last executing test programs:

672.715661ms ago: executing program 2 (id=693):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x14, 0x14, 0x1, 0x0, 0x0, {0x2c}}, 0x14}}, 0x0)

603.04593ms ago: executing program 2 (id=694):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x31}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)

542.678156ms ago: executing program 2 (id=695):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001180)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0xffffffe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbfffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x256da761e0644cfa, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0xffff, 0xffffc3fd}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x488}}, 0x0)

482.764014ms ago: executing program 2 (id=697):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x3}, 0x8)
close(r0)

482.394942ms ago: executing program 2 (id=698):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x50, 0x0, 0x9, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7fff}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x880}, 0x48000)

412.213591ms ago: executing program 2 (id=699):
pipe(&(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c)
write$cgroup_pid(r0, &(0x7f00000000c0), 0x12)
splice(r1, 0x0, r0, 0x0, 0x1100000000f336, 0x8)

182.785771ms ago: executing program 0 (id=711):
syz_emit_ethernet(0x5e, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@sack={0x1d, 0x2, [0x0, 0x0, 0x0, 0x0]}]}}}}}}}}, 0x0)

182.473876ms ago: executing program 1 (id=712):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000140600000fff07006706000020000000350200000ee60000bf25000000000000bd350000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad53010000000000840400000000000014000000000000009500000000000000db13d5d8b740f2cdaabc8383c8f56b8c2b84a800ea6553f3ef4392b3815dcf00c3eebc52267b042d19d6e31e25e589d5f2692c75a547d6f186641ae8c557ccff3878a93b51a0389749df734f49ed5078b10f1e7f2b37626a3ace1ea89f7d2c570720a86853e26168761f0a53358f7ee2baa0e6a67a98a0d57ac09f36cfefbbc7492bbe7cdf64971a"], 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x9, [@decl_tag={0xf, 0x0, 0x0, 0x11, 0x2, 0x9}, @union={0x5, 0x5, 0x0, 0x5, 0x1, 0xfffff000, [{0x2, 0x3, 0x5}, {0x5, 0x4, 0x6}, {0x10, 0x1, 0x9}, {0xa, 0x1, 0x5}, {0xd, 0x0, 0x7fffffff}]}]}, {0x0, [0x30, 0x5f, 0x61, 0x30, 0x169dd347fd6e20ca, 0x2e, 0x0]}}, &(0x7f0000000080)=""/133, 0x79, 0x85, 0x1, 0x2}, 0x28)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010024bd7000e8dbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="08009e00"], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x0)

182.352445ms ago: executing program 0 (id=713):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r0 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x772}, 0x1c)
bind$inet6(r0, &(0x7f0000000040), 0x1c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000101010100000000000000000200000004000180180002801400018008000100b04c94a708000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0)

113.266831ms ago: executing program 0 (id=714):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001bc0)={0x11, 0xd, &(0x7f00000004c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)

112.67697ms ago: executing program 1 (id=715):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b00)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_ARP_SIP={0x8, 0x39, @private=0xa010100}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x90}, 0x20084084)

112.58099ms ago: executing program 0 (id=716):
r0 = socket$pptp(0x18, 0x1, 0x2)
getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000100)=""/106, &(0x7f0000000180)=0x6a)

61.903338ms ago: executing program 0 (id=717):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0xa, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)

61.615282ms ago: executing program 0 (id=718):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={<r0=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0)
poll(&(0x7f0000000140)=[{r0, 0x209}], 0x1, 0x10)

61.3889ms ago: executing program 1 (id=719):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001405000d404600000014000000110001"], 0x6c}}, 0x0)
close(0x3)

2.774153ms ago: executing program 1 (id=720):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @local}, 0x10)
setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000100)={r1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}, 0x10)

2.492229ms ago: executing program 1 (id=721):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000002340)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fedbdf250400000008000400030000000800020003000054"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4080)

0s ago: executing program 1 (id=722):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:30990' (ED25519) to the list of known hosts.
syzkaller login: [   48.289779][ T5808] cgroup: Unknown subsys name 'net'
[   48.439505][ T5808] cgroup: Unknown subsys name 'cpuset'
[   48.445781][ T5808] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.761485][ T5808] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.208546][ T5219] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.211943][ T5219] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.215106][ T5219] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.218540][ T5219] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.222064][ T5219] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.237728][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.241499][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.244421][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.248205][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.251011][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.277973][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.281078][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.283997][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.289640][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.292374][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   54.507309][ T5828] chnl_net:caif_netlink_parms(): no params data found
[   54.589695][ T5832] chnl_net:caif_netlink_parms(): no params data found
[   54.637192][ T5835] chnl_net:caif_netlink_parms(): no params data found
[   54.690289][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.693455][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.696323][ T5828] bridge_slave_0: entered allmulticast mode
[   54.699255][ T5828] bridge_slave_0: entered promiscuous mode
[   54.721106][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.723473][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.726877][ T5828] bridge_slave_1: entered allmulticast mode
[   54.729965][ T5828] bridge_slave_1: entered promiscuous mode
[   54.815198][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.819114][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.822146][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.826796][ T5832] bridge_slave_0: entered allmulticast mode
[   54.830700][ T5832] bridge_slave_0: entered promiscuous mode
[   54.836513][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.839960][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.842974][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.846184][ T5832] bridge_slave_1: entered allmulticast mode
[   54.849998][ T5832] bridge_slave_1: entered promiscuous mode
[   54.853672][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.857265][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.859847][ T5835] bridge_slave_0: entered allmulticast mode
[   54.862527][ T5835] bridge_slave_0: entered promiscuous mode
[   54.866565][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.868834][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.871123][ T5835] bridge_slave_1: entered allmulticast mode
[   54.874081][ T5835] bridge_slave_1: entered promiscuous mode
[   54.938642][ T5828] team0: Port device team_slave_0 added
[   54.942802][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.948824][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.953655][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.959459][ T5828] team0: Port device team_slave_1 added
[   54.963716][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.017243][ T5832] team0: Port device team_slave_0 added
[   55.022630][ T5835] team0: Port device team_slave_0 added
[   55.037335][ T5832] team0: Port device team_slave_1 added
[   55.041441][ T5835] team0: Port device team_slave_1 added
[   55.044858][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.048784][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.059467][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.097220][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.099454][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.109436][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.114729][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.118115][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.128887][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.136006][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.139021][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.149726][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.181435][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.184353][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.193141][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.200733][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.203685][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.214474][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.241555][ T5828] hsr_slave_0: entered promiscuous mode
[   55.244249][ T5828] hsr_slave_1: entered promiscuous mode
[   55.267950][ T5832] hsr_slave_0: entered promiscuous mode
[   55.271047][ T5832] hsr_slave_1: entered promiscuous mode
[   55.274054][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.278494][ T5832] Cannot create hsr debugfs directory
[   55.355582][ T5835] hsr_slave_0: entered promiscuous mode
[   55.357852][ T5835] hsr_slave_1: entered promiscuous mode
[   55.359990][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.362448][ T5835] Cannot create hsr debugfs directory
[   55.604523][ T5832] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   55.613717][ T5832] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   55.622381][ T5832] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   55.639909][ T5832] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   55.692173][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   55.698994][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   55.706419][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   55.713906][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   55.782839][ T5835] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   55.789270][ T5835] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   55.801308][ T5835] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   55.808493][ T5835] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   55.884259][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.910314][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   55.930272][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.933460][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.941967][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.958002][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.961030][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.986960][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   55.998541][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.016275][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.019254][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.040698][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.043789][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.067254][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   56.082078][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.085085][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.099220][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.102202][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.166036][ T5835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.206340][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.241193][ T5832] veth0_vlan: entered promiscuous mode
[   56.249597][ T5832] veth1_vlan: entered promiscuous mode
[   56.283718][ T5832] veth0_macvtap: entered promiscuous mode
[   56.287478][   T54] Bluetooth: hci1: command tx timeout
[   56.289477][ T5219] Bluetooth: hci0: command tx timeout
[   56.303526][ T5832] veth1_macvtap: entered promiscuous mode
[   56.317289][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.322914][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.336599][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.343004][ T5832] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.346683][ T5832] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.349597][ T5832] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.352263][ T5832] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.377075][ T5219] Bluetooth: hci2: command tx timeout
[   56.403951][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.449429][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.452431][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.468902][ T5828] veth0_vlan: entered promiscuous mode
[   56.474500][ T5835] veth0_vlan: entered promiscuous mode
[   56.487507][ T5835] veth1_vlan: entered promiscuous mode
[   56.493499][ T5828] veth1_vlan: entered promiscuous mode
[   56.498383][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.501158][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.548288][ T5828] veth0_macvtap: entered promiscuous mode
[   56.557251][ T5835] veth0_macvtap: entered promiscuous mode
[   56.560319][ T5828] veth1_macvtap: entered promiscuous mode
[   56.566986][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   56.582474][ T5835] veth1_macvtap: entered promiscuous mode
[   56.594669][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.615547][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.626344][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.638067][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.643449][ T5835] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.652927][ T5835] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.658411][ T5835] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.662093][ T5835] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.672658][ T5828] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.682668][ T5828] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.691175][ T5828] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.694448][ T5828] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.707701][ T5894] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4'.
[   56.805167][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.808448][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.842942][   T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.849036][   T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.864506][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.867400][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.903736][   T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.910661][   T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.217116][ T5904] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[   57.220737][ T5904] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   57.253015][ T5904] syz.0.1 (5904) used greatest stack depth: 19072 bytes left
[   57.468845][ T5901] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   57.535190][ T5920] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   57.632904][ T5929] netlink: 'syz.0.12': attribute type 1 has an invalid length.
[   57.688874][ T5910] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   57.694577][ T5908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   58.147946][ T5956] netlink: 28 bytes leftover after parsing attributes in process `syz.0.25'.
[   58.154423][ T5956] netlink: 'syz.0.25': attribute type 7 has an invalid length.
[   58.160655][ T5956] netlink: 'syz.0.25': attribute type 8 has an invalid length.
[   58.170551][ T5956] netlink: 4 bytes leftover after parsing attributes in process `syz.0.25'.
[   58.180020][ T5956] gretap0: entered promiscuous mode
[   58.182451][ T5956] batadv_slave_1: entered promiscuous mode
[   58.369737][ T5219] Bluetooth: hci0: command tx timeout
[   58.372344][   T54] Bluetooth: hci1: command tx timeout
[   58.445795][ T5219] Bluetooth: hci2: command tx timeout
[   58.787615][ T5986] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   59.216149][ T5876] IPVS: starting estimator thread 0...
[   59.315257][ T6001] IPVS: using max 80 ests per chain, 192000 per kthread
[   59.511312][ T6014] netlink: 'syz.2.47': attribute type 1 has an invalid length.
[   59.514627][ T6014] netlink: 208 bytes leftover after parsing attributes in process `syz.2.47'.
[   59.603386][ T6020] netlink: 'syz.0.50': attribute type 21 has an invalid length.
[   59.610366][ T6020] netlink: 'syz.0.50': attribute type 6 has an invalid length.
[   59.617942][ T6020] netlink: 64 bytes leftover after parsing attributes in process `syz.0.50'.
[   59.879136][ T6042] netlink: 76 bytes leftover after parsing attributes in process `syz.2.57'.
[   59.882937][ T6042] netlink: 76 bytes leftover after parsing attributes in process `syz.2.57'.
[   60.061674][ T6055] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   60.453945][ T5219] Bluetooth: hci0: command tx timeout
[   60.456413][   T54] Bluetooth: hci1: command tx timeout
[   60.528625][   T54] Bluetooth: hci2: command tx timeout
[   60.543672][ T6079] netlink: 36 bytes leftover after parsing attributes in process `syz.0.74'.
[   61.064470][ T6092] Zero length message leads to an empty skb
[   61.110778][ T6094] netlink: 'syz.0.79': attribute type 1 has an invalid length.
[   61.113601][ T6094] netlink: 'syz.0.79': attribute type 4 has an invalid length.
[   61.121433][ T6096] netlink: 'syz.1.80': attribute type 2 has an invalid length.
[   61.126130][ T6094] netlink: 14506 bytes leftover after parsing attributes in process `syz.0.79'.
[   61.414704][ T6118] netlink: 'syz.0.92': attribute type 3 has an invalid length.
[   61.429110][ T6121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.91'.
[   62.220890][ T6169] syz.1.116 uses obsolete (PF_INET,SOCK_PACKET)
[   62.326676][ T6177] bond1: entered promiscuous mode
[   62.329032][ T6177] bond1: entered allmulticast mode
[   62.331740][ T6177] 8021q: adding VLAN 0 to HW filter on device bond1
[   62.370277][ T6172] bridge2: entered promiscuous mode
[   62.372288][ T6172] bridge2: entered allmulticast mode
[   62.385626][ T6172] bond1: (slave bridge2): Enslaving as a backup interface with an up link
[   62.435610][ T5720] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   62.463783][ T6172] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.467036][ T6172] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.529357][   T54] Bluetooth: hci1: command tx timeout
[   62.529598][ T5219] Bluetooth: hci0: command tx timeout
[   62.547825][ T6172] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   62.557708][ T5855] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   62.557727][ T6172] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   62.605949][ T5219] Bluetooth: hci2: command tx timeout
[   62.639256][ T6172] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   62.643002][ T6172] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   62.648134][ T6172] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   62.651814][ T6172] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   62.692934][ T6181] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   62.703858][ T6181] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   62.878973][ T6192] netlink: 76 bytes leftover after parsing attributes in process `syz.1.125'.
[   62.892309][ T6192] validate_nla: 1 callbacks suppressed
[   62.892319][ T6192] netlink: 'syz.1.125': attribute type 1 has an invalid length.
[   62.904656][ T6194] netlink: 24 bytes leftover after parsing attributes in process `syz.0.124'.
[   62.912611][ T6194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.124'.
[   62.919804][ T6194] netlink: 'syz.0.124': attribute type 5 has an invalid length.
[   63.319672][ T6215] af_packet: tpacket_rcv: packet too big, clamped from 3954 to 3710. macoff=82
[   63.731724][ T6246] netlink: 'syz.1.149': attribute type 3 has an invalid length.
[   63.964082][ T6269] netlink: 36 bytes leftover after parsing attributes in process `syz.1.161'.
[   64.018419][ T6272] netlink: 52 bytes leftover after parsing attributes in process `syz.1.162'.
[   64.023053][ T6270] netlink: 16 bytes leftover after parsing attributes in process `syz.2.159'.
[   64.099556][ T6272] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   64.107702][ T6272] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   64.113138][ T6272] bond0 (unregistering): Released all slaves
[   64.428911][ T6302] syz_tun: entered allmulticast mode
[   64.450286][ T6302] dvmrp8: entered allmulticast mode
[   64.474123][ T6301] syz_tun: left allmulticast mode
[   64.844591][ T6332] warning: `syz.2.185' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   65.646823][ T6358] netlink: 44 bytes leftover after parsing attributes in process `syz.0.197'.
[   65.666253][ T6358] netlink: 12 bytes leftover after parsing attributes in process `syz.0.197'.
[   65.729282][ T6360] netlink: 216 bytes leftover after parsing attributes in process `syz.0.199'.
[   65.733291][ T6360] netlink: 24 bytes leftover after parsing attributes in process `syz.0.199'.
[   66.090128][    C0] vcan0: j1939_tp_rxtimer: 0xffff888037ef9000: rx timeout, send abort
[   66.594511][    C0] vcan0: j1939_tp_rxtimer: 0xffff888037ef9000: abort rx timeout. Force session deactivation
[   66.672977][ T6394] vlan2: entered promiscuous mode
[   66.676098][ T6394] batadv0: entered promiscuous mode
[   66.874576][ T6402] netlink: 'syz.0.218': attribute type 1 has an invalid length.
[   66.982283][ T6403] xt_CT: No such helper "snmp"
[   67.309578][ T6434] openvswitch: netlink: Geneve option length err (len 256, max 255).
[   67.734225][ T6476] Bluetooth: MGMT ver 1.23
[   68.096956][ T6499] __nla_validate_parse: 11 callbacks suppressed
[   68.097003][ T6499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.264'.
[   68.135205][ T5219] Bluetooth: hci2: command tx timeout
[   68.206198][ T6503] vxcan1: tx address claim with dlc 0
[   68.338150][ T6509] netlink: 16 bytes leftover after parsing attributes in process `syz.1.269'.
[   68.466634][ T6513] nbd: socks must be embedded in a SOCK_ITEM attr
[   68.471044][ T6513] block nbd0: shutting down sockets
[   69.364821][ T6558] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   69.388913][ T6558] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   69.490483][ T6574] openvswitch: netlink: ct_state flags 0000ee01 unsupported
[   69.677452][ T6585] netlink: 4 bytes leftover after parsing attributes in process `syz.0.305'.
[   70.029082][ T6589] netlink: 'syz.2.307': attribute type 16 has an invalid length.
[   70.038546][ T6589] netlink: 20 bytes leftover after parsing attributes in process `syz.2.307'.
[   70.334461][ T6606] netlink: 12 bytes leftover after parsing attributes in process `syz.0.315'.
[   70.622012][ T6629] netlink: 12 bytes leftover after parsing attributes in process `syz.1.326'.
[   70.625503][ T6629] smc: net device bond0 applied user defined pnetid S
[   71.107974][ T6647] team0: Device gtp0 is of different type
[   71.549897][ T6680] netlink: 60 bytes leftover after parsing attributes in process `syz.1.344'.
[   71.797573][ T6699] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   71.848136][ T6705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.356'.
[   71.970274][ T6719] netlink: 'syz.1.363': attribute type 2 has an invalid length.
[   72.458042][ T6761] netlink: 20 bytes leftover after parsing attributes in process `syz.0.381'.
[   72.525593][ T6765] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[   74.127250][ T6877] netlink: 4 bytes leftover after parsing attributes in process `syz.1.433'.
[   74.130642][ T6877] netlink: 'syz.1.433': attribute type 1 has an invalid length.
[   74.133352][ T6877] netlink: 'syz.1.433': attribute type 1 has an invalid length.
[   74.641253][ T6904] 8021q: VLANs not supported on lo
[   74.726669][ T6910] tipc: Started in network mode
[   74.732006][ T6910] tipc: Node identity 624bff51be32, cluster identity 4711
[   74.742213][ T6910] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   74.746894][ T6910] syzkaller0: entered promiscuous mode
[   74.749053][ T6910] syzkaller0: entered allmulticast mode
[   74.772394][ T6910] tipc: Resetting bearer <eth:syzkaller0>
[   74.780634][ T6908] tipc: Resetting bearer <eth:syzkaller0>
[   74.794629][ T6908] tipc: Disabling bearer <eth:syzkaller0>
[   75.058826][ T6936] netlink: 20 bytes leftover after parsing attributes in process `syz.0.462'.
[   75.083975][ T6938] netlink: 132 bytes leftover after parsing attributes in process `syz.2.464'.
[   75.437395][ T6976] netlink: 28 bytes leftover after parsing attributes in process `syz.1.479'.
[   75.440244][ T6976] netlink: 28 bytes leftover after parsing attributes in process `syz.1.479'.
[   76.824629][ T7047] netlink: 88 bytes leftover after parsing attributes in process `syz.2.509'.
[   76.850181][ T7049] netlink: 4 bytes leftover after parsing attributes in process `syz.0.510'.
[   76.939390][ T7058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.513'.
[   76.969313][ T7060] netlink: 64 bytes leftover after parsing attributes in process `syz.2.515'.
[   77.568200][ T7083] netlink: del zone limit has 4 unknown bytes
[   77.771624][ T7101] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[   77.778166][ T7101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.536'.
[   78.395303][ T7164] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[   78.558224][ T7179] netlink: 'syz.1.571': attribute type 1 has an invalid length.
[   78.624627][ T7179] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[   78.777529][ T7200] xt_policy: too many policy elements
[   78.869522][ T7212] trusted_key: syz.1.583 sent an empty control message without MSG_MORE.
[   79.002836][ T7221] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   79.008468][ T7219] tipc: Resetting bearer <eth:syzkaller0>
[   79.751688][ T7219] tipc: Disabling bearer <eth:syzkaller0>
[   79.849648][ T7237] syz_tun: entered allmulticast mode
[   79.852455][ T7236] syz_tun: left allmulticast mode
[   79.997385][ T7255] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 3, id = 0
[   80.040209][ T7260] netlink: 'syz.2.608': attribute type 4 has an invalid length.
[   80.043439][ T7260] __nla_validate_parse: 6 callbacks suppressed
[   80.043449][ T7260] netlink: 17 bytes leftover after parsing attributes in process `syz.2.608'.
[   80.181113][ T7272] netlink: 28 bytes leftover after parsing attributes in process `syz.2.613'.
[   80.184898][ T7272] netlink: 28 bytes leftover after parsing attributes in process `syz.2.613'.
[   80.196599][ T7272] team0: entered promiscuous mode
[   80.200769][ T7272] team_slave_0: entered promiscuous mode
[   80.203684][ T7272] team_slave_1: entered promiscuous mode
[   80.209458][ T7272] bond0: entered promiscuous mode
[   80.211293][ T7272] bond_slave_0: entered promiscuous mode
[   80.213162][ T7272] bond_slave_1: entered promiscuous mode
[   80.217102][ T7272] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[   80.220016][ T7272] Cannot create hsr debugfs directory
[   80.222701][ T7272] 8021q: adding VLAN 0 to HW filter on device hsr1
[   80.291869][ T7280] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   80.315253][ T7284] netlink: 'syz.2.619': attribute type 1 has an invalid length.
[   80.320266][ T7284] netlink: 236 bytes leftover after parsing attributes in process `syz.2.619'.
[   80.369150][ T7288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.622'.
[   80.374598][ T7288] netlink: 4 bytes leftover after parsing attributes in process `syz.1.622'.
[   80.378722][ T7288] netlink: 'syz.1.622': attribute type 18 has an invalid length.
[   80.464413][ T7299] netlink: 28 bytes leftover after parsing attributes in process `syz.0.626'.
[   80.490222][ T7299] netlink: 28 bytes leftover after parsing attributes in process `syz.0.626'.
[   80.508349][ T7299] team0: entered promiscuous mode
[   80.510088][ T7299] team_slave_0: entered promiscuous mode
[   80.512105][ T7299] team_slave_1: entered promiscuous mode
[   80.524372][ T7299] bond0: entered promiscuous mode
[   80.526332][ T7299] bond_slave_0: entered promiscuous mode
[   80.528340][ T7299] bond_slave_1: entered promiscuous mode
[   80.534068][ T7299] hsr2: Slave A (team0) is not up; please bring it up to get a fully working HSR network
[   80.549200][ T7299] hsr2: Slave B (bond0) is not up; please bring it up to get a fully working HSR network
[   80.558890][ T7299] 8021q: adding VLAN 0 to HW filter on device hsr2
[   81.044325][ T7348] lo speed is unknown, defaulting to 1000
[   81.050124][ T7348] lo speed is unknown, defaulting to 1000
[   81.052797][ T7348] lo speed is unknown, defaulting to 1000
[   81.061458][ T7348] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   81.077582][ T7348] lo speed is unknown, defaulting to 1000
[   81.081752][ T7348] lo speed is unknown, defaulting to 1000
[   81.086139][ T7348] lo speed is unknown, defaulting to 1000
[   81.112406][   T10] cfg80211: failed to load regulatory.db
[   81.613171][ T7385] netlink: 32 bytes leftover after parsing attributes in process `syz.1.661'.
[   81.616374][ T7385] netlink: 152 bytes leftover after parsing attributes in process `syz.1.661'.
[   81.619384][ T7385] bridge0: port 3(macvlan1) entered blocking state
[   81.623340][ T7385] bridge0: port 3(macvlan1) entered disabled state
[   81.633455][ T7385] macvlan1: entered allmulticast mode
[   81.635631][ T7385] veth1_vlan: entered allmulticast mode
[   81.638285][ T7385] macvlan1: entered promiscuous mode
[   81.640856][ T7385] bridge0: port 3(macvlan1) entered blocking state
[   81.642968][ T7385] bridge0: port 3(macvlan1) entered forwarding state
[   82.168252][ T7432] veth1_to_team: entered allmulticast mode
[   82.177882][ T7432] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[   82.453138][ T7444] lo speed is unknown, defaulting to 1000
[   82.577716][ T7451] netlink: 'syz.1.691': attribute type 18 has an invalid length.
[   82.840241][ T7466] netlink: 'syz.2.698': attribute type 1 has an invalid length.
[   82.843009][ T7466] netlink: 'syz.2.698': attribute type 2 has an invalid length.
[   83.269253][ T7517] veth0: entered promiscuous mode
[   83.271551][ T7516] veth0: left promiscuous mode
[   83.323590][ T7522] 
[   83.324790][ T7522] =============================
[   83.327322][ T7522] WARNING: suspicious RCU usage
[   83.329489][ T7522] 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 Not tainted
[   83.333511][ T7522] -----------------------------
[   83.335325][ T7522] net/core/netclassid_cgroup.c:24 suspicious rcu_dereference_check() usage!
[   83.339431][ T7522] 
[   83.339431][ T7522] other info that might help us debug this:
[   83.339431][ T7522] 
[   83.343613][ T7522] 
[   83.343613][ T7522] rcu_scheduler_active = 2, debug_locks = 1
[   83.347254][ T7522] 1 lock held by syz.1.722/7522:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   83.349389][ T7522]  #0: ffffffff8e13f040 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x38/0x80
[   83.354399][ T7522] 
[   83.354399][ T7522] stack backtrace:
[   83.357016][ T7522] CPU: 1 UID: 0 PID: 7522 Comm: syz.1.722 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[   83.357034][ T7522] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   83.357042][ T7522] Call Trace:
[   83.357047][ T7522]  <TASK>
[   83.357053][ T7522]  dump_stack_lvl+0x189/0x250
[   83.357078][ T7522]  ? __pfx_dump_stack_lvl+0x10/0x10
[   83.357095][ T7522]  ? __pfx__printk+0x10/0x10
[   83.357116][ T7522]  ? print_lock_name+0xde/0x100
[   83.357138][ T7522]  lockdep_rcu_suspicious+0x140/0x1d0
[   83.357155][ T7522]  task_cls_state+0x1a5/0x1d0
[   83.357177][ T7522]  bpf_get_cgroup_classid_curr+0x18/0x60
[   83.357191][ T7522]  bpf_prog_841aec7193f618b3+0x1b/0x21
[   83.357203][ T7522]  bpf_prog_run_pin_on_cpu+0x6a/0x150
[   83.357222][ T7522]  bpf_prog_test_run_syscall+0x312/0x4b0
[   83.357241][ T7522]  ? __pfx_bpf_prog_test_run_syscall+0x10/0x10
[   83.357257][ T7522]  ? __fget_files+0x2a/0x420
[   83.357278][ T7522]  ? __pfx_bpf_prog_test_run_syscall+0x10/0x10
[   83.357296][ T7522]  bpf_prog_test_run+0x2c7/0x340
[   83.357313][ T7522]  __sys_bpf+0x4a4/0x860
[   83.357326][ T7522]  ? __pfx___sys_bpf+0x10/0x10
[   83.357347][ T7522]  ? exc_page_fault+0x76/0xf0
[   83.357365][ T7522]  ? __pfx___se_sys_futex+0x10/0x10
[   83.357389][ T7522]  __x64_sys_bpf+0x7c/0x90
[   83.357407][ T7522]  do_syscall_64+0xfa/0x3b0
[   83.357418][ T7522]  ? lockdep_hardirqs_on+0x9c/0x150
[   83.357428][ T7522]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   83.357440][ T7522]  ? exc_page_fault+0x9f/0xf0
[   83.357461][ T7522]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   83.357473][ T7522] RIP: 0033:0x7fb7e138e929
[   83.357485][ T7522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   83.357495][ T7522] RSP: 002b:00007fb7df1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   83.357508][ T7522] RAX: ffffffffffffffda RBX: 00007fb7e15b5fa0 RCX: 00007fb7e138e929
[   83.357517][ T7522] RDX: 0000000000000039 RSI: 0000200000000500 RDI: 000000000000000a
[   83.357524][ T7522] RBP: 00007fb7e1410b39 R08: 0000000000000000 R09: 0000000000000000
[   83.357531][ T7522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   83.357538][ T7522] R13: 0000000000000000 R14: 00007fb7e15b5fa0 R15: 00007fffff4401a8
[   83.357558][ T7522]  </TASK>

VM DIAGNOSIS:
14:22:08  Registers:
info registers vcpu 0

CPU#0
RAX=039810686bddd800 RBX=ffffffff81975d58 RCX=039810686bddd800 RDX=0000000000000001
RSI=ffffffff8d996d18 RDI=ffffffff8be28fc0 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa1def0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6ee4a3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b3021fffc CR3=000000010ddda000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 00007f96cfc11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000072 RBX=0000000000000072 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000f4f RDI=0000000000000f50 RBP=00000000000003f8 RSP=ffffc90006627550
R8 =ffff888107ca8237 R9 =1ffff11020f95046 R10=dffffc0000000000 R11=ffffffff85475610
R12=dffffc0000000000 R13=ffffffff99af78eb R14=ffffffff99dfc760 R15=0000000000000000
RIP=ffffffff8547568c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fb7df1f66c0 ffffffff 00c00000
GS =0000 ffff8881a3c1d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fb7df1f5fc8 CR3=000000010b01e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fb7e1585478 00007fb7e1585450 XMM03=00007fb7e1585488 00007fb7e1585480
XMM04=00007fb7e20ed100 00007fb7e1585440 XMM05=00007fb7e1585458 00007fb7e15854a0
XMM06=00007fb7e1585498 00007fb7e1585490 XMM07=00007fb7e1585488 00007fb7e1585480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fb7e1411c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
