last executing test programs:

1.291199919s ago: executing program 0 (id=1354):
syz_emit_ethernet(0x9a, &(0x7f0000002980)={@local, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "ee527a", 0x64, 0x3c, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[@dstopts={0xe2, 0x3, '\x00', [@hao={0xc9, 0x10, @mcast1}, @generic={0x7, 0x4, "f9b7f8e2"}]}], {{}, {}, {}, {0x8, 0x88be, 0x1}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}}}}}}}}, 0x0)

1.210110409s ago: executing program 0 (id=1357):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0x8)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000012c0)={{0x1, <r3=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000001280)=r2}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002a40)=ANY=[@ANYBLOB="18020000e2ffffff00000000000000c685000000360000009500001800000000922ae83713ab9600010000801b10fb54a8cb72d232ad558c46fff4208d4990ec11ce9413ac30e00bd0081f8504e19a5183d769676520e98a263345e44d5ad12bca35510100c4d86abeb12303ff1c9fe0d0020000d60400000007d3670000008afb66d6b3181ffc1d62a3954c1198bbc4fa13aee48ca9e8969faebf3183fe803ab3f5024b52dc265b36fc9dae00a09404f01f9504d0976d252bd8d24538556e5e57bee3b8cf464ef3c6a7def8bad3ca6e3abdb21696e340bb8e2a093add57196b40def3858ef569147fa4108328392d322ab5df10a2f69a6bdf72ee7944e810d0223917c3d042410f57466f59544047d6d8ac44060000000000ee16c729300d2301800000000000002b5a8b05fcc154ad5290a8cdb97c343f454ff69dd6cbde49b28a6cb5f4fc0001745cff6e00e7ffffff0000acf3209a08439f1ff01779b6f6df7e02aa6d7760525b595fe1f697bc114ed1778e97a3f0395f946974cfb458be2a34cf924dc37b5592bf17956f3547497aba814382ff67b345b677a9d6523d87008000000400000000003fe8613ca29ff92be0d8deffff7b68136b0046d535dd39c0f35408869e9b342b953f91447e6b9eab304f134306320600a44095254b45a6c1312a13696c7202df5f764713504facc532c5a6d44d99ec7530ed7b0311000000000000e54e9072a22d911f4a2c2e2fa806e63c5cd98a8569a6d6bcfb000064885117e2ad910eae67e0ebe380d0d748713e68153579e02d71c58d147b00821ab9a6475b31e1ebf1369a04000000fbf3983f283f2f00000000992774814d63c933912d000006000000a66acb0a38856929e7d8b1b06c9bd5d7e5490f3b8596b694ea9483bd4bd287c83dd998a74694d18bdd8ad0983bc90770bbd26a82b9d99d5fc04563b523c47ef8c33400e90d02000000000000000edf1147a7afe772cd45af8aeffe2753088e02ca6bb2feec446ce7dbce66f0a93a03371320980865c7c62ea4d8f8a864dce9fa85aeb0454349100296ee2dba39c3f6fd6cf96714e11fe03b5062809a7418b165dd0336d226bac1e1223be1c97b15175d0e664beb126000e96549e1a1228c686edb475b705eaa9515c96f4fc6b3c925ea404e0f1de61026dc6c6618580fd6ce9eac602c1756f6d1056712412131ed9925989e01eae489ec7052e0ed72c326c7a8aa63999e2297c54ce1822d14b7c7699a9d0600f11f2e7f474cffbc35bc8623cd5eb68af82275a940be0400000000000000bcc3fbe7d954b70000000000008d1f606b381e4903b500000000000000000000004a2357ba5f6000de1cfa88b7165dcf4f2aaee86d4802000000000000008fdb686d5da2a42e4b5024b6535811f362201d4f82012e6af704973d04ea923c19e6cb723c1923b3eea2d73e176dff383c9fbbac53dfdcb1a68c98e96fe39eec23963faf3ebed3409144c7c53d6318ced678a621450a9b01e9f2772e5f2999d3435da02556e36c3215d2bd4e96c93bff3ad04a82ff3cfadcf65eb92adc6c68d66b11cb2d7556414a86dfa94bb7aa52c7febb1e9b2efcbbc5bccf9d39bed802f4f056976a9a362ee9cc624ec454b90200fd9603f96908bddc14500000000000000000000000000044d917c62b27679913075731e8fddb07c10c82002d60181588ae63a440454287de9e340f611267f37bdd0f2d21cb06fcaf45a0a297e396f428d43371424b307eef82c5d6d19f3ef0d3b8f7fa51957e3099caab31133b34a1d3eebc0f0c9056df2e9667ba0b55695c7894010079b07e7aef7785e2486472b5cba1f3346c1e8e23deb8c82bb6eb2c72c484241dc3b66da78260f800fffd39368b952f6f4a10295c50c887a31d8b543c5d10f2dbd4d0b84eaad43feb6e169a9f2fcff7000000000000000000e011bc6366f56fa787f212c1f8c0f47f50b1e9b5d841ea55fe569bb7bf1e78191c8a02ad436725771738a2a98891971e3b932352896e1ea10f62e8ef7a87e16151b39d6c27575714540d8c293a3fa4b5a825360423c1cbc8b5d19167152823ed853140edda002c16c842b168bb55f6bb713deb57d0aa78d6d4e5fc5be2c402bd246128f41bcb02000000892b135a92e8c844938aa98ba4839a1408a696454d40e5eed4d4dce481ca86bfac54c330331b7f2cde17cbaeb0377696faf546ecbe742d73d47d726a50f6e752f3325255bd7e8b5923aa3cfb6f7e06494f21ca450139c558000000000000000000000800000000000000000075aa0000000000000000000000005560bd9eb81e839e4992e64b074a66cccccf00334fa94da8477be7d99b558ec6a5b1596ac1e7617c6b32eed0cc70286caf2c5189a103f4b0b04aff171c4d388ccf67fea37e782f025c94c853cde330a193a967d907a8c88fcb033e680f559a72150cb900bafcd536f48797915a2fe9922ce07300009e1b36aa4730117d9b00000000003c630000000000008fbbd11b015c415ca041bac10062835c9bab3ad09f7a022c52d8000000000000000000004000000000000000000000000000000000000000000400000000000000000000000000006ec473c54399b7b8aa1ee46132fc45da8292631178cecf19550108b8b8423de42957ffe9bb6d752e68d2bc2ce777a17bf4dfdfee5de0f3e4dadf51ab9562827b762fa611ba5f32861c19dffe1dc9fd5c41cd46cf131fd6b0c2ddad90ac33f768f9ecc70327c59918fa5a249befe98262f53c8182d95f6da3698a6a88c2c31d801a8f1f5e0ce05138d5422da0a6a62b9dfe1f39775d1d0c9186096415f544aaf76b0a1c877a6c826a5adcfb22c4a0e5a46271caa3eaf4f389dd5f3c20dbddc0377a4266d7b9fd61b9287e9b4be0a413ee31be0ddecab0ef7b25cba1fb3654ddf291ecb7768ac1e177042cb4c452fa6b39669500000000000000fe85"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="c01800002000010a00000000000000000a0000002c01018028014880ed00a90013466820cd76bb221fbb4acd690c6a8b9c760a61eeec7793b579aefdb936d00f403d3f04637cdb9ac70e28c5dd66ddedde2d0930650e6821f9a26a4a193c1d06a3e75523f901e44fe087ae32c836c6d6ddba3af8e9a2beae8936168f9fa38c395f5cf7408df69c60bf584bee86a6312e9ce866e456c3eda6f2924082d78a2f385bdbd0c9afb54758c102bf13094645fb6aa34d424ec776691fee3d25307f61fed2752babf7c686e8a3d9b59a8343bcf4121bf5cf400a0c1070855fac565cad8968a97ce0a12a1161054d82d0a240b7dedf9ba3cc63e9d1c3b9a8402f7d5b4cafcd48928a3d4a76498900000014007c00ff01000000000000000000000000000108003d00", @ANYRES32=r4, @ANYBLOB="08001a00", @ANYRES32=r4, @ANYBLOB="08001b"], 0x18c0}, 0x1, 0x0, 0x0, 0x880}, 0x0)
r5 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8)
ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000200)=<r6=>0x0)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r7, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r7, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x2, 0x1, "fa"}, 0x9)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r8, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={<r9=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10)
setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000001240)={0x4}, 0x4)
r10 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r10, 0x84, 0x74, &(0x7f0000000080)={r9, 0x4, 0x20, 0x2}, &(0x7f0000000840)=0x18)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r7, 0x84, 0x17, &(0x7f0000000180)={0x0, 0x7c5, 0x1, "e3"}, 0x9)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000240)={{r5}, r6, 0x14, @unused=[0x3, 0x1, 0x8000, 0x7], @subvolid=0x800})
setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0xf9ffff00, 0x0, 0x0}, 0x108)

1.152104397s ago: executing program 0 (id=1362):
r0 = socket$igmp6(0xa, 0x3, 0x2)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000180)={<r2=>r1, &(0x7f0000000080)='bridge0\x00', 0x501a00, &(0x7f00000000c0)={@_ha_fsid={[0x14b4, 0x400]}, {0x2, 0x9, 0x7fff, 0x5}}, 0xf6, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x1})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f"], 0x48)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x2}, 0x94)
r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(0x4)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
getsockopt$sock_buf(r6, 0x1, 0x1c, 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000)
connect$bt_rfcomm(r5, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xa)
shutdown(r5, 0x1)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={r2, <r8=>0xffffffffffffffff}, 0x4)
r9 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x95}}}, &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000cc0)={0x6, 0x3a, &(0x7f0000000980)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd}}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}, @alu={0x7, 0x0, 0xa, 0x7, 0x8, 0x18, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000b80)='GPL\x00', 0x2, 0xd, &(0x7f0000000bc0)=""/13, 0x41000, 0x58, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000000c00)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000c40)={0x2, 0x6, 0x0, 0x400}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000c80)=[r3, r9, r2], 0x0, 0x10, 0xffff0001}, 0x94)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
syz_emit_ethernet(0x7e, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "268435", 0x48, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x12, 0x2, 0xf3d8, 0x0, 0x10, {[@mptcp=@ack={0x1e, 0x16, 0x8, 0x4, "a8c62540169d563df1167b340b68027cd8ac"}, @mptcp=@mp_join={0x1e, 0x3, 0x2}, @sack_perm={0x4, 0x2}, @sack={0x5, 0x16, [0x40, 0x200, 0x1ff, 0x1, 0x800]}]}}}}}}}}, 0x0)

471.456658ms ago: executing program 1 (id=1379):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
close(0x3)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={<r3=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x2, 0x1, "fa"}, 0x9)

382.215128ms ago: executing program 1 (id=1380):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0)
close(r2)
r4 = socket$kcm(0x2d, 0x2, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000140)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e3, &(0x7f0000000180)={r4})
write(r0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_buf(r6, 0x29, 0x6, 0x0, &(0x7f0000000480))

259.11772ms ago: executing program 2 (id=1382):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000001180)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[], 0x27)

258.800574ms ago: executing program 2 (id=1383):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x6003}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x6a, 0x2000, 0xfc, 0x2f, 0x0, @local, @multicast1}, {0x8000, 0x6558, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x9, 0x0, @val=0x80}}}}}}}}, 0x36)

171.380242ms ago: executing program 0 (id=1384):
r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000000640), 0x3fffffffffffce3, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)

170.920176ms ago: executing program 2 (id=1385):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001840)=@raw={'raw\x00', 0x3c1, 0x3, 0x12a0, 0x1100, 0x18c, 0x203, 0x1100, 0x19030000, 0x11d0, 0x2e0, 0x2e0, 0x11d0, 0x2e0, 0x7fffffe, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0x0, 0x0, 0xff, 0xff], [0x7fffffff, 0xff000000, 0xff000000, 0xff000000], 'bond_slave_1\x00', 'bond0\x00', {}, {}, 0x84, 0x7, 0x2, 0x55}, 0x300, 0x10d8, 0x1100, 0x0, {0x1000000}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x1, 0x1, './cgroup.cpu/syz1\x00', 0xfffffffc, {0x3}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x8d, 0x74c}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1300)

149.1531ms ago: executing program 1 (id=1386):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000", 0x17}], 0x1}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x20, &(0x7f0000000580)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="03000000", 0x4}], 0x2}, 0x0)

79.258085ms ago: executing program 2 (id=1387):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x4, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4044081}, 0x0)

78.760546ms ago: executing program 1 (id=1388):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000a00)={'batadv0\x00', &(0x7f00000009c0)=@ethtool_sset_info={0x37, 0x5, 0x6}})

78.219198ms ago: executing program 0 (id=1389):
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x22)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e22, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0)

78.06641ms ago: executing program 2 (id=1390):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', <r1=>0x0})
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, r1}, 0x14)
setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, r1}, 0x14)

729.005µs ago: executing program 0 (id=1391):
socket(0x1d, 0x2, 0x6)
socket$packet(0x11, 0x2, 0x300)
r0 = socket$tipc(0x1e, 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0)

544.55µs ago: executing program 1 (id=1392):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={<r3=>r2, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000300)={r3, 0xf}, 0x8)

291.008µs ago: executing program 2 (id=1393):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x4004)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x2c000010)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000008c0)={'bridge0\x00'})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)
socket$kcm(0xa, 0x5, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@setlink={0x2c, 0x13, 0x1, 0x70bd29, 0x25dfdbf8, {0x0, 0x0, 0x0, 0x0, 0x3007, 0x409}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c)
readv(r0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/69, 0x45}], 0x1)

0s ago: executing program 1 (id=1394):
r0 = socket$inet6(0xa, 0x80002, 0x0)
sendmsg$sock(r0, &(0x7f0000000040)={&(0x7f0000000300)=@in6={0xa, 0x4e20, 0xf07, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x400}, 0x80, 0x0, 0x0, &(0x7f0000000080)=[@mark={{0x14, 0x1, 0x4f, 0xdffffff6}}], 0xa}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:60750' (ED25519) to the list of known hosts.
syzkaller login: [   57.067257][ T5595] cgroup: Unknown subsys name 'net'
[   57.193082][ T5595] cgroup: Unknown subsys name 'cpuset'
[   57.198414][ T5595] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.617694][ T5595] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   62.974127][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   62.977706][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   62.980866][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   62.984449][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   62.987224][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   63.028775][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   63.031790][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   63.034567][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   63.037096][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   63.039616][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   63.053399][ T4999] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   63.056687][ T4999] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   63.059264][ T4999] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   63.061795][ T4999] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   63.064183][ T4999] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   63.564050][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.567592][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.570601][ T5611] bridge_slave_0: entered allmulticast mode
[   63.574410][ T5611] bridge_slave_0: entered promiscuous mode
[   63.589885][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.592463][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.594808][ T5611] bridge_slave_1: entered allmulticast mode
[   63.597297][ T5611] bridge_slave_1: entered promiscuous mode
[   63.687260][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.691006][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.693885][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.696815][ T5617] bridge_slave_0: entered allmulticast mode
[   63.701079][ T5617] bridge_slave_0: entered promiscuous mode
[   63.705866][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.708689][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.711708][ T5617] bridge_slave_1: entered allmulticast mode
[   63.715157][ T5617] bridge_slave_1: entered promiscuous mode
[   63.725957][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.787464][ T5611] team0: Port device team_slave_0 added
[   63.792829][ T5611] team0: Port device team_slave_1 added
[   63.796659][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.800815][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.803898][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.806858][ T5619] bridge_slave_0: entered allmulticast mode
[   63.810899][ T5619] bridge_slave_0: entered promiscuous mode
[   63.828703][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.839946][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.842889][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.845824][ T5619] bridge_slave_1: entered allmulticast mode
[   63.849584][ T5619] bridge_slave_1: entered promiscuous mode
[   63.892799][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.896635][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   63.906315][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.913579][ T5617] team0: Port device team_slave_0 added
[   63.918484][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.922805][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.925571][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   63.935767][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.950724][ T5617] team0: Port device team_slave_1 added
[   63.954822][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.025811][ T5611] hsr_slave_0: entered promiscuous mode
[   64.028048][ T5611] hsr_slave_1: entered promiscuous mode
[   64.031531][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.034899][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.044457][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.050841][ T5619] team0: Port device team_slave_0 added
[   64.055198][ T5619] team0: Port device team_slave_1 added
[   64.057938][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.060724][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.070638][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.102451][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.104841][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.114976][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.121087][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.123796][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.133071][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.181789][ T5617] hsr_slave_0: entered promiscuous mode
[   64.185097][ T5617] hsr_slave_1: entered promiscuous mode
[   64.187814][ T5617] debugfs: 'hsr0' already exists in 'hsr'
[   64.190483][ T5617] Cannot create hsr debugfs directory
[   64.251599][ T5619] hsr_slave_0: entered promiscuous mode
[   64.253966][ T5619] hsr_slave_1: entered promiscuous mode
[   64.256132][ T5619] debugfs: 'hsr0' already exists in 'hsr'
[   64.258148][ T5619] Cannot create hsr debugfs directory
[   64.497967][ T5611] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   64.507776][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   64.512258][ T5611] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   64.517447][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   64.531472][ T5611] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   64.538377][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   64.541782][ T5611] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   64.546841][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   64.598828][ T5617] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   64.606149][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   64.609973][ T5617] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   64.617229][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   64.621138][ T5617] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   64.630232][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   64.636815][ T5617] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   64.642665][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   64.725832][ T5619] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   64.733147][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   64.738318][ T5619] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   64.745824][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   64.752506][ T5619] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   64.758601][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   64.762653][ T5619] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   64.768821][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   64.872952][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.917897][ T5611] 8021q: adding VLAN 0 to HW filter on device team0
[   64.936088][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.938609][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.946340][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.955933][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.958502][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.976047][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.994356][ T5617] 8021q: adding VLAN 0 to HW filter on device team0
[   65.007949][ T5619] 8021q: adding VLAN 0 to HW filter on device team0
[   65.021022][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.023420][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.027369][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.030304][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.048339][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.051422][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.061981][   T54] Bluetooth: hci1: command tx timeout
[   65.064732][ T4999] Bluetooth: hci0: command tx timeout
[   65.083030][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.085477][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.131476][ T4999] Bluetooth: hci2: command tx timeout
[   65.396932][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.434264][ T5611] veth0_vlan: entered promiscuous mode
[   65.444389][ T5611] veth1_vlan: entered promiscuous mode
[   65.473837][ T5611] veth0_macvtap: entered promiscuous mode
[   65.484271][ T5611] veth1_macvtap: entered promiscuous mode
[   65.497100][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.509227][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.517811][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.536321][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.553092][ T5666] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.564473][ T5666] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.567881][ T5666] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.579320][ T5666] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.606414][ T5617] veth0_vlan: entered promiscuous mode
[   65.616681][ T5619] veth0_vlan: entered promiscuous mode
[   65.643484][ T5617] veth1_vlan: entered promiscuous mode
[   65.652613][ T5619] veth1_vlan: entered promiscuous mode
[   65.689815][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.696423][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.728470][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.730558][ T5619] veth0_macvtap: entered promiscuous mode
[   65.732398][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.735148][ T5617] veth0_macvtap: entered promiscuous mode
[   65.752603][ T5617] veth1_macvtap: entered promiscuous mode
[   65.757818][ T5619] veth1_macvtap: entered promiscuous mode
[   65.780122][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.793851][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.800660][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.808767][ T5470] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.816398][ T5470] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.822275][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.827354][ T5470] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.828397][ T5611] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   65.832762][ T5470] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.847955][ T5470] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.864301][ T5470] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.867188][ T5470] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.873397][ T5470] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.968486][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.976523][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.002387][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.009305][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.036294][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.040253][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.095667][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.102377][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.397559][ T5733] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3'.
[   67.023389][ T5767] warning: `syz.2.23' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   67.098496][ T5771] syz.0.25 uses obsolete (PF_INET,SOCK_PACKET)
[   67.129616][   T54] Bluetooth: hci1: command tx timeout
[   67.131806][ T4999] Bluetooth: hci0: command tx timeout
[   67.152767][ T5775] Illegal XDP return value 4294967274 on prog  (id 5) dev N/A, expect packet loss!
[   67.214149][ T4999] Bluetooth: hci2: command tx timeout
[   67.810033][ T5813] netlink: 28 bytes leftover after parsing attributes in process `syz.0.44'.
[   68.287344][ T5854] netlink: 44 bytes leftover after parsing attributes in process `syz.1.55'.
[   68.321648][ T5856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.56'.
[   68.370490][ T5854] netlink: 4 bytes leftover after parsing attributes in process `syz.1.55'.
[   68.373325][ T5854] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   68.384517][ T5854] batman_adv: batadv0: Removing interface: batadv_slave_1
[   68.791065][ T5871] Zero length message leads to an empty skb
[   69.015976][ T5877] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.66'.
[   69.059905][ T5878] nbd0: detected capacity change from 0 to 127
[   69.075938][ T5881] block nbd0: Receive control failed (result -32)
[   69.087992][ T5614] block nbd0: Dead connection, failed to find a fallback
[   69.100716][ T5614] block nbd0: shutting down sockets
[   69.112811][ T5614] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   69.131023][ T5614] Buffer I/O error on dev nbd0, logical block 0, async page read
[   69.136065][ T5614] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   69.152345][ T5614] Buffer I/O error on dev nbd0, logical block 1, async page read
[   69.169408][ T5614] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   69.173667][ T5614] Buffer I/O error on dev nbd0, logical block 2, async page read
[   69.187533][ T5614] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   69.196346][ T5614] Buffer I/O error on dev nbd0, logical block 3, async page read
[   69.201740][ T5614] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   69.208433][ T5891] netlink: 'syz.2.72': attribute type 11 has an invalid length.
[   69.210962][ T5614] Buffer I/O error on dev nbd0, logical block 0, async page read
[   69.220101][ T4999] Bluetooth: hci0: command tx timeout
[   69.222328][ T4999] Bluetooth: hci1: command tx timeout
[   69.228374][ T5893] bridge1: entered allmulticast mode
[   69.229669][ T5614] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   69.234829][ T5614] Buffer I/O error on dev nbd0, logical block 1, async page read
[   69.239452][ T5614] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   69.243482][ T5614] Buffer I/O error on dev nbd0, logical block 2, async page read
[   69.247126][ T5614] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   69.253632][ T5614] Buffer I/O error on dev nbd0, logical block 3, async page read
[   69.259501][ T5614] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   69.265181][ T5614] Buffer I/O error on dev nbd0, logical block 0, async page read
[   69.269835][ T5614] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   69.280161][ T5614] Buffer I/O error on dev nbd0, logical block 1, async page read
[   69.292456][ T5614] ldm_validate_partition_table(): Disk read failed.
[   69.299078][ T4999] Bluetooth: hci2: command tx timeout
[   69.308251][ T5614] Dev nbd0: unable to read RDB block 0
[   69.315920][ T5614]  nbd0: unable to read partition table
[   69.326116][ T5614] ldm_validate_partition_table(): Disk read failed.
[   69.338611][ T5614] Dev nbd0: unable to read RDB block 0
[   69.344349][ T5614]  nbd0: unable to read partition table
[   69.766412][ T5923] netlink: 108 bytes leftover after parsing attributes in process `syz.0.87'.
[   69.780749][ T5923] netlink: 108 bytes leftover after parsing attributes in process `syz.0.87'.
[   69.893879][   T33] audit: type=1800 audit(1778672621.263:2): pid=5930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.91" name="memory.events" dev="tmpfs" ino=180 res=0 errno=0
[   69.919029][   T33] audit: type=1804 audit(1778672621.263:3): pid=5930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.91" name="/newroot/32/memory.events" dev="tmpfs" ino=180 res=1 errno=0
[   70.599013][ T5988] netlink: 20 bytes leftover after parsing attributes in process `syz.1.111'.
[   70.607192][ T5991] netlink: 12 bytes leftover after parsing attributes in process `syz.2.112'.
[   70.846765][ T6005] syzkaller0: entered promiscuous mode
[   70.854667][ T6005] syzkaller0: entered allmulticast mode
[   71.192755][ T6028] macvtap1: entered promiscuous mode
[   71.199336][ T6028] dummy0: entered promiscuous mode
[   71.202660][ T6028] macvtap1: entered allmulticast mode
[   71.206184][ T6028] dummy0: entered allmulticast mode
[   71.247250][ T6028] dummy0: left allmulticast mode
[   71.250256][ T6028] macvtap1: left promiscuous mode
[   71.252345][ T6028] macvtap1: left allmulticast mode
[   71.256359][ T5667] dummy0: left promiscuous mode
[   71.295304][ T4999] Bluetooth: hci1: command tx timeout
[   71.297602][   T54] Bluetooth: hci0: command tx timeout
[   71.369428][ T4999] Bluetooth: hci2: command tx timeout
[   71.702509][ T6056] __nla_validate_parse: 6 callbacks suppressed
[   71.702528][ T6056] netlink: 12 bytes leftover after parsing attributes in process `syz.2.142'.
[   71.710386][ T6055] 8021q: adding VLAN 0 to HW filter on device bond1
[   72.106004][ T6083] syzkaller1: entered promiscuous mode
[   72.108440][ T6083] syzkaller1: entered allmulticast mode
[   72.176359][ T6086] syzkaller0: entered promiscuous mode
[   72.179197][ T6086] syzkaller0: entered allmulticast mode
[   72.765160][ T6125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.172'.
[   72.779535][ T6127] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   72.803501][ T6127] batman_adv: batadv0: Removing interface: batadv_slave_0
[   73.486695][ T6179] netlink: 'syz.0.197': attribute type 10 has an invalid length.
[   73.517973][ T6179] bond0: (slave team0): Enslaving as an active interface with an up link
[   73.789325][ T6207] netlink: 'syz.0.207': attribute type 39 has an invalid length.
[   73.960247][ T6219] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   74.052405][ T6227] netlink: 8 bytes leftover after parsing attributes in process `syz.0.213'.
[   74.328041][ T6243] netlink: 'syz.0.220': attribute type 28 has an invalid length.
[   74.518634][ T6252] netlink: 28 bytes leftover after parsing attributes in process `syz.0.224'.
[   74.523635][ T6252] netlink: 28 bytes leftover after parsing attributes in process `syz.0.224'.
[   75.083219][ T6257] gretap1: entered promiscuous mode
[   75.577022][ T6293] netlink: 'syz.1.240': attribute type 2 has an invalid length.
[   75.589012][ T6293] netlink: 'syz.1.240': attribute type 1 has an invalid length.
[   75.596129][ T6293] netlink: 224 bytes leftover after parsing attributes in process `syz.1.240'.
[   75.607143][ T6297] netlink: 'syz.0.242': attribute type 1 has an invalid length.
[   75.615403][ T6297] netlink: 248 bytes leftover after parsing attributes in process `syz.0.242'.
[   76.189785][ T6338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.262'.
[   76.296621][ T6345] netlink: 'syz.1.265': attribute type 1 has an invalid length.
[   76.302338][ T6345] netlink: 'syz.1.265': attribute type 2 has an invalid length.
[   76.975650][ T1380] ieee802154 phy0 wpan0: encryption failed: -22
[   76.978580][ T1380] ieee802154 phy1 wpan1: encryption failed: -22
[   77.251138][ T6362] bond0: (slave team0): Releasing backup interface
[   77.257550][ T6362] team0 (unregistering): Port device team_slave_0 removed
[   77.264133][ T6362] team0 (unregistering): Port device team_slave_1 removed
[   77.616662][ T6391] sctp: [Deprecated]: syz.2.283 (pid 6391) Use of int in maxseg socket option.
[   77.616662][ T6391] Use struct sctp_assoc_value instead
[   77.697824][ T6397] syzkaller0: entered promiscuous mode
[   77.700810][ T6397] syzkaller0: entered allmulticast mode
[   78.280555][ T6434] Bluetooth: MGMT ver 1.23
[   78.387052][ T6441] netlink: 4 bytes leftover after parsing attributes in process `syz.2.299'.
[   78.520036][ T6453] syzkaller1: tun_chr_ioctl cmd 1074025677
[   78.524711][ T6453] syzkaller1: linktype set to 780
[   79.393862][ T6468] syzkaller0: entered promiscuous mode
[   79.395930][ T6468] syzkaller0: entered allmulticast mode
[   80.543402][ T6519] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   80.547152][ T6519] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   80.658354][ T6534] netlink: 36 bytes leftover after parsing attributes in process `syz.2.328'.
[   80.782317][ T6549] netlink: 28 bytes leftover after parsing attributes in process `syz.1.335'.
[   80.870969][ T6557] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   80.874175][ T6557] IPv6: NLM_F_CREATE should be set when creating new route
[   80.876448][ T6557] IPv6: NLM_F_CREATE should be set when creating new route
[   80.878760][ T6557] IPv6: NLM_F_CREATE should be set when creating new route
[   80.893063][ T6559] xt_hashlimit: size too large, truncated to 1048576
[   80.933254][ T6564] syzkaller0: entered promiscuous mode
[   80.935762][ T6564] syzkaller0: entered allmulticast mode
[   80.945295][ T6564] netlink: 28 bytes leftover after parsing attributes in process `syz.1.342'.
[   80.952790][ T6564] netlink: 28 bytes leftover after parsing attributes in process `syz.1.342'.
[   81.165363][ T6574] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.346'.
[   81.176656][ T6572] syzkaller0: entered promiscuous mode
[   81.184534][ T6572] syzkaller0: entered allmulticast mode
[   81.238485][ T6572] tipc: Started in network mode
[   81.240529][ T6572] tipc: Node identity 7ea61da48f23, cluster identity 4711
[   81.246915][ T6572] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.252948][ T6571] tipc: Resetting bearer <eth:syzkaller0>
[   81.275429][ T6571] tipc: Disabling bearer <eth:syzkaller0>
[   81.431870][ T6587] openvswitch: netlink: IP tunnel dst address not specified
[   81.494233][ T6594] netlink: 64 bytes leftover after parsing attributes in process `syz.2.356'.
[   81.497052][ T6594] netlink: 64 bytes leftover after parsing attributes in process `syz.2.356'.
[   81.571043][ T6598] netlink: 12 bytes leftover after parsing attributes in process `syz.2.358'.
[   81.825798][ T6620] syzkaller1: entered promiscuous mode
[   81.829616][ T6620] syzkaller1: entered allmulticast mode
[   82.128428][ T6639] netlink: 'syz.2.378': attribute type 21 has an invalid length.
[   82.131916][ T6639] netlink: 132 bytes leftover after parsing attributes in process `syz.2.378'.
[   82.855255][ T6669] ipt_rpfilter: unknown options
[   83.467617][ T6705] netlink: 'syz.0.408': attribute type 11 has an invalid length.
[   83.473866][ T6705] __nla_validate_parse: 7 callbacks suppressed
[   83.473880][ T6705] netlink: 199828 bytes leftover after parsing attributes in process `syz.0.408'.
[   83.527833][ T6709] netlink: 12 bytes leftover after parsing attributes in process `syz.2.410'.
[   83.531796][ T6709] netlink: 60 bytes leftover after parsing attributes in process `syz.2.410'.
[   83.714931][ T6723] netlink: 4 bytes leftover after parsing attributes in process `syz.2.417'.
[   83.811333][ T6729] netlink: 8 bytes leftover after parsing attributes in process `syz.1.420'.
[   83.895500][ T6739] netlink: 16 bytes leftover after parsing attributes in process `syz.2.421'.
[   84.013770][ T6748] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   84.226774][ T6770] netlink: 'syz.0.435': attribute type 9 has an invalid length.
[   84.339342][ T6773] syzkaller0: entered promiscuous mode
[   84.344417][ T6773] syzkaller0: entered allmulticast mode
[   84.358136][ T6773] 0: reclassify loop, rule prio 0, protocol 800
[   84.629475][ T6800] netlink: 20 bytes leftover after parsing attributes in process `syz.1.448'.
[   84.811636][ T6814] syzkaller0: entered promiscuous mode
[   84.813539][ T6814] syzkaller0: entered allmulticast mode
[   85.373946][ T6854] netlink: 'syz.0.472': attribute type 2 has an invalid length.
[   86.031810][ T6895] netlink: 4 bytes leftover after parsing attributes in process `syz.0.489'.
[   86.478743][ T6930] syzkaller1: entered promiscuous mode
[   86.480705][ T6930] syzkaller1: entered allmulticast mode
[   86.659449][ T6942] sctp: [Deprecated]: syz.2.511 (pid 6942) Use of int in maxseg socket option.
[   86.659449][ T6942] Use struct sctp_assoc_value instead
[   86.665189][ T6943] batadv0: entered promiscuous mode
[   86.670160][ T6943] batadv0: left promiscuous mode
[   86.872127][ T6949] Bluetooth: MGMT ver 1.23
[   86.974943][ T6977] IPv6: addrconf: prefix option has invalid lifetime
[   86.984191][ T6975] netlink: 76 bytes leftover after parsing attributes in process `syz.0.520'.
[   87.194675][ T6995] netlink: 'syz.2.529': attribute type 4 has an invalid length.
[   87.213319][   T10] cfg80211: failed to load regulatory.db
[   87.215170][ T6995] netlink: 'syz.2.529': attribute type 4 has an invalid length.
[   87.372881][ T6995] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.376151][ T6995] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.633026][ T6995] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   87.635861][ T7027] netlink: 104 bytes leftover after parsing attributes in process `syz.1.539'.
[   87.765697][   T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.775978][   T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.782942][   T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.792161][   T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   88.407112][ T7071] ip6tnl1: entered allmulticast mode
[   88.810154][ T7089] nbd: must specify an index to disconnect
[   88.965361][ T7100] ip6_vti0 speed is unknown, defaulting to 1000
[   88.976847][ T7100] ip6_vti0 speed is unknown, defaulting to 1000
[   88.983492][ T7100] ip6_vti0 speed is unknown, defaulting to 1000
[   89.042665][ T7110] __nla_validate_parse: 3 callbacks suppressed
[   89.042682][ T7110] netlink: 76 bytes leftover after parsing attributes in process `syz.1.573'.
[   89.127089][ T7115] syzkaller0: entered promiscuous mode
[   89.128460][ T7100] infiniband syz2: set down
[   89.134664][ T7100] infiniband syz2: added ip6_vti0
[   89.134727][ T7115] syzkaller0: entered allmulticast mode
[   89.145977][   T10] ip6_vti0 speed is unknown, defaulting to 1000
[   89.156931][ T7100] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[   89.162298][ T7100] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[   89.170343][ T7100] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[   89.208288][ T7100] RDS/IB: syz2: added
[   89.211644][ T7100] smc: adding ib device syz2 with port count 1
[   89.214227][ T7100] smc:    ib device syz2 port 1 has no pnetid
[   89.218676][ T5668] ip6_vti0 speed is unknown, defaulting to 1000
[   89.224905][ T7100] ip6_vti0 speed is unknown, defaulting to 1000
[   89.369974][   T13] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   89.380808][   T13] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   89.384943][ T7128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.581'.
[   89.399480][ T5668] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   89.496685][ T7134] netlink: 36 bytes leftover after parsing attributes in process `syz.1.584'.
[   89.520001][ T7100] ip6_vti0 speed is unknown, defaulting to 1000
[   89.660216][ T7100] ip6_vti0 speed is unknown, defaulting to 1000
[   89.669128][   T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   89.793719][ T7141] netlink: 292 bytes leftover after parsing attributes in process `syz.1.585'.
[   89.864557][ T7144] netlink: 'syz.2.586': attribute type 6 has an invalid length.
[   89.917404][ T7135] infiniband syz0: set active
[   89.922035][ T7135] infiniband syz0: added bridge_slave_1
[   89.936028][ T7135] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[   89.942702][ T7135] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[   89.948557][ T7135] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[   89.962188][ T7135] RDS/IB: syz0: added
[   89.963628][ T7135] smc: adding ib device syz0 with port count 1
[   89.966276][ T7135] smc:    ib device syz0 port 1 has no pnetid
[   90.341169][   T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   90.593323][ T7165] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   90.620653][ T7173] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   91.133297][ T7211] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[   91.137438][ T7211] bond1 (unregistering): Released all slaves
[   91.492816][ T7243] netlink: 'syz.2.622': attribute type 1 has an invalid length.
[   91.825272][ T7274] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   91.828313][ T7274] batadv_slave_0: entered promiscuous mode
[   91.830747][ T7274] batadv_slave_0: entered allmulticast mode
[   92.058052][ T7296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.655'.
[   92.061860][ T7296] netlink: 24 bytes leftover after parsing attributes in process `syz.1.655'.
[   92.274447][ T7303] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   92.313345][ T7303] team0: entered promiscuous mode
[   92.315507][ T7303] team_slave_0: entered promiscuous mode
[   92.319848][ T7303] team_slave_1: entered promiscuous mode
[   92.323899][ T7303] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   92.830315][ T7323] netlink: 144 bytes leftover after parsing attributes in process `syz.2.667'.
[   93.059087][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   93.128933][ T4999] Bluetooth: hci2: command tx timeout
[   93.310845][ T7340] netlink: 32 bytes leftover after parsing attributes in process `syz.0.675'.
[   94.023031][ T7356] netlink: 16 bytes leftover after parsing attributes in process `syz.2.681'.
[   94.027916][ T7356] netlink: 16 bytes leftover after parsing attributes in process `syz.2.681'.
[   94.050990][ T7356] __nla_validate_parse: 3 callbacks suppressed
[   94.051002][ T7356] netlink: 16 bytes leftover after parsing attributes in process `syz.2.681'.
[   94.059850][ T7356] netlink: 16 bytes leftover after parsing attributes in process `syz.2.681'.
[   94.070425][ T7356] netlink: 16 bytes leftover after parsing attributes in process `syz.2.681'.
[   94.076915][ T7356] netlink: 16 bytes leftover after parsing attributes in process `syz.2.681'.
[   94.084245][ T7356] netlink: 16 bytes leftover after parsing attributes in process `syz.2.681'.
[   94.091533][ T7356] netlink: 16 bytes leftover after parsing attributes in process `syz.2.681'.
[   94.110156][ T7356] netlink: 16 bytes leftover after parsing attributes in process `syz.2.681'.
[   94.115994][ T7356] netlink: 16 bytes leftover after parsing attributes in process `syz.2.681'.
[   94.121570][ T7356] netlink: 16 bytes leftover after parsing attributes in process `syz.2.681'.
[   94.126637][ T7356] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.131033][ T7356] netlink: 16 bytes leftover after parsing attributes in process `syz.2.681'.
[   94.136224][ T7356] team0: left promiscuous mode
[   94.138277][ T7356] team_slave_0: left promiscuous mode
[   94.141177][ T7356] team_slave_1: left promiscuous mode
[   94.148026][ T7356] 8021q: adding VLAN 0 to HW filter on device team0
[   94.899236][ T7356] 8021q: adding VLAN 0 to HW filter on device batadv0
[   95.020910][ T7356] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.029087][ T7356] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   95.033419][ T7356] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   95.044094][ T7356] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue
[   95.049325][ T7356] IPv6: virt_wifi0: Failed to add prefix route for address fe80::2f; dropping
[   95.053633][ T7356] veth1_vlan: left promiscuous mode
[   95.057751][ T7356] veth0_vlan: left promiscuous mode
[   95.067263][ T7356] veth0_vlan: entered promiscuous mode
[   95.072848][ T7356] veth1_vlan: entered promiscuous mode
[   95.078759][ T7356] IPv6: ipvlan1: Failed to add prefix route for address fe80::37; dropping
[   95.083504][ T7356] veth1_macvtap: left promiscuous mode
[   95.090177][ T7356] veth0_macvtap: left promiscuous mode
[   95.098228][ T7356] veth0_macvtap: entered promiscuous mode
[   95.108382][ T7356] veth1_macvtap: entered promiscuous mode
[   95.141796][ T7356] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   95.145322][ T7356] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   95.152336][ T7356] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   95.155070][ T7356] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   95.160171][ T5668] ip6_vti0 speed is unknown, defaulting to 1000
[   95.166772][ T5668] syz2: Port: 1 Link ACTIVE
[   95.197330][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.199668][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.212711][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.215077][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.265140][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.272154][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.301236][  T797] ip6_vti0 speed is unknown, defaulting to 1000
[   95.307465][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.312776][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.844744][ T7433] x_tables: duplicate underflow at hook 3
[   95.998636][   T13] tipc: Subscription rejected, illegal request
[   96.067755][ T7461] tipc: Started in network mode
[   96.073319][ T7461] tipc: Node identity ff, cluster identity 4711
[   96.083495][ T7461] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   96.277074][ T7483] netlink: 'syz.1.731': attribute type 10 has an invalid length.
[   96.303653][ T7483] team0: Port device geneve1 added
[   96.376650][ T7490] xt_l2tp: v2 doesn't support IP mode
[   96.792560][ T7524] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.795858][ T7524] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.806399][ T7588] xt_TPROXY: Can be used only with -p tcp or -p udp
[   98.043557][ T7604] ip6_vti0 speed is unknown, defaulting to 1000
[   98.327213][ T7626] sctp: [Deprecated]: syz.2.795 (pid 7626) Use of struct sctp_assoc_value in delayed_ack socket option.
[   98.327213][ T7626] Use struct sctp_sack_info instead
[   98.554163][ T5675] IPVS: starting estimator thread 0...
[   98.558565][ T7640] tipc: Enabled bearer <udp:s>, priority 10
[   98.640918][ T7641] IPVS: using max 48 ests per chain, 115200 per kthread
[   98.862849][ T7657] bond1: entered promiscuous mode
[   98.865654][ T7657] 8021q: adding VLAN 0 to HW filter on device bond1
[   98.872946][ T7653] block nbd1: server does not support multiple connections per device.
[   98.880875][ T7653] block nbd1: shutting down sockets
[   99.044252][ T7653] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   99.175611][ T7016] syz0: Port: 1 Link DOWN
[   99.175666][   T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.184723][   T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.192235][   T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.204060][   T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.263617][   T33] audit: type=1804 audit(1778672650.633:4): pid=7666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.811" name="/newroot/248/cgroup.controllers" dev="tmpfs" ino=1270 res=1 errno=0
[   99.271939][   T33] audit: type=1800 audit(1778672650.633:5): pid=7666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.811" name="cgroup.controllers" dev="tmpfs" ino=1270 res=0 errno=0
[   99.317333][ T7668] ip6_vti0 speed is unknown, defaulting to 1000
[   99.678118][ T7016] tipc: Node number set to 4278190080
[   99.954168][ T7694] __nla_validate_parse: 62 callbacks suppressed
[   99.954182][ T7694] netlink: 104 bytes leftover after parsing attributes in process `syz.0.822'.
[  100.294010][ T7715] netlink: 20 bytes leftover after parsing attributes in process `syz.0.832'.
[  100.468140][ T7724] netlink: 280 bytes leftover after parsing attributes in process `syz.0.836'.
[  100.834872][ T7757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.850'.
[  100.838116][ T7757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.850'.
[  101.290670][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  101.407885][ T7813] netlink: 108 bytes leftover after parsing attributes in process `syz.1.855'.
[  101.703344][ T7840] netlink: 732 bytes leftover after parsing attributes in process `syz.1.859'.
[  101.706423][ T7840] netlink: 732 bytes leftover after parsing attributes in process `syz.1.859'.
[  101.785801][ T7848] netlink: 12 bytes leftover after parsing attributes in process `syz.1.862'.
[  101.851837][ T7852] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.864'.
[  101.909623][ T7857] netlink: 'syz.1.866': attribute type 14 has an invalid length.
[  101.916926][ T7857] netlink: 'syz.1.866': attribute type 11 has an invalid length.
[  102.076157][ T7871] ip6_vti0 speed is unknown, defaulting to 1000
[  102.152212][ T7883] netlink: 'syz.1.878': attribute type 1 has an invalid length.
[  102.237286][ T7891] netlink: 'syz.0.882': attribute type 3 has an invalid length.
[  103.338345][ T5666] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  103.345760][ T5666] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  103.352865][ T5666] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  103.360306][ T5666] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  103.376000][ T5675] hid-generic 0005:846D:0A0E.0001: item fetching failed at offset 0/1
[  103.381447][ T5675] hid-generic 0005:846D:0A0E.0001: probe with driver hid-generic failed with error -22
[  103.436731][ T7930] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  103.915110][ T8035] syzkaller0: entered promiscuous mode
[  103.916981][ T8035] syzkaller0: entered allmulticast mode
[  104.307044][ T8068] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  105.073870][ T8073] team0 (unregistering): Port device team_slave_0 removed
[  105.086322][ T8073] team0 (unregistering): Port device team_slave_1 removed
[  105.236553][ T8087] syzkaller1: entered promiscuous mode
[  105.241094][ T8087] syzkaller1: entered allmulticast mode
[  105.533008][ T8115] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  105.545375][ T8113] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  105.670032][ T8129] __nla_validate_parse: 12 callbacks suppressed
[  105.670052][ T8129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.988'.
[  105.732743][ T8113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.981'.
[  105.786052][ T8138] netlink: 12 bytes leftover after parsing attributes in process `syz.0.993'.
[  105.868297][ T8149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.998'.
[  106.307787][ T8190] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1018'.
[  106.406908][ T8190] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) !
[  106.411492][ T5881] block nbd1: Receive control failed (result -32)
[  106.595124][ T8211] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  106.598336][ T8211] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  106.798926][ T8234] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1039'.
[  107.027467][ T8246] netlink: 'syz.1.1045': attribute type 10 has an invalid length.
[  107.035592][ T8246] syz_tun: entered promiscuous mode
[  107.044062][ T8246] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  107.055112][ T8246] netlink: 41 bytes leftover after parsing attributes in process `syz.1.1045'.
[  107.061899][ T8246] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1045'.
[  107.068755][ T8246] netlink: 41 bytes leftover after parsing attributes in process `syz.1.1045'.
[  107.229956][ T8260] xt_hashlimit: size too large, truncated to 1048576
[  107.892464][ T8279] bond2: option lacp_active: invalid value (8)
[  107.897469][ T8279] bond2 (unregistering): Released all slaves
[  108.216204][ T8300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1065'.
[  108.284247][ T8307] ip6_vti0 speed is unknown, defaulting to 1000
[  109.203696][ T8365] xt_TPROXY: Can be used only with -p tcp or -p udp
[  109.384338][ T8379] syzkaller0: entered promiscuous mode
[  109.386380][ T8379] syzkaller0: entered allmulticast mode
[  109.505293][ T8386] netlink: 'syz.0.1101': attribute type 12 has an invalid length.
[  109.508372][ T8386] netlink: 'syz.0.1101': attribute type 11 has an invalid length.
[  110.091118][ T8444] bond2: option miimon: invalid value (18446744073709551607)
[  110.094981][ T8444] bond2: option miimon: allowed values 0 - 2147483647
[  110.102161][ T8444] bond2 (unregistering): Released all slaves
[  110.192494][ T5881] block nbd2: Receive control failed (result -32)
[  110.687010][ T8493] netlink: 'syz.1.1148': attribute type 1 has an invalid length.
[  110.690104][ T8493] netlink: 'syz.1.1148': attribute type 2 has an invalid length.
[  110.693025][ T8493] netlink: 'syz.1.1148': attribute type 1 has an invalid length.
[  110.695829][ T8493] netlink: 'syz.1.1148': attribute type 3 has an invalid length.
[  110.698486][ T8493] __nla_validate_parse: 7 callbacks suppressed
[  110.698495][ T8493] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1148'.
[  110.842889][ T8501] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1150'.
[  111.059102][ T8503] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.062349][ T8503] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.109167][ T8504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1150'.
[  111.172193][ T8503] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  111.303694][ T8504] vlan2: entered promiscuous mode
[  111.310001][ T8504] bridge0: entered promiscuous mode
[  111.330402][ T8507] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  111.336938][ T5666] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  111.348982][ T5666] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  111.359912][ T5666] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  111.364047][ T5666] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  111.394283][ T5881] block nbd3: Receive control failed (result -32)
[  111.397829][   T55] block nbd3: Receive control failed (result -32)
[  111.624492][ T8530] IPv6: Can't replace route, no match found
[  111.625882][ T8532] IPv6: NLM_F_CREATE should be specified when creating new route
[  111.633944][ T8530] IPv6: Can't replace route, no match found
[  111.667772][ T8536] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1165'.
[  111.714673][ T8540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1168'.
[  111.729174][ T8540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1168'.
[  111.740401][ T8540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1168'.
[  111.748495][ T8540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1168'.
[  111.811918][ T8552] netlink: 'syz.0.1173': attribute type 10 has an invalid length.
[  111.815837][ T8552] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1173'.
[  111.969819][ T8559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1176'.
[  111.973671][ T8559] netlink: 'syz.2.1176': attribute type 18 has an invalid length.
[  112.437222][    C1] vcan0: j1939_tp_rxtimer: 0xffff88817359a000: rx timeout, send abort
[  112.937359][    C1] vcan0: j1939_tp_rxtimer: 0xffff888173599c00: rx timeout, send abort
[  112.942201][    C1] vcan0: j1939_tp_rxtimer: 0xffff88817359a000: abort rx timeout. Force session deactivation
[  113.058267][ T8612] syzkaller0: entered promiscuous mode
[  113.061118][ T8614] netlink: 'syz.0.1200': attribute type 1 has an invalid length.
[  113.065143][ T8612] syzkaller0: entered allmulticast mode
[  113.087955][ T8612] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) !
[  113.440746][    C1] vcan0: j1939_tp_rxtimer: 0xffff888173599c00: abort rx timeout. Force session deactivation
[  114.104930][ T8689] syzkaller0: entered promiscuous mode
[  114.107342][ T8689] syzkaller0: entered allmulticast mode
[  114.433216][ T8701] xt_hashlimit: size too large, truncated to 1048576
[  114.705065][ T8699] ip6gre1: entered promiscuous mode
[  114.707225][ T8699] ip6gre1: entered allmulticast mode
[  116.526940][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.531595][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.975103][ T8836] macvlan1: entered allmulticast mode
[  117.077136][ T8852] __nla_validate_parse: 8 callbacks suppressed
[  117.077152][ T8852] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1302'.
[  117.180457][ T8856] block nbd4: server does not support multiple connections per device.
[  117.186707][ T8856] block nbd4: shutting down sockets
[  117.197639][ T8858] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1305'.
[  117.360326][ T8873] TC_ACT_REPEAT abuse ?
[  117.469633][ T8878] block nbd4: Unsupported socket: should be TCP or UNIX.
[  117.688138][ T8891] netlink: 'syz.2.1319': attribute type 7 has an invalid length.
[  117.692223][ T8891] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1319'.
[  117.756289][ T8895] netlink: 'syz.2.1321': attribute type 1 has an invalid length.
[  117.879423][ T8904] syzkaller0: entered promiscuous mode
[  117.882094][ T8904] syzkaller0: entered allmulticast mode
[  119.206203][ T8952] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  119.236904][ T8952] syzkaller0: entered promiscuous mode
[  119.239286][ T8952] syzkaller0: entered allmulticast mode
[  119.241689][ T8952] tipc: Resetting bearer <eth:syzkaller0>
[  119.271275][ T8951] tipc: Resetting bearer <eth:syzkaller0>
[  120.204427][ T8951] tipc: Disabling bearer <eth:syzkaller0>
[  120.313724][ T4999] Bluetooth: hci2: link tx timeout
[  120.317161][ T4999] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  120.381546][ T8983] netlink: 6024 bytes leftover after parsing attributes in process `syz.0.1357'.
[  120.706302][ T9002] xt_hashlimit: size too large, truncated to 1048576
[  120.970942][ T9024] netlink: 'syz.2.1375': attribute type 13 has an invalid length.
[  121.016189][ T9026] netlink: 'syz.1.1377': attribute type 1 has an invalid length.
[  121.055421][ T9024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1375'.
[  121.409782][ T9045] xt_cgroup: invalid path, errno=-2
[  121.426891][ T9048] netlink: 'syz.1.1386': attribute type 10 has an invalid length.
[  121.433683][ T9048] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  121.437923][ T9048] team0: Port device netdevsim1 added
[  121.593136][ T9062] 
[  121.594157][ T9062] ======================================================
[  121.596644][ T9062] WARNING: possible circular locking dependency detected
[  121.598825][ T9062] syzkaller #0 Not tainted
[  121.600272][ T9062] ------------------------------------------------------
[  121.602696][ T9062] syz.2.1393/9062 is trying to acquire lock:
[  121.604747][ T9062] ffffffff8ea85520 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x4a/0x690
[  121.607737][ T9062] 
[  121.607737][ T9062] but task is already holding lock:
[  121.609995][ T9062] ffff88810b8cb860 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: mptcp_connect+0x4c3/0x830
[  121.613024][ T9062] 
[  121.613024][ T9062] which lock already depends on the new lock.
[  121.613024][ T9062] 
[  121.616421][ T9062] 
[  121.616421][ T9062] the existing dependency chain (in reverse order) is:
[  121.619291][ T9062] 
[  121.619291][ T9062] -> #7 (k-sk_lock-AF_INET6){+.+.}-{0:0}:
[  121.621972][ T9062]        lock_sock_nested+0x41/0x100
[  121.623632][ T9062]        __inet6_bind+0x30c/0xf60
[  121.625179][ T9062]        mptcp_bind+0x110/0x1d0
[  121.626773][ T9062]        __sys_bind+0x2e3/0x410
[  121.628691][ T9062]        __x64_sys_bind+0x7a/0x90
[  121.630627][ T9062]        do_syscall_64+0x15f/0xf80
[  121.632323][ T9062]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  121.634326][ T9062] 
[  121.634326][ T9062] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  121.636722][ T9062]        lock_sock_nested+0x41/0x100
[  121.638412][ T9062]        inet_shutdown+0x6a/0x390
[  121.639988][ T9062]        nbd_mark_nsock_dead+0x2e9/0x560
[  121.641754][ T9062]        sock_shutdown+0x15e/0x260
[  121.643404][ T9062]        nbd_clear_sock+0x24/0x170
[  121.644973][ T9062]        nbd_config_put+0x2dd/0x580
[  121.646544][ T9062]        nbd_genl_connect+0x19d5/0x1cf0
[  121.648219][ T9062]        genl_family_rcv_msg_doit+0x22a/0x330
[  121.650224][ T9062]        genl_rcv_msg+0x61c/0x7a0
[  121.651808][ T9062]        netlink_rcv_skb+0x232/0x4b0
[  121.653454][ T9062]        genl_rcv+0x28/0x40
[  121.654851][ T9062]        netlink_unicast+0x75c/0x8e0
[  121.656518][ T9062]        netlink_sendmsg+0x813/0xb40
[  121.658169][ T9062]        ____sys_sendmsg+0x972/0x9f0
[  121.659889][ T9062]        ___sys_sendmsg+0x2a5/0x360
[  121.661532][ T9062]        __x64_sys_sendmsg+0x1bd/0x2a0
[  121.663218][ T9062]        do_syscall_64+0x15f/0xf80
[  121.664782][ T9062]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  121.666735][ T9062] 
[  121.666735][ T9062] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[  121.669406][ T9062]        __mutex_lock+0x1a3/0x1550
[  121.671380][ T9062]        nbd_queue_rq+0x37b/0x1100
[  121.673286][ T9062]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  121.675226][ T9062]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  121.677335][ T9062]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  121.679469][ T9062]        blk_mq_run_hw_queue+0x348/0x4f0
[  121.681450][ T9062]        blk_mq_dispatch_list+0xd16/0xe10
[  121.683222][ T9062]        blk_mq_flush_plug_list+0x48d/0x570
[  121.685136][ T9062]        __blk_flush_plug+0x3ed/0x4d0
[  121.686776][ T9062]        __submit_bio+0x28d/0x580
[  121.688379][ T9062]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  121.690273][ T9062]        block_read_full_folio+0x599/0x830
[  121.692065][ T9062]        filemap_read_folio+0x137/0x3b0
[  121.693771][ T9062]        do_read_cache_folio+0x358/0x590
[  121.695478][ T9062]        read_part_sector+0xb6/0x2b0
[  121.697093][ T9062]        adfspart_check_ICS+0xb1/0x960
[  121.698906][ T9062]        bdev_disk_changed+0x817/0x1770
[  121.700750][ T9062]        blkdev_get_whole+0x380/0x510
[  121.702449][ T9062]        bdev_open+0x31e/0xd30
[  121.703913][ T9062]        blkdev_open+0x470/0x610
[  121.705427][ T9062]        do_dentry_open+0x785/0x14e0
[  121.707040][ T9062]        vfs_open+0x3b/0x340
[  121.708474][ T9062]        path_openat+0x2e08/0x3860
[  121.710040][ T9062]        do_file_open+0x23e/0x4a0
[  121.711607][ T9062]        do_sys_openat2+0x113/0x200
[  121.713376][ T9062]        __x64_sys_openat+0x138/0x170
[  121.715034][ T9062]        do_syscall_64+0x15f/0xf80
[  121.716950][ T9062]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  121.719388][ T9062] 
[  121.719388][ T9062] -> #4 (&cmd->lock){+.+.}-{4:4}:
[  121.721969][ T9062]        __mutex_lock+0x1a3/0x1550
[  121.723608][ T9062]        nbd_queue_rq+0xc6/0x1100
[  121.725162][ T9062]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  121.727037][ T9062]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  121.729419][ T9062]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  121.731657][ T9062]        blk_mq_run_hw_queue+0x348/0x4f0
[  121.733696][ T9062]        blk_mq_dispatch_list+0xd16/0xe10
[  121.735631][ T9062]        blk_mq_flush_plug_list+0x48d/0x570
[  121.737466][ T9062]        __blk_flush_plug+0x3ed/0x4d0
[  121.739112][ T9062]        __submit_bio+0x28d/0x580
[  121.740662][ T9062]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  121.742575][ T9062]        block_read_full_folio+0x599/0x830
[  121.744630][ T9062]        filemap_read_folio+0x137/0x3b0
[  121.746703][ T9062]        do_read_cache_folio+0x358/0x590
[  121.748670][ T9062]        read_part_sector+0xb6/0x2b0
[  121.750426][ T9062]        adfspart_check_ICS+0xb1/0x960
[  121.752115][ T9062]        bdev_disk_changed+0x817/0x1770
[  121.753869][ T9062]        blkdev_get_whole+0x380/0x510
[  121.755669][ T9062]        bdev_open+0x31e/0xd30
[  121.757275][ T9062]        blkdev_open+0x470/0x610
[  121.758884][ T9062]        do_dentry_open+0x785/0x14e0
[  121.760589][ T9062]        vfs_open+0x3b/0x340
[  121.762027][ T9062]        path_openat+0x2e08/0x3860
[  121.763824][ T9062]        do_file_open+0x23e/0x4a0
[  121.765582][ T9062]        do_sys_openat2+0x113/0x200
[  121.767170][ T9062]        __x64_sys_openat+0x138/0x170
[  121.768866][ T9062]        do_syscall_64+0x15f/0xf80
[  121.770573][ T9062]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  121.772672][ T9062] 
[  121.772672][ T9062] -> #3 (set->srcu){.+.+}-{0:0}:
[  121.775161][ T9062]        __synchronize_srcu+0xca/0x300
[  121.777147][ T9062]        elevator_switch+0x1e8/0x7a0
[  121.779167][ T9062]        elevator_change+0x2cc/0x450
[  121.781037][ T9062]        elevator_set_default+0x36c/0x430
[  121.782811][ T9062]        blk_register_queue+0x3e9/0x4e0
[  121.784577][ T9062]        __add_disk+0x677/0xd50
[  121.786291][ T9062]        add_disk_fwnode+0xfb/0x480
[  121.788185][ T9062]        nbd_dev_add+0x72c/0xb50
[  121.789793][ T9062]        nbd_init+0x168/0x1f0
[  121.791697][ T9062]        do_one_initcall+0x250/0x870
[  121.793818][ T9062]        do_initcall_level+0x104/0x190
[  121.796139][ T9062]        do_initcalls+0x59/0xa0
[  121.798157][ T9062]        kernel_init_freeable+0x2a6/0x3e0
[  121.800437][ T9062]        kernel_init+0x1d/0x1d0
[  121.802366][ T9062]        ret_from_fork+0x514/0xb70
[  121.804456][ T9062]        ret_from_fork_asm+0x1a/0x30
[  121.806481][ T9062] 
[  121.806481][ T9062] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[  121.809344][ T9062]        __mutex_lock+0x1a3/0x1550
[  121.810944][ T9062]        elevator_change+0x1b3/0x450
[  121.812602][ T9062]        elevator_set_none+0xb5/0x140
[  121.814260][ T9062]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  121.816178][ T9062]        nbd_start_device+0x17f/0xb10
[  121.817968][ T9062]        nbd_genl_connect+0x165b/0x1cf0
[  121.819915][ T9062]        genl_family_rcv_msg_doit+0x22a/0x330
[  121.822266][ T9062]        genl_rcv_msg+0x61c/0x7a0
[  121.824153][ T9062]        netlink_rcv_skb+0x232/0x4b0
[  121.826157][ T9062]        genl_rcv+0x28/0x40
[  121.827788][ T9062]        netlink_unicast+0x75c/0x8e0
[  121.829523][ T9062]        netlink_sendmsg+0x813/0xb40
[  121.831521][ T9062]        ____sys_sendmsg+0x972/0x9f0
[  121.833665][ T9062]        ___sys_sendmsg+0x2a5/0x360
[  121.835598][ T9062]        __x64_sys_sendmsg+0x1bd/0x2a0
[  121.837377][ T9062]        do_syscall_64+0x15f/0xf80
[  121.839087][ T9062]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  121.841285][ T9062] 
[  121.841285][ T9062] -> #1 (&q->q_usage_counter(io)#52){++++}-{0:0}:
[  121.844299][ T9062]        blk_alloc_queue+0x546/0x680
[  121.846059][ T9062]        __blk_mq_alloc_disk+0x197/0x390
[  121.847783][ T9062]        nbd_dev_add+0x499/0xb50
[  121.849324][ T9062]        nbd_init+0x168/0x1f0
[  121.850780][ T9062]        do_one_initcall+0x250/0x870
[  121.852418][ T9062]        do_initcall_level+0x104/0x190
[  121.854093][ T9062]        do_initcalls+0x59/0xa0
[  121.855594][ T9062]        kernel_init_freeable+0x2a6/0x3e0
[  121.857356][ T9062]        kernel_init+0x1d/0x1d0
[  121.858920][ T9062]        ret_from_fork+0x514/0xb70
[  121.860535][ T9062]        ret_from_fork_asm+0x1a/0x30
[  121.862286][ T9062] 
[  121.862286][ T9062] -> #0 (fs_reclaim){+.+.}-{0:0}:
[  121.864547][ T9062]        __lock_acquire+0x15a5/0x2cf0
[  121.866190][ T9062]        lock_acquire+0x106/0x350
[  121.867776][ T9062]        fs_reclaim_acquire+0x71/0x100
[  121.869752][ T9062]        kmem_cache_alloc_node_noprof+0x4a/0x690
[  121.871895][ T9062]        __alloc_skb+0x1d0/0x7d0
[  121.873392][ T9062]        tcp_stream_alloc_skb+0x3f/0x580
[  121.875618][ T9062]        tcp_connect+0x15a9/0x53a0
[  121.877297][ T9062]        tcp_v6_connect+0x1295/0x1b10
[  121.878973][ T9062]        mptcp_connect+0x56b/0x830
[  121.880592][ T9062]        __inet_stream_connect+0x25a/0xdd0
[  121.882564][ T9062]        inet_stream_connect+0x66/0xa0
[  121.884331][ T9062]        __sys_connect+0x312/0x450
[  121.885923][ T9062]        __x64_sys_connect+0x7a/0x90
[  121.887534][ T9062]        do_syscall_64+0x15f/0xf80
[  121.889113][ T9062]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  121.891468][ T9062] 
[  121.891468][ T9062] other info that might help us debug this:
[  121.891468][ T9062] 
[  121.894847][ T9062] Chain exists of:
[  121.894847][ T9062]   fs_reclaim --> sk_lock-AF_INET6 --> k-sk_lock-AF_INET6
[  121.894847][ T9062] 
[  121.898941][ T9062]  Possible unsafe locking scenario:
[  121.898941][ T9062] 
[  121.901331][ T9062]        CPU0                    CPU1
[  121.903467][ T9062]        ----                    ----
[  121.905513][ T9062]   lock(k-sk_lock-AF_INET6);
[  121.907023][ T9062]                                lock(sk_lock-AF_INET6);
[  121.909113][ T9062]                                lock(k-sk_lock-AF_INET6);
[  121.911383][ T9062]   lock(fs_reclaim);
[  121.912750][ T9062] 
[  121.912750][ T9062]  *** DEADLOCK ***
[  121.912750][ T9062] 
[  121.915858][ T9062] 2 locks held by syz.2.1393/9062:
[  121.917940][ T9062]  #0: ffff8881083f8260 (sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0
[  121.921963][ T9062]  #1: ffff88810b8cb860 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: mptcp_connect+0x4c3/0x830
[  121.925859][ T9062] 
[  121.925859][ T9062] stack backtrace:
[  121.928108][ T9062] CPU: 0 UID: 0 PID: 9062 Comm: syz.2.1393 Not tainted syzkaller #0 PREEMPT(full) 
[  121.928125][ T9062] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  121.928134][ T9062] Call Trace:
[  121.928142][ T9062]  <TASK>
[  121.928149][ T9062]  dump_stack_lvl+0xe8/0x150
[  121.928167][ T9062]  print_circular_bug+0x2e1/0x300
[  121.928184][ T9062]  check_noncircular+0x12e/0x150
[  121.928233][ T9062]  __lock_acquire+0x15a5/0x2cf0
[  121.928250][ T9062]  ? __pfx_hlock_conflict+0x10/0x10
[  121.928267][ T9062]  ? __bfs+0x153/0x290
[  121.928283][ T9062]  ? kmem_cache_alloc_node_noprof+0x4a/0x690
[  121.928300][ T9062]  lock_acquire+0x106/0x350
[  121.928313][ T9062]  ? kmem_cache_alloc_node_noprof+0x4a/0x690
[  121.928331][ T9062]  ? ip6_dst_check+0xe2/0x7e0
[  121.928350][ T9062]  fs_reclaim_acquire+0x71/0x100
[  121.928368][ T9062]  ? kmem_cache_alloc_node_noprof+0x4a/0x690
[  121.928384][ T9062]  kmem_cache_alloc_node_noprof+0x4a/0x690
[  121.928401][ T9062]  ? ip6_default_advmss+0x80/0x3b0
[  121.928414][ T9062]  ? __alloc_skb+0x1d0/0x7d0
[  121.928439][ T9062]  __alloc_skb+0x1d0/0x7d0
[  121.928456][ T9062]  tcp_stream_alloc_skb+0x3f/0x580
[  121.928471][ T9062]  ? __asan_memset+0x22/0x50
[  121.928487][ T9062]  tcp_connect+0x15a9/0x53a0
[  121.928515][ T9062]  ? __pfx_tcp_connect+0x10/0x10
[  121.928533][ T9062]  ? seqcount_lockdep_reader_access+0xa9/0x100
[  121.928553][ T9062]  ? kvm_clock_get_cycles+0x47/0x60
[  121.928573][ T9062]  ? __asan_memset+0x22/0x50
[  121.928588][ T9062]  ? __pfx_tcp_fastopen_defer_connect+0x10/0x10
[  121.928605][ T9062]  ? inet6_hash_connect+0xeb/0x170
[  121.928619][ T9062]  tcp_v6_connect+0x1295/0x1b10
[  121.928633][ T9062]  ? do_raw_spin_lock+0xe1/0x2f0
[  121.928652][ T9062]  ? __pfx_tcp_v6_connect+0x10/0x10
[  121.928664][ T9062]  ? mptcp_connect+0x4c3/0x830
[  121.928679][ T9062]  ? __local_bh_enable_ip+0xd0/0x130
[  121.928693][ T9062]  mptcp_connect+0x56b/0x830
[  121.928711][ T9062]  __inet_stream_connect+0x25a/0xdd0
[  121.928732][ T9062]  ? do_raw_spin_lock+0x12b/0x2f0
[  121.928748][ T9062]  ? lock_sock_nested+0x6a/0x100
[  121.928761][ T9062]  ? __pfx___inet_stream_connect+0x10/0x10
[  121.928780][ T9062]  ? inet_stream_connect+0x51/0xa0
[  121.928797][ T9062]  ? __local_bh_enable_ip+0xd0/0x130
[  121.928810][ T9062]  inet_stream_connect+0x66/0xa0
[  121.928828][ T9062]  __sys_connect+0x312/0x450
[  121.928843][ T9062]  ? __pfx___sys_connect+0x10/0x10
[  121.928862][ T9062]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  121.928875][ T9062]  __x64_sys_connect+0x7a/0x90
[  121.928891][ T9062]  do_syscall_64+0x15f/0xf80
[  121.928908][ T9062]  ? trace_irq_disable+0x3b/0x140
[  121.928927][ T9062]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  121.928940][ T9062] RIP: 0033:0x7f547b19cdd9
[  121.928955][ T9062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  121.928965][ T9062] RSP: 002b:00007f547bf7a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  121.928979][ T9062] RAX: ffffffffffffffda RBX: 00007f547b415fa0 RCX: 00007f547b19cdd9
[  121.928989][ T9062] RDX: 000000000000001c RSI: 0000200000000180 RDI: 0000000000000003
[  121.928997][ T9062] RBP: 00007f547b232d69 R08: 0000000000000000 R09: 0000000000000000
[  121.929006][ T9062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  121.929014][ T9062] R13: 00007f547b416038 R14: 00007f547b415fa0 R15: 00007ffdc8947ca8
[  121.929028][ T9062]  </TASK>
[  122.329044][   T54] Bluetooth: hci2: command 0x0406 tx timeout
