last executing test programs:

1m39.884790053s ago: executing program 0 (id=462):
syz_emit_ethernet(0x82, &(0x7f0000000040)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0)

1m39.836561373s ago: executing program 0 (id=464):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r1, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@cgroup, r0, 0xd, 0x10, 0x0, @void, @value=r1}, 0x20)

1m38.925873908s ago: executing program 0 (id=482):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x17, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000080850000001700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

1m38.721264615s ago: executing program 0 (id=485):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001)
setsockopt$sock_attach_bpf(r0, 0x1, 0x24, &(0x7f0000000000), 0x4)

1m38.64121439s ago: executing program 0 (id=486):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='scalable\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

1m38.34071921s ago: executing program 1 (id=489):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xf, 0x4, 0x4, 0x12}, 0x50)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000004c0)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0500"], 0x10)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[], 0x10)

1m38.261826945s ago: executing program 1 (id=490):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x44, r1, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xfeda, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x44}}, 0x20000000)

1m38.084655231s ago: executing program 2 (id=493):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0)
close(0x3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x8, 0x4, 0x4, 0x9}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ipvlan1\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {0xa, 0x0, 0xa1, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1={0xff, 0x5}}, @IFA_FLAGS={0x8, 0x8, 0x402}]}, 0x34}}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0xbc}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
r6 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$inet_buf(r6, 0x0, 0x2b, &(0x7f0000000040)="b4433c908668fd848967db691bb6e2def187e69f73bed0711f5ba4277a7aaf1729", 0x21)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000c4000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010200f8ffffffb702000008000000b703000000000000850000006b00000095"], &(0x7f00000005c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1m37.981953346s ago: executing program 1 (id=494):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_delroute={0x24, 0x19, 0x115, 0x70bd2c, 0x0, {0x2, 0x18, 0x80, 0x0, 0x0, 0x3, 0xff, 0x0, 0x1000}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

1m37.916408535s ago: executing program 1 (id=495):
r0 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000340)="ff020400feffffffb1b800001000006cf59e2e92b4684425c99df51d595a7dc4", 0x20)

1m37.82648725s ago: executing program 1 (id=496):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000340)=""/169, 0xa9}], 0x1}, 0x1}], 0x1, 0x832b, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
sendto$inet6(r1, &(0x7f0000001500)="0d0ad7c36d6617", 0x7, 0x6d91fb6102d8990d, 0x0, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
nanosleep(0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0)

1m37.683987731s ago: executing program 2 (id=497):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r0, 0x0, 0x1c, 0x0, &(0x7f0000000280)="61dfb0020866c667fc53b926558305608ffc450394321545000043ae", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m37.683651929s ago: executing program 2 (id=498):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd2c, 0x3500, 0xa, 0x1, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0)

1m37.414282806s ago: executing program 2 (id=499):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x48}, 0x1, 0x0, 0x0, 0x8840}, 0x80)

1m37.274423825s ago: executing program 2 (id=500):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10)
sendmmsg$inet(r0, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)="640ff055597e8a84a48d39", 0xb}], 0x1}}], 0x1, 0x2000c000)
setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0xc, &(0x7f0000000280)=@gcm_128={{0xcf05a145b37f58f3}, "2034b251822b3a46", "fa6b72def4acb1a6c86918c638857983", "34b3adec", "6745ac421772258f"}, 0x28)

1m34.94445332s ago: executing program 0 (id=501):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030064766d727009000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1], 0x4c}}, 0x0)

1m33.823624256s ago: executing program 1 (id=502):
r0 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f00000007c0)=@hci={0x1f, 0x5863, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000f40)="b8b28225cc772f31e7e8c7c98100", 0xe}], 0x1}, 0x44000)

1m27.804128527s ago: executing program 2 (id=503):
unshare(0x2c020400)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800020085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x8}, 0x94)

1m14.067977061s ago: executing program 32 (id=501):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030064766d727009000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1], 0x4c}}, 0x0)

21.034677732s ago: executing program 33 (id=502):
r0 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f00000007c0)=@hci={0x1f, 0x5863, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000f40)="b8b28225cc772f31e7e8c7c98100", 0xe}], 0x1}, 0x44000)

0s ago: executing program 34 (id=503):
unshare(0x2c020400)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800020085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x8}, 0x94)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:23580' (ED25519) to the list of known hosts.
syzkaller login: [   57.683302][ T5833] cgroup: Unknown subsys name 'net'
[   57.769631][ T5833] cgroup: Unknown subsys name 'cpuset'
[   57.776619][ T5833] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.799537][ T5833] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   64.755344][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   64.771732][ T5237] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   64.775726][ T5237] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   64.779887][ T5237] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   64.783154][ T5237] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   64.788373][ T5237] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   64.792058][ T5237] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   64.795384][ T5237] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   64.827996][ T5855] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   64.831554][ T5855] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   64.871741][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   64.875326][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   64.878564][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   64.882777][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   64.886359][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   65.152309][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   65.220817][ T5856] chnl_net:caif_netlink_parms(): no params data found
[   65.255056][ T5847] chnl_net:caif_netlink_parms(): no params data found
[   65.336370][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.339324][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.341898][ T5851] bridge_slave_0: entered allmulticast mode
[   65.344816][ T5851] bridge_slave_0: entered promiscuous mode
[   65.367651][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.370156][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.372461][ T5856] bridge_slave_0: entered allmulticast mode
[   65.375488][ T5856] bridge_slave_0: entered promiscuous mode
[   65.378294][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.380534][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.382919][ T5851] bridge_slave_1: entered allmulticast mode
[   65.387052][ T5851] bridge_slave_1: entered promiscuous mode
[   65.402094][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.405607][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.408289][ T5856] bridge_slave_1: entered allmulticast mode
[   65.411060][ T5856] bridge_slave_1: entered promiscuous mode
[   65.484691][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.488520][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.492293][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.495438][ T5847] bridge_slave_0: entered allmulticast mode
[   65.498239][ T5847] bridge_slave_0: entered promiscuous mode
[   65.505675][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.510834][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.522374][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.525815][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.528579][ T5847] bridge_slave_1: entered allmulticast mode
[   65.531560][ T5847] bridge_slave_1: entered promiscuous mode
[   65.537065][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.591573][ T5851] team0: Port device team_slave_0 added
[   65.595710][ T5851] team0: Port device team_slave_1 added
[   65.617894][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.623146][ T5856] team0: Port device team_slave_0 added
[   65.627649][ T5856] team0: Port device team_slave_1 added
[   65.639915][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.687834][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.690036][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.698780][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.713041][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.717109][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.725758][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.730337][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.733140][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.744081][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.750283][ T5847] team0: Port device team_slave_0 added
[   65.753416][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.756356][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.765299][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.778935][ T5847] team0: Port device team_slave_1 added
[   65.830957][ T5851] hsr_slave_0: entered promiscuous mode
[   65.835145][ T5851] hsr_slave_1: entered promiscuous mode
[   65.849297][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.851819][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.860449][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.865379][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.867656][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.877594][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.901515][ T5856] hsr_slave_0: entered promiscuous mode
[   65.904827][ T5856] hsr_slave_1: entered promiscuous mode
[   65.907358][ T5856] debugfs: 'hsr0' already exists in 'hsr'
[   65.909480][ T5856] Cannot create hsr debugfs directory
[   65.989019][ T5847] hsr_slave_0: entered promiscuous mode
[   65.991394][ T5847] hsr_slave_1: entered promiscuous mode
[   65.995087][ T5847] debugfs: 'hsr0' already exists in 'hsr'
[   65.996891][ T5847] Cannot create hsr debugfs directory
[   66.295661][ T5856] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   66.307074][ T5856] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   66.311698][ T5856] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   66.328284][ T5856] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   66.380672][ T5851] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   66.396263][ T5851] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   66.419789][ T5851] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   66.426643][ T5851] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   66.504868][ T5847] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   66.511952][ T5847] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   66.522321][ T5847] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   66.537966][ T5847] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   66.599613][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.622486][ T5856] 8021q: adding VLAN 0 to HW filter on device team0
[   66.637963][ T1398] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.640246][ T1398] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.650301][ T1398] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.653315][ T1398] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.669610][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.725062][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   66.737549][ T1398] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.739870][ T1398] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.747043][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.755627][ T1398] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.757943][ T1398] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.771111][ T5847] 8021q: adding VLAN 0 to HW filter on device team0
[   66.820784][ T1398] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.823228][ T1398] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.834444][   T55] Bluetooth: hci1: command tx timeout
[   66.865799][ T3564] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.868011][ T3564] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.882586][ T5847] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   66.886568][ T5847] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   66.928557][   T55] Bluetooth: hci2: command tx timeout
[   66.930981][   T55] Bluetooth: hci0: command tx timeout
[   66.941824][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.989531][ T5856] veth0_vlan: entered promiscuous mode
[   67.008137][ T5856] veth1_vlan: entered promiscuous mode
[   67.058849][ T5856] veth0_macvtap: entered promiscuous mode
[   67.073573][ T5856] veth1_macvtap: entered promiscuous mode
[   67.081221][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.103463][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.111250][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.125675][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.141041][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.151758][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.167951][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.182778][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.218096][ T5851] veth0_vlan: entered promiscuous mode
[   67.246394][ T5847] veth0_vlan: entered promiscuous mode
[   67.261448][ T5851] veth1_vlan: entered promiscuous mode
[   67.280319][ T5847] veth1_vlan: entered promiscuous mode
[   67.329529][ T3552] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.332804][ T3552] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.339287][ T5851] veth0_macvtap: entered promiscuous mode
[   67.363098][ T5851] veth1_macvtap: entered promiscuous mode
[   67.404555][ T3552] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.410240][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.413131][ T3552] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.417964][ T5847] veth0_macvtap: entered promiscuous mode
[   67.437217][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.440733][ T5847] veth1_macvtap: entered promiscuous mode
[   67.468224][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.487933][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.497014][ T5856] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   67.505787][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.515688][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.519610][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.540949][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.560273][ T5876] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.576431][ T5876] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.591065][ T5876] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.605078][ T5876] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.711167][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.724783][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.735985][ T3564] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.738437][ T3564] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.773584][ T3552] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.781329][ T3552] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.800719][ T3552] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.804104][ T3552] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.991305][ T5928] tipc: Can't bind to reserved service type 2
[   67.991661][ T5922] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.082124][ T5931] tipc: Failed to remove unknown binding: 66,1,1/0:145213137/145213139
[   68.127882][ T5922] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.409756][ T5922] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.482210][ T5947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15'.
[   68.749514][ T5963] RDS: rds_bind could not find a transport for ::4000:0:20:0, load rds_tcp or rds_rdma?
[   68.914620][ T5855] Bluetooth: hci1: command tx timeout
[   68.996457][ T5855] Bluetooth: hci0: command tx timeout
[   68.998700][ T5855] Bluetooth: hci2: command tx timeout
[   69.390679][ T5984] netlink: 'syz.2.32': attribute type 1 has an invalid length.
[   69.507915][ T5988] tipc: Started in network mode
[   69.510035][ T5988] tipc: Node identity 72b11e42d748, cluster identity 4711
[   69.513142][ T5988] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   69.518318][ T5988] syzkaller0: entered promiscuous mode
[   69.520658][ T5988] syzkaller0: entered allmulticast mode
[   69.546365][ T5988] tipc: Resetting bearer <eth:syzkaller0>
[   69.549934][ T5987] tipc: Resetting bearer <eth:syzkaller0>
[   69.562230][ T5987] tipc: Disabling bearer <eth:syzkaller0>
[   69.774574][ T5922] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.195648][ T6020] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   70.255600][ T6021] netlink: 4 bytes leftover after parsing attributes in process `syz.2.50'.
[   70.299875][ T6021] bridge_slave_1: left allmulticast mode
[   70.302550][ T6021] bridge_slave_1: left promiscuous mode
[   70.306964][ T6021] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.313701][ T6021] bridge_slave_0: left allmulticast mode
[   70.315941][ T6021] bridge_slave_0: left promiscuous mode
[   70.317919][ T6021] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.646933][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.660214][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.740762][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.743377][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.756629][ T6042] netlink: 40 bytes leftover after parsing attributes in process `syz.0.59'.
[   71.006571][   T55] Bluetooth: hci1: command tx timeout
[   71.077391][   T55] Bluetooth: hci2: command tx timeout
[   71.079239][   T55] Bluetooth: hci0: command tx timeout
[   71.087036][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.089063][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.171826][ T6063] syzkaller0: entered promiscuous mode
[   71.177836][ T6063] syzkaller0: entered allmulticast mode
[   73.084675][ T5855] Bluetooth: hci1: command tx timeout
[   73.154032][ T5855] Bluetooth: hci0: command tx timeout
[   73.155375][   T55] Bluetooth: hci2: command tx timeout
[   73.184785][ T6103] netlink: 216 bytes leftover after parsing attributes in process `syz.0.87'.
[   73.195036][ T6103] netlink: 24 bytes leftover after parsing attributes in process `syz.0.87'.
[   73.209863][ T6103] netlink: 16 bytes leftover after parsing attributes in process `syz.0.87'.
[   73.968393][ T6133] Driver unsupported XDP return value 0 on prog  (id 33) dev N/A, expect packet loss!
[   74.462300][ T6169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.116'.
[   74.472722][ T6169] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.514609][ T6169] bridge_slave_1 (unregistering): left allmulticast mode
[   74.517412][ T6169] bridge_slave_1 (unregistering): left promiscuous mode
[   74.524527][ T6169] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.399824][ T6241] wg1: entered promiscuous mode
[   75.402075][ T6241] wg1: entered allmulticast mode
[   75.441639][ T6243] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.507261][ T6243] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.568009][ T6243] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.617895][ T6243] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.721632][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.736155][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.748801][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.772448][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.855192][ T6256] syz.2.152 uses obsolete (PF_INET,SOCK_PACKET)
[   76.356464][ T6295] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551607)
[   76.359994][ T6295] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[   77.008299][ T6342] netlink: 28 bytes leftover after parsing attributes in process `syz.1.185'.
[   77.118899][ T6349] syzkaller0: entered promiscuous mode
[   77.121114][ T6349] syzkaller0: entered allmulticast mode
[   77.164629][ T6355] Zero length message leads to an empty skb
[   77.260597][ T6359] netlink: 256 bytes leftover after parsing attributes in process `syz.1.193'.
[   77.266048][ T6359] netlink: 72 bytes leftover after parsing attributes in process `syz.1.193'.
[   77.535184][ T6377] syzkaller1: entered promiscuous mode
[   77.537421][ T6377] syzkaller1: entered allmulticast mode
[   77.579394][ T6379] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   77.950378][ T6396] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.209'.
[   78.009719][ T6402] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   78.107469][ T6410] tipc: Started in network mode
[   78.109196][ T6410] tipc: Node identity 6a506492f651, cluster identity 4711
[   78.111545][ T6410] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   78.147156][ T6410] syzkaller0: entered promiscuous mode
[   78.150654][ T6410] syzkaller0: entered allmulticast mode
[   78.152979][ T6410] tipc: Resetting bearer <eth:syzkaller0>
[   78.158643][ T6408] tipc: Resetting bearer <eth:syzkaller0>
[   79.068365][ T6408] tipc: Disabling bearer <eth:syzkaller0>
[   79.195169][ T6435] dvmrp1: tun_chr_ioctl cmd 1074025677
[   79.197255][ T6435] dvmrp1: linktype set to 773
[   79.590280][ T6458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.237'.
[   79.597110][ T6458] netlink: 4 bytes leftover after parsing attributes in process `syz.0.237'.
[   80.083245][ T6471] netlink: 12 bytes leftover after parsing attributes in process `syz.0.243'.
[   80.114138][ T5855] Bluetooth: hci2: command 0x0405 tx timeout
[   80.382505][ T6491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.254'.
[   80.560853][ T6504] netlink: 'syz.0.256': attribute type 25 has an invalid length.
[   80.695770][ T6514] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[   81.179634][ T6552] warning: `syz.0.281' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   81.246692][ T6556] block nbd0: server does not support multiple connections per device.
[   81.251391][ T6556] block nbd0: shutting down sockets
[   81.461694][ T6572] netlink: 'syz.0.289': attribute type 1 has an invalid length.
[   81.465995][ T6572] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.289'.
[   81.502783][ T6575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.291'.
[   81.779277][ T6600] netlink: 'syz.1.303': attribute type 1 has an invalid length.
[   81.802400][ T6600] 8021q: adding VLAN 0 to HW filter on device bond1
[   81.823507][ T6600] 8021q: adding VLAN 0 to HW filter on device bond1
[   81.827389][ T6600] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[   81.831812][ T6600] bond1: (slave vxcan3): Error -95 calling set_mac_address
[   81.900146][ T6608] veth3: entered promiscuous mode
[   81.928407][ T6608] bond1: (slave veth3): Enslaving as an active interface with a down link
[   82.117781][ T6618] netlink: 'syz.0.309': attribute type 10 has an invalid length.
[   82.136772][ T6618] netlink: 152 bytes leftover after parsing attributes in process `syz.0.309'.
[   82.142466][ T6618] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[   82.669740][ T6640] netlink: 12 bytes leftover after parsing attributes in process `syz.2.320'.
[   82.691242][ T6640] netlink: 'syz.2.320': attribute type 2 has an invalid length.
[   82.745788][ T6642] netlink: zone id is out of range
[   82.748228][ T6642] netlink: zone id is out of range
[   82.750400][ T6642] netlink: zone id is out of range
[   82.753025][ T6642] netlink: zone id is out of range
[   82.756863][ T6642] netlink: zone id is out of range
[   82.778852][ T6642] netlink: zone id is out of range
[   82.781139][ T6642] netlink: zone id is out of range
[   82.783396][ T6642] netlink: zone id is out of range
[   82.786644][ T6642] netlink: zone id is out of range
[   82.788954][ T6642] netlink: zone id is out of range
[   83.041146][ T6663] netlink: 'syz.2.331': attribute type 10 has an invalid length.
[   83.059156][ T6663] syz_tun: entered promiscuous mode
[   83.071619][ T6663] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   83.256465][ T6675] netlink: 120 bytes leftover after parsing attributes in process `syz.2.336'.
[   83.459327][ T6684] netlink: 'syz.1.340': attribute type 5 has an invalid length.
[   84.002563][ T6725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.356'.
[   84.472755][ T6751] tc_dump_action: action bad kind
[   84.712558][ T6757] __nla_validate_parse: 1 callbacks suppressed
[   84.712573][ T6757] netlink: 4 bytes leftover after parsing attributes in process `syz.2.372'.
[   85.093581][ T6778] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   85.101240][ T6778] netlink: 'syz.2.383': attribute type 1 has an invalid length.
[   85.117657][ T6778] 8021q: adding VLAN 0 to HW filter on device bond1
[   85.135080][ T6778] vlan3: entered allmulticast mode
[   85.136834][ T6778] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[   85.147160][ T6778] bond1: (slave vlan3): making interface the new active one
[   85.152051][ T6778] bond1: (slave vlan3): Enslaving as an active interface with an up link
[   85.278451][ T6788] netlink: 'syz.0.385': attribute type 13 has an invalid length.
[   85.281409][ T6788] netlink: 'syz.0.385': attribute type 17 has an invalid length.
[   85.612203][ T6802] bridge0: entered allmulticast mode
[   85.617716][ T6802] netlink: 4 bytes leftover after parsing attributes in process `syz.1.392'.
[   85.621134][ T6802] bridge_slave_0: left allmulticast mode
[   85.623186][ T6802] bridge_slave_0: left promiscuous mode
[   85.628280][ T6802] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.673666][ T6802] bridge0 (unregistering): left allmulticast mode
[   86.192896][ T6845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.411'.
[   86.210404][ T6849] netlink: 'syz.0.413': attribute type 1 has an invalid length.
[   86.268609][ T6854] netlink: 68 bytes leftover after parsing attributes in process `syz.1.415'.
[   86.313616][ T6849] bond1: (slave gretap1): making interface the new active one
[   86.328538][ T6849] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   86.450430][   T47] cfg80211: failed to load regulatory.db
[   86.665654][ T6863] netlink: 60 bytes leftover after parsing attributes in process `syz.1.419'.
[   86.684518][ T6863] unsupported nlmsg_type 40
[   87.815888][ T6907] IPVS: stopping backup sync thread 6911 ...
[   87.825310][ T6907] netlink: 260 bytes leftover after parsing attributes in process `syz.2.437'.
[   87.878101][ T6907] netlink: 20 bytes leftover after parsing attributes in process `syz.2.437'.
[   87.881387][ T6907] netlink: 32 bytes leftover after parsing attributes in process `syz.2.437'.
[   90.734289][ T7025] tap0: tun_chr_ioctl cmd 2147767521
[   96.389116][ T5856] sched: DL replenish lagged too much
[  133.789057][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  133.797382][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  191.649086][   T55] Bluetooth: hci1: command 0x0406 tx timeout
[  194.892578][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  195.073829][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  243.260775][   T34] INFO: task kworker/1:1:47 blocked for more than 143 seconds.
[  243.276213][   T34]       Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0
[  243.278663][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  243.281277][   T34] task:kworker/1:1     state:D stack:24232 pid:47    tgid:47    ppid:2      task_flags:0x4208060 flags:0x00004000
[  246.228320][   T34] Workqueue: events reg_todo
[  246.229899][   T34] Call Trace:
[  246.230945][   T34]  <TASK>
[  246.231892][   T34]  __schedule+0x1798/0x4cc0
[  246.233290][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  246.794373][   T34]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  246.796234][   T34]  ? __pfx___schedule+0x10/0x10
[  246.798087][   T34]  ? schedule+0x91/0x360
[  246.799837][   T34]  schedule+0x165/0x360
[  246.801491][   T34]  schedule_preempt_disabled+0x13/0x30
[  246.803359][   T34]  __mutex_lock+0x7e6/0x1360
[  248.890924][   T34]  ? __mutex_lock+0x5b6/0x1360
[  248.892640][   T34]  ? reg_process_self_managed_hints+0xaf/0x1c0
[  248.906379][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  248.908150][   T34]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  248.910436][   T34]  ? __local_bh_enable_ip+0x13e/0x1c0
[  248.912595][   T34]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  251.004395][   T34]  reg_process_self_managed_hints+0xaf/0x1c0
[  251.006409][   T34]  reg_todo+0x78d/0x890
[  251.007703][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  251.009288][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  251.011007][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  251.012823][   T34]  process_scheduled_works+0xae1/0x17b0
[  253.209591][   T34]  ? __pfx_process_scheduled_works+0x10/0x10
[  253.211974][   T34]  worker_thread+0x8a0/0xda0

VM DIAGNOSIS:
18:13:08  Registers:
info registers vcpu 0

CPU#0
RAX=1ffffffff1937a84 RBX=ffffffff8c9bd420 RCX=dffffc0000000000 RDX=0000000000000100
RSI=0000000000000010 RDI=0000000000000000 RBP=ffffc90000007610 RSP=ffffc900000073c0
R8 =ffffc9000000759f R9 =0000000000000000 R10=ffffc90000007590 R11=fffff52000000eb4
R12=dffffc0000000000 R13=ffff888032250d90 R14=1ffff1100644a1b2 R15=1ffff1100644a1b2
RIP=ffffffff89b5c968 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8623000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fc0ee7b7da0 CR3=0000000108336000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=0000000000000000 RCX=00000000000001fe RDX=ffff88801ff27660
RSI=0000000000000040 RDI=ffff888108ec9070 RBP=ffffc900001e0c28 RSP=ffffc900001e0a80
R8 =ffff888108ec9087 R9 =1ffff110211d9210 R10=dffffc0000000000 R11=ffffffff8697d120
R12=dffffc0000000000 R13=ffff888108f18080 R14=ffff888108f18094 R15=0000000000000066
RIP=ffffffff8697d2ff RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c23000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fc0ef39f020 CR3=000000010e1aa000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 00007fe1e9a2dc38
XMM02=0000000500000007 0000000000000001 XMM03=000002ffffffffff 0200000a00000000
XMM04=0000000000000006 0000000000000000 XMM05=0101001000068004 0100000008060601
XMM06=68d400080006e003 0010000600000007 XMM07=0006c00300000000 b00302d010000390
XMM08=0318000100000000 0000000000000006 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
