last executing test programs:

1.277705724s ago: executing program 2 (id=380):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000600000000000000000000008500000041000000850000002300000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f0000000340)="0700000000000000bcf7d1725c60", 0x0, 0x808005, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

918.366393ms ago: executing program 1 (id=391):
r0 = socket$kcm(0x2, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@ip_retopts={{0x30, 0x0, 0x7, {[@rr={0x7, 0xb, 0x7, [@rand_addr, @rand_addr]}, @timestamp_addr={0x44, 0x14, 0x9, 0x1, 0x0, [{@remote}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}}}], 0x30}, 0x0)

850.958723ms ago: executing program 1 (id=393):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003e80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000e08000340000000040900010073797a30000000000900020073797a320000000070000000050a010300000000000000000200000008000b40000000020900010073797a300000000008000a40000000030b00070066696c74657200000c000240000000000000000128"], 0x3518}}, 0x0)

778.791899ms ago: executing program 0 (id=396):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x103a, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2a3}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x3e, 0x0, &(0x7f0000000a00)="e460cdfbef2408002900119386dd6a00000000072feb3014cd3ec8a755c1e1380081ffad000400e8d5000000010000001400000500242c10892fd320d98a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

720.857937ms ago: executing program 0 (id=397):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e20, @empty}}, 0xd9d, 0x1}, &(0x7f0000000040)=0x90)

720.641003ms ago: executing program 0 (id=398):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x14, 0x0, 0x10, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2000c844)

660.826027ms ago: executing program 0 (id=399):
openat$tun(0xffffffffffffff9c, 0x0, 0x100, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffff0180c200000308060001080006040002aaaaaaaaaabbac1414bbaaaaaaaaaafbac"], 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14)

281.843931ms ago: executing program 2 (id=400):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x28, 0x1411, 0x1, 0x70bd29, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_STAT_MODE={0xffffffde}]}, 0x28}}, 0x0)

281.497504ms ago: executing program 0 (id=401):
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newtaction={0x80, 0x30, 0x51b, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_skbmod={0x68, 0x1, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_SMAC={0x4, 0x4, @multicast}, @TCA_SKBMOD_ETYPE={0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x80}}, 0x0)

281.211454ms ago: executing program 1 (id=402):
r0 = socket(0x15, 0x5, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x2000009, 0x31, 0xffffffffffffffff, 0xf983e000)
getsockopt(r0, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9)

228.299267ms ago: executing program 0 (id=403):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

227.923862ms ago: executing program 2 (id=404):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x5, 0xb}, {0x1, 0x9}}}, 0x24}}, 0x20000000)

227.595804ms ago: executing program 1 (id=405):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6)
setsockopt$sock_int(r0, 0x1, 0x25, &(0x7f0000000300)=0x8, 0x4)
recvmmsg(r0, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x40002000, 0x0)

188.311999ms ago: executing program 2 (id=406):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x200, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4ac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x303}, "0100", "acba84f0a6731f234db1cc7f3f382ad796bd667c4000a9959087310300", "129c9707", "ec3fff9afd96e6c0"}, 0x38)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4)
ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x1)
writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1)

120.555331ms ago: executing program 1 (id=407):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x1d\x00'}]}, 0x1c}}, 0x0)

69.335467ms ago: executing program 1 (id=408):
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
mmap(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000940)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x40}, 0x8}, 0x94)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r0, &(0x7f0000002c00), 0x0, 0x20, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffffffe}]}}}]}]}], {0x14}}, 0xd4}}, 0x0)
syz_emit_ethernet(0x5e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, "269fe0", 0x24, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[@hopopts={0x2c, 0x0, '\x00', [@pad1]}], @ndisc_ns={0x87, 0x0, 0x0, @mcast2}}}}}}, 0x0)

254.622µs ago: executing program 2 (id=409):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x6c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)

0s ago: executing program 2 (id=410):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x7e}], 0x30}, 0x0)
sendmmsg$alg(r1, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001640)="553e12df315719c9cddfbe1f03774b1d49d6fc51d5b185", 0x17}, {&(0x7f0000001680)="33caaff65bbb49384ba3fa03220c730c8531786e424bfa1ee6d344e5ca70fa4e68f9ad2bd7a154c3da71f3d9548c", 0x2e}, {&(0x7f0000001700)="7082b8d45f4cc86d0267eabd24340e1911fe3ceeb757ca4a090897a00b8d106a8ceb5beaa118a5652769ec67e809e68ca18f0241349dc53502", 0x39}, {&(0x7f0000001880)="371f6caa2f6c27730337ec033b032851897cee7054e7e1e0702321a402356d2f7728fc212abddf577e94277f3d9ceea00b26d2cd0dc790b14423d5766bfd60897fa6b4a3e5bec0e118bc0934219dc3b4a8dce9c5223696b152635e6ca4761490d5832d84c80176a3b48e27cb64d7498ce458ec00afb5ceb41e55ee19e6ecdf", 0x7f}], 0x4}], 0x1, 0x840)
recvmsg(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/120, 0x78}, {&(0x7f0000000300)=""/149, 0x95}], 0x2}, 0x10001)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:33173' (ED25519) to the list of known hosts.
syzkaller login: [   56.957471][ T5814] cgroup: Unknown subsys name 'net'
[   57.109042][ T5814] cgroup: Unknown subsys name 'cpuset'
[   57.115666][ T5814] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.145865][ T5814] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   70.039525][ T5854] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   70.128998][ T5855] chnl_net:caif_netlink_parms(): no params data found
[   70.339387][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.342129][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.344630][ T5855] bridge_slave_0: entered allmulticast mode
[   70.347427][ T5855] bridge_slave_0: entered promiscuous mode
[   70.356465][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.364759][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.373217][ T5855] bridge_slave_1: entered allmulticast mode
[   70.379180][ T5855] bridge_slave_1: entered promiscuous mode
[   70.445643][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.450239][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.538729][ T5855] team0: Port device team_slave_0 added
[   70.545709][ T5855] team0: Port device team_slave_1 added
[   70.604581][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.607036][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.634324][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.650274][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.652489][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.674989][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.739575][ T5855] hsr_slave_0: entered promiscuous mode
[   70.741949][ T5855] hsr_slave_1: entered promiscuous mode
[   71.031262][ T5855] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   71.041394][ T5855] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   71.047241][ T5855] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   71.052199][ T5855] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   71.077911][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.080255][ T5855] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.083096][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.085503][ T5855] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.108337][   T53] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.111407][   T53] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.137473][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.150220][ T5855] 8021q: adding VLAN 0 to HW filter on device team0
[   71.157133][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.159389][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.166808][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.169073][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.266966][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.269088][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.291288][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.322527][ T5855] veth0_vlan: entered promiscuous mode
[   71.329869][ T5855] veth1_vlan: entered promiscuous mode
[   71.350817][ T5855] veth0_macvtap: entered promiscuous mode
[   71.356039][ T5855] veth1_macvtap: entered promiscuous mode
[   71.369463][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0
[   71.378974][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.386157][ T5855] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.389516][ T5855] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.392281][ T5855] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.395668][ T5855] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.284844][ T5855] syz-executor (5855) used greatest stack depth: 20344 bytes left
[   73.558252][ T5905] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   73.564666][ T5905] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   73.567973][ T5905] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   73.571133][ T5905] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   73.574161][ T5905] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   73.619178][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.639368][ T5222] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   73.642748][ T5222] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   73.648348][ T5222] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   73.652522][ T5222] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   73.655709][ T5222] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   73.659845][ T5909] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   73.673340][ T5909] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   73.678374][ T5909] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   73.682819][ T5909] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   73.687238][ T5909] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   73.980340][ T5908] chnl_net:caif_netlink_parms(): no params data found
[   74.106186][ T5903] chnl_net:caif_netlink_parms(): no params data found
[   74.142403][ T5908] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.145202][ T5908] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.147685][ T5908] bridge_slave_0: entered allmulticast mode
[   74.151474][ T5908] bridge_slave_0: entered promiscuous mode
[   74.169801][ T5906] chnl_net:caif_netlink_parms(): no params data found
[   74.178416][ T5908] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.181288][ T5908] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.184755][ T5908] bridge_slave_1: entered allmulticast mode
[   74.188689][ T5908] bridge_slave_1: entered promiscuous mode
[   74.240361][ T5908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   74.248649][ T5908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   74.301949][ T5908] team0: Port device team_slave_0 added
[   74.319810][ T5908] team0: Port device team_slave_1 added
[   74.376340][ T5903] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.379139][ T5903] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.381502][ T5903] bridge_slave_0: entered allmulticast mode
[   74.385459][ T5903] bridge_slave_0: entered promiscuous mode
[   74.407146][ T5908] batman_adv: batadv0: Adding interface: batadv_slave_0
[   74.409720][ T5908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.419288][ T5908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   74.425950][ T5908] batman_adv: batadv0: Adding interface: batadv_slave_1
[   74.428610][ T5908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.438733][ T5908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   74.442762][ T5903] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.445477][ T5903] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.448340][ T5903] bridge_slave_1: entered allmulticast mode
[   74.452762][ T5903] bridge_slave_1: entered promiscuous mode
[   74.520768][ T5906] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.523602][ T5906] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.527205][ T5906] bridge_slave_0: entered allmulticast mode
[   74.531079][ T5906] bridge_slave_0: entered promiscuous mode
[   74.554633][ T5903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   74.573214][ T5906] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.576539][ T5906] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.579374][ T5906] bridge_slave_1: entered allmulticast mode
[   74.583149][ T5906] bridge_slave_1: entered promiscuous mode
[   74.587734][ T5903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   74.607816][ T5908] hsr_slave_0: entered promiscuous mode
[   74.610589][ T5908] hsr_slave_1: entered promiscuous mode
[   74.613111][ T5908] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   74.616313][ T5908] Cannot create hsr debugfs directory
[   74.660292][ T5903] team0: Port device team_slave_0 added
[   74.666082][ T5906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   74.686246][ T5903] team0: Port device team_slave_1 added
[   74.690818][ T5906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   74.751092][ T5903] batman_adv: batadv0: Adding interface: batadv_slave_0
[   74.753410][ T5903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.763378][ T5903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   74.790197][ T5903] batman_adv: batadv0: Adding interface: batadv_slave_1
[   74.792499][ T5903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.802879][ T5903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   74.812280][ T5906] team0: Port device team_slave_0 added
[   74.826943][ T5906] team0: Port device team_slave_1 added
[   74.903245][ T5903] hsr_slave_0: entered promiscuous mode
[   74.905963][ T5903] hsr_slave_1: entered promiscuous mode
[   74.908715][ T5903] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   74.911150][ T5903] Cannot create hsr debugfs directory
[   74.939547][ T5906] batman_adv: batadv0: Adding interface: batadv_slave_0
[   74.942274][ T5906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.952178][ T5906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   74.973097][ T5906] batman_adv: batadv0: Adding interface: batadv_slave_1
[   74.977571][ T5906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.987323][ T5906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   75.072066][ T5906] hsr_slave_0: entered promiscuous mode
[   75.075014][ T5906] hsr_slave_1: entered promiscuous mode
[   75.077527][ T5906] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   75.080341][ T5906] Cannot create hsr debugfs directory
[   75.251662][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.307488][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.374851][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.503207][   T12] bridge_slave_1: left allmulticast mode
[   75.506266][   T12] bridge_slave_1: left promiscuous mode
[   75.509123][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.520207][   T12] bridge_slave_0: left allmulticast mode
[   75.522448][   T12] bridge_slave_0: left promiscuous mode
[   75.526126][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.655506][ T5910] Bluetooth: hci0: command tx timeout
[   75.734094][ T5910] Bluetooth: hci1: command tx timeout
[   75.735084][ T5905] Bluetooth: hci2: command tx timeout
[   75.885728][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   75.890519][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   75.895692][   T12] bond0 (unregistering): Released all slaves
[   76.035532][   T12] hsr_slave_0: left promiscuous mode
[   76.038479][   T12] hsr_slave_1: left promiscuous mode
[   76.041871][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   76.054039][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   76.059608][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   76.062441][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   76.100211][   T12] veth1_macvtap: left promiscuous mode
[   76.102764][   T12] veth0_macvtap: left promiscuous mode
[   76.107499][   T12] veth1_vlan: left promiscuous mode
[   76.109755][   T12] veth0_vlan: left promiscuous mode
[   76.527821][   T12] team0 (unregistering): Port device team_slave_1 removed
[   76.559372][   T12] team0 (unregistering): Port device team_slave_0 removed
[   77.058790][ T5903] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   77.092269][ T5903] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   77.110613][ T5903] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   77.127413][ T5903] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   77.237457][ T5906] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   77.248344][ T5906] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   77.258323][ T5906] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   77.285232][ T5906] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   77.353617][ T5908] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   77.362095][ T5908] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   77.369866][ T5908] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   77.387008][ T5908] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   77.429100][ T5903] 8021q: adding VLAN 0 to HW filter on device bond0
[   77.460143][ T5903] 8021q: adding VLAN 0 to HW filter on device team0
[   77.482767][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.485917][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   77.492920][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.495916][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   77.536928][ T5906] 8021q: adding VLAN 0 to HW filter on device bond0
[   77.573465][ T5906] 8021q: adding VLAN 0 to HW filter on device team0
[   77.600681][  T528] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.603600][  T528] bridge0: port 1(bridge_slave_0) entered forwarding state
[   77.625006][ T5908] 8021q: adding VLAN 0 to HW filter on device bond0
[   77.644026][  T528] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.647128][  T528] bridge0: port 2(bridge_slave_1) entered forwarding state
[   77.686465][ T5908] 8021q: adding VLAN 0 to HW filter on device team0
[   77.704705][  T528] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.707733][  T528] bridge0: port 1(bridge_slave_0) entered forwarding state
[   77.727367][  T528] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.730249][  T528] bridge0: port 2(bridge_slave_1) entered forwarding state
[   77.734956][ T5905] Bluetooth: hci0: command tx timeout
[   77.761605][ T5906] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   77.769995][ T5906] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   77.786440][ T5908] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   77.814836][ T5905] Bluetooth: hci2: command tx timeout
[   77.816945][ T5905] Bluetooth: hci1: command tx timeout
[   77.853486][ T5903] 8021q: adding VLAN 0 to HW filter on device batadv0
[   77.906078][ T5903] veth0_vlan: entered promiscuous mode
[   77.913500][ T5903] veth1_vlan: entered promiscuous mode
[   77.967069][ T5903] veth0_macvtap: entered promiscuous mode
[   77.986523][ T5903] veth1_macvtap: entered promiscuous mode
[   78.018660][ T5908] 8021q: adding VLAN 0 to HW filter on device batadv0
[   78.027871][ T5903] batman_adv: batadv0: Interface activated: batadv_slave_0
[   78.032364][ T5906] 8021q: adding VLAN 0 to HW filter on device batadv0
[   78.046443][ T5903] batman_adv: batadv0: Interface activated: batadv_slave_1
[   78.052274][ T5903] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.058400][ T5903] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.061843][ T5903] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.066498][ T5903] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.192254][ T5906] veth0_vlan: entered promiscuous mode
[   78.213189][ T5908] veth0_vlan: entered promiscuous mode
[   78.224550][  T528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.225937][ T5906] veth1_vlan: entered promiscuous mode
[   78.227024][  T528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.255820][ T5908] veth1_vlan: entered promiscuous mode
[   78.287988][ T5908] veth0_macvtap: entered promiscuous mode
[   78.292310][ T5908] veth1_macvtap: entered promiscuous mode
[   78.306279][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.309313][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.335940][ T5906] veth0_macvtap: entered promiscuous mode
[   78.362436][ T5908] batman_adv: batadv0: Interface activated: batadv_slave_0
[   78.377297][ T5908] batman_adv: batadv0: Interface activated: batadv_slave_1
[   78.382069][ T5906] veth1_macvtap: entered promiscuous mode
[   78.406463][ T5908] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.409931][ T5908] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.413284][ T5908] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.425190][ T5908] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.463092][ T5906] batman_adv: batadv0: Interface activated: batadv_slave_0
[   78.491150][ T5906] batman_adv: batadv0: Interface activated: batadv_slave_1
[   78.527751][ T5983] netlink: 'syz.1.23': attribute type 21 has an invalid length.
[   78.528896][ T5906] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.531108][ T5983] netlink: 128 bytes leftover after parsing attributes in process `syz.1.23'.
[   78.536305][ T5906] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.542251][ T5906] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.546801][ T5906] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.562641][ T5983] netlink: 3 bytes leftover after parsing attributes in process `syz.1.23'.
[   78.699520][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.702693][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.788542][ T3564] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.791657][ T3564] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.825991][ T3564] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.828800][ T3564] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.866545][ T3564] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.869344][ T3564] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.036816][ T5999] netlink: 16 bytes leftover after parsing attributes in process `syz.1.28'.
[   79.045250][ T5999] netlink: 8 bytes leftover after parsing attributes in process `syz.1.28'.
[   79.176312][ T6007] netlink: 'syz.2.31': attribute type 1 has an invalid length.
[   79.524998][ T5933] hid-generic 0005:0458:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[   79.730691][ T6042] netlink: 132 bytes leftover after parsing attributes in process `syz.1.48'.
[   79.814336][ T5905] Bluetooth: hci0: command tx timeout
[   79.863190][ T6050] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.52'.
[   79.894796][ T5905] Bluetooth: hci1: command tx timeout
[   79.895285][ T5910] Bluetooth: hci2: command tx timeout
[   79.947350][ T6052] syz.0.53 uses obsolete (PF_INET,SOCK_PACKET)
[   80.045494][ T6058] xt_l2tp: missing protocol rule (udp|l2tpip)
[   80.161368][ T6064] warning: `syz.1.59' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   80.169251][ T6066] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[   80.525929][ T6089] tipc: Started in network mode
[   80.528143][ T6089] tipc: Node identity 02cab6d6174, cluster identity 4711
[   80.556643][ T6089] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   80.561052][ T6089] syzkaller0: entered promiscuous mode
[   80.563230][ T6089] syzkaller0: entered allmulticast mode
[   80.597326][ T6092] Zero length message leads to an empty skb
[   80.603344][ T6089] tipc: Resetting bearer <eth:syzkaller0>
[   80.621747][ T6088] tipc: Resetting bearer <eth:syzkaller0>
[   80.634253][ T6088] tipc: Disabling bearer <eth:syzkaller0>
[   81.505139][ T6122] netlink: 56 bytes leftover after parsing attributes in process `syz.1.86'.
[   81.718954][ T6136] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   81.726160][ T6136] No such timeout policy "syz0"
[   81.892033][ T6148] bridge_slave_0: left allmulticast mode
[   81.894263][ T5910] Bluetooth: hci0: command tx timeout
[   81.909246][ T6148] bridge_slave_0: left promiscuous mode
[   81.911297][ T6148] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.956210][ T6148] bridge_slave_1: left allmulticast mode
[   81.959603][ T6152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.99'.
[   81.959645][ T6148] bridge_slave_1: left promiscuous mode
[   81.962923][ T6148] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.966179][ T6153] openvswitch: netlink: Message has 4 unknown bytes.
[   81.972445][ T6144] netlink: 24 bytes leftover after parsing attributes in process `syz.1.92'.
[   81.975990][ T5910] Bluetooth: hci1: command tx timeout
[   81.983427][ T6148] bond0: (slave bond_slave_0): Releasing backup interface
[   81.985440][ T5910] Bluetooth: hci2: command tx timeout
[   81.994310][ T6148] bond0: (slave bond_slave_1): Releasing backup interface
[   82.022817][ T6148] team0: Port device team_slave_0 removed
[   82.038168][ T6148] team0: Port device team_slave_1 removed
[   82.041199][ T6148] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   82.045045][ T6148] batman_adv: batadv0: Removing interface: batadv_slave_0
[   82.050577][ T6148] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   82.053416][ T6148] batman_adv: batadv0: Removing interface: batadv_slave_1
[   82.980857][ T6206] tun0: tun_chr_ioctl cmd 1074025681
[   83.152930][ T6216] netlink: 20 bytes leftover after parsing attributes in process `syz.0.131'.
[   83.384410][ T6236] netlink: 'syz.2.138': attribute type 13 has an invalid length.
[   83.387466][ T6236] netlink: 'syz.2.138': attribute type 17 has an invalid length.
[   83.390451][ T6236] netlink: 'syz.2.138': attribute type 27 has an invalid length.
[   83.546903][ T6230] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   83.552982][ T6247] syzkaller1: entered promiscuous mode
[   83.557480][ T6247] syzkaller1: entered allmulticast mode
[   83.645656][ T6230] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   83.708077][ T6256] __nla_validate_parse: 1 callbacks suppressed
[   83.708096][ T6256] netlink: 8 bytes leftover after parsing attributes in process `syz.0.147'.
[   83.709015][ T6230] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   84.464878][ T6302] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   85.128817][ T6317] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.132265][ T6317] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.370858][ T6317] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   85.384710][ T6317] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   85.556508][ T6317] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.560096][ T6317] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.564573][ T6317] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.568111][ T6317] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.990972][ T6351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.182'.
[   86.205626][ T6365] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   86.316953][ T6374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.191'.
[   86.380755][ T6365] netlink: 'syz.1.188': attribute type 10 has an invalid length.
[   86.384705][ T6365] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[   86.394957][ T6365] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.402976][ T6365] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   86.565723][ T6391] trusted_key: syz.0.198 sent an empty control message without MSG_MORE.
[   86.637014][   T10] cfg80211: failed to load regulatory.db
[   87.001018][ T6413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.209'.
[   87.335410][ T6433] pim6reg1: entered promiscuous mode
[   87.337732][ T6433] pim6reg1: entered allmulticast mode
[   87.441521][ T6435] bond0: option fail_over_mac: unable to set because the bond device has slaves
[   87.614338][ T6447] netlink: 40 bytes leftover after parsing attributes in process `syz.0.222'.
[   87.618042][ T6447] netlink: 260 bytes leftover after parsing attributes in process `syz.0.222'.
[   87.742330][ T6455] netlink: 24 bytes leftover after parsing attributes in process `syz.0.225'.
[   87.974666][ T6469] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   88.478161][ T6490] netlink: 48 bytes leftover after parsing attributes in process `syz.1.241'.
[   88.725002][ T6506] netlink: 16 bytes leftover after parsing attributes in process `syz.0.249'.
[   88.836419][ T6522] netlink: set zone limit has 8 unknown bytes
[   88.905764][ T6526] netlink: 40 bytes leftover after parsing attributes in process `syz.0.256'.
[   89.130437][ T6542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.263'.
[   89.557517][ T6576] netlink: 'syz.2.281': attribute type 6 has an invalid length.
[   89.927991][ T6594] netlink: 36 bytes leftover after parsing attributes in process `syz.1.289'.
[   89.930860][ T6594] netlink: 16 bytes leftover after parsing attributes in process `syz.1.289'.
[   89.934822][ T6594] netlink: 36 bytes leftover after parsing attributes in process `syz.1.289'.
[   89.937701][ T6594] netlink: 36 bytes leftover after parsing attributes in process `syz.1.289'.
[   90.092115][ T6598] netlink: 12 bytes leftover after parsing attributes in process `syz.1.291'.
[   90.098942][ T6598] netlink: 20 bytes leftover after parsing attributes in process `syz.1.291'.
[   90.568374][ T6610] netlink: 20 bytes leftover after parsing attributes in process `syz.1.297'.
[   91.281616][ T6647] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[   91.436718][ T6659] xt_recent: hitcount (262143) is larger than allowed maximum (65535)
[   92.129116][ T6698] 8021q: adding VLAN 0 to HW filter on device bond1
[   92.180125][   T13] bond0: (slave bond_slave_0): interface is now down
[   92.183403][ T6701] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   92.188215][   T13] bond0: (slave bond_slave_1): interface is now down
[   92.205609][   T13] bond0: (slave bond_slave_0): interface is now down
[   92.208367][   T13] bond0: (slave bond_slave_1): interface is now down
[   92.220362][   T13] bond0: now running without any active interface!
[   92.919244][ T6723] macsec1: entered promiscuous mode
[   92.921142][ T6723] macsec1: entered allmulticast mode
[   93.806960][ T6775] __nla_validate_parse: 7 callbacks suppressed
[   93.806978][ T6775] netlink: 60 bytes leftover after parsing attributes in process `syz.2.370'.
[   94.030356][ T6791] pim6reg1: entered promiscuous mode
[   94.032435][ T6791] pim6reg1: entered allmulticast mode
[   94.430945][ T6824] netlink: 'syz.1.389': attribute type 4 has an invalid length.
[   95.132021][ T6850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.400'.
[   95.459704][ T6874] 
[   95.461023][ T6874] =============================
[   95.463004][ T6874] WARNING: suspicious RCU usage
[   95.465332][ T6874] 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 Not tainted
[   95.469740][ T6874] -----------------------------
[   95.471709][ T6874] net/core/netclassid_cgroup.c:24 suspicious rcu_dereference_check() usage!
[   95.475671][ T6874] 
[   95.475671][ T6874] other info that might help us debug this:
[   95.475671][ T6874] 
[   95.479691][ T6874] 
[   95.479691][ T6874] rcu_scheduler_active = 2, debug_locks = 1
[   95.482862][ T6874] 1 lock held by syz.1.411/6874:
[   95.485035][ T6874]  #0: ffffffff8e13f040 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x38/0x80
[   95.488914][ T6874] 
[   95.488914][ T6874] stack backtrace:
[   95.490925][ T6874] CPU: 0 UID: 0 PID: 6874 Comm: syz.1.411 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[   95.490945][ T6874] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   95.490956][ T6874] Call Trace:
[   95.490965][ T6874]  <TASK>
[   95.491004][ T6874]  dump_stack_lvl+0x189/0x250
[   95.491034][ T6874]  ? __pfx_dump_stack_lvl+0x10/0x10
[   95.491053][ T6874]  ? __pfx__printk+0x10/0x10
[   95.491077][ T6874]  ? print_lock_name+0xde/0x100
[   95.491098][ T6874]  lockdep_rcu_suspicious+0x140/0x1d0
[   95.491120][ T6874]  task_cls_state+0x1a5/0x1d0
[   95.491144][ T6874]  bpf_get_cgroup_classid_curr+0x18/0x60
[   95.491163][ T6874]  bpf_prog_841aec7193f618b3+0x1b/0x21
[   95.491178][ T6874]  bpf_prog_run_pin_on_cpu+0x6a/0x150
[   95.491202][ T6874]  bpf_prog_test_run_syscall+0x312/0x4b0
[   95.491223][ T6874]  ? __pfx_bpf_prog_test_run_syscall+0x10/0x10
[   95.491241][ T6874]  ? __fget_files+0x2a/0x420
[   95.491266][ T6874]  ? __pfx_bpf_prog_test_run_syscall+0x10/0x10
[   95.491286][ T6874]  bpf_prog_test_run+0x2c7/0x340
[   95.491305][ T6874]  __sys_bpf+0x4a4/0x860
[   95.491321][ T6874]  ? __pfx___sys_bpf+0x10/0x10
[   95.491345][ T6874]  ? exc_page_fault+0x76/0xf0
[   95.491371][ T6874]  ? rcu_is_watching+0x15/0xb0
[   95.491394][ T6874]  __x64_sys_bpf+0x7c/0x90
[   95.491418][ T6874]  do_syscall_64+0xfa/0x3b0
[   95.491434][ T6874]  ? lockdep_hardirqs_on+0x9c/0x150
[   95.491447][ T6874]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.491462][ T6874]  ? exc_page_fault+0x9f/0xf0
[   95.491551][ T6874]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.491566][ T6874] RIP: 0033:0x7f06d418e929
[   95.491583][ T6874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   95.491597][ T6874] RSP: 002b:00007f06d1ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   95.491615][ T6874] RAX: ffffffffffffffda RBX: 00007f06d43b5fa0 RCX: 00007f06d418e929
[   95.491627][ T6874] RDX: 0000000000000039 RSI: 0000200000000500 RDI: 000000000000000a
[   95.491637][ T6874] RBP: 00007f06d4210b39 R08: 0000000000000000 R09: 0000000000000000
[   95.491647][ T6874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   95.491656][ T6874] R13: 0000000000000000 R14: 00007f06d43b5fa0 R15: 00007fff46d66858
[   95.491681][ T6874]  </TASK>

VM DIAGNOSIS:
20:01:14  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000072 RBX=0000000000000072 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000f46 RDI=0000000000000f47 RBP=00000000000003f8 RSP=ffffc90002e4f550
R8 =ffff888108290237 R9 =1ffff11021052046 R10=dffffc0000000000 R11=ffffffff85475610
R12=dffffc0000000000 R13=ffffffff99af78eb R14=ffffffff99dfc760 R15=0000000000000000
RIP=ffffffff8547568c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f06d1ff66c0 ffffffff 00c00000
GS =0000 ffff8880b861d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f06d1ff5fc8 CR3=0000000119662000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f06d4385478 00007f06d4385450 XMM03=00007f06d4385488 00007f06d4385480
XMM04=00007f06d4eed100 00007f06d4385440 XMM05=00007f06d4385458 00007f06d43854a0
XMM06=00007f06d4385498 00007f06d4385490 XMM07=00007f06d4385488 00007f06d4385480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f06d4211c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=e02c518578a84c00 RBX=ffffffff81975d58 RCX=e02c518578a84c00 RDX=0000000000000001
RSI=ffffffff8d996d18 RDI=ffffffff8be28fc0 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f5b R9 =1ffff11026cc65eb R10=dffffc0000000000 R11=ffffed1026cc65ec
R12=ffffffff8fa1def0 R13=0000000000000001 R14=0000000000000001 R15=1ffff1102001f000
RIP=ffffffff8b6ee4a3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2cd1fffc CR3=00000000214cc000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffffff XMM03=ffffffffffffff00 ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f06d4211c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
