last executing test programs:

46.913112719s ago: executing program 2 (id=1054):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x3c}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffff80, 0x10, &(0x7f0000000000), 0x76}, 0x48)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000fdffffff71000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r1=>0x0})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r2)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x2c, r3, 0x19, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0x44004094)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=<r5=>0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7)
sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r8, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
sendmsg$NFC_CMD_START_POLL(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r8, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x48}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4850}, 0x10)

45.339101302s ago: executing program 1 (id=1225):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) (async, rerun: 64)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001405000d404600000014000000110001"], 0x6c}}, 0x0) (async, rerun: 64)
sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x0) (async)
recvmmsg(r0, &(0x7f0000008180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async, rerun: 32)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 32)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r4=>0x0]}, &(0x7f0000000240)=0x8)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000002c0)=@sack_info={r4, 0x800000, 0x5}, &(0x7f0000000180)=0xc) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={r4, @in6={{0xa, 0x4e23, 0x20, @mcast1, 0xfffffffc}}, 0x2, 0x9, 0x0, 0x6, 0x0, 0x4, 0xd}, 0xfffffdb7)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x14) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f0000000080)={{0x2, 0x4e22, @rand_addr=0x64010102}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, 0x0, {0x2, 0x4e23, @loopback}, 'pimreg1\x00'})
sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)

37.811189155s ago: executing program 2 (id=1054):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x3c}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffff80, 0x10, &(0x7f0000000000), 0x76}, 0x48)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000fdffffff71000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r1=>0x0})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r2)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x2c, r3, 0x19, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0x44004094)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=<r5=>0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7)
sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r8, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
sendmsg$NFC_CMD_START_POLL(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r8, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x48}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4850}, 0x10)

37.393586946s ago: executing program 1 (id=1225):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) (async, rerun: 64)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001405000d404600000014000000110001"], 0x6c}}, 0x0) (async, rerun: 64)
sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x0) (async)
recvmmsg(r0, &(0x7f0000008180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async, rerun: 32)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 32)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r4=>0x0]}, &(0x7f0000000240)=0x8)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000002c0)=@sack_info={r4, 0x800000, 0x5}, &(0x7f0000000180)=0xc) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={r4, @in6={{0xa, 0x4e23, 0x20, @mcast1, 0xfffffffc}}, 0x2, 0x9, 0x0, 0x6, 0x0, 0x4, 0xd}, 0xfffffdb7)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x14) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f0000000080)={{0x2, 0x4e22, @rand_addr=0x64010102}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, 0x0, {0x2, 0x4e23, @loopback}, 'pimreg1\x00'})
sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)

30.701225284s ago: executing program 2 (id=1054):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x3c}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffff80, 0x10, &(0x7f0000000000), 0x76}, 0x48)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000fdffffff71000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r1=>0x0})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r2)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x2c, r3, 0x19, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0x44004094)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=<r5=>0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7)
sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r8, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
sendmsg$NFC_CMD_START_POLL(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r8, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x48}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4850}, 0x10)

29.235982372s ago: executing program 1 (id=1225):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) (async, rerun: 64)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001405000d404600000014000000110001"], 0x6c}}, 0x0) (async, rerun: 64)
sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x0) (async)
recvmmsg(r0, &(0x7f0000008180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async, rerun: 32)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 32)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r4=>0x0]}, &(0x7f0000000240)=0x8)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000002c0)=@sack_info={r4, 0x800000, 0x5}, &(0x7f0000000180)=0xc) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={r4, @in6={{0xa, 0x4e23, 0x20, @mcast1, 0xfffffffc}}, 0x2, 0x9, 0x0, 0x6, 0x0, 0x4, 0xd}, 0xfffffdb7)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x14) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f0000000080)={{0x2, 0x4e22, @rand_addr=0x64010102}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, 0x0, {0x2, 0x4e23, @loopback}, 'pimreg1\x00'})
sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)

21.941297392s ago: executing program 2 (id=1054):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x3c}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffff80, 0x10, &(0x7f0000000000), 0x76}, 0x48)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000fdffffff71000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r1=>0x0})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r2)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x2c, r3, 0x19, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0x44004094)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=<r5=>0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7)
sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r8, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
sendmsg$NFC_CMD_START_POLL(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r8, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x48}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4850}, 0x10)

21.121618188s ago: executing program 1 (id=1225):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) (async, rerun: 64)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001405000d404600000014000000110001"], 0x6c}}, 0x0) (async, rerun: 64)
sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x0) (async)
recvmmsg(r0, &(0x7f0000008180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async, rerun: 32)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 32)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r4=>0x0]}, &(0x7f0000000240)=0x8)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000002c0)=@sack_info={r4, 0x800000, 0x5}, &(0x7f0000000180)=0xc) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={r4, @in6={{0xa, 0x4e23, 0x20, @mcast1, 0xfffffffc}}, 0x2, 0x9, 0x0, 0x6, 0x0, 0x4, 0xd}, 0xfffffdb7)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x14) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f0000000080)={{0x2, 0x4e22, @rand_addr=0x64010102}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, 0x0, {0x2, 0x4e23, @loopback}, 'pimreg1\x00'})
sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)

13.651971486s ago: executing program 2 (id=1054):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x3c}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffff80, 0x10, &(0x7f0000000000), 0x76}, 0x48)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000fdffffff71000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r1=>0x0})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r2)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x2c, r3, 0x19, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0x44004094)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=<r5=>0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7)
sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r8, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
sendmsg$NFC_CMD_START_POLL(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r8, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x48}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4850}, 0x10)

12.410147731s ago: executing program 1 (id=1225):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) (async, rerun: 64)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001405000d404600000014000000110001"], 0x6c}}, 0x0) (async, rerun: 64)
sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x0) (async)
recvmmsg(r0, &(0x7f0000008180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async, rerun: 32)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 32)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r4=>0x0]}, &(0x7f0000000240)=0x8)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000002c0)=@sack_info={r4, 0x800000, 0x5}, &(0x7f0000000180)=0xc) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={r4, @in6={{0xa, 0x4e23, 0x20, @mcast1, 0xfffffffc}}, 0x2, 0x9, 0x0, 0x6, 0x0, 0x4, 0xd}, 0xfffffdb7)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x14) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f0000000080)={{0x2, 0x4e22, @rand_addr=0x64010102}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, 0x0, {0x2, 0x4e23, @loopback}, 'pimreg1\x00'})
sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)

6.091764667s ago: executing program 2 (id=1054):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x3c}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffff80, 0x10, &(0x7f0000000000), 0x76}, 0x48)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000fdffffff71000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r1=>0x0})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r2)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x2c, r3, 0x19, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0x44004094)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=<r5=>0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7)
sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r8, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
sendmsg$NFC_CMD_START_POLL(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r8, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x48}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4850}, 0x10)

4.733695444s ago: executing program 1 (id=1225):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) (async, rerun: 64)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001405000d404600000014000000110001"], 0x6c}}, 0x0) (async, rerun: 64)
sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x0) (async)
recvmmsg(r0, &(0x7f0000008180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async, rerun: 32)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 32)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r4=>0x0]}, &(0x7f0000000240)=0x8)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000002c0)=@sack_info={r4, 0x800000, 0x5}, &(0x7f0000000180)=0xc) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={r4, @in6={{0xa, 0x4e23, 0x20, @mcast1, 0xfffffffc}}, 0x2, 0x9, 0x0, 0x6, 0x0, 0x4, 0xd}, 0xfffffdb7)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x14) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f0000000080)={{0x2, 0x4e22, @rand_addr=0x64010102}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, 0x0, {0x2, 0x4e23, @loopback}, 'pimreg1\x00'})
sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)

1.61071283s ago: executing program 0 (id=1560):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
readv(r3, &(0x7f0000000240)=[{&(0x7f0000000300)=""/252, 0xfc}], 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYRES64=r1, @ANYRESHEX=r0, @ANYRES16=r2], 0x40}}, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2000, 0xab00, 0x0, 0x7, {{0x5, 0x4, 0x0, 0x13, 0x14, 0x20, 0x0, 0x2b, 0x2f, 0x0, @empty=0x2f, @multicast1}}}})

680.123163ms ago: executing program 0 (id=1561):
r0 = socket$inet_sctp(0x2, 0x1, 0x84) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x9, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x2b, &(0x7f00000003c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x7a, 0x8, 0x8, &(0x7f0000000480)}}, 0x10)
sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)="683c4a2a9f33d32fad383164d5e04f7be685538299752a299bf3587f6c69bcb71f571e7b15233122f709b55eadfd31eae059bb1597b037f36a22c09fe3d4d80ec97b0f70c9b00f7c4153fcba1ae653ebb61c6c4c57f2099497434f554a2bda26006220721816685a90cd29c312ddd1b81e11f56310d4f1f6558055742389cd878c5febebad2420fc2d8e61d98e0377167bcb531cdcdd1aca78c5a911999dc1e62e50a618fc3a4a6016acb0b59f39c2d9746ad44d1596af86fbc4389d1a38a81e3c88279f15e9a5e7dfc05a0e168393e7d1d3635737b7e5dcfd0ff03f2be7bce4d012b42830dde2935efbf9809b3ead8f69", 0xf1}, {&(0x7f0000000140)="434d03fd02251c6e0bb44ae6c1d582e2819ce90d5a5627471060dc9642c29351ca606c2674b2281a31c0b49e97eda2", 0x2f}, {&(0x7f0000000180)="11047d697705f978d5138f6546bd16bfb443481d3f308d333e8317bbaa10d142dd13b1b0025bed295b843956595e38f00155464eab34191da3b01b0a88cd5cc10e5feb63dbcafba1920de792dac957c7e5953cae5d2e718ac2e6e42cb070112634201d09e3dba7ac5cf233ad8b7670bcb2eb306722ab7ad86d37c016120ca48a11bee34b98d575ab8983e76c65a9bd617a86fa59708f659318aa6acb057038a52ab12a", 0xa3}, {&(0x7f0000000240)="d773069aa25ea15494e6283f47ffa4ffbc105074f9eded0ec616d73542208923e0216286bc635d227e8c63c53764af8890", 0x31}], 0x4, &(0x7f0000000600)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @remote, @local}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xa00}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_retopts={{0x14, 0x0, 0x7, {[@end, @end]}}}], 0x80}, 0x804) (async, rerun: 32)
listen(r0, 0x6) (async, rerun: 32)
socketpair(0x0, 0xa, 0xa80, &(0x7f00000006c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$FOU_CMD_GET(r3, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r4, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e23}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) (async)
sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x30, r4, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000810}, 0x20000000)
getsockopt$sock_buf(r3, 0x1, 0x3b, &(0x7f0000000940)=""/53, &(0x7f0000000980)=0x35) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f00000009c0)=0xb, 0x4) (async)
r5 = socket(0x21, 0x2, 0x7fff)
ioctl$int_in(r2, 0x5452, &(0x7f0000000a00)=0x69f85ac1)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000a80), 0xffffffffffffffff) (rerun: 32)
sendmsg$NLBL_CIPSOV4_C_REMOVE(r6, &(0x7f0000000d80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x25c, r7, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_TAGLST={0x54, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}, {0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_TAGLST={0x44, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}, {0x5}, {0x5}, {0x5, 0x3, 0xd}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x11c, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x82}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x27}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x10}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7939d26c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2a484bba}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x99}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xae}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4343e844}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4e6b0a9c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3b5971e0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7b94bbc0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfe}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1d}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x25}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x47}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x32}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x70}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x54f42926}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x785354c3}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x41550b67}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5}, {0x5, 0x3, 0x2}, {0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x25c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$l2tp6(0xa, 0x2, 0x73) (async)
r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000dc0)='blkio.bfq.io_queued\x00', 0x0, 0x0) (async)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f0000000e00)={<r9=>0x0, 0x4f, "200f23888eac798de93cb3269628753d4907e00641eb903b0b60c7b58dcb6f4fe91f95dfe3c7e074ccb9919ca396616db6152aee2cda6fdbbf55f7b161668ae7fc234f3c5fd1ad3f3ce1db67fd12d7"}, &(0x7f0000000e80)=0x57)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000ec0)={r9, 0x64, "f907e84c521969c2cbf71246c0c4497a843dfee0be2e6a9dd36c617bb7f70b39ca60b33e7514e4dbffec1ecec6a157403d00019bff9ad708df631a1451889ae478b6dbe4196eb68f4318862d73bd573617bc7bd956fd7e9a4c49ff1fc9cca0a1252dd699"}, &(0x7f0000000f40)=0x6c) (async, rerun: 64)
socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000fc0)={&(0x7f0000000f80)='balance_dirty_pages\x00', r8, 0x0, 0xfffffffffffffffb}, 0x18) (async, rerun: 64)
sendmsg$FOU_CMD_ADD(r2, 0x0, 0x50) (async, rerun: 64)
setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f0000001000)=0x3f4f, 0x4)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000001040)={'dvmrp0\x00'}) (async, rerun: 32)
getsockopt$inet6_int(r3, 0x29, 0xcb, &(0x7f0000001080), &(0x7f00000010c0)=0x4) (async, rerun: 32)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001100)='./cgroup.cpu/syz0\x00', 0x1ff) (async)
bind$bt_hci(r5, &(0x7f0000001140)={0x1f, 0x4, 0x1}, 0x6) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001200)={r0, &(0x7f0000001180)="c4e587b6714370d5e5a680d303", &(0x7f00000011c0)=@tcp6=r8}, 0x20) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001240)={'erspan0\x00'})

579.945865ms ago: executing program 0 (id=1562):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r1, &(0x7f0000000500)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r3, 0x30}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)='O', 0x1}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007665746800000000040002800800200001"], 0x3c}}, 0x0)

130.289949ms ago: executing program 0 (id=1563):
r0 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r0, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0xe23, @remote}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000380)="5f719d7a65b60f807ea7ae23fc0f30db3fe9a2ef5641b99632610557bf8460", 0x1f}], 0x1}, 0x448e4)
setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @remote}})
ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @broadcast}})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000003e000701feffffff00000000017c0000040042800c00018006000600654a00000c000280080001009cff9b"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="180000007a00010600000000000000000700000047"], 0x18}], 0x1}, 0x0)

50.810347ms ago: executing program 0 (id=1564):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x300, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x7d}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000300), 0x4)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES16=r0, @ANYBLOB="bdc4134013b9da1e573824471c896fbe44ecc475e2bbeee93033142fd8753d1ca72165c2c63d2d3a227b28a4d98c41a1e99d94153c205bb47e56856c4b7a28848ad16403c3380eec1a3904b760e4fe69a11ab52f9cb514291525d08c3f7b26f3003e7d93c395f4ca22ef0366da305f773eb0f04d1f312be56d781475a67d736347bf7565644844ec595945a295473b63977967a0784c106e8235f8e1ecce78ea9e994396352b7e91f429a6a29ec452cf266977081070b9b9ed9985642802dc69b079271fc8ecfb7baad932491883029780", @ANYRES8=r0, @ANYRESDEC=r0, @ANYRES64=0x0], 0x50}, 0x1, 0x0, 0x0, 0x40448c5}, 0x0)

0s ago: executing program 0 (id=1565):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1f00000000000000000000000010000000000000", @ANYRES32=0x1, @ANYBLOB="00b18f0b376a009eef00"/28, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "6ed6c4", 0x48, 0x2f, 0xff, @private2, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8, 0x0, 0xfffc, [0x1e8, 0x9]}, {0x0, 0x0, 0x0, 0x0, 0x20}, {}, {0xa888, 0x88be, 0x8000000, {{0x0, 0x1, 0x8}, 0x1, {0x1}}}, {0x8, 0x22eb, 0x4}}}}}}}, 0x0)
setsockopt(r2, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r4=>0x0]}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f00000001c0)={r4, @in6={{0xa, 0x4e21, 0x9b2, @private0, 0x80400001}}}, 0x84)
mmap(&(0x7f0000b02000/0x3000)=nil, 0x3000, 0x1000002, 0x28011, r0, 0x3000)

kernel console output (not intermixed with test programs):

left promiscuous mode
[  141.613244][ T5842] veth0_macvtap: left promiscuous mode
[  141.614913][ T5842] veth1_vlan: left promiscuous mode
[  141.616980][ T5842] veth0_vlan: left promiscuous mode
[  142.020619][ T5842] team0 (unregistering): Port device team_slave_1 removed
[  142.052638][ T5842] team0 (unregistering): Port device team_slave_0 removed
[  142.056339][   T54] Bluetooth: hci0: command tx timeout
[  142.411912][ T9840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  142.455327][ T9840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  142.518209][ T9840] team0: Port device team_slave_0 added
[  142.527792][ T9840] team0: Port device team_slave_1 added
[  142.558943][ T9857] chnl_net:caif_netlink_parms(): no params data found
[  142.599608][ T9840] batman_adv: batadv0: Adding interface: batadv_slave_0
[  142.601844][ T9840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  142.617899][ T9840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  142.659141][ T9840] batman_adv: batadv0: Adding interface: batadv_slave_1
[  142.661391][ T9840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  142.671617][ T9840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  142.849452][   T54] Bluetooth: hci1: command tx timeout
[  142.849932][ T9840] hsr_slave_0: entered promiscuous mode
[  142.856095][ T9840] hsr_slave_1: entered promiscuous mode
[  142.913534][ T9857] bridge0: port 1(bridge_slave_0) entered blocking state
[  142.919161][ T9857] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.922122][ T9857] bridge_slave_0: entered allmulticast mode
[  142.925852][ T9857] bridge_slave_0: entered promiscuous mode
[  142.980884][ T5842] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.992267][ T9857] bridge0: port 2(bridge_slave_1) entered blocking state
[  142.995228][ T9857] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.999148][ T9857] bridge_slave_1: entered allmulticast mode
[  143.002830][ T9857] bridge_slave_1: entered promiscuous mode
[  143.042563][ T5842] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.073868][ T9857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  143.098049][ T5842] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.113571][ T9857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  143.174884][ T5842] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.242436][ T9857] team0: Port device team_slave_0 added
[  143.256927][ T9857] team0: Port device team_slave_1 added
[  143.322655][ T9857] batman_adv: batadv0: Adding interface: batadv_slave_0
[  143.325401][ T9857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  143.338511][ T9857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  143.360915][ T9857] batman_adv: batadv0: Adding interface: batadv_slave_1
[  143.363646][ T9857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  143.374055][ T9857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  143.520115][ T9857] hsr_slave_0: entered promiscuous mode
[  143.522800][ T9857] hsr_slave_1: entered promiscuous mode
[  143.525114][ T9857] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  143.528599][ T9857] Cannot create hsr debugfs directory
[  143.530884][ T5842] bridge_slave_1: left allmulticast mode
[  143.532585][ T5842] bridge_slave_1: left promiscuous mode
[  143.534338][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.544712][ T5842] bridge_slave_0: left allmulticast mode
[  143.547652][ T5842] bridge_slave_0: left promiscuous mode
[  143.549721][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.763128][ T9915] Bluetooth: MGMT ver 1.23
[  143.949063][ T5842] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  143.955033][ T5842] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  143.960709][ T5842] bond0 (unregistering): Released all slaves
[  144.126921][   T54] Bluetooth: hci0: command tx timeout
[  144.161262][ T9920] xt_CT: No such helper "snmp"
[  144.230481][ T9926] netlink: 'syz.0.1319': attribute type 7 has an invalid length.
[  144.332804][ T9930] __nla_validate_parse: 1 callbacks suppressed
[  144.332825][ T9930] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1320'.
[  144.391703][ T9840] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  144.449922][ T9840] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  144.461584][ T9840] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  144.471576][ T9840] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  144.613230][ T9943] netlink: 'syz.0.1322': attribute type 1 has an invalid length.
[  144.615621][ T9943] netlink: 5624 bytes leftover after parsing attributes in process `syz.0.1322'.
[  144.692378][ T9840] 8021q: adding VLAN 0 to HW filter on device bond0
[  144.695510][ T9943] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1322'.
[  144.711552][ T5842] hsr_slave_0: left promiscuous mode
[  144.713862][ T5842] hsr_slave_1: left promiscuous mode
[  144.716087][ T5842] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  144.727271][ T5842] batman_adv: batadv0: Removing interface: batadv_slave_0
[  144.733867][ T5842] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  144.737682][ T5842] batman_adv: batadv0: Removing interface: batadv_slave_1
[  144.780474][ T5842] veth1_macvtap: left promiscuous mode
[  144.782649][ T5842] veth0_macvtap: left promiscuous mode
[  144.784492][ T5842] veth1_vlan: left promiscuous mode
[  144.786656][ T5842] veth0_vlan: left promiscuous mode
[  144.930355][   T54] Bluetooth: hci1: command tx timeout
[  145.160200][ T5842] team0 (unregistering): Port device team_slave_1 removed
[  145.201583][ T5842] team0 (unregistering): Port device team_slave_0 removed
[  145.553571][ T9840] 8021q: adding VLAN 0 to HW filter on device team0
[  145.566056][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[  145.568395][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[  145.605573][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[  145.608090][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[  145.731546][ T9857] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  145.734983][ T9951] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1323'.
[  145.748648][ T9857] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  145.766752][ T9857] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  145.822005][ T9857] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  145.960983][ T9857] 8021q: adding VLAN 0 to HW filter on device bond0
[  146.002600][ T9857] 8021q: adding VLAN 0 to HW filter on device team0
[  146.009956][ T9840] 8021q: adding VLAN 0 to HW filter on device batadv0
[  146.025645][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[  146.028575][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[  146.042183][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.045065][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[  146.051720][ T9965] xt_CT: No such helper "snmp_trap"
[  146.094894][ T9965] netlink: 'syz.0.1325': attribute type 21 has an invalid length.
[  146.104728][ T9965] netlink: 'syz.0.1325': attribute type 22 has an invalid length.
[  146.108387][ T9965] netlink: 'syz.0.1325': attribute type 23 has an invalid length.
[  146.111512][ T9965] netlink: 'syz.0.1325': attribute type 25 has an invalid length.
[  146.114610][ T9965] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1325'.
[  146.145300][ T9840] veth0_vlan: entered promiscuous mode
[  146.161613][ T9840] veth1_vlan: entered promiscuous mode
[  146.189295][ T9840] veth0_macvtap: entered promiscuous mode
[  146.193420][ T9840] veth1_macvtap: entered promiscuous mode
[  146.210906][ T9840] batman_adv: batadv0: Interface activated: batadv_slave_0
[  146.228749][ T9840] batman_adv: batadv0: Interface activated: batadv_slave_1
[  146.232773][ T9840] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  146.235500][ T9840] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  146.248292][ T9840] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  146.251196][ T9840] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  146.341018][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  146.343441][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  146.373012][ T9857] 8021q: adding VLAN 0 to HW filter on device batadv0
[  146.380520][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  146.383112][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  146.462245][ T9857] veth0_vlan: entered promiscuous mode
[  146.481518][ T9857] veth1_vlan: entered promiscuous mode
[  146.578454][ T9857] veth0_macvtap: entered promiscuous mode
[  146.582605][ T9857] veth1_macvtap: entered promiscuous mode
[  146.595043][ T9857] batman_adv: batadv0: Interface activated: batadv_slave_0
[  146.609020][ T9857] batman_adv: batadv0: Interface activated: batadv_slave_1
[  146.617068][ T9857] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  146.620505][ T9857] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  146.623906][ T9857] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  146.629118][ T9857] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  146.704088][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  146.708553][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  146.739778][   T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  146.742287][   T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  146.902509][ T9991] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1331'.
[  147.141612][ T5834] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.548999][ T5834] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.969154][ T9998] openvswitch: netlink: IP tunnel TTL not specified.
[  148.019949][T10003] netlink: 'syz.0.1336': attribute type 2 has an invalid length.
[  148.066871][ T5834] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.152001][ T5217] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  148.157291][ T5217] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  148.161297][ T5217] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  148.165571][ T5217] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  148.169045][ T5217] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  148.308531][T10021] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  148.321502][T10022] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  148.423838][T10026] x_tables: duplicate underflow at hook 3
[  148.434153][T10010] chnl_net:caif_netlink_parms(): no params data found
[  148.510154][T10010] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.512728][T10010] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.515275][T10010] bridge_slave_0: entered allmulticast mode
[  148.518820][T10010] bridge_slave_0: entered promiscuous mode
[  148.521981][T10010] bridge0: port 2(bridge_slave_1) entered blocking state
[  148.524229][T10010] bridge0: port 2(bridge_slave_1) entered disabled state
[  148.527143][T10010] bridge_slave_1: entered allmulticast mode
[  148.529739][T10010] bridge_slave_1: entered promiscuous mode
[  148.554832][T10010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  148.607281][T10010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  148.638004][T10010] team0: Port device team_slave_0 added
[  148.642381][T10010] team0: Port device team_slave_1 added
[  148.663987][T10010] batman_adv: batadv0: Adding interface: batadv_slave_0
[  148.670647][T10010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  148.678665][T10010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  148.685881][T10010] batman_adv: batadv0: Adding interface: batadv_slave_1
[  148.688823][T10010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  148.696952][T10010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  148.723032][T10010] hsr_slave_0: entered promiscuous mode
[  148.725295][T10010] hsr_slave_1: entered promiscuous mode
[  148.728363][T10010] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  148.730785][T10010] Cannot create hsr debugfs directory
[  148.869976][ T5834] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.003699][ T5834] bridge_slave_1: left allmulticast mode
[  149.006869][ T5834] bridge_slave_1: left promiscuous mode
[  149.009169][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.015015][ T5834] bridge_slave_0: left allmulticast mode
[  149.018993][ T5834] bridge_slave_0: left promiscuous mode
[  149.021297][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.267324][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  149.275352][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  149.286670][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  149.297141][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  149.300735][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  149.485334][ T5834] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  149.492407][ T5834] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  149.496516][ T5834] bond0 (unregistering): Released all slaves
[  149.953510][T10010] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  149.974368][T10010] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  149.989384][T10010] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  150.005244][T10010] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  150.110751][ T5834] hsr_slave_0: left promiscuous mode
[  150.113008][ T5834] hsr_slave_1: left promiscuous mode
[  150.115018][ T5834] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  150.122676][ T5834] batman_adv: batadv0: Removing interface: batadv_slave_0
[  150.126527][ T5834] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  150.128798][ T5834] batman_adv: batadv0: Removing interface: batadv_slave_1
[  150.161608][ T5834] veth1_macvtap: left promiscuous mode
[  150.163373][ T5834] veth0_macvtap: left promiscuous mode
[  150.165150][ T5834] veth1_vlan: left promiscuous mode
[  150.169494][ T5834] veth0_vlan: left promiscuous mode
[  150.206813][ T5217] Bluetooth: hci0: command tx timeout
[  150.478154][ T5834] team0 (unregistering): Port device team_slave_1 removed
[  150.504896][ T5834] team0 (unregistering): Port device team_slave_0 removed
[  150.854303][T10048] chnl_net:caif_netlink_parms(): no params data found
[  150.859303][T10083] openvswitch: netlink: IP tunnel TTL not specified.
[  150.942542][T10086] netlink: 'syz.0.1352': attribute type 13 has an invalid length.
[  150.949056][T10086] netlink: 'syz.0.1352': attribute type 17 has an invalid length.
[  150.964667][T10086] gretap0: refused to change device tx_queue_len
[  150.967704][T10086] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  151.024415][T10048] bridge0: port 1(bridge_slave_0) entered blocking state
[  151.026836][T10048] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.029032][T10048] bridge_slave_0: entered allmulticast mode
[  151.031799][T10048] bridge_slave_0: entered promiscuous mode
[  151.035048][T10048] bridge0: port 2(bridge_slave_1) entered blocking state
[  151.038862][T10048] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.041535][T10048] bridge_slave_1: entered allmulticast mode
[  151.044668][T10048] bridge_slave_1: entered promiscuous mode
[  151.087268][T10048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  151.098308][T10048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  151.138128][T10010] 8021q: adding VLAN 0 to HW filter on device bond0
[  151.162095][T10048] team0: Port device team_slave_0 added
[  151.169157][T10048] team0: Port device team_slave_1 added
[  151.250551][ T5834] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.267389][T10010] 8021q: adding VLAN 0 to HW filter on device team0
[  151.270758][T10048] batman_adv: batadv0: Adding interface: batadv_slave_0
[  151.273389][T10048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  151.285234][T10048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  151.297493][T10048] batman_adv: batadv0: Adding interface: batadv_slave_1
[  151.300115][T10048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  151.310599][T10048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  151.329267][ T5217] Bluetooth: hci1: command tx timeout
[  151.384988][ T5834] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.398490][T10048] hsr_slave_0: entered promiscuous mode
[  151.401539][T10048] hsr_slave_1: entered promiscuous mode
[  151.402965][T10099] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1357'.
[  151.432303][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[  151.435059][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[  151.483292][ T5834] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.507400][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[  151.509710][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[  151.555823][ T5834] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.578836][T10104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  151.599753][T10104] Unsupported ieee802154 address type: 0
[  151.707954][ T5834] bridge_slave_1: left allmulticast mode
[  151.710055][ T5834] bridge_slave_1: left promiscuous mode
[  151.712974][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.723380][ T5834] bridge_slave_0: left allmulticast mode
[  151.725121][ T5834] bridge_slave_0: left promiscuous mode
[  151.727852][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.981710][ T5834] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  151.986680][ T5834] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  151.991103][ T5834] bond0 (unregistering): Released all slaves
[  152.115648][T10010] 8021q: adding VLAN 0 to HW filter on device batadv0
[  152.171201][T10010] veth0_vlan: entered promiscuous mode
[  152.219956][T10010] veth1_vlan: entered promiscuous mode
[  152.272478][T10010] veth0_macvtap: entered promiscuous mode
[  152.286408][ T5217] Bluetooth: hci0: command tx timeout
[  152.294750][T10010] veth1_macvtap: entered promiscuous mode
[  152.349921][T10010] batman_adv: batadv0: Interface activated: batadv_slave_0
[  152.358027][T10010] batman_adv: batadv0: Interface activated: batadv_slave_1
[  152.372820][T10010] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  152.375473][T10010] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  152.386356][T10010] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  152.389082][T10010] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  152.448452][ T5834] hsr_slave_0: left promiscuous mode
[  152.450552][ T5834] hsr_slave_1: left promiscuous mode
[  152.452530][ T5834] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  152.454765][ T5834] batman_adv: batadv0: Removing interface: batadv_slave_0
[  152.458313][ T5834] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  152.460485][ T5834] batman_adv: batadv0: Removing interface: batadv_slave_1
[  152.471302][ T5834] veth1_macvtap: left promiscuous mode
[  152.473763][ T5834] veth0_macvtap: left promiscuous mode
[  152.475716][ T5834] veth1_vlan: left promiscuous mode
[  152.478046][ T5834] veth0_vlan: left promiscuous mode
[  152.831121][ T5834] team0 (unregistering): Port device team_slave_1 removed
[  152.862916][ T5834] team0 (unregistering): Port device team_slave_0 removed
[  153.345173][T10111] bond0: (slave netdevsim0): Releasing backup interface
[  153.385882][T10048] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  153.392874][T10048] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  153.406478][ T5217] Bluetooth: hci1: command tx timeout
[  153.411713][T10048] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  153.421885][T10048] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  153.444973][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  153.451341][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  153.535952][ T8769] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  153.556383][ T8769] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  153.707758][T10048] 8021q: adding VLAN 0 to HW filter on device bond0
[  153.721205][T10048] 8021q: adding VLAN 0 to HW filter on device team0
[  153.736049][ T8673] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.738370][ T8673] bridge0: port 1(bridge_slave_0) entered forwarding state
[  153.750403][ T8673] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.752759][ T8673] bridge0: port 2(bridge_slave_1) entered forwarding state
[  153.868377][T10048] 8021q: adding VLAN 0 to HW filter on device batadv0
[  153.909501][T10048] veth0_vlan: entered promiscuous mode
[  153.915831][T10048] veth1_vlan: entered promiscuous mode
[  153.934762][T10048] veth0_macvtap: entered promiscuous mode
[  153.940320][T10048] veth1_macvtap: entered promiscuous mode
[  153.951088][T10048] batman_adv: batadv0: Interface activated: batadv_slave_0
[  153.960366][T10048] batman_adv: batadv0: Interface activated: batadv_slave_1
[  153.968385][T10048] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  153.971542][T10048] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  153.974413][T10048] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  153.978282][T10048] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  154.040068][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  154.050233][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  154.066786][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  154.069561][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  154.164875][T10129] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  154.171214][T10129] syzkaller0: entered promiscuous mode
[  154.172975][T10129] syzkaller0: entered allmulticast mode
[  154.178726][T10129] tipc: Resetting bearer <eth:syzkaller0>
[  154.181765][T10128] tipc: Resetting bearer <eth:syzkaller0>
[  154.192246][T10128] tipc: Disabling bearer <eth:syzkaller0>
[  154.210757][   T60] block nbd0: Possible stuck request ffff888022fe8000: control (read@0,1024B). Runtime 60 seconds
[  154.214875][   T60] block nbd0: Possible stuck request ffff888022fe8200: control (read@1024,1024B). Runtime 60 seconds
[  154.219328][   T60] block nbd0: Possible stuck request ffff888022fe8400: control (read@2048,1024B). Runtime 60 seconds
[  154.223509][   T60] block nbd0: Possible stuck request ffff888022fe8600: control (read@3072,1024B). Runtime 60 seconds
[  154.430026][ T9497] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  154.785912][ T9497] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.003319][ T9497] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.049570][ T9497] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.171863][ T9497] bridge_slave_1: left allmulticast mode
[  155.173658][ T9497] bridge_slave_1: left promiscuous mode
[  155.175510][ T9497] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.179871][ T9497] bridge_slave_0: left allmulticast mode
[  155.181682][ T9497] bridge_slave_0: left promiscuous mode
[  155.183472][ T9497] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.274353][T10132] netlink: 'syz.0.1363': attribute type 4 has an invalid length.
[  155.482404][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  155.485575][ T9497] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  155.486936][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  155.491268][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  155.493925][ T9497] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  155.498614][ T9497] bond0 (unregistering): Released all slaves
[  155.500891][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  155.503612][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  155.845421][T10137] chnl_net:caif_netlink_parms(): no params data found
[  155.923137][T10137] bridge0: port 1(bridge_slave_0) entered blocking state
[  155.928780][T10137] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.933371][T10137] bridge_slave_0: entered allmulticast mode
[  155.944566][T10137] bridge_slave_0: entered promiscuous mode
[  155.955919][T10137] bridge0: port 2(bridge_slave_1) entered blocking state
[  155.960765][T10137] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.965322][T10137] bridge_slave_1: entered allmulticast mode
[  155.988400][T10137] bridge_slave_1: entered promiscuous mode
[  156.100388][T10137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  156.105099][T10137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  156.163298][ T9497] hsr_slave_0: left promiscuous mode
[  156.165468][ T9497] hsr_slave_1: left promiscuous mode
[  156.172861][ T9497] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  156.175339][ T9497] batman_adv: batadv0: Removing interface: batadv_slave_0
[  156.178448][ T9497] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  156.180693][ T9497] batman_adv: batadv0: Removing interface: batadv_slave_1
[  156.200624][ T9497] veth1_macvtap: left promiscuous mode
[  156.206368][ T9497] veth0_macvtap: left promiscuous mode
[  156.211704][ T9497] veth1_vlan: left promiscuous mode
[  156.213484][ T9497] veth0_vlan: left promiscuous mode
[  156.583612][ T9497] team0 (unregistering): Port device team_slave_1 removed
[  156.613284][ T9497] team0 (unregistering): Port device team_slave_0 removed
[  156.885279][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  156.897391][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  156.900777][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  156.903998][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  156.908625][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  157.089917][T10137] team0: Port device team_slave_0 added
[  157.118295][T10137] team0: Port device team_slave_1 added
[  157.195311][T10137] batman_adv: batadv0: Adding interface: batadv_slave_0
[  157.199992][T10137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  157.211020][T10137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  157.219229][T10137] batman_adv: batadv0: Adding interface: batadv_slave_1
[  157.221607][T10137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  157.231859][T10137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  157.287445][T10160] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  157.290006][T10137] hsr_slave_0: entered promiscuous mode
[  157.299565][T10137] hsr_slave_1: entered promiscuous mode
[  157.301800][T10137] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  157.304059][T10137] Cannot create hsr debugfs directory
[  157.567944][   T54] Bluetooth: hci0: command tx timeout
[  157.602350][T10157] chnl_net:caif_netlink_parms(): no params data found
[  157.629819][ T9497] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.751794][ T9497] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.771492][T10157] bridge0: port 1(bridge_slave_0) entered blocking state
[  157.773739][T10157] bridge0: port 1(bridge_slave_0) entered disabled state
[  157.776038][T10157] bridge_slave_0: entered allmulticast mode
[  157.779825][T10157] bridge_slave_0: entered promiscuous mode
[  157.789391][T10184] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1370'.
[  157.805396][T10157] bridge0: port 2(bridge_slave_1) entered blocking state
[  157.812613][T10157] bridge0: port 2(bridge_slave_1) entered disabled state
[  157.815539][T10157] bridge_slave_1: entered allmulticast mode
[  157.817912][T10184] netlink: 'syz.0.1370': attribute type 1 has an invalid length.
[  157.821637][T10157] bridge_slave_1: entered promiscuous mode
[  157.823586][T10184] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1370'.
[  157.852272][ T9497] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.894936][T10157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  157.900409][T10157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  157.956462][ T9497] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.976885][T10157] team0: Port device team_slave_0 added
[  157.982318][T10157] team0: Port device team_slave_1 added
[  158.003630][T10187] netlink: 'syz.0.1371': attribute type 1 has an invalid length.
[  158.006098][T10187] netlink: 'syz.0.1371': attribute type 1 has an invalid length.
[  158.027609][T10157] batman_adv: batadv0: Adding interface: batadv_slave_0
[  158.029904][T10157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  158.039272][T10157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  158.059511][T10157] batman_adv: batadv0: Adding interface: batadv_slave_1
[  158.061709][T10157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  158.072397][T10157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  158.078753][T10137] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  158.109638][T10137] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  158.116960][T10137] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  158.172687][T10137] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  158.182034][T10195] netlink: 'syz.0.1373': attribute type 16 has an invalid length.
[  158.202662][T10157] hsr_slave_0: entered promiscuous mode
[  158.205068][T10157] hsr_slave_1: entered promiscuous mode
[  158.208224][T10157] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  158.210559][T10157] Cannot create hsr debugfs directory
[  158.230761][ T9497] bridge_slave_1: left allmulticast mode
[  158.232718][ T9497] bridge_slave_1: left promiscuous mode
[  158.234662][ T9497] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.241925][ T9497] bridge_slave_0: left allmulticast mode
[  158.256738][ T9497] bridge_slave_0: left promiscuous mode
[  158.258793][ T9497] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.549636][ T9497] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  158.556648][ T9497] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  158.567325][ T9497] bond0 (unregistering): Released all slaves
[  158.591402][T10210] xt_bpf: check failed: parse error
[  158.911672][T10137] 8021q: adding VLAN 0 to HW filter on device bond0
[  158.928351][   T54] Bluetooth: hci1: command tx timeout
[  158.942329][T10137] 8021q: adding VLAN 0 to HW filter on device team0
[  158.949034][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[  158.951482][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[  158.972176][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[  158.974618][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[  159.210950][T10137] 8021q: adding VLAN 0 to HW filter on device batadv0
[  159.268979][T10137] veth0_vlan: entered promiscuous mode
[  159.274025][T10137] veth1_vlan: entered promiscuous mode
[  159.279580][T10217] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1377'.
[  159.319007][ T9497] hsr_slave_0: left promiscuous mode
[  159.322104][ T9497] hsr_slave_1: left promiscuous mode
[  159.325431][ T9497] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  159.330045][ T9497] batman_adv: batadv0: Removing interface: batadv_slave_0
[  159.333986][ T9497] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  159.340743][ T9497] batman_adv: batadv0: Removing interface: batadv_slave_1
[  159.363702][ T9497] veth1_macvtap: left promiscuous mode
[  159.365468][ T9497] veth0_macvtap: left promiscuous mode
[  159.368226][ T9497] veth1_vlan: left promiscuous mode
[  159.370207][ T9497] veth0_vlan: left promiscuous mode
[  159.656494][   T54] Bluetooth: hci0: command tx timeout
[  159.703665][ T9497] team0 (unregistering): Port device team_slave_1 removed
[  159.732525][ T9497] team0 (unregistering): Port device team_slave_0 removed
[  160.095011][T10137] veth0_macvtap: entered promiscuous mode
[  160.152023][T10137] veth1_macvtap: entered promiscuous mode
[  160.172519][T10157] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  160.185410][T10157] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  160.198450][T10157] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  160.217333][T10137] batman_adv: batadv0: Interface activated: batadv_slave_0
[  160.228917][T10157] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  160.245967][T10233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1381'.
[  160.261182][T10137] batman_adv: batadv0: Interface activated: batadv_slave_1
[  160.282857][T10137] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  160.286119][T10137] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  160.289560][T10137] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  160.292650][T10137] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  160.344170][T10244] sctp: [Deprecated]: syz.0.1382 (pid 10244) Use of int in max_burst socket option.
[  160.344170][T10244] Use struct sctp_assoc_value instead
[  160.419390][T10244] netlink: 'syz.0.1382': attribute type 178 has an invalid length.
[  160.440032][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  160.443112][T10244] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[  160.447800][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  160.474165][T10157] 8021q: adding VLAN 0 to HW filter on device bond0
[  160.521579][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  160.524652][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  160.532564][T10157] 8021q: adding VLAN 0 to HW filter on device team0
[  160.560746][ T8673] bridge0: port 1(bridge_slave_0) entered blocking state
[  160.562899][ T8673] bridge0: port 1(bridge_slave_0) entered forwarding state
[  160.568521][ T8673] bridge0: port 2(bridge_slave_1) entered blocking state
[  160.571336][ T8673] bridge0: port 2(bridge_slave_1) entered forwarding state
[  160.625764][T10157] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  160.719549][T10249] nbd: must specify at least one socket
[  160.721734][T10157] 8021q: adding VLAN 0 to HW filter on device batadv0
[  160.755729][T10157] veth0_vlan: entered promiscuous mode
[  160.775137][T10157] veth1_vlan: entered promiscuous mode
[  160.807990][T10157] veth0_macvtap: entered promiscuous mode
[  160.812079][T10157] veth1_macvtap: entered promiscuous mode
[  160.830615][T10157] batman_adv: batadv0: Interface activated: batadv_slave_0
[  160.848800][T10157] batman_adv: batadv0: Interface activated: batadv_slave_1
[  160.867199][T10157] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  160.870578][T10157] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  160.873446][T10157] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  160.878320][T10157] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  160.951583][ T8673] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  160.953961][ T8673] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  160.974349][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  160.977517][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  161.007070][   T54] Bluetooth: hci1: command tx timeout
[  161.083086][T10263] netlink: 'syz.0.1386': attribute type 2 has an invalid length.
[  161.130951][T10265] netlink: 18 bytes leftover after parsing attributes in process `syz.0.1387'.
[  161.294901][T10274] netlink: 'syz.0.1390': attribute type 3 has an invalid length.
[  161.298043][T10274] netlink: 666 bytes leftover after parsing attributes in process `syz.0.1390'.
[  161.431434][ T9497] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.337403][T10280] netlink: 'syz.0.1391': attribute type 4 has an invalid length.
[  162.356402][T10280] netlink: 'syz.0.1391': attribute type 4 has an invalid length.
[  162.473491][T10283] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6
[  162.485359][ T5217] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  162.491018][ T5217] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  162.493983][ T5217] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  162.497026][ T5217] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  162.499434][ T5217] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  162.529088][ T9497] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.747765][ T9497] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.790432][ T9497] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.956938][T10284] chnl_net:caif_netlink_parms(): no params data found
[  162.999542][ T9497] bridge_slave_1: left allmulticast mode
[  163.001658][ T9497] bridge_slave_1: left promiscuous mode
[  163.003572][ T9497] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.021592][ T9497] bridge_slave_0: left allmulticast mode
[  163.023742][ T9497] bridge_slave_0: left promiscuous mode
[  163.026058][ T9497] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.410676][ T9497] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  163.419330][ T9497] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  163.423626][ T9497] bond0 (unregistering): Released all slaves
[  163.521970][T10284] bridge0: port 1(bridge_slave_0) entered blocking state
[  163.525038][T10284] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.530066][T10284] bridge_slave_0: entered allmulticast mode
[  163.534108][T10284] bridge_slave_0: entered promiscuous mode
[  163.540854][T10284] bridge0: port 2(bridge_slave_1) entered blocking state
[  163.543714][T10284] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.547366][T10284] bridge_slave_1: entered allmulticast mode
[  163.551171][T10284] bridge_slave_1: entered promiscuous mode
[  163.612379][T10284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  163.622507][T10284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  163.686037][T10284] team0: Port device team_slave_0 added
[  163.691882][T10284] team0: Port device team_slave_1 added
[  163.748727][T10284] batman_adv: batadv0: Adding interface: batadv_slave_0
[  163.751412][T10284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  163.770780][T10284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  163.786857][T10284] batman_adv: batadv0: Adding interface: batadv_slave_1
[  163.789531][T10284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  163.826319][T10284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  163.990159][T10284] hsr_slave_0: entered promiscuous mode
[  163.992514][T10284] hsr_slave_1: entered promiscuous mode
[  164.009750][T10300] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1394'.
[  164.024436][ T9497] hsr_slave_0: left promiscuous mode
[  164.026849][ T9497] hsr_slave_1: left promiscuous mode
[  164.028827][ T9497] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  164.031045][ T9497] batman_adv: batadv0: Removing interface: batadv_slave_0
[  164.033945][ T9497] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  164.036916][ T9497] batman_adv: batadv0: Removing interface: batadv_slave_1
[  164.048251][ T9497] veth1_macvtap: left promiscuous mode
[  164.050004][ T9497] veth0_macvtap: left promiscuous mode
[  164.051999][ T9497] veth1_vlan: left promiscuous mode
[  164.053884][ T9497] veth0_vlan: left promiscuous mode
[  164.165203][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  164.184455][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  164.188727][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  164.197352][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  164.203824][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  164.388250][ T9497] team0 (unregistering): Port device team_slave_1 removed
[  164.418508][ T9497] team0 (unregistering): Port device team_slave_0 removed
[  164.526414][ T5217] Bluetooth: hci0: command tx timeout
[  164.911476][T10312] netlink: 'syz.0.1397': attribute type 10 has an invalid length.
[  164.913885][T10312] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1397'.
[  164.923756][T10312] batadv0: entered promiscuous mode
[  164.925583][T10312] bridge0: port 1(batadv0) entered blocking state
[  164.934933][T10312] bridge0: port 1(batadv0) entered disabled state
[  164.937238][T10312] batadv0: entered allmulticast mode
[  165.119300][T10302] chnl_net:caif_netlink_parms(): no params data found
[  165.221560][ T9497] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.241523][T10302] bridge0: port 1(bridge_slave_0) entered blocking state
[  165.244380][T10302] bridge0: port 1(bridge_slave_0) entered disabled state
[  165.247619][T10302] bridge_slave_0: entered allmulticast mode
[  165.250353][T10302] bridge_slave_0: entered promiscuous mode
[  165.253273][T10328] sit0: entered promiscuous mode
[  165.255174][T10328] netlink: 'syz.0.1399': attribute type 1 has an invalid length.
[  165.260526][T10328] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1399'.
[  165.303220][ T9497] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.308811][   T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  165.312480][   T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  165.322752][T10302] bridge0: port 2(bridge_slave_1) entered blocking state
[  165.325684][T10302] bridge0: port 2(bridge_slave_1) entered disabled state
[  165.329802][T10302] bridge_slave_1: entered allmulticast mode
[  165.333755][T10302] bridge_slave_1: entered promiscuous mode
[  165.410166][ T9497] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.430749][T10302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  165.456923][T10302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  165.478216][ T9497] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.524518][T10302] team0: Port device team_slave_0 added
[  165.531396][T10284] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  165.542149][T10302] team0: Port device team_slave_1 added
[  165.546594][T10284] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  165.550436][T10341] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1402'.
[  165.572577][T10284] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  165.577995][T10341] bridge0: entered allmulticast mode
[  165.580465][T10284] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  165.599896][T10341] pim6reg: entered allmulticast mode
[  165.602268][T10302] batman_adv: batadv0: Adding interface: batadv_slave_0
[  165.602358][T10341] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1402'.
[  165.604410][T10302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  165.604437][T10302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  165.606033][T10302] batman_adv: batadv0: Adding interface: batadv_slave_1
[  165.627194][T10302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  165.636002][T10302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  165.654655][T10341] batadv0: left allmulticast mode
[  165.657840][T10341] bridge0: port 1(batadv0) entered disabled state
[  165.672520][T10341] bridge0 (unregistering): left allmulticast mode
[  165.818912][T10302] hsr_slave_0: entered promiscuous mode
[  165.822615][T10302] hsr_slave_1: entered promiscuous mode
[  165.829064][T10302] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  165.831358][T10302] Cannot create hsr debugfs directory
[  165.837889][ T9497] bridge_slave_1: left allmulticast mode
[  165.839648][ T9497] bridge_slave_1: left promiscuous mode
[  165.841430][ T9497] bridge0: port 2(bridge_slave_1) entered disabled state
[  165.845753][ T9497] bridge_slave_0: left allmulticast mode
[  165.848993][ T9497] bridge_slave_0: left promiscuous mode
[  165.851223][ T9497] bridge0: port 1(bridge_slave_0) entered disabled state
[  165.934806][T10351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1403'.
[  166.118919][ T9497] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  166.124546][ T9497] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  166.130057][ T9497] bond0 (unregistering): Released all slaves
[  166.286424][ T5217] Bluetooth: hci1: command tx timeout
[  166.331790][T10284] 8021q: adding VLAN 0 to HW filter on device bond0
[  166.417372][T10284] 8021q: adding VLAN 0 to HW filter on device team0
[  166.423427][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  166.425878][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  166.440304][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[  166.443342][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[  166.607297][ T5217] Bluetooth: hci0: command tx timeout
[  166.619937][ T9497] hsr_slave_0: left promiscuous mode
[  166.623996][ T9497] hsr_slave_1: left promiscuous mode
[  166.632295][ T9497] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  166.644354][ T9497] batman_adv: batadv0: Removing interface: batadv_slave_0
[  166.650047][ T9497] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  166.659002][ T9497] batman_adv: batadv0: Removing interface: batadv_slave_1
[  166.682121][ T9497] veth1_macvtap: left promiscuous mode
[  166.684047][ T9497] veth0_macvtap: left promiscuous mode
[  166.685790][ T9497] veth1_vlan: left promiscuous mode
[  166.687878][ T9497] veth0_vlan: left promiscuous mode
[  166.851523][T10364] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1406'.
[  167.114897][ T9497] team0 (unregistering): Port device team_slave_1 removed
[  167.148126][ T9497] team0 (unregistering): Port device team_slave_0 removed
[  167.604233][T10302] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  167.623455][T10302] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  167.681296][T10302] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  167.693612][T10302] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  167.764351][T10284] 8021q: adding VLAN 0 to HW filter on device batadv0
[  167.851301][T10284] veth0_vlan: entered promiscuous mode
[  167.870651][T10284] veth1_vlan: entered promiscuous mode
[  167.917955][T10302] 8021q: adding VLAN 0 to HW filter on device bond0
[  167.923240][T10284] veth0_macvtap: entered promiscuous mode
[  167.948497][T10284] veth1_macvtap: entered promiscuous mode
[  167.960470][T10302] 8021q: adding VLAN 0 to HW filter on device team0
[  167.969047][ T8769] bridge0: port 1(bridge_slave_0) entered blocking state
[  167.971681][ T8769] bridge0: port 1(bridge_slave_0) entered forwarding state
[  167.982411][ T8769] bridge0: port 2(bridge_slave_1) entered blocking state
[  167.985023][ T8769] bridge0: port 2(bridge_slave_1) entered forwarding state
[  167.995754][T10284] batman_adv: batadv0: Interface activated: batadv_slave_0
[  168.013336][T10284] batman_adv: batadv0: Interface activated: batadv_slave_1
[  168.029919][T10284] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  168.032824][T10284] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  168.035605][T10284] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  168.050064][T10284] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  168.156828][T10390] syzkaller0: entered promiscuous mode
[  168.158713][T10390] syzkaller0: entered allmulticast mode
[  168.376328][ T5217] Bluetooth: hci1: command tx timeout
[  168.697802][ T5217] Bluetooth: hci0: command tx timeout
[  169.228294][ T8769] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  169.235793][ T8769] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  169.264520][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  169.272775][T10302] 8021q: adding VLAN 0 to HW filter on device batadv0
[  169.275481][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  169.330695][T10302] veth0_vlan: entered promiscuous mode
[  169.347133][T10302] veth1_vlan: entered promiscuous mode
[  169.421276][T10302] veth0_macvtap: entered promiscuous mode
[  169.428594][T10302] veth1_macvtap: entered promiscuous mode
[  169.444059][T10302] batman_adv: batadv0: Interface activated: batadv_slave_0
[  169.465229][T10302] batman_adv: batadv0: Interface activated: batadv_slave_1
[  169.472262][T10302] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  169.474995][T10302] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  169.478195][T10302] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  169.480875][T10302] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  169.528313][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  169.530926][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  169.554729][ T8769] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  169.558624][ T8769] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  169.804053][T10411] netlink: 134788 bytes leftover after parsing attributes in process `syz.0.1416'.
[  169.891308][T10419] netlink: 'syz.0.1418': attribute type 8 has an invalid length.
[  169.954273][T10421] veth9: entered allmulticast mode
[  170.150928][T10426] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1421'.
[  170.204173][T10426] openvswitch: netlink: Flow actions attr not present in new flow.
[  170.491742][ T5859] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.972730][ T5859] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.025455][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  171.030571][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  171.033402][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  171.039834][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  171.043218][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  171.064406][ T5859] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.113103][ T5859] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.255306][ T5859] bridge_slave_1: left allmulticast mode
[  171.259012][ T5859] bridge_slave_1: left promiscuous mode
[  171.260875][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.265280][ T5859] bridge_slave_0: left allmulticast mode
[  171.267949][ T5859] bridge_slave_0: left promiscuous mode
[  171.269775][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.519940][ T5859] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  171.525460][ T5859] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  171.530812][ T5859] bond0 (unregistering): Released all slaves
[  171.634384][T10454] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1427'.
[  171.684820][T10448] chnl_net:caif_netlink_parms(): no params data found
[  171.747246][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  171.752399][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  171.760526][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  171.765104][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  171.771587][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  171.870934][T10448] bridge0: port 1(bridge_slave_0) entered blocking state
[  171.873389][T10448] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.875546][T10448] bridge_slave_0: entered allmulticast mode
[  171.878754][T10448] bridge_slave_0: entered promiscuous mode
[  171.882345][T10448] bridge0: port 2(bridge_slave_1) entered blocking state
[  171.884665][T10448] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.890088][T10448] bridge_slave_1: entered allmulticast mode
[  171.894107][T10448] bridge_slave_1: entered promiscuous mode
[  171.926681][T10448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  171.931701][T10448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  171.974023][T10448] team0: Port device team_slave_0 added
[  171.982737][T10448] team0: Port device team_slave_1 added
[  172.010469][T10448] batman_adv: batadv0: Adding interface: batadv_slave_0
[  172.012672][T10448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  172.023564][T10448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  172.029561][T10448] batman_adv: batadv0: Adding interface: batadv_slave_1
[  172.032046][T10448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  172.043323][T10448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  172.227796][T10448] hsr_slave_0: entered promiscuous mode
[  172.230288][T10448] hsr_slave_1: entered promiscuous mode
[  172.232486][T10448] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  172.234891][T10448] Cannot create hsr debugfs directory
[  172.248624][ T5859] hsr_slave_0: left promiscuous mode
[  172.250841][ T5859] hsr_slave_1: left promiscuous mode
[  172.253021][ T5859] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  172.255368][ T5859] batman_adv: batadv0: Removing interface: batadv_slave_0
[  172.258949][ T5859] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  172.261437][ T5859] batman_adv: batadv0: Removing interface: batadv_slave_1
[  172.275640][ T5859] veth1_macvtap: left promiscuous mode
[  172.279278][ T5859] veth0_macvtap: left promiscuous mode
[  172.281176][ T5859] veth1_vlan: left promiscuous mode
[  172.282881][ T5859] veth0_vlan: left promiscuous mode
[  172.673278][ T5859] team0 (unregistering): Port device team_slave_1 removed
[  172.710839][ T5859] team0 (unregistering): Port device team_slave_0 removed
[  173.097863][   T54] Bluetooth: hci0: command tx timeout
[  173.137847][T10467] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1429'.
[  173.220168][T10467] netlink: 'syz.0.1429': attribute type 11 has an invalid length.
[  173.328009][T10457] chnl_net:caif_netlink_parms(): no params data found
[  173.502633][T10457] bridge0: port 1(bridge_slave_0) entered blocking state
[  173.505934][T10457] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.508815][T10457] bridge_slave_0: entered allmulticast mode
[  173.511873][T10457] bridge_slave_0: entered promiscuous mode
[  173.547439][T10457] bridge0: port 2(bridge_slave_1) entered blocking state
[  173.550693][T10457] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.556523][T10457] bridge_slave_1: entered allmulticast mode
[  173.564352][T10457] bridge_slave_1: entered promiscuous mode
[  173.629585][ T5859] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.704351][T10457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  173.727726][ T5859] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.745665][T10457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  173.817747][ T5217] Bluetooth: hci1: command tx timeout
[  173.841311][T10457] team0: Port device team_slave_0 added
[  173.846796][T10457] team0: Port device team_slave_1 added
[  173.867006][ T5859] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.894955][T10448] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  173.959967][ T5859] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.968408][T10448] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  173.975098][T10457] batman_adv: batadv0: Adding interface: batadv_slave_0
[  173.978900][T10457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  173.990358][T10457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  173.997663][T10457] batman_adv: batadv0: Adding interface: batadv_slave_1
[  174.000450][T10457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  174.011281][T10457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  174.015730][T10448] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  174.034379][T10448] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  174.138505][T10457] hsr_slave_0: entered promiscuous mode
[  174.143567][T10457] hsr_slave_1: entered promiscuous mode
[  174.152157][T10485] netlink: 'syz.0.1434': attribute type 83 has an invalid length.
[  174.313007][ T5859] bridge_slave_1: left allmulticast mode
[  174.315296][ T5859] bridge_slave_1: left promiscuous mode
[  174.320732][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state
[  174.327508][ T5859] bridge_slave_0: left allmulticast mode
[  174.329714][ T5859] bridge_slave_0: left promiscuous mode
[  174.332026][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state
[  174.711171][ T5859] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  174.719732][ T5859] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  174.724729][ T5859] bond0 (unregistering): Released all slaves
[  174.900836][T10448] 8021q: adding VLAN 0 to HW filter on device bond0
[  174.988046][T10448] 8021q: adding VLAN 0 to HW filter on device team0
[  175.006105][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  175.008415][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  175.021933][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  175.024201][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  175.177139][ T5217] Bluetooth: hci0: command tx timeout
[  175.344726][ T5859] hsr_slave_0: left promiscuous mode
[  175.348553][ T5859] hsr_slave_1: left promiscuous mode
[  175.351313][ T5859] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  175.354247][ T5859] batman_adv: batadv0: Removing interface: batadv_slave_0
[  175.360322][ T5859] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  175.363315][ T5859] batman_adv: batadv0: Removing interface: batadv_slave_1
[  175.420920][ T5859] veth1_macvtap: left promiscuous mode
[  175.423205][ T5859] veth0_macvtap: left promiscuous mode
[  175.425882][ T5859] veth1_vlan: left promiscuous mode
[  175.431669][ T5859] veth0_vlan: left promiscuous mode
[  175.890918][ T5217] Bluetooth: hci1: command tx timeout
[  175.899360][ T5859] team0 (unregistering): Port device team_slave_1 removed
[  175.954733][ T5859] team0 (unregistering): Port device team_slave_0 removed
[  176.252674][T10523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1443'.
[  176.355768][T10530] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1444'.
[  176.361846][T10530] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1444'.
[  176.423138][T10457] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  176.430014][T10448] 8021q: adding VLAN 0 to HW filter on device batadv0
[  176.433437][T10457] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  176.439532][T10457] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  176.448075][T10457] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  176.515444][T10448] veth0_vlan: entered promiscuous mode
[  176.533954][T10448] veth1_vlan: entered promiscuous mode
[  176.579695][T10448] veth0_macvtap: entered promiscuous mode
[  176.589346][T10544] macsec0: entered promiscuous mode
[  176.592267][T10544] macsec0: left promiscuous mode
[  176.595569][T10448] veth1_macvtap: entered promiscuous mode
[  176.610198][T10457] 8021q: adding VLAN 0 to HW filter on device bond0
[  176.695017][T10448] batman_adv: batadv0: Interface activated: batadv_slave_0
[  176.709109][T10448] batman_adv: batadv0: Interface activated: batadv_slave_1
[  176.724602][T10448] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  176.729509][T10448] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  176.739624][T10448] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  176.742682][T10448] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  176.753351][T10457] 8021q: adding VLAN 0 to HW filter on device team0
[  176.865029][ T8769] bridge0: port 1(bridge_slave_0) entered blocking state
[  176.867431][ T8769] bridge0: port 1(bridge_slave_0) entered forwarding state
[  176.924662][ T8769] bridge0: port 2(bridge_slave_1) entered blocking state
[  176.926976][ T8769] bridge0: port 2(bridge_slave_1) entered forwarding state
[  176.998179][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  177.000900][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  177.036491][T10554] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1450'.
[  177.039900][T10554] netlink: 'syz.0.1450': attribute type 7 has an invalid length.
[  177.042293][T10554] netlink: 'syz.0.1450': attribute type 8 has an invalid length.
[  177.044806][T10554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1450'.
[  177.064533][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  177.070773][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  177.128238][T10562] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1451'.
[  177.191411][T10565] xt_TPROXY: Can be used only with -p tcp or -p udp
[  177.256465][ T5217] Bluetooth: hci0: command tx timeout
[  177.328982][T10457] 8021q: adding VLAN 0 to HW filter on device batadv0
[  177.357988][T10568] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1453'.
[  177.368742][T10457] veth0_vlan: entered promiscuous mode
[  177.375201][T10457] veth1_vlan: entered promiscuous mode
[  177.419502][T10457] veth0_macvtap: entered promiscuous mode
[  177.423739][T10457] veth1_macvtap: entered promiscuous mode
[  177.446077][T10457] batman_adv: batadv0: Interface activated: batadv_slave_0
[  177.454532][T10457] batman_adv: batadv0: Interface activated: batadv_slave_1
[  177.465265][T10457] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  177.469892][T10457] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  177.472966][T10457] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  177.475796][T10457] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  177.703685][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.741583][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  177.744816][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  177.788993][ T8673] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  177.792347][ T8673] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  178.156682][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.410678][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.617813][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.918876][   T12] bridge_slave_1: left allmulticast mode
[  178.921211][   T12] bridge_slave_1: left promiscuous mode
[  178.923631][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  178.932568][   T12] bridge_slave_0: left allmulticast mode
[  178.934896][   T12] bridge_slave_0: left promiscuous mode
[  178.941037][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  179.105114][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  179.113172][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  179.117926][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  179.122021][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  179.125281][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  179.417576][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  179.423187][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  179.428392][   T12] bond0 (unregistering): Released all slaves
[  179.835321][   T12] hsr_slave_0: left promiscuous mode
[  179.838378][   T12] hsr_slave_1: left promiscuous mode
[  179.841074][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  179.843458][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  179.847459][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  179.849757][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  179.861134][   T12] veth1_macvtap: left promiscuous mode
[  179.862861][   T12] veth0_macvtap: left promiscuous mode
[  179.864632][   T12] veth1_vlan: left promiscuous mode
[  179.866784][   T12] veth0_vlan: left promiscuous mode
[  180.208641][   T12] team0 (unregistering): Port device team_slave_1 removed
[  180.240145][   T12] team0 (unregistering): Port device team_slave_0 removed
[  180.278633][ T5217] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  180.287360][ T5217] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  180.291022][ T5217] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  180.294637][ T5217] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  180.297673][ T5217] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  180.722689][T10583] chnl_net:caif_netlink_parms(): no params data found
[  180.963084][T10583] bridge0: port 1(bridge_slave_0) entered blocking state
[  180.966009][T10583] bridge0: port 1(bridge_slave_0) entered disabled state
[  180.978070][T10583] bridge_slave_0: entered allmulticast mode
[  180.982552][T10583] bridge_slave_0: entered promiscuous mode
[  181.017724][T10583] bridge0: port 2(bridge_slave_1) entered blocking state
[  181.020636][T10583] bridge0: port 2(bridge_slave_1) entered disabled state
[  181.027208][T10583] bridge_slave_1: entered allmulticast mode
[  181.031096][T10583] bridge_slave_1: entered promiscuous mode
[  181.052815][T10607] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1462'.
[  181.074390][T10583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  181.093270][T10583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  181.174005][   T54] Bluetooth: hci0: command tx timeout
[  181.183764][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  181.210359][T10583] team0: Port device team_slave_0 added
[  181.215267][T10583] team0: Port device team_slave_1 added
[  181.291337][T10583] batman_adv: batadv0: Adding interface: batadv_slave_0
[  181.293589][T10583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  181.301881][T10583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  181.321028][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  181.342363][T10583] batman_adv: batadv0: Adding interface: batadv_slave_1
[  181.345087][T10583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  181.356861][T10583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  181.365737][T10611] netlink: 'syz.0.1464': attribute type 1 has an invalid length.
[  181.371801][T10611] netlink: 784 bytes leftover after parsing attributes in process `syz.0.1464'.
[  181.406014][T10611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1464'.
[  181.429971][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  181.484992][T10583] hsr_slave_0: entered promiscuous mode
[  181.488825][T10583] hsr_slave_1: entered promiscuous mode
[  181.491798][T10583] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  181.494986][T10583] Cannot create hsr debugfs directory
[  181.522308][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  181.644385][T10592] chnl_net:caif_netlink_parms(): no params data found
[  181.795551][   T12] bridge_slave_1: left allmulticast mode
[  181.798364][   T12] bridge_slave_1: left promiscuous mode
[  181.800818][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  181.806907][   T12] bridge_slave_0: left allmulticast mode
[  181.809268][   T12] bridge_slave_0: left promiscuous mode
[  181.811708][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  182.072549][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  182.078895][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  182.083913][   T12] bond0 (unregistering): Released all slaves
[  182.182865][T10592] bridge0: port 1(bridge_slave_0) entered blocking state
[  182.186565][T10592] bridge0: port 1(bridge_slave_0) entered disabled state
[  182.189902][T10592] bridge_slave_0: entered allmulticast mode
[  182.194218][T10592] bridge_slave_0: entered promiscuous mode
[  182.249269][T10592] bridge0: port 2(bridge_slave_1) entered blocking state
[  182.252352][T10592] bridge0: port 2(bridge_slave_1) entered disabled state
[  182.255443][T10592] bridge_slave_1: entered allmulticast mode
[  182.264106][T10592] bridge_slave_1: entered promiscuous mode
[  182.319834][T10592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  182.345375][T10592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  182.370692][   T54] Bluetooth: hci1: command tx timeout
[  182.468912][T10592] team0: Port device team_slave_0 added
[  182.494936][T10592] team0: Port device team_slave_1 added
[  182.619100][T10630] 8021q: VLANs not supported on vcan0
[  182.621808][T10592] batman_adv: batadv0: Adding interface: batadv_slave_0
[  182.625614][T10592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  182.634128][T10592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  182.664584][   T12] hsr_slave_0: left promiscuous mode
[  182.668254][   T12] hsr_slave_1: left promiscuous mode
[  182.676685][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  182.679446][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  182.683739][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  182.688448][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  182.721883][   T12] veth1_macvtap: left promiscuous mode
[  182.724203][   T12] veth0_macvtap: left promiscuous mode
[  182.727705][   T12] veth1_vlan: left promiscuous mode
[  182.729899][   T12] veth0_vlan: left promiscuous mode
[  183.093407][   T12] team0 (unregistering): Port device team_slave_1 removed
[  183.122299][   T12] team0 (unregistering): Port device team_slave_0 removed
[  183.247165][   T54] Bluetooth: hci0: command tx timeout
[  183.461952][T10592] batman_adv: batadv0: Adding interface: batadv_slave_1
[  183.464150][T10592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  183.474119][T10592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  183.494458][T10637] syzkaller0: entered promiscuous mode
[  183.497485][T10637] syzkaller0: entered allmulticast mode
[  183.530243][T10592] hsr_slave_0: entered promiscuous mode
[  183.532569][T10592] hsr_slave_1: entered promiscuous mode
[  183.682641][T10583] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  183.700725][T10583] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  183.722437][T10583] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  183.738622][T10583] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  183.913342][T10583] 8021q: adding VLAN 0 to HW filter on device bond0
[  183.939919][T10583] 8021q: adding VLAN 0 to HW filter on device team0
[  183.963524][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[  183.965801][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[  183.972744][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[  183.975074][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[  184.152847][T10676] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1476'.
[  184.165743][T10583] 8021q: adding VLAN 0 to HW filter on device batadv0
[  184.246107][T10592] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  184.252802][T10592] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  184.261392][T10592] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  184.268159][T10592] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  184.290553][   T60] block nbd0: Possible stuck request ffff888022fe8000: control (read@0,1024B). Runtime 90 seconds
[  184.294974][   T60] block nbd0: Possible stuck request ffff888022fe8200: control (read@1024,1024B). Runtime 90 seconds
[  184.299671][   T60] block nbd0: Possible stuck request ffff888022fe8400: control (read@2048,1024B). Runtime 90 seconds
[  184.304071][   T60] block nbd0: Possible stuck request ffff888022fe8600: control (read@3072,1024B). Runtime 90 seconds
[  184.309858][T10583] veth0_vlan: entered promiscuous mode
[  184.330570][T10583] veth1_vlan: entered promiscuous mode
[  184.374958][T10583] veth0_macvtap: entered promiscuous mode
[  184.382552][T10583] veth1_macvtap: entered promiscuous mode
[  184.419831][T10583] batman_adv: batadv0: Interface activated: batadv_slave_0
[  184.434874][T10583] batman_adv: batadv0: Interface activated: batadv_slave_1
[  184.449408][T10583] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  184.452074][T10583] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  184.455229][T10583] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  184.456408][   T54] Bluetooth: hci1: command tx timeout
[  184.460279][T10583] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  184.478333][T10592] 8021q: adding VLAN 0 to HW filter on device bond0
[  184.488127][T10690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1479'.
[  184.491835][T10690] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1479'.
[  184.512043][T10690] bond4: entered promiscuous mode
[  184.513939][T10690] 8021q: adding VLAN 0 to HW filter on device bond4
[  184.589216][T10690] bond4 (unregistering): Released all slaves
[  184.633448][T10592] 8021q: adding VLAN 0 to HW filter on device team0
[  184.674612][ T8769] bridge0: port 1(bridge_slave_0) entered blocking state
[  184.677004][ T8769] bridge0: port 1(bridge_slave_0) entered forwarding state
[  184.681541][ T8769] bridge0: port 2(bridge_slave_1) entered blocking state
[  184.683848][ T8769] bridge0: port 2(bridge_slave_1) entered forwarding state
[  184.720624][ T8670] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  184.724248][ T8670] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  184.728260][T10592] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  184.731559][T10592] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  184.772451][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  184.775517][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  184.859124][T10592] 8021q: adding VLAN 0 to HW filter on device batadv0
[  184.943341][T10592] veth0_vlan: entered promiscuous mode
[  184.961179][T10592] veth1_vlan: entered promiscuous mode
[  184.990359][T10592] veth0_macvtap: entered promiscuous mode
[  184.994319][T10592] veth1_macvtap: entered promiscuous mode
[  185.004188][T10592] batman_adv: batadv0: Interface activated: batadv_slave_0
[  185.013631][T10592] batman_adv: batadv0: Interface activated: batadv_slave_1
[  185.019756][T10592] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  185.022486][T10592] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  185.025073][T10592] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  185.029363][T10592] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  185.093637][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  185.101647][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  185.115511][ T8769] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  185.119261][ T8769] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  185.332235][T10719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1486'.
[  185.365932][T10721] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1487'.
[  185.472537][T10725] No such timeout policy "syz0"
[  185.625996][T10730] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  186.554179][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.097403][T10738] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  187.101578][T10738] netlink: 19 bytes leftover after parsing attributes in process `syz.0.1493'.
[  187.144972][T10738] syzkaller0: entered promiscuous mode
[  187.147632][T10738] syzkaller0: entered allmulticast mode
[  187.271606][ T5217] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  187.274833][ T5217] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  187.288553][ T5217] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  187.302207][ T5217] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  187.310236][ T5217] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  188.198264][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  188.201690][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  188.204716][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  188.208786][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  188.213356][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  188.306866][T10749] x_tables: duplicate underflow at hook 2
[  188.414670][T10739] chnl_net:caif_netlink_parms(): no params data found
[  188.487833][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.504752][T10739] bridge0: port 1(bridge_slave_0) entered blocking state
[  188.507515][T10739] bridge0: port 1(bridge_slave_0) entered disabled state
[  188.509933][T10739] bridge_slave_0: entered allmulticast mode
[  188.512813][T10739] bridge_slave_0: entered promiscuous mode
[  188.530252][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.550947][T10739] bridge0: port 2(bridge_slave_1) entered blocking state
[  188.553238][T10739] bridge0: port 2(bridge_slave_1) entered disabled state
[  188.555481][T10739] bridge_slave_1: entered allmulticast mode
[  188.558824][T10739] bridge_slave_1: entered promiscuous mode
[  188.604013][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.617233][T10739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  188.621924][T10739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  188.661634][T10739] team0: Port device team_slave_0 added
[  188.683782][T10739] team0: Port device team_slave_1 added
[  188.720035][T10739] batman_adv: batadv0: Adding interface: batadv_slave_0
[  188.722306][T10739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  188.730943][T10739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  188.751367][T10739] batman_adv: batadv0: Adding interface: batadv_slave_1
[  188.753649][T10739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  188.763245][T10739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  188.770282][T10769] Bluetooth: MGMT ver 1.23
[  188.865191][   T13] bridge_slave_1: left allmulticast mode
[  188.868156][   T13] bridge_slave_1: left promiscuous mode
[  188.870654][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  188.877748][   T13] bridge_slave_0: left allmulticast mode
[  188.879980][   T13] bridge_slave_0: left promiscuous mode
[  188.881963][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  189.105015][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  189.110360][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  189.114163][   T13] bond0 (unregistering): Released all slaves
[  189.121414][T10742] chnl_net:caif_netlink_parms(): no params data found
[  189.135802][T10739] hsr_slave_0: entered promiscuous mode
[  189.139054][T10739] hsr_slave_1: entered promiscuous mode
[  189.141770][T10739] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  189.144749][T10739] Cannot create hsr debugfs directory
[  189.333730][T10742] bridge0: port 1(bridge_slave_0) entered blocking state
[  189.342306][T10742] bridge0: port 1(bridge_slave_0) entered disabled state
[  189.344800][T10742] bridge_slave_0: entered allmulticast mode
[  189.348364][T10742] bridge_slave_0: entered promiscuous mode
[  189.355279][T10742] bridge0: port 2(bridge_slave_1) entered blocking state
[  189.361390][T10742] bridge0: port 2(bridge_slave_1) entered disabled state
[  189.364493][T10742] bridge_slave_1: entered allmulticast mode
[  189.367923][T10742] bridge_slave_1: entered promiscuous mode
[  189.406406][ T5217] Bluetooth: hci0: command tx timeout
[  189.497442][T10742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  189.509954][T10742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  189.521812][   T13] hsr_slave_0: left promiscuous mode
[  189.525492][   T13] hsr_slave_1: left promiscuous mode
[  189.539225][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  189.541502][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  189.544283][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  189.548308][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  189.561416][   T13] veth1_macvtap: left promiscuous mode
[  189.563185][   T13] veth0_macvtap: left promiscuous mode
[  189.564920][   T13] veth1_vlan: left promiscuous mode
[  189.567112][   T13] veth0_vlan: left promiscuous mode
[  189.711988][T10783] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1503'.
[  190.035497][   T13] team0 (unregistering): Port device team_slave_1 removed
[  190.076095][   T13] team0 (unregistering): Port device team_slave_0 removed
[  190.297470][ T5217] Bluetooth: hci1: command tx timeout
[  190.580229][T10742] team0: Port device team_slave_0 added
[  190.625097][T10742] team0: Port device team_slave_1 added
[  190.668409][T10742] batman_adv: batadv0: Adding interface: batadv_slave_0
[  190.673317][T10742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  190.683202][T10742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  190.688717][T10742] batman_adv: batadv0: Adding interface: batadv_slave_1
[  190.691086][T10742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  190.711831][T10742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  190.782790][T10788] xt_CT: No such helper "snmp"
[  190.793198][T10742] hsr_slave_0: entered promiscuous mode
[  190.795713][T10742] hsr_slave_1: entered promiscuous mode
[  190.799721][T10742] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  190.802747][T10742] Cannot create hsr debugfs directory
[  190.980926][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.055575][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.098713][T10739] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  191.105003][T10739] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  191.133932][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.140052][T10739] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  191.148391][T10739] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  191.184768][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.286835][T10739] 8021q: adding VLAN 0 to HW filter on device bond0
[  191.321509][   T13] bridge_slave_1: left allmulticast mode
[  191.323310][   T13] bridge_slave_1: left promiscuous mode
[  191.325496][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  191.331739][   T13] bridge_slave_0: left allmulticast mode
[  191.333860][   T13] bridge_slave_0: left promiscuous mode
[  191.335828][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  191.486617][ T5217] Bluetooth: hci0: command tx timeout
[  191.672567][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  191.681425][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  191.686963][   T13] bond0 (unregistering): Released all slaves
[  191.734868][T10739] 8021q: adding VLAN 0 to HW filter on device team0
[  191.742577][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[  191.745572][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[  191.772404][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[  191.775332][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[  192.051734][T10742] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  192.057713][T10742] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  192.070695][T10742] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  192.127938][T10742] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  192.151960][   T13] hsr_slave_0: left promiscuous mode
[  192.154624][   T13] hsr_slave_1: left promiscuous mode
[  192.165345][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  192.169216][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  192.172555][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  192.174838][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  192.185911][   T13] veth1_macvtap: left promiscuous mode
[  192.188054][   T13] veth0_macvtap: left promiscuous mode
[  192.189809][   T13] veth1_vlan: left promiscuous mode
[  192.191496][   T13] veth0_vlan: left promiscuous mode
[  192.376427][ T5217] Bluetooth: hci1: command tx timeout
[  192.563439][   T13] team0 (unregistering): Port device team_slave_1 removed
[  192.600846][   T13] team0 (unregistering): Port device team_slave_0 removed
[  193.039683][T10824] tipc: Enabled bearer <eth:ipvlan0>, priority 10
[  193.044341][T10739] 8021q: adding VLAN 0 to HW filter on device batadv0
[  193.094428][T10739] veth0_vlan: entered promiscuous mode
[  193.104504][T10739] veth1_vlan: entered promiscuous mode
[  193.167774][T10739] veth0_macvtap: entered promiscuous mode
[  193.171788][T10739] veth1_macvtap: entered promiscuous mode
[  193.185176][T10826] syzkaller1: entered promiscuous mode
[  193.190480][T10826] syzkaller1: entered allmulticast mode
[  193.205158][T10739] batman_adv: batadv0: Interface activated: batadv_slave_0
[  193.210984][T10739] batman_adv: batadv0: Interface activated: batadv_slave_1
[  193.246605][T10739] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  193.250089][T10739] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  193.252835][T10739] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  193.255521][T10739] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  193.315596][T10742] 8021q: adding VLAN 0 to HW filter on device bond0
[  193.351765][T10742] 8021q: adding VLAN 0 to HW filter on device team0
[  193.356473][ T8769] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  193.359051][ T8769] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  193.359486][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[  193.363454][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[  193.382430][ T8673] bridge0: port 2(bridge_slave_1) entered blocking state
[  193.384703][ T8673] bridge0: port 2(bridge_slave_1) entered forwarding state
[  193.415308][ T8769] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  193.421825][ T8769] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  193.694317][T10742] 8021q: adding VLAN 0 to HW filter on device batadv0
[  193.734099][T10742] veth0_vlan: entered promiscuous mode
[  193.742788][T10742] veth1_vlan: entered promiscuous mode
[  193.763981][T10742] veth0_macvtap: entered promiscuous mode
[  193.774510][T10742] veth1_macvtap: entered promiscuous mode
[  193.786019][T10742] batman_adv: batadv0: Interface activated: batadv_slave_0
[  193.793596][T10742] batman_adv: batadv0: Interface activated: batadv_slave_1
[  193.799361][T10742] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  193.802063][T10742] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  193.804725][T10742] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  193.808990][T10742] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  193.864465][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  193.873959][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  193.894718][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  193.898837][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  193.907274][ T8769] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  193.910284][ T8769] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  194.571038][T10881] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1524'.
[  194.640611][ T5859] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.495994][ T5859] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.989965][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  195.993555][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  195.997227][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  195.998687][ T5859] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.004161][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  196.008974][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  196.060689][ T5859] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.227818][ T5859] bridge_slave_1: left allmulticast mode
[  196.230202][ T5859] bridge_slave_1: left promiscuous mode
[  196.232633][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.239591][ T5859] bridge_slave_0: left allmulticast mode
[  196.241898][ T5859] bridge_slave_0: left promiscuous mode
[  196.244312][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.533639][ T5859] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  196.539305][ T5859] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  196.543532][ T5859] bond0 (unregistering): Released all slaves
[  196.715847][T10888] chnl_net:caif_netlink_parms(): no params data found
[  196.805517][T10888] bridge0: port 1(bridge_slave_0) entered blocking state
[  196.808199][T10888] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.810459][T10888] bridge_slave_0: entered allmulticast mode
[  196.813404][T10888] bridge_slave_0: entered promiscuous mode
[  196.818398][T10888] bridge0: port 2(bridge_slave_1) entered blocking state
[  196.820798][T10888] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.823720][T10888] bridge_slave_1: entered allmulticast mode
[  196.830394][T10888] bridge_slave_1: entered promiscuous mode
[  196.908191][T10888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  196.922642][T10888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  196.992989][ T5859] hsr_slave_0: left promiscuous mode
[  196.995493][ T5859] hsr_slave_1: left promiscuous mode
[  196.997946][ T5859] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  197.000188][ T5859] batman_adv: batadv0: Removing interface: batadv_slave_0
[  197.003017][ T5859] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  197.005328][ T5859] batman_adv: batadv0: Removing interface: batadv_slave_1
[  197.020174][ T5859] veth1_macvtap: left promiscuous mode
[  197.022119][ T5859] veth0_macvtap: left promiscuous mode
[  197.024123][ T5859] veth1_vlan: left promiscuous mode
[  197.027466][ T5859] veth0_vlan: left promiscuous mode
[  197.229368][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  197.234425][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  197.239223][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  197.247249][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  197.250854][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  197.523024][ T5859] team0 (unregistering): Port device team_slave_1 removed
[  197.552433][ T5859] team0 (unregistering): Port device team_slave_0 removed
[  197.869613][T10909] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  197.880577][T10910] syzkaller0: entered promiscuous mode
[  197.882420][T10910] syzkaller0: entered allmulticast mode
[  197.893352][T10918] tipc: Resetting bearer <eth:syzkaller0>
[  197.899072][T10888] team0: Port device team_slave_0 added
[  197.908564][T10888] team0: Port device team_slave_1 added
[  197.962973][T10918] tipc: Resetting bearer <eth:syzkaller0>
[  197.975710][T10918] tipc: Disabling bearer <eth:syzkaller0>
[  197.983618][T10888] batman_adv: batadv0: Adding interface: batadv_slave_0
[  197.985963][T10888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  197.994552][T10888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  197.999584][T10888] batman_adv: batadv0: Adding interface: batadv_slave_1
[  198.001837][T10888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  198.010738][T10888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  198.050551][ T5217] Bluetooth: hci0: command tx timeout
[  198.066776][T10922] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1529'.
[  198.092600][T10888] hsr_slave_0: entered promiscuous mode
[  198.095388][T10888] hsr_slave_1: entered promiscuous mode
[  198.152227][T10924] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1530'.
[  198.385283][ T5859] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.458125][T10930] sch_tbf: burst 0 is lower than device ip6gre0 mtu (39785) !
[  198.488871][ T5859] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.558302][ T5859] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.585470][T10906] chnl_net:caif_netlink_parms(): no params data found
[  198.655920][ T5859] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.706076][T10906] bridge0: port 1(bridge_slave_0) entered blocking state
[  198.714045][T10906] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.716603][T10906] bridge_slave_0: entered allmulticast mode
[  198.720690][T10906] bridge_slave_0: entered promiscuous mode
[  198.734755][T10906] bridge0: port 2(bridge_slave_1) entered blocking state
[  198.737183][T10906] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.739433][T10906] bridge_slave_1: entered allmulticast mode
[  198.742205][T10906] bridge_slave_1: entered promiscuous mode
[  198.796964][T10906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  198.801764][T10906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  198.819081][T10953] netlink: 404 bytes leftover after parsing attributes in process `syz.0.1536'.
[  198.885217][T10906] team0: Port device team_slave_0 added
[  198.888447][T10888] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  198.893640][T10888] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  198.909749][T10906] team0: Port device team_slave_1 added
[  198.919838][T10888] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  198.964072][T10888] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  198.970670][ T5859] bridge_slave_1: left allmulticast mode
[  198.972486][ T5859] bridge_slave_1: left promiscuous mode
[  198.974755][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.989889][ T5859] bridge_slave_0: left allmulticast mode
[  198.991632][ T5859] bridge_slave_0: left promiscuous mode
[  198.993464][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state
[  199.291181][ T5859] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  199.298220][ T5859] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  199.307380][ T5859] bond0 (unregistering): Released all slaves
[  199.324867][T10906] batman_adv: batadv0: Adding interface: batadv_slave_0
[  199.328046][ T5217] Bluetooth: hci1: command tx timeout
[  199.345369][T10906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  199.367066][T10906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  199.379586][T10906] batman_adv: batadv0: Adding interface: batadv_slave_1
[  199.382353][T10906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  199.391924][T10906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  199.496112][T10906] hsr_slave_0: entered promiscuous mode
[  199.500980][T10906] hsr_slave_1: entered promiscuous mode
[  199.503115][T10906] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  199.505427][T10906] Cannot create hsr debugfs directory
[  199.663516][T10888] 8021q: adding VLAN 0 to HW filter on device bond0
[  199.672247][T10976] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1538'.
[  199.713217][ T5859] hsr_slave_0: left promiscuous mode
[  199.715394][ T5859] hsr_slave_1: left promiscuous mode
[  199.717614][ T5859] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  199.719928][ T5859] batman_adv: batadv0: Removing interface: batadv_slave_0
[  199.722783][ T5859] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  199.725624][ T5859] batman_adv: batadv0: Removing interface: batadv_slave_1
[  199.749448][ T5859] veth1_macvtap: left promiscuous mode
[  199.751273][ T5859] veth0_macvtap: left promiscuous mode
[  199.753109][ T5859] veth1_vlan: left promiscuous mode
[  199.754824][ T5859] veth0_vlan: left promiscuous mode
[  200.098399][ T5859] team0 (unregistering): Port device team_slave_1 removed
[  200.129845][ T5217] Bluetooth: hci0: command tx timeout
[  200.136071][ T5859] team0 (unregistering): Port device team_slave_0 removed
[  200.528415][T10888] 8021q: adding VLAN 0 to HW filter on device team0
[  200.551197][ T8670] bridge0: port 1(bridge_slave_0) entered blocking state
[  200.553440][ T8670] bridge0: port 1(bridge_slave_0) entered forwarding state
[  200.567829][ T8670] bridge0: port 2(bridge_slave_1) entered blocking state
[  200.570080][ T8670] bridge0: port 2(bridge_slave_1) entered forwarding state
[  200.725545][T10888] 8021q: adding VLAN 0 to HW filter on device batadv0
[  200.757409][T10888] veth0_vlan: entered promiscuous mode
[  200.764364][T10888] veth1_vlan: entered promiscuous mode
[  200.783202][T10888] veth0_macvtap: entered promiscuous mode
[  200.790021][T10888] veth1_macvtap: entered promiscuous mode
[  200.821898][T10888] batman_adv: batadv0: Interface activated: batadv_slave_0
[  200.833539][T10888] batman_adv: batadv0: Interface activated: batadv_slave_1
[  200.835980][T10906] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  200.841943][T10906] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  200.847932][T10906] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  200.853045][T10888] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  200.855744][T10888] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  200.860212][T10888] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  200.862913][T10888] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  200.869098][T10906] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  200.950314][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  200.955103][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  200.988559][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  200.992181][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  201.010836][T10906] 8021q: adding VLAN 0 to HW filter on device bond0
[  201.027859][T10906] 8021q: adding VLAN 0 to HW filter on device team0
[  201.035007][ T8670] bridge0: port 1(bridge_slave_0) entered blocking state
[  201.037837][ T8670] bridge0: port 1(bridge_slave_0) entered forwarding state
[  201.057403][ T8670] bridge0: port 2(bridge_slave_1) entered blocking state
[  201.059689][ T8670] bridge0: port 2(bridge_slave_1) entered forwarding state
[  201.256974][T10906] 8021q: adding VLAN 0 to HW filter on device batadv0
[  201.302122][T10906] veth0_vlan: entered promiscuous mode
[  201.311912][T10999] tipc: Enabled bearer <udp:syz2>, priority 10
[  201.319089][T10906] veth1_vlan: entered promiscuous mode
[  201.324147][T10999] tipc: Enabled bearer <eth:veth0_macvtap>, priority 0
[  201.350171][T10906] veth0_macvtap: entered promiscuous mode
[  201.355742][T10906] veth1_macvtap: entered promiscuous mode
[  201.387520][T10906] batman_adv: batadv0: Interface activated: batadv_slave_0
[  201.395214][T10906] batman_adv: batadv0: Interface activated: batadv_slave_1
[  201.405803][T10906] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  201.409753][ T5217] Bluetooth: hci1: command tx timeout
[  201.412013][T10906] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  201.415128][T10906] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  201.418535][T10906] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  201.512425][T11007] tipc: Resetting bearer <eth:ipvlan0>
[  201.523072][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  201.527592][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  201.558141][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  201.561830][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  201.752549][T11011] netlink: 'syz.0.1544': attribute type 1 has an invalid length.
[  201.755017][T11011] netlink: 'syz.0.1544': attribute type 3 has an invalid length.
[  201.758061][T11011] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1544'.
[  201.792956][T11013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1545'.
[  201.927765][T11019] openvswitch: netlink: IP tunnel dst address not specified
[  202.004782][T11022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1548'.
[  202.122961][T11027] x_tables: duplicate underflow at hook 1
[  202.159102][ T5859] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.329501][T11027] netlink: 'syz.0.1549': attribute type 1 has an invalid length.
[  202.331954][T11027] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1549'.
[  202.923594][ T5859] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.558422][T11033] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  203.563248][ T5859] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.635793][ T5859] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.707638][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  203.714836][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  203.720031][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  203.724780][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  203.729327][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  203.774555][ T5859] bridge_slave_1: left allmulticast mode
[  203.776786][ T5859] bridge_slave_1: left promiscuous mode
[  203.778619][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state
[  203.782475][ T5859] bridge_slave_0: left allmulticast mode
[  203.784249][ T5859] bridge_slave_0: left promiscuous mode
[  203.786055][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state
[  204.012234][ T5859] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  204.018057][ T5859] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  204.022399][ T5859] bond0 (unregistering): Released all slaves
[  204.315574][T11034] chnl_net:caif_netlink_parms(): no params data found
[  204.434501][ T5859] hsr_slave_0: left promiscuous mode
[  204.437651][ T5859] hsr_slave_1: left promiscuous mode
[  204.440372][ T5859] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  204.443280][ T5859] batman_adv: batadv0: Removing interface: batadv_slave_0
[  204.447259][ T5859] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  204.450201][ T5859] batman_adv: batadv0: Removing interface: batadv_slave_1
[  204.472604][ T5859] veth1_macvtap: left promiscuous mode
[  204.474910][ T5859] veth0_macvtap: left promiscuous mode
[  204.477589][ T5859] veth1_vlan: left promiscuous mode
[  204.479758][ T5859] veth0_vlan: left promiscuous mode
[  204.930335][ T5217] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  204.941286][ T5217] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  204.952355][ T5217] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  204.963529][ T5217] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  204.967197][ T5217] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  205.121279][ T5859] team0 (unregistering): Port device team_slave_1 removed
[  205.154255][ T5859] team0 (unregistering): Port device team_slave_0 removed
[  205.480743][T11034] bridge0: port 1(bridge_slave_0) entered blocking state
[  205.498529][T11034] bridge0: port 1(bridge_slave_0) entered disabled state
[  205.501485][T11034] bridge_slave_0: entered allmulticast mode
[  205.507733][T11034] bridge_slave_0: entered promiscuous mode
[  205.520351][T11034] bridge0: port 2(bridge_slave_1) entered blocking state
[  205.527795][T11034] bridge0: port 2(bridge_slave_1) entered disabled state
[  205.530504][T11052] netlink: 'syz.0.1553': attribute type 1 has an invalid length.
[  205.532864][T11052] netlink: 'syz.0.1553': attribute type 10 has an invalid length.
[  205.535118][T11052] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1553'.
[  205.544477][T11034] bridge_slave_1: entered allmulticast mode
[  205.547293][T11034] bridge_slave_1: entered promiscuous mode
[  205.580563][T11034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  205.585134][T11034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  205.660767][T11034] team0: Port device team_slave_0 added
[  205.667735][T11034] team0: Port device team_slave_1 added
[  205.748840][T11034] batman_adv: batadv0: Adding interface: batadv_slave_0
[  205.751808][T11034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  205.768200][T11034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  205.782528][T11034] batman_adv: batadv0: Adding interface: batadv_slave_1
[  205.785309][T11034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  205.796380][T11034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  205.808230][ T5217] Bluetooth: hci0: command tx timeout
[  205.866109][T11034] hsr_slave_0: entered promiscuous mode
[  205.869864][T11034] hsr_slave_1: entered promiscuous mode
[  205.928233][ T5859] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.993982][ T5859] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  206.104032][ T5859] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  206.214788][ T5859] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  206.301969][T11046] chnl_net:caif_netlink_parms(): no params data found
[  206.411053][T11072] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7
[  206.436586][T11046] bridge0: port 1(bridge_slave_0) entered blocking state
[  206.439029][T11046] bridge0: port 1(bridge_slave_0) entered disabled state
[  206.441680][T11046] bridge_slave_0: entered allmulticast mode
[  206.449285][T11046] bridge_slave_0: entered promiscuous mode
[  206.454429][T11046] bridge0: port 2(bridge_slave_1) entered blocking state
[  206.457269][T11046] bridge0: port 2(bridge_slave_1) entered disabled state
[  206.461207][T11046] bridge_slave_1: entered allmulticast mode
[  206.468253][T11046] bridge_slave_1: entered promiscuous mode
[  206.539759][T11046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  206.556945][T11046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  206.561162][T11084] netlink: 404 bytes leftover after parsing attributes in process `syz.0.1558'.
[  206.564309][T11084] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1558'.
[  206.568004][T11084] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1558'.
[  206.588384][ T5859] bridge_slave_1: left allmulticast mode
[  206.590490][ T5859] bridge_slave_1: left promiscuous mode
[  206.592783][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state
[  206.603640][ T5859] bridge_slave_0: left allmulticast mode
[  206.605807][ T5859] bridge_slave_0: left promiscuous mode
[  206.609381][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state
[  206.615156][T11086] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1559'.
[  206.618923][T11086] netlink: 35 bytes leftover after parsing attributes in process `syz.0.1559'.
[  206.885973][ T5859] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  206.891995][ T5859] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  206.895554][ T5859] bond0 (unregistering): Released all slaves
[  206.931225][T11046] team0: Port device team_slave_0 added
[  206.935880][T11046] team0: Port device team_slave_1 added
[  206.994930][T11046] batman_adv: batadv0: Adding interface: batadv_slave_0
[  206.998471][T11046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  207.006889][ T5217] Bluetooth: hci1: command tx timeout
[  207.009409][T11046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  207.028899][T11034] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  207.033500][T11046] batman_adv: batadv0: Adding interface: batadv_slave_1
[  207.035787][T11046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  207.045520][T11046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  207.050804][T11034] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  207.059697][T11034] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  207.064967][T11034] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  207.120675][T11046] hsr_slave_0: entered promiscuous mode
[  207.122980][T11046] hsr_slave_1: entered promiscuous mode
[  207.125094][T11046] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  207.129555][T11046] Cannot create hsr debugfs directory
[  207.278820][ T5859] hsr_slave_0: left promiscuous mode
[  207.280912][ T5859] hsr_slave_1: left promiscuous mode
[  207.282948][ T5859] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  207.285217][ T5859] batman_adv: batadv0: Removing interface: batadv_slave_0
[  207.290479][ T5859] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  207.292757][ T5859] batman_adv: batadv0: Removing interface: batadv_slave_1
[  207.303985][ T5859] veth1_macvtap: left promiscuous mode
[  207.305746][ T5859] veth0_macvtap: left promiscuous mode
[  207.309653][ T5859] veth1_vlan: left promiscuous mode
[  207.311334][ T5859] veth0_vlan: left promiscuous mode
[  207.652509][ T5859] team0 (unregistering): Port device team_slave_1 removed
[  207.680854][ T5859] team0 (unregistering): Port device team_slave_0 removed
[  207.886328][ T5217] Bluetooth: hci0: command tx timeout
[  208.122656][T11108] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  208.154955][T11034] 8021q: adding VLAN 0 to HW filter on device bond0
[  208.179848][T11034] 8021q: adding VLAN 0 to HW filter on device team0
[  208.201111][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[  208.203433][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[  208.219383][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[  208.221623][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[  208.361926][T11046] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  208.369489][T11034] 8021q: adding VLAN 0 to HW filter on device batadv0
[  208.372042][T11046] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  208.377638][T11046] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  208.382293][T11046] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  208.421658][T11034] veth0_vlan: entered promiscuous mode
[  208.433144][T11034] veth1_vlan: entered promiscuous mode
[  208.463573][T11046] 8021q: adding VLAN 0 to HW filter on device bond0
[  208.469663][T11034] veth0_macvtap: entered promiscuous mode
[  208.477088][T11034] veth1_macvtap: entered promiscuous mode
[  208.495022][T11046] 8021q: adding VLAN 0 to HW filter on device team0
[  208.504489][T11034] batman_adv: batadv0: Interface activated: batadv_slave_0
[  208.512071][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[  208.514919][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[  208.525862][T11034] batman_adv: batadv0: Interface activated: batadv_slave_1
[  208.535880][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[  208.538731][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[  208.545740][T11034] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  208.550846][T11034] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  208.554511][T11034] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  208.558620][T11034] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  208.629512][ T8769] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  208.631955][ T8769] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  208.632702][T11046] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  208.663993][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  208.667419][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  208.773934][T11046] 8021q: adding VLAN 0 to HW filter on device batadv0
[  208.806915][T11046] veth0_vlan: entered promiscuous mode
[  208.812240][T11046] veth1_vlan: entered promiscuous mode
[  208.832083][T11046] veth0_macvtap: entered promiscuous mode
[  208.836964][T11046] veth1_macvtap: entered promiscuous mode
[  208.850829][T11046] batman_adv: batadv0: Interface activated: batadv_slave_0
[  208.860244][T11046] batman_adv: batadv0: Interface activated: batadv_slave_1
[  208.867028][T11046] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  208.869753][T11046] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  208.872358][T11046] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  208.875097][T11046] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  208.934011][ T8769] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  208.941356][ T8769] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  208.955756][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  208.964378][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  209.033165][T11046] 
[  209.033967][T11046] ======================================================
[  209.036213][T11046] WARNING: possible circular locking dependency detected
[  209.038722][T11046] 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 Not tainted
[  209.041066][T11046] ------------------------------------------------------
[  209.044582][T11046] syz-executor/11046 is trying to acquire lock:
[  209.046505][T11046] ffff888120aa6040 ((work_completion)(&(&conn->info_timer)->work)){+.+.}-{0:0}, at: __flush_work+0xd2/0xbc0
[  209.050039][T11046] 
[  209.050039][T11046] but task is already holding lock:
[  209.052278][T11046] ffff888120aa6338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680
[  209.054986][T11046] 
[  209.054986][T11046] which lock already depends on the new lock.
[  209.054986][T11046] 
[  209.058741][T11046] 
[  209.058741][T11046] the existing dependency chain (in reverse order) is:
[  209.061389][T11046] 
[  209.061389][T11046] -> #1 (&conn->lock#2){+.+.}-{4:4}:
[  209.064218][T11046]        lock_acquire+0x120/0x360
[  209.065888][T11046]        __mutex_lock+0x182/0xe80
[  209.067453][T11046]        l2cap_info_timeout+0x60/0xa0
[  209.069074][T11046]        process_scheduled_works+0xae1/0x17b0
[  209.070927][T11046]        worker_thread+0x8a0/0xda0
[  209.072479][T11046]        kthread+0x711/0x8a0
[  209.073869][T11046]        ret_from_fork+0x3fc/0x770
[  209.075415][T11046]        ret_from_fork_asm+0x1a/0x30
[  209.077039][T11046] 
[  209.077039][T11046] -> #0 ((work_completion)(&(&conn->info_timer)->work)){+.+.}-{0:0}:
[  209.080173][T11046]        validate_chain+0xb9b/0x2140
[  209.081878][T11046]        __lock_acquire+0xab9/0xd20
[  209.083891][T11046]        lock_acquire+0x120/0x360
[  209.085612][T11046]        __flush_work+0x6b8/0xbc0
[  209.087160][T11046]        __cancel_work_sync+0xbe/0x110
[  209.088966][T11046]        l2cap_conn_del+0x4f0/0x680
[  209.090528][T11046]        hci_conn_hash_flush+0x10d/0x230
[  209.092460][T11046]        hci_dev_close_sync+0xaef/0x1330
[  209.094300][T11046]        hci_unregister_dev+0x21a/0x510
[  209.095948][T11046]        vhci_release+0x80/0xd0
[  209.097419][T11046]        __fput+0x44c/0xa70
[  209.098800][T11046]        task_work_run+0x1d4/0x260
[  209.100367][T11046]        do_exit+0x6b5/0x22e0
[  209.101867][T11046]        do_group_exit+0x21c/0x2d0
[  209.103816][T11046]        __x64_sys_exit_group+0x3f/0x40
[  209.105756][T11046]        x64_sys_call+0x21ba/0x21c0
[  209.107353][T11046]        do_syscall_64+0xfa/0x3b0
[  209.109042][T11046]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  209.110990][T11046] 
[  209.110990][T11046] other info that might help us debug this:
[  209.110990][T11046] 
[  209.114148][T11046]  Possible unsafe locking scenario:
[  209.114148][T11046] 
[  209.116385][T11046]        CPU0                    CPU1
[  209.118021][T11046]        ----                    ----
[  209.120055][T11046]   lock(&conn->lock#2);
[  209.121375][T11046]                                lock((work_completion)(&(&conn->info_timer)->work));
[  209.124237][T11046]                                lock(&conn->lock#2);
[  209.126301][T11046]   lock((work_completion)(&(&conn->info_timer)->work));
[  209.128499][T11046] 
[  209.128499][T11046]  *** DEADLOCK ***
[  209.128499][T11046] 
[  209.130970][T11046] 5 locks held by syz-executor/11046:
[  209.132630][T11046]  #0: ffff888039d10dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510
[  209.136310][T11046]  #1: ffff888039d100b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330
[  209.139618][T11046]  #2: ffffffff8f685a88 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230
[  209.142694][T11046]  #3: ffff888120aa6338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680
[  209.145463][T11046]  #4: ffffffff8e13f160 (rcu_read_lock){....}-{1:3}, at: __flush_work+0xd2/0xbc0
[  209.148123][T11046] 
[  209.148123][T11046] stack backtrace:
[  209.149904][T11046] CPU: 1 UID: 0 PID: 11046 Comm: syz-executor Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  209.149915][T11046] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  209.149921][T11046] Call Trace:
[  209.149926][T11046]  <TASK>
[  209.149931][T11046]  dump_stack_lvl+0x189/0x250
[  209.149944][T11046]  ? __pfx_dump_stack_lvl+0x10/0x10
[  209.149953][T11046]  ? __pfx__printk+0x10/0x10
[  209.149964][T11046]  ? print_lock_name+0xde/0x100
[  209.149974][T11046]  print_circular_bug+0x2ee/0x310
[  209.149985][T11046]  check_noncircular+0x134/0x160
[  209.149996][T11046]  validate_chain+0xb9b/0x2140
[  209.150004][T11046]  ? do_raw_spin_lock+0x121/0x290
[  209.150016][T11046]  ? look_up_lock_class+0x74/0x170
[  209.150029][T11046]  ? register_lock_class+0x51/0x320
[  209.150037][T11046]  __lock_acquire+0xab9/0xd20
[  209.150046][T11046]  ? __flush_work+0xd2/0xbc0
[  209.150055][T11046]  lock_acquire+0x120/0x360
[  209.150062][T11046]  ? __flush_work+0xd2/0xbc0
[  209.150077][T11046]  ? _raw_spin_unlock_irq+0x23/0x50
[  209.150088][T11046]  ? __flush_work+0xd2/0xbc0
[  209.150097][T11046]  __flush_work+0x6b8/0xbc0
[  209.150129][T11046]  ? __flush_work+0xd2/0xbc0
[  209.150139][T11046]  ? __flush_work+0xd2/0xbc0
[  209.150148][T11046]  ? __pfx___flush_work+0x10/0x10
[  209.150157][T11046]  ? __pfx_wq_barrier_func+0x10/0x10
[  209.150169][T11046]  ? __pfx___cancel_work+0x10/0x10
[  209.150178][T11046]  ? hci_conn_drop+0x14d/0x280
[  209.150190][T11046]  __cancel_work_sync+0xbe/0x110
[  209.150200][T11046]  l2cap_conn_del+0x4f0/0x680
[  209.150211][T11046]  ? __pfx_l2cap_disconn_cfm+0x10/0x10
[  209.150220][T11046]  hci_conn_hash_flush+0x10d/0x230
[  209.150231][T11046]  hci_dev_close_sync+0xaef/0x1330
[  209.150243][T11046]  ? __pfx_hci_dev_close_sync+0x10/0x10
[  209.150251][T11046]  ? up_write+0x1c4/0x420
[  209.150262][T11046]  hci_unregister_dev+0x21a/0x510
[  209.150270][T11046]  vhci_release+0x80/0xd0
[  209.150278][T11046]  ? __pfx_vhci_release+0x10/0x10
[  209.150285][T11046]  __fput+0x44c/0xa70
[  209.150299][T11046]  task_work_run+0x1d4/0x260
[  209.150310][T11046]  ? __pfx_task_work_run+0x10/0x10
[  209.150321][T11046]  ? kmem_cache_free+0x18f/0x400
[  209.150332][T11046]  do_exit+0x6b5/0x22e0
[  209.150343][T11046]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  209.150355][T11046]  ? __pfx_do_exit+0x10/0x10
[  209.150366][T11046]  ? _raw_spin_unlock_irq+0x23/0x50
[  209.150376][T11046]  ? lockdep_hardirqs_on+0x9c/0x150
[  209.150387][T11046]  do_group_exit+0x21c/0x2d0
[  209.150398][T11046]  __x64_sys_exit_group+0x3f/0x40
[  209.150409][T11046]  x64_sys_call+0x21ba/0x21c0
[  209.150418][T11046]  do_syscall_64+0xfa/0x3b0
[  209.150426][T11046]  ? lockdep_hardirqs_on+0x9c/0x150
[  209.150437][T11046]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  209.150444][T11046]  ? exc_page_fault+0x9f/0xf0
[  209.150454][T11046]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  209.150462][T11046] RIP: 0033:0x7f92d558e929
[  209.150470][T11046] Code: Unable to access opcode bytes at 0x7f92d558e8ff.
[  209.150474][T11046] RSP: 002b:00007ffeb919cce8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  209.150482][T11046] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f92d558e929
[  209.150488][T11046] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043
[  209.150493][T11046] RBP: 00007f92d55ee8f0 R08: 00007ffeb919aa87 R09: 0000000000000003
[  209.150498][T11046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  209.150503][T11046] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007ffeb919cea0
[  209.150511][T11046]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  209.278860][ T5217] Bluetooth: hci1: command tx timeout
[  210.053945][ T5842] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  211.559919][ T5842] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  211.690508][ T5842] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  211.732498][ T5842] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  211.816791][ T5842] bridge_slave_1: left allmulticast mode
[  211.819087][ T5842] bridge_slave_1: left promiscuous mode
[  211.821443][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[  211.825873][ T5842] bridge_slave_0: left allmulticast mode
[  211.830686][ T5842] bridge_slave_0: left promiscuous mode
[  211.833142][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[  211.947749][ T5842] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  211.952990][ T5842] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  211.957825][ T5842] bond0 (unregistering): Released all slaves
[  212.206773][ T5842] hsr_slave_0: left promiscuous mode
[  212.209469][ T5842] hsr_slave_1: left promiscuous mode
[  212.212226][ T5842] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  212.215129][ T5842] batman_adv: batadv0: Removing interface: batadv_slave_0
[  212.220058][ T5842] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  212.222594][ T5842] batman_adv: batadv0: Removing interface: batadv_slave_1
[  212.229570][ T5842] veth1_macvtap: left promiscuous mode
[  212.231667][ T5842] veth0_macvtap: left promiscuous mode
[  212.233916][ T5842] veth1_vlan: left promiscuous mode
[  212.236024][ T5842] veth0_vlan: left promiscuous mode
[  212.351153][ T5842] team0 (unregistering): Port device team_slave_1 removed
[  212.365220][ T5842] team0 (unregistering): Port device team_slave_0 removed
[  214.367073][   T60] block nbd0: Possible stuck request ffff888022fe8000: control (read@0,1024B). Runtime 120 seconds
[  214.371247][   T60] block nbd0: Possible stuck request ffff888022fe8200: control (read@1024,1024B). Runtime 120 seconds
[  214.374790][   T60] block nbd0: Possible stuck request ffff888022fe8400: control (read@2048,1024B). Runtime 120 seconds
[  214.378463][   T60] block nbd0: Possible stuck request ffff888022fe8600: control (read@3072,1024B). Runtime 120 seconds
[  215.698603][ T5276] udevd[5276]: worker [5824] /devices/virtual/block/nbd0 is taking a long time

VM DIAGNOSIS:
17:24:00  Registers:
info registers vcpu 0

CPU#0
RAX=3aafa15371ed1e00 RBX=ffffffff81976c78 RCX=3aafa15371ed1e00 RDX=0000000000000001
RSI=ffffffff8be29da0 RDI=ffffffff81976c78 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa1f3f0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6f34d3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f6c17aaa440 CR3=00000001084aa000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=00656572665f6568 6361635f6d656d6b
XMM02=00007f94b2385478 00007f94b2385450 XMM03=00007f94b2385488 00007f94b2385480
XMM04=00007f94b2eed100 00007f94b2385440 XMM05=00007f94b2385458 00007f94b23854a0
XMM06=00007f94b2385498 00007f94b2385490 XMM07=00007f94b2385488 00007f94b2385480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f94b2211c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000002d RBX=000000000000002d RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90002a0ee30
R8 =ffff888021c28237 R9 =1ffff11004385046 R10=dffffc0000000000 R11=ffffffff85478780
R12=dffffc0000000000 R13=ffffffff99af98bc R14=ffffffff99dfe6e0 R15=0000000000000000
RIP=ffffffff854787fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555578df2500 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055a5238ba038 CR3=000000010d782000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f94b2211c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
