last executing test programs:

25.90906764s ago: executing program 2 (id=177):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$kcm(0xa, 0x1, 0x106)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4)
r3 = getpid()
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r2)
sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r6, &(0x7f0000000280)={0x28, 0x0, 0x2711, @local}, 0x10)
getsockopt(r6, 0x1, 0x4, 0x0, &(0x7f00000000c0))
sendmsg$kcm(r1, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}, 0x24004059)
close(r1)

25.641530634s ago: executing program 2 (id=182):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000200)=<r4=>0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
connect$inet6(r5, &(0x7f0000000440)={0xa, 0x4e24, 0x401, @remote, 0xc}, 0x1c)
setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000280)={@remote}, 0x14)
close(r5)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000580)={{r2}, r4, 0x4, @inherit={0x0, 0x0}, @subvolid=0x2})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=ANY=[@ANYRES64=r0, @ANYRES8=r3, @ANYBLOB="f06a3465d90ade5cde19459763d3103476f6a0afa1e23f9b3d8ddddc218b8a5a75e86d17efda03adaec2d2266e6ffcc3f2772ad80d34c3130e8701ba654c6b9088ad870ccc10462691d58944230dcb107ea58d11583b4e7a285cf1c9"], 0x128}, 0x20000084)
r6 = socket(0x1d, 0x2, 0x6)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r6, 0x6a, 0x2, 0x0, &(0x7f0000000300))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180200000100000000000000000000020000000087000000180100002020702500000000002020207b1af8ff00001000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000170000009500000000000000b0ef41405968d7b09c5015bc2ad4e00f4ce54f140e2a2056dfa05baa02d9c08e087bd2100622661c79d45629260657f62453faac840af82829c46b415ab2f357a25a43c219900e3baa15538bd4d3"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, 0x0, 0x40)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x12, 0x0, 0x0, &(0x7f00000004c0), 0x31}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4000041)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000001c0000042abd7000fddbdf25ff240009000600000000000000070000000000000f1ddcd423000000000500"/56], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004040)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
ioctl$TUNSETFILTEREBPF(r9, 0x800454e1, &(0x7f0000000080))
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYRES8=r2], 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
syz_genetlink_get_family_id$nl80211(&(0x7f0000001580), r1)
bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x9, 0x4, &(0x7f0000000240)=ANY=[@ANYRES16=r3], &(0x7f0000000140)='GPL\x00', 0x8, 0x99, &(0x7f00000015c0)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0xd, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x662947ad}, 0x94)
socket$igmp6(0xa, 0x3, 0x2)

24.289150515s ago: executing program 0 (id=188):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x3d, &(0x7f0000000000)='cgroup\x00\x8d\f\xf3\xcd\xc6X$\x01n-Hg\x144-.\xe2\x053\xe2\xf4\xbf[\xe9\xdddU\x91\x9d,\t\x8d\xc3@\x86,\x7f\xe2Z\xe8L\x80\xdbe~c\xbc\x9b\xcf\x9b\x1cH\x95\xf3'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfffb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040084}, 0x0)
r2 = socket(0x28, 0x3, 0x6)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x100, 0x5, 0x9, 0x7f}]}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f0000000080)="18", 0x1, 0x0, &(0x7f00000000c0)={0x11, 0xe, r5, 0x1, 0x0, 0x6, @remote}, 0x14)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES32=r3, @ANYBLOB="0200"], 0x10)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r6, 0xffffffffffffffff, 0x2, 0x0, 0x4000}, 0x10)
r7 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x22528, 0x800}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x9}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x48}}, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)

24.050322132s ago: executing program 0 (id=189):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000000), 0x4)
write$cgroup_subtree(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', <r4=>0x0})
writev(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000580)="051a00000e80006558f2878f02000000", 0x10}], 0x2)
sendmsg$can_raw(r2, &(0x7f0000000000)={&(0x7f0000000580)={0x1d, r4}, 0x10, &(0x7f0000000100)={0x0}, 0x2, 0x0, 0x0, 0x4904}, 0x4040005)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r5)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c)
listen(r6, 0x6)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r8 = accept(r5, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0)
recvfrom(r7, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x3e8, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001300)=""/4113, 0x1011}, {&(0x7f0000002340)=""/4088, 0xff8}], 0x2, 0x0, 0x56}, 0x40012022)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={<r9=>r0})
getpeername$netlink(r9, &(0x7f00000000c0), &(0x7f0000000140)=0xc)

23.797219688s ago: executing program 0 (id=193):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r2, 0x1}, 0x1c}}, 0x0)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x28, r2, 0x300, 0x70bd27, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0xfe2af26fe325d607)
r3 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000005400)={'filter\x00', 0x0, 0x0, 0x90, [], 0x2, 0x0, 0x0}, &(0x7f0000005480)=0x108)
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x7)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, r5, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10090}, 0x190)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000640)={{{@in6=@dev, @in6=@remote}}, {{@in6=@private2}, 0x0, @in6=@loopback}}, &(0x7f0000000980)=0xe8)
sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r4, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFTYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000004}, 0x20044000)
sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008102e00f80ecdb4cb9020a", 0x11}, {&(0x7f0000001700)="0c74c75350f4a590e15c61", 0xb}], 0x2, 0x0, 0x0, 0x10}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000060a010400000000000000000200000028000480240001800e000100696d6d656469617465000000100002800801400000000004000280140000001100010000000004000000000000000a"], 0x64}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001800090000000000010000001c140000fe00000100000000080013"], 0x24}, 0x1, 0x0, 0x0, 0x4040800}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r8=>0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0], 0x0, 0x1a, &(0x7f0000000400)=[{}], 0x8, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0xe8, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10)
sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0xa, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_deladdrlabel={0x44, 0x49, 0x8, 0x70bd2d, 0x25dfdbfe, {0xa, 0x0, 0x20, 0x0, r8, 0xffffffff}}, 0x44}, 0x1, 0x0, 0x0, 0x40040c4}, 0x0)

21.290383633s ago: executing program 2 (id=182):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000200)=<r4=>0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
connect$inet6(r5, &(0x7f0000000440)={0xa, 0x4e24, 0x401, @remote, 0xc}, 0x1c)
setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000280)={@remote}, 0x14)
close(r5)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000580)={{r2}, r4, 0x4, @inherit={0x0, 0x0}, @subvolid=0x2})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=ANY=[@ANYRES64=r0, @ANYRES8=r3, @ANYBLOB="f06a3465d90ade5cde19459763d3103476f6a0afa1e23f9b3d8ddddc218b8a5a75e86d17efda03adaec2d2266e6ffcc3f2772ad80d34c3130e8701ba654c6b9088ad870ccc10462691d58944230dcb107ea58d11583b4e7a285cf1c9"], 0x128}, 0x20000084)
r6 = socket(0x1d, 0x2, 0x6)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r6, 0x6a, 0x2, 0x0, &(0x7f0000000300))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180200000100000000000000000000020000000087000000180100002020702500000000002020207b1af8ff00001000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000170000009500000000000000b0ef41405968d7b09c5015bc2ad4e00f4ce54f140e2a2056dfa05baa02d9c08e087bd2100622661c79d45629260657f62453faac840af82829c46b415ab2f357a25a43c219900e3baa15538bd4d3"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, 0x0, 0x40)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x12, 0x0, 0x0, &(0x7f00000004c0), 0x31}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4000041)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000001c0000042abd7000fddbdf25ff240009000600000000000000070000000000000f1ddcd423000000000500"/56], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004040)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
ioctl$TUNSETFILTEREBPF(r9, 0x800454e1, &(0x7f0000000080))
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYRES8=r2], 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
syz_genetlink_get_family_id$nl80211(&(0x7f0000001580), r1)
bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x9, 0x4, &(0x7f0000000240)=ANY=[@ANYRES16=r3], &(0x7f0000000140)='GPL\x00', 0x8, 0x99, &(0x7f00000015c0)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0xd, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x662947ad}, 0x94)
socket$igmp6(0xa, 0x3, 0x2)

17.239708934s ago: executing program 0 (id=193):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r2, 0x1}, 0x1c}}, 0x0)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x28, r2, 0x300, 0x70bd27, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0xfe2af26fe325d607)
r3 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000005400)={'filter\x00', 0x0, 0x0, 0x90, [], 0x2, 0x0, 0x0}, &(0x7f0000005480)=0x108)
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x7)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, r5, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10090}, 0x190)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000640)={{{@in6=@dev, @in6=@remote}}, {{@in6=@private2}, 0x0, @in6=@loopback}}, &(0x7f0000000980)=0xe8)
sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r4, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFTYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000004}, 0x20044000)
sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008102e00f80ecdb4cb9020a", 0x11}, {&(0x7f0000001700)="0c74c75350f4a590e15c61", 0xb}], 0x2, 0x0, 0x0, 0x10}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000060a010400000000000000000200000028000480240001800e000100696d6d656469617465000000100002800801400000000004000280140000001100010000000004000000000000000a"], 0x64}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001800090000000000010000001c140000fe00000100000000080013"], 0x24}, 0x1, 0x0, 0x0, 0x4040800}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r8=>0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0], 0x0, 0x1a, &(0x7f0000000400)=[{}], 0x8, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0xe8, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10)
sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0xa, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_deladdrlabel={0x44, 0x49, 0x8, 0x70bd2d, 0x25dfdbfe, {0xa, 0x0, 0x20, 0x0, r8, 0xffffffff}}, 0x44}, 0x1, 0x0, 0x0, 0x40040c4}, 0x0)

16.013464807s ago: executing program 2 (id=182):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000200)=<r4=>0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
connect$inet6(r5, &(0x7f0000000440)={0xa, 0x4e24, 0x401, @remote, 0xc}, 0x1c)
setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000280)={@remote}, 0x14)
close(r5)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000580)={{r2}, r4, 0x4, @inherit={0x0, 0x0}, @subvolid=0x2})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=ANY=[@ANYRES64=r0, @ANYRES8=r3, @ANYBLOB="f06a3465d90ade5cde19459763d3103476f6a0afa1e23f9b3d8ddddc218b8a5a75e86d17efda03adaec2d2266e6ffcc3f2772ad80d34c3130e8701ba654c6b9088ad870ccc10462691d58944230dcb107ea58d11583b4e7a285cf1c9"], 0x128}, 0x20000084)
r6 = socket(0x1d, 0x2, 0x6)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r6, 0x6a, 0x2, 0x0, &(0x7f0000000300))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180200000100000000000000000000020000000087000000180100002020702500000000002020207b1af8ff00001000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000170000009500000000000000b0ef41405968d7b09c5015bc2ad4e00f4ce54f140e2a2056dfa05baa02d9c08e087bd2100622661c79d45629260657f62453faac840af82829c46b415ab2f357a25a43c219900e3baa15538bd4d3"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, 0x0, 0x40)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x12, 0x0, 0x0, &(0x7f00000004c0), 0x31}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4000041)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000001c0000042abd7000fddbdf25ff240009000600000000000000070000000000000f1ddcd423000000000500"/56], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004040)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
ioctl$TUNSETFILTEREBPF(r9, 0x800454e1, &(0x7f0000000080))
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYRES8=r2], 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
syz_genetlink_get_family_id$nl80211(&(0x7f0000001580), r1)
bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x9, 0x4, &(0x7f0000000240)=ANY=[@ANYRES16=r3], &(0x7f0000000140)='GPL\x00', 0x8, 0x99, &(0x7f00000015c0)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0xd, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x662947ad}, 0x94)
socket$igmp6(0xa, 0x3, 0x2)

11.42960139s ago: executing program 0 (id=193):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r2, 0x1}, 0x1c}}, 0x0)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x28, r2, 0x300, 0x70bd27, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0xfe2af26fe325d607)
r3 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000005400)={'filter\x00', 0x0, 0x0, 0x90, [], 0x2, 0x0, 0x0}, &(0x7f0000005480)=0x108)
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x7)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, r5, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10090}, 0x190)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000640)={{{@in6=@dev, @in6=@remote}}, {{@in6=@private2}, 0x0, @in6=@loopback}}, &(0x7f0000000980)=0xe8)
sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r4, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFTYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000004}, 0x20044000)
sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008102e00f80ecdb4cb9020a", 0x11}, {&(0x7f0000001700)="0c74c75350f4a590e15c61", 0xb}], 0x2, 0x0, 0x0, 0x10}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000060a010400000000000000000200000028000480240001800e000100696d6d656469617465000000100002800801400000000004000280140000001100010000000004000000000000000a"], 0x64}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001800090000000000010000001c140000fe00000100000000080013"], 0x24}, 0x1, 0x0, 0x0, 0x4040800}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r8=>0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0], 0x0, 0x1a, &(0x7f0000000400)=[{}], 0x8, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0xe8, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10)
sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0xa, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_deladdrlabel={0x44, 0x49, 0x8, 0x70bd2d, 0x25dfdbfe, {0xa, 0x0, 0x20, 0x0, r8, 0xffffffff}}, 0x44}, 0x1, 0x0, 0x0, 0x40040c4}, 0x0)

9.788168758s ago: executing program 2 (id=182):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000200)=<r4=>0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
connect$inet6(r5, &(0x7f0000000440)={0xa, 0x4e24, 0x401, @remote, 0xc}, 0x1c)
setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000280)={@remote}, 0x14)
close(r5)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000580)={{r2}, r4, 0x4, @inherit={0x0, 0x0}, @subvolid=0x2})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=ANY=[@ANYRES64=r0, @ANYRES8=r3, @ANYBLOB="f06a3465d90ade5cde19459763d3103476f6a0afa1e23f9b3d8ddddc218b8a5a75e86d17efda03adaec2d2266e6ffcc3f2772ad80d34c3130e8701ba654c6b9088ad870ccc10462691d58944230dcb107ea58d11583b4e7a285cf1c9"], 0x128}, 0x20000084)
r6 = socket(0x1d, 0x2, 0x6)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r6, 0x6a, 0x2, 0x0, &(0x7f0000000300))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180200000100000000000000000000020000000087000000180100002020702500000000002020207b1af8ff00001000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000170000009500000000000000b0ef41405968d7b09c5015bc2ad4e00f4ce54f140e2a2056dfa05baa02d9c08e087bd2100622661c79d45629260657f62453faac840af82829c46b415ab2f357a25a43c219900e3baa15538bd4d3"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, 0x0, 0x40)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x12, 0x0, 0x0, &(0x7f00000004c0), 0x31}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4000041)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000001c0000042abd7000fddbdf25ff240009000600000000000000070000000000000f1ddcd423000000000500"/56], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004040)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
ioctl$TUNSETFILTEREBPF(r9, 0x800454e1, &(0x7f0000000080))
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYRES8=r2], 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
syz_genetlink_get_family_id$nl80211(&(0x7f0000001580), r1)
bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x9, 0x4, &(0x7f0000000240)=ANY=[@ANYRES16=r3], &(0x7f0000000140)='GPL\x00', 0x8, 0x99, &(0x7f00000015c0)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0xd, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x662947ad}, 0x94)
socket$igmp6(0xa, 0x3, 0x2)

6.239031855s ago: executing program 0 (id=193):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r2, 0x1}, 0x1c}}, 0x0)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x28, r2, 0x300, 0x70bd27, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0xfe2af26fe325d607)
r3 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000005400)={'filter\x00', 0x0, 0x0, 0x90, [], 0x2, 0x0, 0x0}, &(0x7f0000005480)=0x108)
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x7)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, r5, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10090}, 0x190)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000640)={{{@in6=@dev, @in6=@remote}}, {{@in6=@private2}, 0x0, @in6=@loopback}}, &(0x7f0000000980)=0xe8)
sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r4, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFTYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000004}, 0x20044000)
sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008102e00f80ecdb4cb9020a", 0x11}, {&(0x7f0000001700)="0c74c75350f4a590e15c61", 0xb}], 0x2, 0x0, 0x0, 0x10}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000060a010400000000000000000200000028000480240001800e000100696d6d656469617465000000100002800801400000000004000280140000001100010000000004000000000000000a"], 0x64}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001800090000000000010000001c140000fe00000100000000080013"], 0x24}, 0x1, 0x0, 0x0, 0x4040800}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r8=>0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0], 0x0, 0x1a, &(0x7f0000000400)=[{}], 0x8, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0xe8, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10)
sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0xa, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_deladdrlabel={0x44, 0x49, 0x8, 0x70bd2d, 0x25dfdbfe, {0xa, 0x0, 0x20, 0x0, r8, 0xffffffff}}, 0x44}, 0x1, 0x0, 0x0, 0x40040c4}, 0x0)

3.731763502s ago: executing program 2 (id=182):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000200)=<r4=>0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
connect$inet6(r5, &(0x7f0000000440)={0xa, 0x4e24, 0x401, @remote, 0xc}, 0x1c)
setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000280)={@remote}, 0x14)
close(r5)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000580)={{r2}, r4, 0x4, @inherit={0x0, 0x0}, @subvolid=0x2})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=ANY=[@ANYRES64=r0, @ANYRES8=r3, @ANYBLOB="f06a3465d90ade5cde19459763d3103476f6a0afa1e23f9b3d8ddddc218b8a5a75e86d17efda03adaec2d2266e6ffcc3f2772ad80d34c3130e8701ba654c6b9088ad870ccc10462691d58944230dcb107ea58d11583b4e7a285cf1c9"], 0x128}, 0x20000084)
r6 = socket(0x1d, 0x2, 0x6)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r6, 0x6a, 0x2, 0x0, &(0x7f0000000300))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180200000100000000000000000000020000000087000000180100002020702500000000002020207b1af8ff00001000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000170000009500000000000000b0ef41405968d7b09c5015bc2ad4e00f4ce54f140e2a2056dfa05baa02d9c08e087bd2100622661c79d45629260657f62453faac840af82829c46b415ab2f357a25a43c219900e3baa15538bd4d3"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, 0x0, 0x40)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x12, 0x0, 0x0, &(0x7f00000004c0), 0x31}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4000041)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000001c0000042abd7000fddbdf25ff240009000600000000000000070000000000000f1ddcd423000000000500"/56], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004040)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
ioctl$TUNSETFILTEREBPF(r9, 0x800454e1, &(0x7f0000000080))
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYRES8=r2], 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
syz_genetlink_get_family_id$nl80211(&(0x7f0000001580), r1)
bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x9, 0x4, &(0x7f0000000240)=ANY=[@ANYRES16=r3], &(0x7f0000000140)='GPL\x00', 0x8, 0x99, &(0x7f00000015c0)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0xd, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x662947ad}, 0x94)
socket$igmp6(0xa, 0x3, 0x2)

1.601744282s ago: executing program 1 (id=264):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SDTEFACILITIES(r0, 0x891d, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000800000000000000000000711027000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200), r2)
sendmsg$NLBL_MGMT_C_REMOVE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r3, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '\x1d\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20040014)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0)
r4 = socket$rds(0x15, 0x5, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
shutdown(r5, 0x1)
shutdown(r5, 0x1)
ioctl$sock_proto_private(r4, 0x89e1, &(0x7f0000001080))
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="6400000010000104e2cbf685f900000400000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b00010067656e657665000020000280080001000100000014000700000000000000000000000000000000001400030067656e65766531000000000000000000"], 0x64}}, 0x2000000)

1.230668118s ago: executing program 1 (id=265):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd26, 0x25dfdbfd, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0x2, 0xa}}}, 0x24}}, 0x800)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff0200000000000000000000000000010000000000000000002b0000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef)

1.000109338s ago: executing program 1 (id=266):
socket$inet(0x2, 0x3, 0x8) (async)
r0 = socket$inet(0x2, 0x3, 0x8)
setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f00000000c0)=0xabb3, 0x4) (async)
setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f00000000c0)=0xabb3, 0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{0x1, <r2=>0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000640)='%pS    \x00'}, 0x20)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000009c0)={'ip6gre0\x00', &(0x7f00000006c0)={'syztnl1\x00', 0x0, 0x4, 0x80, 0x6, 0xcaba, 0x8, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10, 0x10, 0x34a4, 0x8}}) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000009c0)={'ip6gre0\x00', &(0x7f00000006c0)={'syztnl1\x00', <r3=>0x0, 0x4, 0x80, 0x6, 0xcaba, 0x8, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10, 0x10, 0x34a4, 0x8}})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ac0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c000000000000000c00000000000012020000000700000000000002030000000d00000000001401000000002f000b030200000000000008030000000000000000000003000000000500000004000000c58cffffffed61615f00005f0086fef5cc7d1816045ceb244712c9e870b333241c17b2b1145b2944103e33e38ccdc5e0d8cd395501713abe71443ebd541b546ea7c2e935cf7dccb2e2e6e30ae58221342ae06c226e20d1311db9119cba6da55fdcd88d909b77660eb226bbca8b328661f0872c9e298f35057bda6ff11803a97cdb61695217a388b8123879654a869a2be26bff"], &(0x7f0000000a80)=""/24, 0x6d, 0x18, 0x1, 0xe}, 0x28) (async)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ac0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c000000000000000c00000000000012020000000700000000000002030000000d00000000001401000000002f000b030200000000000008030000000000000000000003000000000500000004000000c58cffffffed61615f00005f0086fef5cc7d1816045ceb244712c9e870b333241c17b2b1145b2944103e33e38ccdc5e0d8cd395501713abe71443ebd541b546ea7c2e935cf7dccb2e2e6e30ae58221342ae06c226e20d1311db9119cba6da55fdcd88d909b77660eb226bbca8b328661f0872c9e298f35057bda6ff11803a97cdb61695217a388b8123879654a869a2be26bff"], &(0x7f0000000a80)=""/24, 0x6d, 0x18, 0x1, 0xe}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0x1d, 0x400, 0xffffffff, 0x1, 0x4, r2, 0x3, '\x00', r3, r4, 0x1, 0x1, 0x2}, 0x50)
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000180)={'rose0\x00', @local}) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000180)={'rose0\x00', @local})
sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x60000000}, 0x4000000)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d00)={&(0x7f00000005c0)=ANY=[@ANYRESHEX=r1], 0x0, 0x26, 0x0, 0x1, 0x40000000}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000040)={0xffffffff}, 0x8)
connect$bt_l2cap(r7, &(0x7f0000000500), 0xe)
shutdown(r7, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000680)={'wlan0\x00', <r10=>0x0})
socket$netlink(0x10, 0x3, 0x14) (async)
r11 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)={0x10, 0x1403, 0x1}, 0x10}}, 0x0)
sendmsg$NL80211_CMD_NEW_INTERFACE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x58, r9, 0x1, 0x2070bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x68}, @val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x7ff, 0x8000070}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008081}, 0x24044884)
r12 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000001c0)='sched_switch\x00', r6}, 0x18)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r12, r6, 0x4, r6}, 0x7)
r13 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_x25_SIOCDELRT(r13, 0x890c, &(0x7f00000003c0)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}, 0x4, 'erspan0\x00'}) (async)
ioctl$sock_x25_SIOCDELRT(r13, 0x890c, &(0x7f00000003c0)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}, 0x4, 'erspan0\x00'})
vmsplice(r13, &(0x7f0000000240)=[{&(0x7f0000000440)="69dc4ebc437c52a540a84f083bc2f2445c762dafc26077cba2b0ad4b8f6460239895a6737ed62bac17714337668f2da556174ac260b26a8676b0e74d89b5b3fef05680a7a0735c6b1bb4230135a8de9ed4b92c9d4f27e745f32e896bd63f5a5aacc54ff03f09f513", 0x68}, {&(0x7f0000000740)="cad5c3ce2f1bf09309e2a089b1de609489a1ee8a5dbabffc067daa0f10277b26577575c945d4e58ebd20da2ac6c0e6f8c879768ab74149f0c8bcc8792f346220ec53bfc16b47bede2b71a8c8b2d96a9e31fd1465c265de767a4c7b0b4f3781fdfb68b116b10312831979a58d520dde6ee35ffa81a472f4fc230888304a7a526aec34841dc7138ffa392e0d1a44", 0x8d}, {&(0x7f0000000800)="12cd77f167dcffd7a89d249bea225f7f0fb9601f24bf82d4be9d29a727c3e4a75b9c980204a0ba6b4428342335320e8efd6ba9cb27ffe48342cb336c36a7d6323f68a40cc0300c8f3457804a9914693b2697e61f2937af2a76a42e4855a7244509dae96ef25c428eb7bce407069709b024bfb5ea50ed58e9323f8ecb16f07dcba2d4035dcfa37bdfb3a2feb6d72c4b6d95bb5962f6f7cc67e93126e303a5c10d96ee9251f0ba3fafd22d06e12d6b105504778d568bf9496a4c907f1e2548dd39b82e38363a928225974f9f4013bb2fcc9ddbd123", 0xd4}, {&(0x7f0000000900)="b47d17cc3b29879b2ceee97464d706437c7d0b6bc7ee885aedd6b4fefb4ab8734031768d494f4b2c86d3eb738741031306c9d5a752c688e75a0cb9a6105b993bab2aa3f666a7168c5ea8838bf72e52f670012ae781698ae46ebc1689fed5b6e98c63aa4bc64a30482925bdedeb06f65fcffffb0ba2debaabf1866626a2c3b15537ffee85b2325f9a58d142bd4e8905856c6ef3f7d488fdf72c81cbcd2eca698af1501834b0aab6445440881fd983e594cb67096a3ae28734b5313201a9b4", 0xbe}], 0x4, 0x8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x1, 0xe2, &(0x7f00000002c0)=""/212, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0xfffffd75, 0x10, &(0x7f00000004c0), 0x10}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x1, 0xe2, &(0x7f00000002c0)=""/212, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0xfffffd75, 0x10, &(0x7f00000004c0), 0x10}, 0x94)

892.072177ms ago: executing program 1 (id=267):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001a0ff00000000000000000000000000000000000000000000860090780000000000000000000000001000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef)

80.010563ms ago: executing program 1 (id=268):
pipe(&(0x7f00000007c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r3=>0x0})
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000140)={r3, 0x1, 0x6, @local}, 0x10)
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000002c0)={r3, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10)
r4 = socket$packet(0x11, 0x0, 0x300)
setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f0000000000)={r3, 0x1, 0x6, @multicast}, 0x10)
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='wi', 0x2}], 0x1, 0x1)
close(r1)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r5, &(0x7f0000000280)={0xa, 0x4e23, 0x10001, @loopback}, 0x1c)
splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0)
syz_emit_ethernet(0x2e, &(0x7f0000000380)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xa0100fd, @multicast1}, {0x3f01, 0x88be, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x3, 0x100, @void}}}}}}}, 0x0)

0s ago: executing program 1 (id=269):
r0 = socket$kcm(0x10, 0x2, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)={0x30, r2, 0xb97534d5fe9700cf, 0x4, 0x25dfdbfb, {{0x12}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x6, 0xbe, "a5a1"}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c400}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
socket$kcm(0x10, 0x2, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) (async)
sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)={0x30, r2, 0xb97534d5fe9700cf, 0x4, 0x25dfdbfb, {{0x12}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x6, 0xbe, "a5a1"}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c400}, 0x0) (async)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:18743' (ED25519) to the list of known hosts.
syzkaller login: [   48.808425][ T5738] cgroup: Unknown subsys name 'net'
[   48.889025][ T5738] cgroup: Unknown subsys name 'cpuset'
[   48.899778][ T5738] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.680219][ T5738] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.638541][ T5813] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.645166][ T5813] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.648307][ T5813] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.651836][ T5813] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.655157][ T5813] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.667602][ T5815] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.672065][ T5815] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.676385][ T5815] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.679154][ T5815] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.695342][ T5815] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.715011][ T5815] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.720028][ T5815] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.723792][ T5815] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.727696][ T5815] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.730828][ T5815] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   54.926171][ T5810] chnl_net:caif_netlink_parms(): no params data found
[   55.023674][ T5819] chnl_net:caif_netlink_parms(): no params data found
[   55.041315][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.044858][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.047762][ T5810] bridge_slave_0: entered allmulticast mode
[   55.050739][ T5810] bridge_slave_0: entered promiscuous mode
[   55.069861][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.072484][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.075667][ T5810] bridge_slave_1: entered allmulticast mode
[   55.078469][ T5810] bridge_slave_1: entered promiscuous mode
[   55.099333][ T5814] chnl_net:caif_netlink_parms(): no params data found
[   55.115903][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.133789][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.180209][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.182818][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.185703][ T5819] bridge_slave_0: entered allmulticast mode
[   55.188694][ T5819] bridge_slave_0: entered promiscuous mode
[   55.192818][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.196391][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.199329][ T5819] bridge_slave_1: entered allmulticast mode
[   55.202158][ T5819] bridge_slave_1: entered promiscuous mode
[   55.251984][ T5810] team0: Port device team_slave_0 added
[   55.257449][ T5810] team0: Port device team_slave_1 added
[   55.305822][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.309946][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.312886][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.315965][ T5814] bridge_slave_0: entered allmulticast mode
[   55.319289][ T5814] bridge_slave_0: entered promiscuous mode
[   55.322478][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.326242][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.328701][ T5814] bridge_slave_1: entered allmulticast mode
[   55.331600][ T5814] bridge_slave_1: entered promiscuous mode
[   55.344050][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.373679][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.376770][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.385805][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.406293][ T5819] team0: Port device team_slave_0 added
[   55.422462][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.425608][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.438216][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.445298][ T5819] team0: Port device team_slave_1 added
[   55.450528][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.473400][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.489972][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.492818][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.503380][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.526616][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.529025][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.538515][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.575675][ T5814] team0: Port device team_slave_0 added
[   55.581039][ T5810] hsr_slave_0: entered promiscuous mode
[   55.583435][ T5810] hsr_slave_1: entered promiscuous mode
[   55.586992][ T5814] team0: Port device team_slave_1 added
[   55.625389][ T5819] hsr_slave_0: entered promiscuous mode
[   55.628016][ T5819] hsr_slave_1: entered promiscuous mode
[   55.630699][ T5819] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.634000][ T5819] Cannot create hsr debugfs directory
[   55.644421][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.646783][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.656068][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.670684][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.673025][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.682378][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.762839][ T5814] hsr_slave_0: entered promiscuous mode
[   55.765441][ T5814] hsr_slave_1: entered promiscuous mode
[   55.767810][ T5814] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.770725][ T5814] Cannot create hsr debugfs directory
[   55.946975][ T5819] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   55.956817][ T5819] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   55.970457][ T5819] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   55.982112][ T5819] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.017211][ T5810] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.026179][ T5810] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.038228][ T5810] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.049200][ T5810] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.093574][ T5814] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.105290][ T5814] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.113435][ T5814] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.123148][ T5814] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.213540][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.247304][ T5819] 8021q: adding VLAN 0 to HW filter on device team0
[   56.252282][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.262511][  T185] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.265371][  T185] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.281636][ T5810] 8021q: adding VLAN 0 to HW filter on device team0
[   56.287963][  T185] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.290941][  T185] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.300598][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.309000][  T185] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.311546][  T185] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.331854][ T3121] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.334221][ T3121] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.342238][ T5819] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.368205][ T5814] 8021q: adding VLAN 0 to HW filter on device team0
[   56.380079][ T3121] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.382489][ T3121] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.393349][ T5810] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   56.397860][ T5810] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.412105][ T3121] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.414471][ T3121] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.433986][ T5814] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   56.439131][ T5814] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.468441][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.492114][ T5819] veth0_vlan: entered promiscuous mode
[   56.497550][ T5819] veth1_vlan: entered promiscuous mode
[   56.513841][ T5819] veth0_macvtap: entered promiscuous mode
[   56.518702][ T5819] veth1_macvtap: entered promiscuous mode
[   56.536979][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.548292][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.557072][ T5819] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.560151][ T5819] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.563131][ T5819] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.567419][ T5819] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.607287][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.642072][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.663291][ T1095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.673602][ T1095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.695041][   T54] Bluetooth: hci0: command tx timeout
[   56.713752][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.718929][ T5810] veth0_vlan: entered promiscuous mode
[   56.721830][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.739251][ T5810] veth1_vlan: entered promiscuous mode
[   56.746809][ T5814] veth0_vlan: entered promiscuous mode
[   56.753813][ T5814] veth1_vlan: entered promiscuous mode
[   56.771683][ T5819] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   56.777354][   T54] Bluetooth: hci1: command tx timeout
[   56.779238][   T54] Bluetooth: hci2: command tx timeout
[   56.797032][ T5810] veth0_macvtap: entered promiscuous mode
[   56.816546][ T5810] veth1_macvtap: entered promiscuous mode
[   56.821695][ T5814] veth0_macvtap: entered promiscuous mode
[   56.841496][ T5814] veth1_macvtap: entered promiscuous mode
[   56.847846][ T5874] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3'.
[   56.855351][ T5874] netlink: 'syz.2.3': attribute type 178 has an invalid length.
[   56.862523][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.871586][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.878517][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.882972][ T5814] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.887379][ T5814] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.890483][ T5814] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.893763][ T5814] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.902575][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.911408][ T5810] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.915282][ T5810] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.918376][ T5810] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.921380][ T5810] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.013504][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.017596][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.031424][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.036039][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.059179][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.062272][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.082780][ T5877] tipc: Started in network mode
[   57.086284][ T5877] tipc: Node identity ac14140f, cluster identity 4711
[   57.086727][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.088957][ T5877] tipc: New replicast peer: 255.255.255.255
[   57.093963][ T5877] tipc: Enabled bearer <udp:syz2>, priority 10
[   57.098848][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.125629][ T5877] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4'.
[   57.212635][ T5882] netlink: 'syz.2.5': attribute type 1 has an invalid length.
[   57.217499][ T5883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5'.
[   57.221229][ T5883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5'.
[   57.224317][ T5883] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5'.
[   57.246570][ T5882] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5'.
[   57.252310][ T5882] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5'.
[   57.262504][ T5882] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5'.
[   57.364385][ T5896] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   57.369802][ T5896] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   57.390296][ T5896] Bluetooth: MGMT ver 1.23
[   57.483192][ T5903] pim6reg1: entered allmulticast mode
[   57.671143][ T5921] Zero length message leads to an empty skb
[   57.818148][ T5929] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   57.893770][ T5934] netlink: 'syz.0.24': attribute type 5 has an invalid length.
[   57.950641][ T5940] lo speed is unknown, defaulting to 1000
[   57.952715][ T5940] lo speed is unknown, defaulting to 1000
[   57.956279][ T5940] lo speed is unknown, defaulting to 1000
[   57.960602][ T5940] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   57.969747][ T5940] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   57.992144][ T5940] lo speed is unknown, defaulting to 1000
[   57.997851][ T5940] lo speed is unknown, defaulting to 1000
[   58.001761][ T5940] lo speed is unknown, defaulting to 1000
[   58.064408][ T5951] syz.2.30 uses obsolete (PF_INET,SOCK_PACKET)
[   58.082284][ T5952] netlink: 104 bytes leftover after parsing attributes in process `syz.1.29'.
[   58.095378][ T5840] tipc: Node number set to 2886997007
[   58.247532][ T5954] netlink: 'syz.1.31': attribute type 1 has an invalid length.
[   58.286799][ T5958] lo speed is unknown, defaulting to 1000
[   58.361277][ T5963] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.34'.
[   58.434194][ T5958] syz.2.33 (5958) used greatest stack depth: 17848 bytes left
[   58.768369][ T5988] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   58.775464][   T54] Bluetooth: hci0: command tx timeout
[   58.865052][   T54] Bluetooth: hci2: command tx timeout
[   58.865369][ T5813] Bluetooth: hci1: command tx timeout
[   58.920052][ T5999] netlink: 'syz.2.47': attribute type 12 has an invalid length.
[   58.989587][ T6006] netlink: 'syz.2.47': attribute type 3 has an invalid length.
[   58.992572][ T6006] netlink: 'syz.2.47': attribute type 3 has an invalid length.
[   59.186544][ T6021] netlink: 'syz.2.54': attribute type 1 has an invalid length.
[   59.308374][ T6021] vlan2: entered allmulticast mode
[   59.310122][ T6021] veth1: entered allmulticast mode
[   59.402499][ T6036] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20000
[   59.551613][ T6050] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   59.558671][ T6050] macsec1: entered promiscuous mode
[   59.564675][ T6050] macsec1: entered allmulticast mode
[   59.566528][ T6050] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[   59.637912][ T6061] netlink: 'syz.0.65': attribute type 1 has an invalid length.
[   59.736259][ T6071] netlink: 'syz.2.67': attribute type 11 has an invalid length.
[   60.516552][ T6108] netlink: 'syz.1.80': attribute type 10 has an invalid length.
[   60.531804][ T6108] veth0_vlan: left promiscuous mode
[   60.538763][ T6108] veth0_vlan: entered promiscuous mode
[   60.546513][ T6108] team0: Device veth0_vlan failed to register rx_handler
[   60.854708][ T5813] Bluetooth: hci0: command tx timeout
[   60.934712][ T5813] Bluetooth: hci2: command 0x040f tx timeout
[   60.945131][ T5815] Bluetooth: hci1: command tx timeout
[   61.650419][ T6157] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   61.654234][ T6157] Cannot find add_set index 4 as target
[   61.672377][ T6155] syzkaller1: entered promiscuous mode
[   61.674959][ T6155] syzkaller1: entered allmulticast mode
[   62.048395][ T6195] ipt_ECN: cannot use operation on non-tcp rule
[   62.187431][ T6208] team0: Device gtp0 is of different type
[   62.282747][ T6217] syzkaller0: entered allmulticast mode
[   62.306670][ T6217] syzkaller0 (unregistering): left allmulticast mode
[   62.488479][ T6226] batman_adv: batadv0: Adding interface: dummy0
[   62.491790][ T6226] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.516239][ T6226] batman_adv: batadv0: Interface activated: dummy0
[   62.638937][ T6239] __nla_validate_parse: 11 callbacks suppressed
[   62.638946][ T6239] netlink: 12 bytes leftover after parsing attributes in process `syz.1.117'.
[   62.738410][ T6246] netlink: 24 bytes leftover after parsing attributes in process `syz.1.119'.
[   62.742625][ T6246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.119'.
[   62.747398][ T6246] netlink: 20 bytes leftover after parsing attributes in process `syz.1.119'.
[   62.783446][ T6249] validate_nla: 2 callbacks suppressed
[   62.783460][ T6249] netlink: 'syz.1.120': attribute type 19 has an invalid length.
[   62.934668][ T5815] Bluetooth: hci0: command tx timeout
[   62.961533][ T6257] netlink: 12 bytes leftover after parsing attributes in process `syz.1.123'.
[   62.967572][ T6257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.123'.
[   63.014749][ T5813] Bluetooth: hci2: command 0x040f tx timeout
[   63.017422][ T5815] Bluetooth: hci1: command tx timeout
[   63.101850][ T6274] xt_connbytes: Forcing CT accounting to be enabled
[   63.104112][ T6274] xt_bpf: check failed: parse error
[   65.104693][ T5813] Bluetooth: hci2: command 0x040f tx timeout
[   65.603720][ T6279] netlink: 12 bytes leftover after parsing attributes in process `syz.0.130'.
[   65.613710][ T6279] vlan2: entered promiscuous mode
[   65.616074][ T6279] bridge0: entered promiscuous mode
[   65.618396][ T6283] netlink: 132 bytes leftover after parsing attributes in process `syz.1.129'.
[   65.620226][ T6279] netlink: 16 bytes leftover after parsing attributes in process `syz.0.130'.
[   65.652082][ T6286] warning: `syz.0.131' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   65.703395][ T6291] netlink: 52 bytes leftover after parsing attributes in process `syz.2.132'.
[   65.715338][ T6291] syz_tun: entered allmulticast mode
[   65.729982][ T6288] syz_tun: left allmulticast mode
[   65.767075][ T6290] netlink: 'syz.1.133': attribute type 1 has an invalid length.
[   65.977119][ T6314] syzkaller1: entered promiscuous mode
[   65.979421][ T6314] syzkaller1: entered allmulticast mode
[   66.040449][ T6314] netlink: 'syz.1.141': attribute type 7 has an invalid length.
[   66.527532][ T6349] bridge_slave_1: left allmulticast mode
[   66.530080][ T6349] bridge_slave_1: left promiscuous mode
[   66.533238][ T6349] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.542157][ T6349] bridge_slave_0: left allmulticast mode
[   66.545896][ T6349] bridge_slave_0: left promiscuous mode
[   66.548962][ T6349] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.752630][ T6368] netlink: 'syz.2.157': attribute type 1 has an invalid length.
[   66.817290][ T6374] bond1: (slave vti0): The slave device specified does not support setting the MAC address
[   66.821235][ T6374] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode
[   66.826711][ T6374] bond1: (slave vti0): making interface the new active one
[   66.830036][ T6374] bond1: (slave vti0): Enslaving as an active interface with an up link
[   66.989680][ T6388] x_tables: unsorted entry at hook 2
[   67.088108][ T6393] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   67.157348][ T6393] lo speed is unknown, defaulting to 1000
[   67.232172][ T6393] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   67.244005][ T6393] tipc: Started in network mode
[   67.247941][ T6393] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[   67.252119][ T6393] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000
[   67.257717][ T6393] tipc: Enabled bearer <udp:syz1>, priority 10
[   68.024741][ T5815] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   68.028037][ T5815] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   68.031206][ T5815] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   68.034931][ T5815] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   68.037757][ T5815] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   68.072039][ T6443] lo speed is unknown, defaulting to 1000
[   68.192891][ T6443] chnl_net:caif_netlink_parms(): no params data found
[   68.240227][ T6443] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.242599][ T6443] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.246010][ T6443] bridge_slave_0: entered allmulticast mode
[   68.248879][ T6443] bridge_slave_0: entered promiscuous mode
[   68.252065][ T6443] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.255127][ T5840] tipc: Node number set to 1
[   68.256986][ T6443] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.259689][ T6443] bridge_slave_1: entered allmulticast mode
[   68.262834][ T6443] bridge_slave_1: entered promiscuous mode
[   68.280999][ T6443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   68.286807][ T6443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   68.308308][ T6443] team0: Port device team_slave_0 added
[   68.311697][ T6443] team0: Port device team_slave_1 added
[   68.330015][ T6443] batman_adv: batadv0: Adding interface: batadv_slave_0
[   68.332404][ T6443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.341634][ T6443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   68.347371][ T6443] batman_adv: batadv0: Adding interface: batadv_slave_1
[   68.350035][ T6443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.358823][ T6443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   68.384716][ T6443] hsr_slave_0: entered promiscuous mode
[   68.387070][ T6443] hsr_slave_1: entered promiscuous mode
[   68.392888][ T6443] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   68.396345][ T6443] Cannot create hsr debugfs directory
[   68.474862][ T6454] __nla_validate_parse: 26 callbacks suppressed
[   68.474871][ T6454] netlink: 104 bytes leftover after parsing attributes in process `syz.1.184'.
[   68.497704][ T6443] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.563140][ T6443] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.656696][ T6443] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.737512][ T6443] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.827087][ T6464] netlink: 32 bytes leftover after parsing attributes in process `syz.0.186'.
[   68.906406][ T6443] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   68.917532][ T6443] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   68.935668][ T6443] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   68.951501][ T6443] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   69.159421][ T6476] netlink: 'syz.0.188': attribute type 9 has an invalid length.
[   69.195786][ T6476] netlink: 'syz.0.188': attribute type 9 has an invalid length.
[   69.198869][ T6443] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.270697][ T6443] 8021q: adding VLAN 0 to HW filter on device team0
[   69.296020][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.299256][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.383185][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.386378][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.533884][ T5660] bond1 (unregistering): (slave vti0): Releasing backup interface
[   69.684312][ T5660] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   69.688778][ T5660] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   69.696311][ T5660] bond0 (unregistering): Released all slaves
[   69.702820][ T5660] bond1 (unregistering): Released all slaves
[   69.772896][ T6443] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   69.784212][ T6443] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   69.799851][ T5660] tipc: Disabling bearer <udp:syz2>
[   69.803678][ T5660] tipc: Left network mode
[   69.916660][ T5813] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   69.919553][ T5813] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   69.922726][ T5813] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   69.933512][ T5813] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   69.938042][ T5813] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   69.982797][ T5660] mac80211_hwsim hwsim2 wlan0 (unregistering): left allmulticast mode
[   70.024276][ T6495] lo speed is unknown, defaulting to 1000
[   70.047456][ T6443] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.054889][ T5815] Bluetooth: hci2: command tx timeout
[   70.093321][ T5660] hsr_slave_0: left promiscuous mode
[   70.097302][ T5660] hsr_slave_1: left promiscuous mode
[   70.099697][ T5660] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   70.102578][ T5660] batman_adv: batadv0: Removing interface: batadv_slave_0
[   70.108958][ T5660] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   70.111278][ T5660] batman_adv: batadv0: Removing interface: batadv_slave_1
[   70.121665][ T5660] veth1_macvtap: left promiscuous mode
[   70.123536][ T5660] veth0_macvtap: left promiscuous mode
[   70.126406][ T5660] veth1_vlan: left promiscuous mode
[   70.128163][ T5660] veth0_vlan: left promiscuous mode
[   70.261734][ T6508] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.196'.
[   70.370483][ T5660] team0 (unregistering): Port device team_slave_1 removed
[   70.390790][ T5660] team0 (unregistering): Port device team_slave_0 removed
[   70.592906][ T6502] netlink: 24 bytes leftover after parsing attributes in process `syz.1.196'.
[   70.685384][ T6495] chnl_net:caif_netlink_parms(): no params data found
[   70.707977][ T6443] veth0_vlan: entered promiscuous mode
[   70.759425][ T6443] veth1_vlan: entered promiscuous mode
[   70.801262][ T6495] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.804016][ T6495] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.810319][ T6495] bridge_slave_0: entered allmulticast mode
[   70.814298][ T6495] bridge_slave_0: entered promiscuous mode
[   70.818187][ T6495] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.820480][ T6495] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.822807][ T6495] bridge_slave_1: entered allmulticast mode
[   70.829242][ T6495] bridge_slave_1: entered promiscuous mode
[   70.865962][ T6495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.873879][ T6495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.910640][ T6495] team0: Port device team_slave_0 added
[   70.919591][ T6495] team0: Port device team_slave_1 added
[   70.934411][ T6443] veth0_macvtap: entered promiscuous mode
[   70.955839][ T6495] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.958881][ T6495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.969723][ T6495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.975812][ T6495] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.979275][ T6495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.990301][ T6495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.997077][ T6443] veth1_macvtap: entered promiscuous mode
[   71.051254][ T6443] batman_adv: batadv0: Interface activated: batadv_slave_0
[   71.061066][ T6495] hsr_slave_0: entered promiscuous mode
[   71.064319][ T6495] hsr_slave_1: entered promiscuous mode
[   71.067679][ T6495] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   71.070974][ T6495] Cannot create hsr debugfs directory
[   71.097993][ T5660] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.111544][ T6443] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.141152][ T6443] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.144927][ T6443] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.148550][ T6443] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.152212][ T6443] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.173713][ T5660] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.262132][ T5660] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.268967][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.271549][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.323828][ T5660] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.345606][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.348331][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.377600][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.382678][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.450264][ T5660] bridge_slave_1: left allmulticast mode
[   71.452907][ T5660] bridge_slave_1: left promiscuous mode
[   71.456122][ T5660] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.462008][ T5660] bridge_slave_0: left allmulticast mode
[   71.464063][ T5660] bridge_slave_0: left promiscuous mode
[   71.474775][ T5660] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.734289][ T5660] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   71.739533][ T5660] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   71.743338][ T5660] bond0 (unregistering): Released all slaves
[   71.750333][ T5660] bond1 (unregistering): Released all slaves
[   71.981774][ T5815] Bluetooth: hci1: command tx timeout
[   72.094643][ T5660] hsr_slave_0: left promiscuous mode
[   72.097508][ T5660] hsr_slave_1: left promiscuous mode
[   72.099788][ T5660] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   72.102221][ T5660] batman_adv: batadv0: Removing interface: batadv_slave_0
[   72.110034][ T5660] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   72.112503][ T5660] batman_adv: batadv0: Removing interface: batadv_slave_1
[   72.132909][ T5660] veth1_macvtap: left promiscuous mode
[   72.135716][ T5660] veth0_macvtap: left promiscuous mode
[   72.138111][ T5660] veth1_vlan: left promiscuous mode
[   72.140262][ T5660] veth0_vlan: left promiscuous mode
[   72.392108][ T5813] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   72.406713][ T5813] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   72.413576][ T5813] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   72.423225][ T5813] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   72.428180][ T5813] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   72.512650][ T5660] team0 (unregistering): Port device team_slave_1 removed
[   72.539455][ T5660] team0 (unregistering): Port device team_slave_0 removed
[   72.794309][ T5875] lo speed is unknown, defaulting to 1000
[   72.798783][ T5875] syz2: Port: 1 Link DOWN
[   72.936240][ T6495] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   72.984994][ T6495] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   72.992949][ T6495] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   73.029281][ T6495] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   73.099399][ T6571] netlink: 12 bytes leftover after parsing attributes in process `syz.1.202'.
[   73.179468][ T6577] netlink: 'syz.1.203': attribute type 1 has an invalid length.
[   73.221553][ T6577] 8021q: adding VLAN 0 to HW filter on device bond1
[   73.268932][ T5660] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.281306][ T6541] chnl_net:caif_netlink_parms(): no params data found
[   73.289077][ T6577] SET target dimension over the limit!
[   73.334247][ T6541] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.337548][ T6541] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.339936][ T6541] bridge_slave_0: entered allmulticast mode
[   73.342928][ T6541] bridge_slave_0: entered promiscuous mode
[   73.347560][ T6541] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.349835][ T6541] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.352167][ T6541] bridge_slave_1: entered allmulticast mode
[   73.355238][ T6541] bridge_slave_1: entered promiscuous mode
[   73.377668][ T6541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   73.383010][ T6541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.411924][ T6577] bond1: (slave batadv1): Opening slave failed
[   73.423993][ T6541] team0: Port device team_slave_0 added
[   73.431789][ T6495] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.436684][ T6541] team0: Port device team_slave_1 added
[   73.457390][ T6541] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.459852][ T6541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.471836][ T6541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.477199][ T6541] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.479412][ T6541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.487981][ T6541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.504119][ T5660] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.547603][ T6541] hsr_slave_0: entered promiscuous mode
[   73.550738][ T6541] hsr_slave_1: entered promiscuous mode
[   73.553179][ T6541] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   73.556369][ T6541] Cannot create hsr debugfs directory
[   73.559616][ T6495] 8021q: adding VLAN 0 to HW filter on device team0
[   73.571807][ T5660] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.582754][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.586023][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.616522][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.619556][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.648202][ T5660] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.826440][ T5660] bridge_slave_1: left allmulticast mode
[   73.828642][ T5660] bridge_slave_1: left promiscuous mode
[   73.832472][ T5660] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.838434][ T5660] bridge_slave_0: left allmulticast mode
[   73.840363][ T5660] bridge_slave_0: left promiscuous mode
[   73.842489][ T5660] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.025632][ T5660] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   74.031604][ T5660] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   74.037354][ T5660] bond0 (unregistering): Released all slaves
[   74.054904][ T5815] Bluetooth: hci1: command tx timeout
[   74.079802][ T6495] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.124431][ T6495] veth0_vlan: entered promiscuous mode
[   74.166994][ T6495] veth1_vlan: entered promiscuous mode
[   74.182205][ T6495] veth0_macvtap: entered promiscuous mode
[   74.190681][ T6495] veth1_macvtap: entered promiscuous mode
[   74.200391][ T6495] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.206947][ T6495] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.283420][ T6495] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.287426][ T6495] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.290172][ T6495] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.293027][ T6495] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.337639][ T5660] hsr_slave_0: left promiscuous mode
[   74.340201][ T5660] hsr_slave_1: left promiscuous mode
[   74.342635][ T5660] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   74.346765][ T5660] batman_adv: batadv0: Removing interface: batadv_slave_0
[   74.349921][ T5660] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   74.352375][ T5660] batman_adv: batadv0: Removing interface: batadv_slave_1
[   74.361227][ T5660] veth1_macvtap: left promiscuous mode
[   74.363294][ T5660] veth0_macvtap: left promiscuous mode
[   74.365672][ T5660] veth1_vlan: left promiscuous mode
[   74.367603][ T5660] veth0_vlan: left promiscuous mode
[   74.460217][ T5815] Bluetooth: hci2: command tx timeout
[   74.661043][ T5660] team0 (unregistering): Port device team_slave_1 removed
[   74.689532][ T5660] team0 (unregistering): Port device team_slave_0 removed
[   74.968357][ T6610] lo speed is unknown, defaulting to 1000
[   74.976561][ T6610] lo speed is unknown, defaulting to 1000
[   74.978863][ T6610] lo speed is unknown, defaulting to 1000
[   75.025777][ T6610] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   75.069543][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.072046][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.078229][ T6610] lo speed is unknown, defaulting to 1000
[   75.091892][ T6610] lo speed is unknown, defaulting to 1000
[   75.094469][ T6610] lo speed is unknown, defaulting to 1000
[   75.098648][ T6541] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   75.121181][ T6541] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   75.127389][ T6541] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   75.136943][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.139505][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.142380][ T6541] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   75.306235][ T6541] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.320719][ T6541] 8021q: adding VLAN 0 to HW filter on device team0
[   75.376407][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.378699][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.401928][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.404820][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.545306][ T6636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.208'.
[   75.549139][ T6636] netlink: 20 bytes leftover after parsing attributes in process `syz.1.208'.
[   75.550819][ T6541] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.586128][ T6541] veth0_vlan: entered promiscuous mode
[   75.592159][ T6541] veth1_vlan: entered promiscuous mode
[   75.614398][ T6541] veth0_macvtap: entered promiscuous mode
[   75.622643][ T6541] veth1_macvtap: entered promiscuous mode
[   75.633139][ T6541] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.641795][ T6541] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.646834][ T6541] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.650479][ T6541] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.653396][ T6541] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.657476][ T6541] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.703904][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.711212][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.726972][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.729712][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.751204][ T6646] vlan3: entered promiscuous mode
[   75.753311][ T6646] bridge0: entered promiscuous mode
[   75.757277][ T6646] vlan3: entered allmulticast mode
[   75.759121][ T6646] bridge0: entered allmulticast mode
[   76.145565][ T6485] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.382912][ T5813] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   76.387283][ T5813] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   76.391090][ T5813] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   76.395586][ T5813] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   76.399566][ T5813] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   76.424325][ T6649] lo speed is unknown, defaulting to 1000
[   76.515501][ T6649] chnl_net:caif_netlink_parms(): no params data found
[   76.567644][ T6649] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.570112][ T6649] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.572800][ T6649] bridge_slave_0: entered allmulticast mode
[   76.577164][ T6649] bridge_slave_0: entered promiscuous mode
[   76.581390][ T6649] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.584169][ T6649] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.588007][ T6649] bridge_slave_1: entered allmulticast mode
[   76.591342][ T6649] bridge_slave_1: entered promiscuous mode
[   76.614912][ T6649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   76.620645][ T6649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   76.640951][ T6649] team0: Port device team_slave_0 added
[   76.647131][ T6649] team0: Port device team_slave_1 added
[   76.670473][ T6649] batman_adv: batadv0: Adding interface: batadv_slave_0
[   76.673083][ T6649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.682662][ T6649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   76.689139][ T6649] batman_adv: batadv0: Adding interface: batadv_slave_1
[   76.692005][ T6649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.703373][ T6649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   76.740450][ T6649] hsr_slave_0: entered promiscuous mode
[   76.743637][ T6649] hsr_slave_1: entered promiscuous mode
[   76.746805][ T6649] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   76.749928][ T6649] Cannot create hsr debugfs directory
[   77.225013][ T6485] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.360120][ T6485] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.444109][ T6485] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.479001][ T6664] netlink: 248 bytes leftover after parsing attributes in process `syz.1.213'.
[   77.509348][ T6665] netlink: 248 bytes leftover after parsing attributes in process `syz.1.213'.
[   77.596215][ T6485] bridge_slave_1: left allmulticast mode
[   77.598644][ T6485] bridge_slave_1: left promiscuous mode
[   77.600683][ T6485] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.614412][ T6485] bridge_slave_0: left allmulticast mode
[   77.622704][ T6485] bridge_slave_0: left promiscuous mode
[   77.625390][ T6485] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.667452][ T5813] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   77.672322][ T5813] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   77.676875][ T5813] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   77.680844][ T5813] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   77.687886][ T5813] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   77.903886][ T6485] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   77.909706][ T6485] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   77.913597][ T6485] bond0 (unregistering): Released all slaves
[   77.957758][ T6668] lo speed is unknown, defaulting to 1000
[   78.227084][ T6668] chnl_net:caif_netlink_parms(): no params data found
[   78.260400][ T6689] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   78.263228][ T6689] IPv6: NLM_F_CREATE should be set when creating new route
[   78.266348][ T6689] IPv6: NLM_F_CREATE should be set when creating new route
[   78.283243][ T6485] hsr_slave_0: left promiscuous mode
[   78.289142][ T6485] hsr_slave_1: left promiscuous mode
[   78.291899][ T6485] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   78.304578][ T6485] batman_adv: batadv0: Removing interface: batadv_slave_0
[   78.308248][ T6485] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   78.311251][ T6485] batman_adv: batadv0: Removing interface: batadv_slave_1
[   78.329237][ T6485] veth1_macvtap: left promiscuous mode
[   78.331532][ T6485] veth0_macvtap: left promiscuous mode
[   78.333913][ T6485] veth1_vlan: left promiscuous mode
[   78.346748][ T6485] veth0_vlan: left promiscuous mode
[   78.464879][ T5813] Bluetooth: hci1: command tx timeout
[   78.624197][ T6485] team0 (unregistering): Port device team_slave_1 removed
[   78.643240][ T6485] team0 (unregistering): Port device team_slave_0 removed
[   78.941184][ T6668] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.943745][ T6668] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.946343][ T6668] bridge_slave_0: entered allmulticast mode
[   78.949070][ T6668] bridge_slave_0: entered promiscuous mode
[   78.957314][ T6668] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.960490][ T6668] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.962865][ T6668] bridge_slave_1: entered allmulticast mode
[   78.966149][ T6668] bridge_slave_1: entered promiscuous mode
[   79.000025][ T6668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   79.002875][ T6649] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   79.008820][ T6668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.020466][ T6649] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   79.025801][ T6649] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   79.030184][ T6649] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   79.047358][ T6668] team0: Port device team_slave_0 added
[   79.053170][ T6668] team0: Port device team_slave_1 added
[   79.093087][ T6668] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.097224][ T6668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.109520][ T6668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.122804][ T6668] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.126386][ T6668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.140826][ T6668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.216310][ T6668] hsr_slave_0: entered promiscuous mode
[   79.220574][ T6668] hsr_slave_1: entered promiscuous mode
[   79.223686][ T6668] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   79.227500][ T6668] Cannot create hsr debugfs directory
[   79.275829][ T6485] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.336242][ T6485] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.367071][ T6649] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.418111][ T6485] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.432223][ T6649] 8021q: adding VLAN 0 to HW filter on device team0
[   79.441843][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.445049][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.467542][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.470530][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.503568][ T6485] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.689297][ T6485] bridge_slave_1: left allmulticast mode
[   79.691954][ T6485] bridge_slave_1: left promiscuous mode
[   79.693867][ T6485] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.697907][ T6485] bridge_slave_0: left allmulticast mode
[   79.699762][ T6485] bridge_slave_0: left promiscuous mode
[   79.701667][ T6485] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.734995][ T5813] Bluetooth: hci2: command tx timeout
[   79.949017][ T6485] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   79.954843][ T6485] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   79.959872][ T6485] bond0 (unregistering): Released all slaves
[   79.978387][ T6649] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.085625][ T6649] veth0_vlan: entered promiscuous mode
[   80.099556][ T6649] veth1_vlan: entered promiscuous mode
[   80.196935][ T6649] veth0_macvtap: entered promiscuous mode
[   80.211497][ T6649] veth1_macvtap: entered promiscuous mode
[   80.229342][ T6649] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.237045][ T6649] batman_adv: batadv0: Interface activated: batadv_slave_1
[   80.241966][ T6649] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.246112][ T6649] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.248901][ T6649] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.253325][ T6649] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.330847][ T6485] hsr_slave_0: left promiscuous mode
[   80.334172][ T6485] hsr_slave_1: left promiscuous mode
[   80.339138][ T6485] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   80.343561][ T6485] batman_adv: batadv0: Removing interface: batadv_slave_0
[   80.358029][ T6485] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   80.360432][ T6485] batman_adv: batadv0: Removing interface: batadv_slave_1
[   80.376987][ T6485] veth1_macvtap: left promiscuous mode
[   80.379335][ T6485] veth0_macvtap: left promiscuous mode
[   80.381729][ T6485] veth1_vlan: left promiscuous mode
[   80.383967][ T6485] veth0_vlan: left promiscuous mode
[   80.412683][ T6760] netlink: 212224 bytes leftover after parsing attributes in process `syz.1.225'.
[   80.534825][ T5813] Bluetooth: hci1: command tx timeout
[   80.691207][ T6485] team0 (unregistering): Port device team_slave_1 removed
[   80.718447][ T6485] team0 (unregistering): Port device team_slave_0 removed
[   81.127443][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.132609][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.168345][ T6668] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   81.187129][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.189718][ T6668] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   81.190150][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.208864][ T6668] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   81.218717][ T6668] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   81.390021][ T6668] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.410147][ T6668] 8021q: adding VLAN 0 to HW filter on device team0
[   81.425948][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.428192][ T1095] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.431511][ T1095] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.433928][ T1095] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.467160][ T6668] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   81.471293][ T6668] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   81.497745][  T790] cfg80211: failed to load regulatory.db
[   81.578289][ T6668] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.643044][ T6668] veth0_vlan: entered promiscuous mode
[   81.651921][ T6668] veth1_vlan: entered promiscuous mode
[   81.671210][ T6802] netlink: 20 bytes leftover after parsing attributes in process `syz.1.230'.
[   81.680882][ T6668] veth0_macvtap: entered promiscuous mode
[   81.688576][ T6668] veth1_macvtap: entered promiscuous mode
[   81.703061][ T6668] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.713762][ T6668] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.721160][ T6668] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.724399][ T6668] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.727359][ T6668] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.730603][ T6668] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.807182][ T1095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.810403][ T1095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.816869][ T5813] Bluetooth: hci2: command tx timeout
[   81.876289][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.881727][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.009821][ T6485] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.116198][ T6485] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.298980][ T5815] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   82.303898][ T5815] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   82.308011][ T5815] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   82.312682][ T5815] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   82.318325][ T5815] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   82.341971][ T6825] lo speed is unknown, defaulting to 1000
[   82.428172][ T6485] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.441900][ T6825] chnl_net:caif_netlink_parms(): no params data found
[   82.517407][ T6825] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.520494][ T6825] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.523052][ T6825] bridge_slave_0: entered allmulticast mode
[   82.526084][ T6825] bridge_slave_0: entered promiscuous mode
[   82.529270][ T6825] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.531526][ T6825] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.534384][ T6825] bridge_slave_1: entered allmulticast mode
[   82.538918][ T6825] bridge_slave_1: entered promiscuous mode
[   82.570101][ T6825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   82.578563][ T6825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   82.612151][ T6825] team0: Port device team_slave_0 added
[   82.622855][ T6825] team0: Port device team_slave_1 added
[   82.650720][ T6825] batman_adv: batadv0: Adding interface: batadv_slave_0
[   82.653550][ T6825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   82.664051][ T6825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   82.671379][ T6825] batman_adv: batadv0: Adding interface: batadv_slave_1
[   82.674239][ T6825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   82.684899][ T6825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   82.719892][ T6825] hsr_slave_0: entered promiscuous mode
[   82.722103][ T6825] hsr_slave_1: entered promiscuous mode
[   82.724775][ T6825] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   82.727184][ T6825] Cannot create hsr debugfs directory
[   82.839230][ T6834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.234'.
[   82.879663][ T6485] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.977127][ T6485] bridge_slave_1: left allmulticast mode
[   82.980115][ T6485] bridge_slave_1: left promiscuous mode
[   82.982013][ T6485] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.986918][ T6485] bridge_slave_0: left allmulticast mode
[   82.989261][ T6485] bridge_slave_0: left promiscuous mode
[   82.991690][ T6485] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.177872][ T6485] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   83.181864][ T6485] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   83.186547][ T6485] bond0 (unregistering): Released all slaves
[   83.408964][ T6485] hsr_slave_0: left promiscuous mode
[   83.411529][ T6485] hsr_slave_1: left promiscuous mode
[   83.414251][ T6485] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   83.418229][ T6485] batman_adv: batadv0: Removing interface: batadv_slave_0
[   83.420903][ T6485] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   83.423254][ T6485] batman_adv: batadv0: Removing interface: batadv_slave_1
[   83.433445][ T6485] veth1_macvtap: left promiscuous mode
[   83.436860][ T6485] veth0_macvtap: left promiscuous mode
[   83.438698][ T6485] veth1_vlan: left promiscuous mode
[   83.440544][ T6485] veth0_vlan: left promiscuous mode
[   83.763893][ T6485] team0 (unregistering): Port device team_slave_1 removed
[   83.788297][ T6485] team0 (unregistering): Port device team_slave_0 removed
[   84.102502][ T6825] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   84.113797][ T6825] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   84.133767][ T6825] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   84.149417][ T6825] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   84.303038][ T6825] 8021q: adding VLAN 0 to HW filter on device bond0
[   84.323758][ T6825] 8021q: adding VLAN 0 to HW filter on device team0
[   84.332677][ T5815] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   84.336027][ T5815] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   84.343360][ T5815] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   84.354045][ T5839] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.359164][ T5815] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   84.362644][ T5815] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   84.375464][ T5815] Bluetooth: hci1: command tx timeout
[   84.383029][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.386212][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.401688][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.404729][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   84.432079][ T6869] lo speed is unknown, defaulting to 1000
[   84.574012][ T6825] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.584016][ T6869] chnl_net:caif_netlink_parms(): no params data found
[   84.641139][ T6869] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.643987][ T6869] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.647784][ T6869] bridge_slave_0: entered allmulticast mode
[   84.650624][ T6869] bridge_slave_0: entered promiscuous mode
[   84.655468][ T6869] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.657786][ T6869] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.660108][ T6869] bridge_slave_1: entered allmulticast mode
[   84.663379][ T6869] bridge_slave_1: entered promiscuous mode
[   84.686915][ T6869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   84.692214][ T6869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   84.724321][ T6869] team0: Port device team_slave_0 added
[   84.729120][ T6869] team0: Port device team_slave_1 added
[   84.763214][ T6869] batman_adv: batadv0: Adding interface: batadv_slave_0
[   84.766263][ T6869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.775723][ T6869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   84.779543][ T6825] veth0_vlan: entered promiscuous mode
[   84.783229][ T6869] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.786507][ T6869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.795158][ T6869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   84.826343][ T6869] hsr_slave_0: entered promiscuous mode
[   84.828726][ T6869] hsr_slave_1: entered promiscuous mode
[   84.830913][ T6869] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   84.833763][ T6869] Cannot create hsr debugfs directory
[   84.840998][ T6825] veth1_vlan: entered promiscuous mode
[   84.977562][ T6825] veth0_macvtap: entered promiscuous mode
[   84.985549][ T6825] veth1_macvtap: entered promiscuous mode
[   84.996707][ T6825] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.003550][ T6825] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.009045][ T6825] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.012083][ T6825] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.016041][ T6825] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.019309][ T6825] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.070046][ T1095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.072566][ T1095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.100128][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.103335][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.528517][ T5839] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.593155][ T5839] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.647014][ T5839] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.731946][ T5839] bridge_slave_1: left allmulticast mode
[   85.744600][ T5839] bridge_slave_1: left promiscuous mode
[   85.747364][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.751393][ T5839] bridge_slave_0: left allmulticast mode
[   85.753201][ T5839] bridge_slave_0: left promiscuous mode
[   85.757092][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.944234][ T5839] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   85.950482][ T5839] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   85.954082][ T5839] bond0 (unregistering): Released all slaves
[   86.220349][ T5839] hsr_slave_0: left promiscuous mode
[   86.222479][ T5839] hsr_slave_1: left promiscuous mode
[   86.226041][ T5839] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   86.228534][ T5839] batman_adv: batadv0: Removing interface: batadv_slave_0
[   86.231212][ T5839] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   86.233920][ T5839] batman_adv: batadv0: Removing interface: batadv_slave_1
[   86.252838][ T5839] veth1_macvtap: left promiscuous mode
[   86.255714][ T5839] veth0_macvtap: left promiscuous mode
[   86.258137][ T5839] veth1_vlan: left promiscuous mode
[   86.260449][ T5839] veth0_vlan: left promiscuous mode
[   86.386191][ T5815] Bluetooth: hci2: command tx timeout
[   86.528087][ T5839] team0 (unregistering): Port device team_slave_1 removed
[   86.547319][ T5839] team0 (unregistering): Port device team_slave_0 removed
[   86.930627][ T6925] netlink: zone id is out of range
[   86.934864][ T6925] netlink: zone id is out of range
[   86.937248][ T6869] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   86.945295][ T6925] netlink: zone id is out of range
[   86.947532][ T6925] netlink: zone id is out of range
[   86.949662][ T6925] netlink: zone id is out of range
[   86.954372][ T6925] netlink: zone id is out of range
[   86.956873][ T6925] netlink: zone id is out of range
[   86.959069][ T6925] netlink: zone id is out of range
[   86.960849][ T6869] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   86.963468][ T6925] netlink: zone id is out of range
[   86.966000][ T6925] netlink: zone id is out of range
[   86.977995][ T6869] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   86.998776][ T6869] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   87.074323][ T6939] batadv1: entered allmulticast mode
[   87.079240][ T6939] 8021q: adding VLAN 0 to HW filter on device batadv1
[   87.094395][ T6939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.246'.
[   87.173078][ T6869] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.240086][ T5839] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.273603][ T6869] 8021q: adding VLAN 0 to HW filter on device team0
[   87.280582][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.283531][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.292850][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.295639][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.429472][ T6869] 8021q: adding VLAN 0 to HW filter on device batadv0
[   87.467278][ T6869] veth0_vlan: entered promiscuous mode
[   87.476116][ T6869] veth1_vlan: entered promiscuous mode
[   87.499542][ T6869] veth0_macvtap: entered promiscuous mode
[   87.505964][ T6869] veth1_macvtap: entered promiscuous mode
[   87.518682][ T6869] batman_adv: batadv0: Interface activated: batadv_slave_0
[   87.531230][ T6869] batman_adv: batadv0: Interface activated: batadv_slave_1
[   87.538168][ T6869] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.541745][ T6869] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.547018][ T6869] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.550591][ T6869] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.603225][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.613504][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.629257][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.631816][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.926055][ T5813] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   87.929158][ T5813] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   87.932389][ T5813] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   87.937827][ T5813] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   87.940783][ T5813] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   87.966342][ T6952] lo speed is unknown, defaulting to 1000
[   88.062044][ T6952] chnl_net:caif_netlink_parms(): no params data found
[   88.148318][ T6952] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.150716][ T6952] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.153027][ T6952] bridge_slave_0: entered allmulticast mode
[   88.156806][ T6952] bridge_slave_0: entered promiscuous mode
[   88.161245][ T6952] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.164415][ T6952] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.168875][ T6952] bridge_slave_1: entered allmulticast mode
[   88.172765][ T6952] bridge_slave_1: entered promiscuous mode
[   88.220429][ T6952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.232208][ T6952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.275479][ T6952] team0: Port device team_slave_0 added
[   88.280283][ T6952] team0: Port device team_slave_1 added
[   88.311835][ T6952] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.316047][ T6952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.327378][ T6952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.332871][ T6952] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.338988][ T6952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.352259][ T6952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.399624][ T6952] hsr_slave_0: entered promiscuous mode
[   88.402520][ T6952] hsr_slave_1: entered promiscuous mode
[   88.404991][ T6952] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   88.407853][ T6952] Cannot create hsr debugfs directory
[   88.557156][ T6971] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input4
[   88.950197][ T5839] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.963988][ T6980] ip6gre1: entered allmulticast mode
[   89.016459][ T5839] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.119729][ T5839] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.263877][ T5839] bridge_slave_1: left allmulticast mode
[   89.266787][ T5839] bridge_slave_1: left promiscuous mode
[   89.269609][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.280303][ T5839] bridge_slave_0: left allmulticast mode
[   89.282775][ T5839] bridge_slave_0: left promiscuous mode
[   89.285968][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.541957][ T5839] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   89.549455][ T5839] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   89.553848][ T5839] bond0 (unregistering): Released all slaves
[   89.881086][ T5839] hsr_slave_0: left promiscuous mode
[   89.883740][ T5839] hsr_slave_1: left promiscuous mode
[   89.887704][ T5839] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   89.890368][ T5839] batman_adv: batadv0: Removing interface: batadv_slave_0
[   89.893174][ T5839] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   89.896519][ T5839] batman_adv: batadv0: Removing interface: batadv_slave_1
[   89.906020][ T5839] veth1_macvtap: left promiscuous mode
[   89.907868][ T5839] veth0_macvtap: left promiscuous mode
[   89.909689][ T5839] veth1_vlan: left promiscuous mode
[   89.913321][ T5839] veth0_vlan: left promiscuous mode
[   89.975833][ T5815] Bluetooth: hci1: command tx timeout
[   90.233664][ T5839] team0 (unregistering): Port device team_slave_1 removed
[   90.258689][ T5839] team0 (unregistering): Port device team_slave_0 removed
[   90.544382][ T5813] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   90.552638][ T5813] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   90.556488][ T5813] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   90.560082][ T5813] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   90.563882][ T5813] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   90.613539][ T7015] lo speed is unknown, defaulting to 1000
[   90.738304][ T6952] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   90.756823][ T6952] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   90.767715][ T6952] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   90.780890][ T6952] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   90.811065][ T7015] chnl_net:caif_netlink_parms(): no params data found
[   90.901286][ T7036] bond3: entered promiscuous mode
[   90.903006][ T7036] bond3: entered allmulticast mode
[   90.910760][ T7036] 8021q: adding VLAN 0 to HW filter on device bond3
[   91.001808][ T7015] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.005136][ T7015] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.008268][ T7015] bridge_slave_0: entered allmulticast mode
[   91.012395][ T7015] bridge_slave_0: entered promiscuous mode
[   91.025463][ T7015] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.028789][ T7015] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.031957][ T7015] bridge_slave_1: entered allmulticast mode
[   91.037014][ T7015] bridge_slave_1: entered promiscuous mode
[   91.075075][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.087392][ T7015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   91.094042][ T6952] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.100815][ T7015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   91.133844][ T7015] team0: Port device team_slave_0 added
[   91.138913][ T6952] 8021q: adding VLAN 0 to HW filter on device team0
[   91.143889][ T7015] team0: Port device team_slave_1 added
[   91.163974][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.166463][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.180215][ T7015] batman_adv: batadv0: Adding interface: batadv_slave_0
[   91.182635][ T7015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.192679][ T7015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   91.199308][ T7015] batman_adv: batadv0: Adding interface: batadv_slave_1
[   91.201702][ T7015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.213558][ T7015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.226698][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.229058][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.254454][ T7015] hsr_slave_0: entered promiscuous mode
[   91.257175][ T7015] hsr_slave_1: entered promiscuous mode
[   91.259470][ T7015] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   91.262288][ T7015] Cannot create hsr debugfs directory
[   91.406640][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.490737][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.531049][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.545757][ T6952] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.579132][ T6952] veth0_vlan: entered promiscuous mode
[   91.584310][ T6952] veth1_vlan: entered promiscuous mode
[   91.729312][ T6952] veth0_macvtap: entered promiscuous mode
[   91.733430][   T13] bridge_slave_1: left allmulticast mode
[   91.737732][   T13] bridge_slave_1: left promiscuous mode
[   91.746885][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.758248][   T13] bridge_slave_0: left allmulticast mode
[   91.760092][   T13] bridge_slave_0: left promiscuous mode
[   91.762011][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.017452][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   92.023547][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   92.030125][   T13] bond0 (unregistering): Released all slaves
[   92.042791][ T6952] veth1_macvtap: entered promiscuous mode
[   92.065231][ T5813] Bluetooth: hci1: command tx timeout
[   92.125723][ T6952] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.132311][ T6952] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.202592][ T6952] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.208615][ T6952] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.212118][ T6952] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.222199][ T6952] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.497650][   T13] hsr_slave_0: left promiscuous mode
[   92.500536][   T13] hsr_slave_1: left promiscuous mode
[   92.503223][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   92.508972][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   92.512422][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   92.515733][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   92.527761][   T13] veth1_macvtap: left promiscuous mode
[   92.530247][   T13] veth0_macvtap: left promiscuous mode
[   92.532711][   T13] veth1_vlan: left promiscuous mode
[   92.536950][   T13] veth0_vlan: left promiscuous mode
[   92.614668][ T5813] Bluetooth: hci2: command tx timeout
[   92.860565][   T13] team0 (unregistering): Port device team_slave_1 removed
[   92.888404][   T13] team0 (unregistering): Port device team_slave_0 removed
[   93.190657][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.196566][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.245108][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.248472][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.249053][ T7015] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   93.272643][ T7089] batadv_slave_1: entered promiscuous mode
[   93.281405][ T7015] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   93.300319][ T7088] batadv_slave_1: left promiscuous mode
[   93.318056][ T7015] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   93.346415][ T7015] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   93.380574][ T7091] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.269'.
[   93.387589][ T7091] net_ratelimit: 121 callbacks suppressed
[   93.388148][ T7091] netlink: zone id is out of range
[   93.394268][ T7091] netlink: zone id is out of range
[   93.397581][ T7091] netlink: get zone limit has 8 unknown bytes
[   93.406468][ T7091] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.269'.
[   93.422811][ T7100] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.269'.
[   93.441743][ T7091] netlink: zone id is out of range
[   93.443977][ T7100] netlink: zone id is out of range
[   93.450073][ T7091] netlink: zone id is out of range
[   93.457884][ T7100] netlink: zone id is out of range
[   93.460285][ T7091] netlink: get zone limit has 8 unknown bytes
[   93.466615][ T7100] netlink: get zone limit has 8 unknown bytes
[   93.477594][ T6972] ==================================================================
[   93.480266][ T6972] BUG: KASAN: slab-use-after-free in __mutex_lock+0x738/0xe80
[   93.482781][ T6972] Read of size 8 at addr ffff8881159080a0 by task khidpd_0b578002/6972
[   93.486322][ T6972] 
[   93.487170][ T6972] CPU: 1 UID: 0 PID: 6972 Comm: khidpd_0b578002 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[   93.487184][ T6972] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   93.487191][ T6972] Call Trace:
[   93.487197][ T6972]  <TASK>
[   93.487202][ T6972]  dump_stack_lvl+0x189/0x250
[   93.487224][ T6972]  ? __virt_addr_valid+0x1c8/0x5c0
[   93.487235][ T6972]  ? rcu_is_watching+0x15/0xb0
[   93.487251][ T6972]  ? __kasan_check_byte+0x12/0x40
[   93.487263][ T6972]  ? __pfx_dump_stack_lvl+0x10/0x10
[   93.487280][ T6972]  ? rcu_is_watching+0x15/0xb0
[   93.487294][ T6972]  ? lock_release+0x4b/0x3e0
[   93.487304][ T6972]  ? __virt_addr_valid+0x1c8/0x5c0
[   93.487310][ T6972]  ? __virt_addr_valid+0x4a5/0x5c0
[   93.487317][ T6972]  print_report+0xd2/0x2b0
[   93.487326][ T6972]  ? __mutex_lock+0x738/0xe80
[   93.487336][ T6972]  kasan_report+0x118/0x150
[   93.487343][ T6972]  ? __mutex_lock+0x738/0xe80
[   93.487354][ T6972]  __mutex_lock+0x738/0xe80
[   93.487364][ T6972]  ? __mutex_lock+0x51b/0xe80
[   93.487375][ T6972]  ? l2cap_unregister_user+0x6a/0x1b0
[   93.487385][ T6972]  ? __pfx___mutex_lock+0x10/0x10
[   93.487397][ T6972]  ? __pfx___timer_delete_sync+0x10/0x10
[   93.487406][ T6972]  l2cap_unregister_user+0x6a/0x1b0
[   93.487417][ T6972]  hidp_session_thread+0x3c9/0x410
[   93.487428][ T6972]  ? __pfx_hidp_session_thread+0x10/0x10
[   93.487438][ T6972]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   93.487447][ T6972]  ? __pfx_hidp_session_wake_function+0x10/0x10
[   93.487459][ T6972]  ? __pfx_hidp_session_wake_function+0x10/0x10
[   93.487469][ T6972]  ? __kthread_parkme+0x7b/0x200
[   93.487475][ T6972]  ? __kthread_parkme+0x1a1/0x200
[   93.487504][ T6972]  kthread+0x711/0x8a0
[   93.487513][ T6972]  ? __pfx_hidp_session_thread+0x10/0x10
[   93.487523][ T6972]  ? __pfx_kthread+0x10/0x10
[   93.487531][ T6972]  ? _raw_spin_unlock_irq+0x23/0x50
[   93.487539][ T6972]  ? lockdep_hardirqs_on+0x9c/0x150
[   93.487549][ T6972]  ? __pfx_kthread+0x10/0x10
[   93.487556][ T6972]  ret_from_fork+0x3fc/0x770
[   93.487566][ T6972]  ? __pfx_ret_from_fork+0x10/0x10
[   93.487576][ T6972]  ? __switch_to_asm+0x39/0x70
[   93.487583][ T6972]  ? __switch_to_asm+0x33/0x70
[   93.487589][ T6972]  ? __pfx_kthread+0x10/0x10
[   93.487596][ T6972]  ret_from_fork_asm+0x1a/0x30
[   93.487605][ T6972]  </TASK>
[   93.487608][ T6972] 
[   93.498057][ T7015] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.498523][ T6972] Allocated by task 6952:
[   93.511022][ T7015] 8021q: adding VLAN 0 to HW filter on device team0
[   93.511665][ T6972]  kasan_save_track+0x3e/0x80
[   93.530829][ T7015] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   93.531574][ T6972]  __kasan_kmalloc+0x93/0xb0
[   93.533507][ T7015] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   93.535411][ T6972]  __kmalloc_noprof+0x27a/0x4f0
[   93.535421][ T6972]  hci_alloc_dev_priv+0x28/0x2040
[   93.535431][ T6972]  vhci_create_device+0x120/0x6e0
[   93.535440][ T6972]  vhci_write+0x3ce/0x4a0
[   93.535448][ T6972]  vfs_write+0x54b/0xa90
[   93.535458][ T6972]  ksys_write+0x145/0x250
[   93.535463][ T6972]  do_syscall_64+0xfa/0x3b0
[   93.535469][ T6972]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   93.535475][ T6972] 
[   93.535477][ T6972] Freed by task 6952:
[   93.535501][ T6972]  kasan_save_track+0x3e/0x80
[   93.535512][ T6972]  kasan_save_free_info+0x46/0x50
[   93.535519][ T6972]  __kasan_slab_free+0x62/0x70
[   93.535524][ T6972]  kfree+0x18e/0x440
[   93.535534][ T6972]  bt_host_release+0x82/0x90
[   93.535542][ T6972]  device_release+0x9c/0x1c0
[   93.535550][ T6972]  kobject_put+0x22b/0x480
[   93.535556][ T6972]  vhci_release+0x88/0xd0
[   93.535564][ T6972]  __fput+0x44c/0xa70
[   93.535571][ T6972]  task_work_run+0x1d4/0x260
[   93.535579][ T6972]  do_exit+0x6b5/0x22e0
[   93.535586][ T6972]  do_group_exit+0x21c/0x2d0
[   93.535593][ T6972]  __x64_sys_exit_group+0x3f/0x40
[   93.535600][ T6972]  x64_sys_call+0x21ba/0x21c0
[   93.535608][ T6972]  do_syscall_64+0xfa/0x3b0
[   93.535614][ T6972]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   93.535620][ T6972] 
[   93.535622][ T6972] Last potentially related work creation:
[   93.535625][ T6972]  kasan_save_stack+0x3e/0x60
[   93.535634][ T6972]  kasan_record_aux_stack+0xbd/0xd0
[   93.535641][ T6972]  insert_work+0x3d/0x330
[   93.535651][ T6972]  __queue_work+0xbd9/0xfe0
[   93.535657][ T6972]  queue_work_on+0x181/0x270
[   93.535662][ T6972]  process_scheduled_works+0xae1/0x17b0
[   93.535671][ T6972]  worker_thread+0x8a0/0xda0
[   93.535680][ T6972]  kthread+0x711/0x8a0
[   93.535686][ T6972]  ret_from_fork+0x3fc/0x770
[   93.535711][ T6972]  ret_from_fork_asm+0x1a/0x30
[   93.636856][ T6972] 
[   93.637654][ T6972] Second to last potentially related work creation:
[   93.639699][ T6972]  kasan_save_stack+0x3e/0x60
[   93.641188][ T6972]  kasan_record_aux_stack+0xbd/0xd0
[   93.642834][ T6972]  insert_work+0x3d/0x330
[   93.644230][ T6972]  __queue_work+0xcfc/0xfe0
[   93.645689][ T6972]  call_timer_fn+0x17e/0x5f0
[   93.647215][ T6972]  __run_timer_base+0x646/0x860
[   93.648826][ T6972]  run_timer_softirq+0xb7/0x180
[   93.650414][ T6972]  handle_softirqs+0x286/0x870
[   93.651960][ T6972]  __irq_exit_rcu+0xca/0x1f0
[   93.653501][ T6972]  irq_exit_rcu+0x9/0x30
[   93.654870][ T6972]  sysvec_apic_timer_interrupt+0xa6/0xc0
[   93.656656][ T6972]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[   93.658567][ T6972] 
[   93.659340][ T6972] The buggy address belongs to the object at ffff888115908000
[   93.659340][ T6972]  which belongs to the cache kmalloc-8k of size 8192
[   93.663718][ T6972] The buggy address is located 160 bytes inside of
[   93.663718][ T6972]  freed 8192-byte region [ffff888115908000, ffff88811590a000)
[   93.667963][ T6972] 
[   93.668743][ T6972] The buggy address belongs to the physical page:
[   93.670788][ T6972] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x115908
[   93.673549][ T6972] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[   93.676189][ T6972] anon flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[   93.678774][ T6972] page_type: f5(slab)
[   93.680095][ T6972] raw: 057ff00000000040 ffff88801a442280 ffffea0004565a00 0000000000000005
[   93.682914][ T6972] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[   93.685749][ T6972] head: 057ff00000000040 ffff88801a442280 ffffea0004565a00 0000000000000005
[   93.688536][ T6972] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[   93.691267][ T6972] head: 057ff00000000003 ffffea0004564201 00000000ffffffff 00000000ffffffff
[   93.694013][ T6972] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[   93.696791][ T6972] page dumped because: kasan: bad access detected
[   93.698907][ T6972] page_owner tracks the page as allocated
[   93.700702][ T6972] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5558, tgid 5558 (dhcpcd), ts 80097689920, free_ts 80006568731
[   93.707256][ T6972]  post_alloc_hook+0x240/0x2a0
[   93.708846][ T6972]  get_page_from_freelist+0x21e4/0x22c0
[   93.710578][ T6972]  __alloc_frozen_pages_noprof+0x181/0x370
[   93.712405][ T6972]  alloc_pages_mpol+0x232/0x4a0
[   93.713994][ T6972]  allocate_slab+0x8a/0x3b0
[   93.715424][ T6972]  ___slab_alloc+0xbfc/0x1480
[   93.716941][ T6972]  __kmalloc_node_track_caller_noprof+0x2f8/0x4e0
[   93.718986][ T6972]  kmalloc_reserve+0x136/0x290
[   93.720529][ T6972]  __alloc_skb+0x142/0x2d0
[   93.721953][ T6972]  netlink_dump+0x1c7/0xe20
[   93.723415][ T6972]  netlink_recvmsg+0x676/0xa30
[   93.724974][ T6972]  sock_recvmsg+0x22c/0x270
[   93.726466][ T6972]  ____sys_recvmsg+0x1c9/0x460
[   93.728048][ T6972]  ___sys_recvmsg+0x1b5/0x510
[   93.729595][ T6972]  __x64_sys_recvmsg+0x198/0x260
[   93.731224][ T6972]  do_syscall_64+0xfa/0x3b0
[   93.732722][ T6972] page last free pid 6735 tgid 6735 stack trace:
[   93.734756][ T6972]  __free_frozen_pages+0xc71/0xe70
[   93.736371][ T6972]  __put_partials+0x161/0x1c0
[   93.737935][ T6972]  put_cpu_partial+0x17c/0x250
[   93.739501][ T6972]  __slab_free+0x2f7/0x400
[   93.740988][ T6972]  qlist_free_all+0x97/0x140
[   93.742549][ T6972]  kasan_quarantine_reduce+0x148/0x160
[   93.744356][ T6972]  __kasan_slab_alloc+0x22/0x80
[   93.745979][ T6972]  __kmalloc_noprof+0x224/0x4f0
[   93.747552][ T6972]  unregister_netdevice_many_notify+0x909/0x2320
[   93.749623][ T6972]  unregister_netdevice_queue+0x33c/0x380
[   93.751466][ T6972]  __tun_detach+0xda4/0x1560
[   93.752987][ T6972]  tun_chr_close+0x10a/0x1c0
[   93.754526][ T6972]  __fput+0x44c/0xa70
[   93.755848][ T6972]  task_work_run+0x1d4/0x260
[   93.757383][ T6972]  exit_to_user_mode_loop+0xec/0x110
[   93.759141][ T6972]  do_syscall_64+0x2bd/0x3b0
[   93.760693][ T6972] 
[   93.761511][ T6972] Memory state around the buggy address:
[   93.763370][ T6972]  ffff888115907f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   93.765950][ T6972]  ffff888115908000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   93.768528][ T6972] >ffff888115908080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   93.771078][ T6972]                                ^
[   93.772754][ T6972]  ffff888115908100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   93.775322][ T6972]  ffff888115908180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   93.777923][ T6972] ==================================================================
[   93.781169][ T6972] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   93.783473][ T6972] CPU: 1 UID: 0 PID: 6972 Comm: khidpd_0b578002 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[   93.787654][ T6972] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   93.790944][ T6972] Call Trace:
[   93.792157][ T6972]  <TASK>
[   93.793320][ T6972]  dump_stack_lvl+0x99/0x250
[   93.794988][ T6972]  ? __asan_memcpy+0x40/0x70
[   93.796578][ T6972]  ? __pfx_dump_stack_lvl+0x10/0x10
[   93.798388][ T6972]  ? __pfx__printk+0x10/0x10
[   93.800008][ T6972]  panic+0x2db/0x790
[   93.801329][ T6972]  ? __pfx_panic+0x10/0x10
[   93.802890][ T6972]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[   93.804958][ T6972]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   93.807154][ T6972]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   93.809446][ T6972]  ? print_memory_metadata+0x314/0x400
[   93.811341][ T6972]  ? __mutex_lock+0x738/0xe80
[   93.813150][ T6972]  check_panic_on_warn+0x89/0xb0
[   93.814854][ T6972]  ? __mutex_lock+0x738/0xe80
[   93.816408][ T6972]  end_report+0x78/0x160
[   93.817891][ T6972]  kasan_report+0x129/0x150
[   93.819511][ T6972]  ? __mutex_lock+0x738/0xe80
[   93.821102][ T6972]  __mutex_lock+0x738/0xe80
[   93.822718][ T6972]  ? __mutex_lock+0x51b/0xe80
[   93.824277][ T6972]  ? l2cap_unregister_user+0x6a/0x1b0
[   93.826085][ T6972]  ? __pfx___mutex_lock+0x10/0x10
[   93.827847][ T6972]  ? __pfx___timer_delete_sync+0x10/0x10
[   93.829805][ T6972]  l2cap_unregister_user+0x6a/0x1b0
[   93.831622][ T6972]  hidp_session_thread+0x3c9/0x410
[   93.833640][ T6972]  ? __pfx_hidp_session_thread+0x10/0x10
[   93.835592][ T6972]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   93.837626][ T6972]  ? __pfx_hidp_session_wake_function+0x10/0x10
[   93.839654][ T6972]  ? __pfx_hidp_session_wake_function+0x10/0x10
[   93.841797][ T6972]  ? __kthread_parkme+0x7b/0x200
[   93.843510][ T6972]  ? __kthread_parkme+0x1a1/0x200
[   93.845198][ T6972]  kthread+0x711/0x8a0
[   93.846549][ T6972]  ? __pfx_hidp_session_thread+0x10/0x10
[   93.848501][ T6972]  ? __pfx_kthread+0x10/0x10
[   93.850081][ T6972]  ? _raw_spin_unlock_irq+0x23/0x50
[   93.851781][ T6972]  ? lockdep_hardirqs_on+0x9c/0x150
[   93.853857][ T6972]  ? __pfx_kthread+0x10/0x10
[   93.855423][ T6972]  ret_from_fork+0x3fc/0x770
[   93.857043][ T6972]  ? __pfx_ret_from_fork+0x10/0x10
[   93.858801][ T6972]  ? __switch_to_asm+0x39/0x70
[   93.860388][ T6972]  ? __switch_to_asm+0x33/0x70
[   93.862059][ T6972]  ? __pfx_kthread+0x10/0x10
[   93.863643][ T6972]  ret_from_fork_asm+0x1a/0x30
[   93.865241][ T6972]  </TASK>
[   93.866997][ T6972] Kernel Offset: disabled
[   93.868473][ T6972] Rebooting in 86400 seconds..

VM DIAGNOSIS:
09:48:08  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=0000000000000a02 RCX=0000000000000000 RDX=ffffc90002b58000
RSI=ffffffff84c7ad12 RDI=ffffffff99d4af58 RBP=ffffc90002b5e990 RSP=ffffc90002b5e898
R8 =0000000000000003 R9 =0000000000000004 R10=dffffc0000000000 R11=ffffffff81a5eb90
R12=dffffc0000000000 R13=ffffffff84c7ad12 R14=ffffffff99d4af58 R15=1ffff9200056bd20
RIP=ffffffff819e32e4 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f33a5e42380 ffffffff 00c00000
GS =0000 ffff8880b8650000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055c3c2c7d008 CR3=0000000032d5a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=000000ff00000000 00ff000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00000000ff000000 0000ff0000000000 XMM05=0000000000000000 00007f6c70c11b1f
XMM06=0000000000000000 00007f6c70c11b19 XMM07=0000000000000000 00007f6c70c11b2d
XMM08=0000000000000000 00007f6c70c11bb3 XMM09=0000000000000000 00007f6c70c11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000062 RBX=0000000000000062 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90007047370
R8 =ffff888021a88237 R9 =1ffff11004351046 R10=dffffc0000000000 R11=ffffffff85474610
R12=dffffc0000000000 R13=ffffffff99ac4900 R14=ffffffff99dc9760 R15=0000000000000000
RIP=ffffffff8547468c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c50000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000559222167950 CR3=00000001071b4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=ff00000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
