] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  102.106991][ T7717] head: 00fff00000000003 ffffea0000f45001 00000000ffffffff 00000000ffffffff
[  102.110630][ T7717] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  102.114207][ T7717] page dumped because: kasan: bad access detected
[  102.116631][ T7717] page_owner tracks the page as allocated
[  102.118513][ T7717] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5576, tgid 5576 (dhcpcd), ts 60880894933, free_ts 60774986584
[  102.126927][ T7717]  post_alloc_hook+0x240/0x2a0
[  102.128901][ T7717]  get_page_from_freelist+0x21e4/0x22c0
[  102.131187][ T7717]  __alloc_frozen_pages_noprof+0x181/0x370
[  102.133648][ T7717]  alloc_pages_mpol+0x232/0x4a0
[  102.135665][ T7717]  allocate_slab+0x8a/0x3b0
[  102.137516][ T7717]  ___slab_alloc+0xbfc/0x1480
[  102.139516][ T7717]  __kmalloc_node_track_caller_noprof+0x2f8/0x4e0
[  102.142248][ T7717]  kmalloc_reserve+0x136/0x290
[  102.144285][ T7717]  __alloc_skb+0x142/0x2d0
[  102.146157][ T7717]  netlink_dump+0x1c7/0xe20
[  102.148106][ T7717]  netlink_recvmsg+0x676/0xa30
[  102.150148][ T7717]  sock_recvmsg+0x22c/0x270
[  102.151793][ T7717]  ____sys_recvmsg+0x1c9/0x460
[  102.153386][ T7717]  ___sys_recvmsg+0x1b5/0x510
[  102.155208][ T7717]  __x64_sys_recvmsg+0x198/0x260
[  102.157277][ T7717]  do_syscall_64+0xfa/0x3b0
[  102.159175][ T7717] page last free pid 5576 tgid 5576 stack trace:
[  102.161493][ T7717]  __free_frozen_pages+0xc71/0xe70
[  102.163664][ T7717]  __slab_free+0x326/0x400
[  102.165575][ T7717]  qlist_free_all+0x97/0x140
[  102.167611][ T7717]  kasan_quarantine_reduce+0x148/0x160
[  102.169871][ T7717]  __kasan_slab_alloc+0x22/0x80
[  102.171877][ T7717]  kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  102.174370][ T7717]  __alloc_skb+0x112/0x2d0
[  102.176253][ T7717]  alloc_skb_with_frags+0xca/0x890
[  102.178447][ T7717]  sock_alloc_send_pskb+0x857/0x990
[  102.180657][ T7717]  unix_dgram_sendmsg+0x4f6/0x1870
[  102.182759][ T7717]  __sock_sendmsg+0x21c/0x270
[  102.184758][ T7717]  sock_write_iter+0x258/0x330
[  102.186793][ T7717]  do_iter_readv_writev+0x56e/0x7f0
[  102.188959][ T7717]  vfs_writev+0x31a/0x960
[  102.190795][ T7717]  do_writev+0x14d/0x2d0
[  102.192590][ T7717]  do_syscall_64+0xfa/0x3b0
[  102.194425][ T7717] 
[  102.195413][ T7717] Memory state around the buggy address:
[  102.197622][ T7717]  ffff88803d143f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  102.200936][ T7717]  ffff88803d144000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  102.204239][ T7717] >ffff88803d144080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  102.207626][ T7717]                                ^
[  102.209833][ T7717]  ffff88803d144100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  102.213260][ T7717]  ffff88803d144180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  102.216569][ T7717] ==================================================================
[  102.221909][ T7717] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  102.224979][ T7717] CPU: 1 UID: 0 PID: 7717 Comm: khidpd_10cb0007 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  102.230269][ T7717] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  102.234479][ T7717] Call Trace:
[  102.235915][ T7717]  <TASK>
[  102.237157][ T7717]  dump_stack_lvl+0x99/0x250
[  102.239084][ T7717]  ? __asan_memcpy+0x40/0x70
[  102.240999][ T7717]  ? __pfx_dump_stack_lvl+0x10/0x10
[  102.243158][ T7717]  ? __pfx__printk+0x10/0x10
[  102.245047][ T7717]  panic+0x2db/0x790
[  102.246671][ T7717]  ? __pfx_panic+0x10/0x10
[  102.248477][ T7717]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  102.250755][ T7717]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  102.252904][ T7717]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  102.255456][ T7717]  ? print_memory_metadata+0x314/0x400
[  102.257643][ T7717]  ? __mutex_lock+0x738/0xe80
[  102.259529][ T7717]  check_panic_on_warn+0x89/0xb0
[  102.261602][ T7717]  ? __mutex_lock+0x738/0xe80
[  102.263273][ T7717]  end_report+0x78/0x160
[  102.264698][ T7717]  kasan_report+0x129/0x150
[  102.266210][ T7717]  ? __mutex_lock+0x738/0xe80
[  102.268213][ T7717]  __mutex_lock+0x738/0xe80
[  102.270161][ T7717]  ? __mutex_lock+0x51b/0xe80
[  102.272151][ T7717]  ? l2cap_unregister_user+0x6a/0x1b0
[  102.274358][ T7717]  ? __pfx___mutex_lock+0x10/0x10
[  102.276402][ T7717]  ? __pfx___timer_delete_sync+0x10/0x10
[  102.278699][ T7717]  l2cap_unregister_user+0x6a/0x1b0
[  102.280819][ T7717]  hidp_session_thread+0x3c9/0x410
[  102.282963][ T7717]  ? __pfx_hidp_session_thread+0x10/0x10
[  102.285283][ T7717]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  102.287730][ T7717]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  102.290351][ T7717]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  102.293028][ T7717]  ? __kthread_parkme+0x7b/0x200
[  102.295140][ T7717]  ? __kthread_parkme+0x1a1/0x200
[  102.297213][ T7717]  kthread+0x711/0x8a0
[  102.298963][ T7717]  ? __pfx_hidp_session_thread+0x10/0x10
[  102.301259][ T7717]  ? __pfx_kthread+0x10/0x10
[  102.303208][ T7717]  ? _raw_spin_unlock_irq+0x23/0x50
[  102.305374][ T7717]  ? lockdep_hardirqs_on+0x9c/0x150
[  102.307593][ T7717]  ? __pfx_kthread+0x10/0x10
[  102.309489][ T7717]  ret_from_fork+0x3fc/0x770
[  102.311467][ T7717]  ? __pfx_ret_from_fork+0x10/0x10
[  102.313637][ T7717]  ? __switch_to_asm+0x39/0x70
[  102.315639][ T7717]  ? __switch_to_asm+0x33/0x70
[  102.317658][ T7717]  ? __pfx_kthread+0x10/0x10
[  102.319580][ T7717]  ret_from_fork_asm+0x1a/0x30
[  102.321641][ T7717]  </TASK>
[  102.323733][ T7717] Kernel Offset: disabled
[  102.325585][ T7717] Rebooting in 86400 seconds..

VM DIAGNOSIS:
15:47:15  Registers:
info registers vcpu 0

CPU#0
RAX=b465bf0e63f53d00 RBX=0000000000000000 RCX=b465bf0e63f53d00 RDX=0000000000000000
RSI=ffffffff8db8453a RDI=ffffffff8be28fc0 RBP=ffffffff81729af5 RSP=ffffc900030aeea0
R8 =0000000000000000 R9 =ffffffff81729af5 R10=ffffc900030af0f8 R11=fffff52000615e21
R12=0000000000000002 R13=ffffffff8e13ee60 R14=0000000000000000 R15=0000000000000246
RIP=ffffffff8b6f01e7 RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00005555604da500 ffffffff 00c00000
GS =0000 ffff8880b861d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fbdac980d38 CR3=0000000106140000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffff000000d0 0000000000000270 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000042800000005 00000270000001a0 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fbdac811c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90002b4f370
R8 =ffff8881087a0237 R9 =1ffff110210f4046 R10=dffffc0000000000 R11=ffffffff85475610
R12=dffffc0000000000 R13=ffffffff99af7907 R14=ffffffff99dfc760 R15=0000000000000000
RIP=ffffffff8547568c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f6d0d04df02 CR3=00000000284d2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffffff ffff00ff00000000 XMM05=0000000000000400 0000560033336c00
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffff00ff ffff00ff000000ff XMM09=0000000000000471 0000560033336c00
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
