last executing test programs:

41.18972833s ago: executing program 0 (id=3381):
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
ioctl$SIOCSIFHWADDR(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @broadcast})
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)

34.806822416s ago: executing program 0 (id=3381):
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
ioctl$SIOCSIFHWADDR(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @broadcast})
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)

27.380811536s ago: executing program 0 (id=3381):
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
ioctl$SIOCSIFHWADDR(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @broadcast})
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)

20.463554338s ago: executing program 0 (id=3381):
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
ioctl$SIOCSIFHWADDR(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @broadcast})
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)

13.366324838s ago: executing program 0 (id=3381):
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
ioctl$SIOCSIFHWADDR(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @broadcast})
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)

5.477560216s ago: executing program 0 (id=3381):
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
ioctl$SIOCSIFHWADDR(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @broadcast})
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)

2.734269737s ago: executing program 1 (id=3874):
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x19, 0x4, &(0x7f00000003c0)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x18}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac141400000000000080000000000000000080000000000000000000000000000000000000000400420497b057e85f31063625000000000000000000000000000000000000000000000000000000000000000000001b000000000000000000000000000000000000000000000000eeffffff0000000000000000000000000025bd700000000000000000000000025fb83f6605e447f5c4"], 0x34c}}, 0x44)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0xffffff31, &(0x7f0000000000)=[{&(0x7f0000000080)={0x114, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x11, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000}}, @generic="50bb2d6f6725ec303dadb107d0c3f49d88ea04abde1d5e8d3fb2de4cd2b73f8c2a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c212cb5964c1fbbab8303798f8a26237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d2108a487f22ebd439d872d4016fc8be16fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58fba3ddb9ad02a078cf0d972df9e99f079767734f69ceb58b3c475f55ac64337803f5eb4e5842f47ea66e93370d47eb640dc5e272b26df59664"]}]}, 0x114}], 0x1}, 0x0)

2.569694135s ago: executing program 2 (id=3875):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@deltaction={0x328, 0x31, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x84, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x14, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000000}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x58, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x68, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x14, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x296}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffa}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3b3c21b7}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}]}, @TCA_ACT_TAB={0x8c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x100}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x49b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x14, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @TCA_ACT_TAB={0x84, 0x1, [{0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffff38b}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x14, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @TCA_ACT_TAB={0x40, 0x1, [{0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x14, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x328}}, 0x8000)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000140)={'wg2\x00'})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x121}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xa1}]}}}, @IFLA_ADDRESS={0xa, 0x1, @random="14fd06cfb0c1"}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

2.488536478s ago: executing program 1 (id=3876):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x2663}, 0x0)
syz_emit_ethernet(0x0, 0x0, &(0x7f0000000180)={0x1, 0x1, [0xac1, 0xd28, 0xd74, 0x4bd]})
bpf$MAP_CREATE(0x0, 0x0, 0x48) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff})
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) (async)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r5}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r5}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) (async)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
socket$packet(0x11, 0xa, 0x300)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000002000000000000000000001e95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7336b5d}, 0x94) (async)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000002000000000000000000001e95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7336b5d}, 0x94)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r9=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="7400000010000305000900"/20, @ANYBLOB="c3a0", @ANYBLOB="00000000000000004c0012800c0001006d6163766c616e003c00028008000100100000001c0005800a000400aaaaaaaaaaaa00000a000400aaaaaaaaaaaa000008000300030000000a000400aaaaaaaaaabb000008000500", @ANYRES32=r9], 0x74}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="f000000010000d0400"/20, @ANYRES32=0x0, @ANYBLOB="0008000000020000bc0012800c0001006d6163766c616e00ac000280080003000100000008000100100000000a0004000180c200000300000a00040000000000030000000800070005000000080007000a0000004c0005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a0004004ac92f9d35ed00000a000400aaaaaaaaaaaa00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaaaa000006000200010000000a000400aaaaaaaaaabb0000100005800a000400b25b12b8e5000000140035006d6163766c616e30"], 0xf0}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$fou(&(0x7f00000020c0), 0xffffffffffffffff)
sendmsg$FOU_CMD_DEL(r11, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000002100)=ANY=[@ANYBLOB, @ANYRES16=r12, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) (async)
sendmsg$FOU_CMD_DEL(r11, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000002100)=ANY=[@ANYBLOB, @ANYRES16=r12, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
mmap(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2000000, 0x12, r11, 0xc92c000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x2000000, 0xd50, 0x0, &(0x7f00000002c0)="fef351f6b11f421a5b4e415288ca", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x2000000, 0xd50, 0x0, &(0x7f00000002c0)="fef351f6b11f421a5b4e415288ca", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

2.475172535s ago: executing program 2 (id=3877):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'syz_tun\x00'})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500e1fd08005400ff8060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef)

2.259606465s ago: executing program 1 (id=3878):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x2c, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4000100)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57)
r3 = socket$kcm(0x29, 0xdd967830f6833499, 0x0)
recvmsg$kcm(r3, &(0x7f0000001b00)={&(0x7f0000000100)=@tipc=@name, 0x80, &(0x7f0000001940)=[{&(0x7f0000000200)=""/71, 0x47}, {&(0x7f0000000280)=""/252, 0xfc}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000000480)=""/207, 0xcf}, {&(0x7f0000000080)=""/56, 0x38}, {&(0x7f0000000580)=""/65, 0x41}, {&(0x7f0000000600)=""/131, 0x83}, {&(0x7f00000006c0)=""/66, 0x42}, {&(0x7f0000000780)=""/228, 0xe4}, {&(0x7f00000018c0)=""/79, 0x4f}], 0xa, &(0x7f0000001a00)=""/197, 0xc5}, 0x1)
r4 = socket$netlink(0x10, 0x3, 0x0)
writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1)
writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)
r5 = socket$netlink(0x10, 0x3, 0x0)
writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="200000001300034700bb65e1c3e4ffff01000000010000005600000025000000", 0x20}], 0x1)
setsockopt$inet_mreqsrc(r2, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)

1.179768423s ago: executing program 1 (id=3879):
r0 = socket$kcm(0x2d, 0x2, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, 0x0, 0x0) (async)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) (async)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_opts(r3, 0x0, 0x480, 0x0, 0x0) (async)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)={<r4=>0xffffffffffffffff}) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000080001003f0000000c000200700f00000000ffff0c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) (async)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r4, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x3, 0x2, 0x5, 0x0, 0x0, {0x3, 0x0, 0x8}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x20000080)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, 0x0, 0xc000) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09", 0x18}], 0x1}, 0x0) (async)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0, r5})
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x12, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711206000000000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x67, '\x00', 0x0, @cgroup_sock_addr=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
socket(0x10, 0x3, 0x0) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x25}, 0x94) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r10=>0x0}) (async)
r11 = socket(0x1d, 0x2, 0x6)
r12 = socket$kcm(0x10, 0x2, 0x0)
setsockopt$nfc_llcp_NFC_LLCP_RW(r11, 0x118, 0x0, &(0x7f0000000100)=0xc, 0x4) (async)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r12, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}})
sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80)

1.176194981s ago: executing program 2 (id=3880):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000001c00)={0x2, &(0x7f0000000180)=[{0x84}, {0x6}]}, 0x10)
r1 = accept$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @remote}, &(0x7f0000000140)=0x10)
r2 = socket(0x10, 0x3, 0x4)
sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0x25dfdbfc, {0x2, 0x0, 0x0, 0x0, {0x4, 0xc}, {0xb, 0x1}, {0x4}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0xfa, 0x200, 0xa, 0x0, 0x0, 0x7e}}, {0x4}}, {{0x1c, 0x1, {0x1, 0x8, 0x1c, 0xd, 0x2, 0x8, 0x4000002}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x24008814}, 0x20000040)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f00000002c0)={{0x3c, @remote, 0x4e24, 0x2, 'wrr\x00', 0x6, 0x2, 0x3d}, {@loopback, 0x4e21, 0x3, 0xe12, 0x671, 0x9}}, 0x44)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r3, 0x8b27, &(0x7f0000000040))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newlink={0x28, 0x10, 0x437, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14000, 0x500}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x27}]}, 0x28}}, 0x0)
r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000c40)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r4}, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYRES8=0x0, @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000140000007b110000000000008500000054000000bf0900000000000045090100000003709500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xd, 0x0, 0x0, 0x41100}, 0x94)
r5 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4)
bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
close(r5)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4000000)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendto$inet6(r7, 0x0, 0x0, 0x20004041, 0x0, 0x0)
connect$inet6(r7, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x19}, 0x7}, 0x1c)
ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0xf34)
close(r7)

1.176093876s ago: executing program 1 (id=3881):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000006000000000000000000000d030000000500000000000003"], 0x0, 0x4e, 0x0, 0x4}, 0x28) (async)
r0 = epoll_create(0x7) (async)
r1 = epoll_create1(0x0) (async)
r2 = epoll_create(0x7)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) (async)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100))
r3 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000080)={0x40000011}) (async)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@ipv6_newaddr={0x18, 0x14, 0x100, 0x70bd25, 0x25dfdbff, {0xa, 0x18, 0x54}}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x40800)

1.069783178s ago: executing program 1 (id=3882):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r1, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045)
shutdown(r1, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
recvmmsg(r3, &(0x7f00000030c0)=[{{&(0x7f0000000700)=@ieee802154, 0x80, &(0x7f0000001040)=[{&(0x7f0000000580)=""/3, 0x3}, {&(0x7f0000000980)=""/72, 0x48}, {&(0x7f0000000ec0)=""/87, 0x57}, {&(0x7f0000000b40)=""/187, 0xbb}, {&(0x7f0000003280)=""/144, 0x90}, {&(0x7f0000000cc0)=""/78, 0x4e}, {&(0x7f0000000e00)=""/160, 0xa0}, {&(0x7f00000031c0)=""/187, 0xbb}, {&(0x7f0000000f80)=""/168, 0xa8}], 0x9, &(0x7f0000001100)=""/246, 0xf6}, 0x2}, {{&(0x7f0000001200)=@caif=@rfm, 0x80, &(0x7f0000000780)=[{&(0x7f0000001280)=""/144, 0x90}, {&(0x7f0000001340)=""/229, 0xe5}], 0x2, &(0x7f0000001440)=""/76, 0x4c}, 0x1}, {{&(0x7f00000014c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000001c40)=[{&(0x7f0000001540)=""/122, 0x7a}, {&(0x7f0000001600)=""/184, 0xb8}, {&(0x7f00000016c0)=""/119, 0x77}, {&(0x7f0000001740)=""/133, 0x85}, {&(0x7f0000001800)=""/88, 0x58}, {&(0x7f0000001880)=""/171, 0xab}, {&(0x7f0000001940)=""/197, 0xda}, {&(0x7f0000001a40)=""/196, 0xc4}, {&(0x7f0000000900)=""/31, 0x1f}, {&(0x7f0000001b40)=""/212, 0xd4}], 0xa, &(0x7f0000001d00)=""/4096, 0x1000}, 0x1}, {{&(0x7f0000002d00)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000003040)=[{&(0x7f0000000a00)=""/61, 0x3d}, {&(0x7f0000002d80)=""/131, 0x83}, {&(0x7f0000002e40)=""/111, 0x6f}, {&(0x7f0000002ec0)=""/65, 0x41}, {&(0x7f0000002f40)=""/87, 0x57}], 0x5}, 0x7}], 0x4, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x5)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feffffff185a00000800000000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138ae0b69a2255eb"], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x51, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r4, r4, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94)
bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r6, 0xffffffffffffffff, 0x24}, 0xc)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
unshare(0x62040200)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00;', @ANYRES16=r8, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r9, @ANYBLOB="0a00340002020202020200000a00060008021100000000000800350000000000080026006c090000"], 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x2e)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0)
syz_80211_inject_frame(&(0x7f0000000480)=@device_b, &(0x7f0000000480)=ANY=[], 0x28)

280.157332ms ago: executing program 2 (id=3883):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x7ff}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)=""/200, 0xc8}, {&(0x7f0000000b80)=""/4133, 0x1025}, {&(0x7f00000000c0)=""/99, 0x63}, {&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f0000000840)=""/241, 0xf1}, {&(0x7f0000000440)=""/194, 0xc2}], 0x6}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0xb0}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x8}], 0x9, 0x20, 0x0)
unshare(0x24020400)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000340)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0xfeffff0700000000, 0x0, 0x0, 0x200000000080], 0x84000000, 0x0, 0x0}, 0x108)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'ip6gre0\x00', <r4=>0x0, 0x0, 0xf9, 0x2, 0x7, 0x48, @private1, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x40, 0x70, 0x4, 0x1}})
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000002c0)={r4, 0x1, 0x6, @broadcast}, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x300000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r5, 0x20, 0x70bd2d, 0x25dfdbf8, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4801)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', <r6=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x44}}, 0x0)

139.735112ms ago: executing program 2 (id=3884):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000010000000003000000280001800e0001006574683a766c616e3000000014000280080001001200000006000300"], 0x3c}}, 0x0)
sendfile(r4, r3, &(0x7f0000000140)=0x1, 0x5)
setsockopt$inet_int(r3, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @multicast1}, "00186371ae9b1c03"}}}}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e6400"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000)

0s ago: executing program 2 (id=3885):
r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f00000001c0)=0xe, 0x800)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000280)={0xffffffffffffff7f, 0x20, '\x00', 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0]})
ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000400)={0x6, 0x0, [0x5, 0x10001, 0x7fffffffffffffff, 0x4], &(0x7f0000000380)})
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1})
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000300)={'rose0\x00', 0x4000})
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a1b0000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a00000000000000800073797a320000100014000000110001469da89a1e1b3cf6ca14e5dcc0e7879a6a541b2a582e61dfaf16bc0a175bcedcb4d41cf959bb222e82caeb3a8ff6043a84c653091da364e6233b4e2c28e1441327ad0dbe73a166f3320cef08f87b6aeda6f3884adaafca1ef1b3c35a0a62ed59c3f431f4c4abcc8e81a55798f61dc1eaabde6f8a8345bf4ab36af11041116080ede5", @ANYRES8=r2, @ANYRES64], 0x7c}}, 0x4)
sendmsg$NFT_BATCH(r2, 0x0, 0xf40c3d3eb1ed8dc0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000009c0)=ANY=[@ANYRESDEC=r2], 0x0, 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r3)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000700)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf2507000000140001800800fd007f0000010600010000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x441c0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000042f00fe88a43de1a400000000000000007d01ff02000000000000000000000000000100"], 0xfdef)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r8 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10)
close(r8)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r8, 0x8983, &(0x7f0000000380)={0x2, 'veth1_to_team\x00', {0xb}, 0x7ff})
r9 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r7, &(0x7f0000001840)=ANY=[@ANYBLOB="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"], 0xfce)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

3] bridge0: port 2(bridge_slave_1) entered blocking state
[  343.125372][T20203] bridge0: port 2(bridge_slave_1) entered disabled state
[  343.131352][T20203] bridge_slave_1: entered allmulticast mode
[  343.135533][T20203] bridge_slave_1: entered promiscuous mode
[  343.157650][T20228] netlink: 'syz.1.3445': attribute type 11 has an invalid length.
[  343.165949][T20228] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3445'.
[  343.190686][T20203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  343.197336][T20203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  343.238685][T20203] team0: Port device team_slave_0 added
[  343.243054][T20203] team0: Port device team_slave_1 added
[  343.269180][T20203] batman_adv: batadv0: Adding interface: batadv_slave_0
[  343.271979][T20203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  343.289614][T20203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  343.296011][T20203] batman_adv: batadv0: Adding interface: batadv_slave_1
[  343.301438][T20203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  343.318193][T20203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  343.349898][T20203] hsr_slave_0: entered promiscuous mode
[  343.352602][T20203] hsr_slave_1: entered promiscuous mode
[  343.356598][T20203] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  343.359270][T20203] Cannot create hsr debugfs directory
[  343.625757][ T5836] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  343.653290][T20248] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  343.659428][T20248] tipc: Resetting bearer <eth:syzkaller0>
[  343.684959][T20246] netlink: 'syz.2.3450': attribute type 10 has an invalid length.
[  343.711709][T20252] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3451'.
[  343.771982][T20255] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check.
[  343.833996][T20259] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3454'.
[  343.976847][ T5836] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  344.014660][T20271] netlink: 'syz.2.3458': attribute type 1 has an invalid length.
[  344.026844][T20271] bond62: entered promiscuous mode
[  344.029074][T20271] 8021q: adding VLAN 0 to HW filter on device bond62
[  344.082163][ T5836] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  344.198016][T20273] lo speed is unknown, defaulting to 1000
[  344.305621][ T5836] bridge_slave_1: left allmulticast mode
[  344.307864][ T5836] bridge_slave_1: left promiscuous mode
[  344.312323][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state
[  344.326359][ T5836] bridge_slave_0: left allmulticast mode
[  344.328894][ T5836] bridge_slave_0: left promiscuous mode
[  344.331231][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state
[  344.624097][ T5836] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  344.630784][ T5836] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  344.634746][ T5836] bond0 (unregistering): Released all slaves
[  344.789267][ T5815] Bluetooth: hci2: command tx timeout
[  344.949872][T20280] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  345.069623][T20282] batadv0: entered allmulticast mode
[  345.121568][ T5836] hsr_slave_0: left promiscuous mode
[  345.124142][ T5836] hsr_slave_1: left promiscuous mode
[  345.133450][ T5836] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  345.136551][ T5836] batman_adv: batadv0: Removing interface: batadv_slave_0
[  345.141444][ T5836] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  345.144603][ T5836] batman_adv: batadv0: Removing interface: batadv_slave_1
[  345.173392][ T5836] veth1_macvtap: left promiscuous mode
[  345.176084][ T5836] veth0_macvtap: left promiscuous mode
[  345.179071][ T5836] veth1_vlan: left promiscuous mode
[  345.181473][ T5836] veth0_vlan: left promiscuous mode
[  345.551751][ T5836] team0 (unregistering): Port device team_slave_1 removed
[  345.579549][ T5836] team0 (unregistering): Port device team_slave_0 removed
[  345.979935][T20203] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  346.002351][T20203] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  346.007923][T20203] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  346.027066][T20203] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  346.093659][T20203] 8021q: adding VLAN 0 to HW filter on device bond0
[  346.109599][T20203] 8021q: adding VLAN 0 to HW filter on device team0
[  346.125290][ T6207] bridge0: port 1(bridge_slave_0) entered blocking state
[  346.128342][ T6207] bridge0: port 1(bridge_slave_0) entered forwarding state
[  346.179290][ T6203] bridge0: port 2(bridge_slave_1) entered blocking state
[  346.181754][ T6203] bridge0: port 2(bridge_slave_1) entered forwarding state
[  346.264390][T20313] netlink: 'syz.2.3468': attribute type 10 has an invalid length.
[  346.267839][T20313] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  346.300019][T20203] 8021q: adding VLAN 0 to HW filter on device batadv0
[  346.355857][T20203] veth0_vlan: entered promiscuous mode
[  346.389554][T20203] veth1_vlan: entered promiscuous mode
[  346.438856][T20203] veth0_macvtap: entered promiscuous mode
[  346.443652][T20203] veth1_macvtap: entered promiscuous mode
[  346.504377][T20203] batman_adv: batadv0: Interface activated: batadv_slave_0
[  346.513035][T20203] batman_adv: batadv0: Interface activated: batadv_slave_1
[  346.522353][T20203] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  346.525699][T20203] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  346.532464][T20203] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  346.535410][T20203] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  346.571694][T20328] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  346.702700][ T6214] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  346.707541][ T6214] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  346.757151][ T6214] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  346.761629][ T6214] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  346.937091][T20334] macsec0: entered allmulticast mode
[  346.943997][T20334] veth1_macvtap: entered allmulticast mode
[  346.946559][T20334] macsec0: left allmulticast mode
[  346.950017][T20334] veth1_macvtap: left allmulticast mode
[  346.992704][T20337] syzkaller0: entered promiscuous mode
[  346.994549][T20337] syzkaller0: entered allmulticast mode
[  347.005908][T20336] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  347.018143][T20336] tipc: Resetting bearer <eth:syzkaller0>
[  347.033137][T20336] tipc: Disabling bearer <eth:syzkaller0>
[  347.128854][T20344] __nla_validate_parse: 8 callbacks suppressed
[  347.128875][T20344] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3476'.
[  347.995664][T20349] netlink: 'syz.1.3477': attribute type 10 has an invalid length.
[  348.000884][T20349] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3477'.
[  348.005250][T20349] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  348.405937][T20356] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3479'.
[  348.516189][ T5836] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  348.722308][T20365] netlink: 'syz.2.3481': attribute type 4 has an invalid length.
[  348.757356][   T10] lo speed is unknown, defaulting to 1000
[  348.759747][T20365] netlink: 'syz.2.3481': attribute type 4 has an invalid length.
[  348.763285][   T10] syz0: Port: 1 Link DOWN
[  348.766514][   T10] lo speed is unknown, defaulting to 1000
[  348.766843][T20366] netlink: 'syz.2.3481': attribute type 4 has an invalid length.
[  348.769139][   T10] syz0: Port: 1 Link ACTIVE
[  348.769254][ T1270] lo speed is unknown, defaulting to 1000
[  348.776842][T20369] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3482'.
[  348.780269][T20369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3482'.
[  348.785899][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  348.795030][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  348.800192][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  348.803953][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  348.808730][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  348.854098][T20368] lo speed is unknown, defaulting to 1000
[  348.943498][T20379] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3484'.
[  349.023037][T20382] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3485'.
[  349.068433][T20368] chnl_net:caif_netlink_parms(): no params data found
[  349.110537][T20389] bridge31: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  349.146139][T20368] bridge0: port 1(bridge_slave_0) entered blocking state
[  349.148815][T20368] bridge0: port 1(bridge_slave_0) entered disabled state
[  349.151378][T20368] bridge_slave_0: entered allmulticast mode
[  349.154415][T20368] bridge_slave_0: entered promiscuous mode
[  349.159780][T20368] bridge0: port 2(bridge_slave_1) entered blocking state
[  349.163061][T20368] bridge0: port 2(bridge_slave_1) entered disabled state
[  349.165923][T20368] bridge_slave_1: entered allmulticast mode
[  349.169188][T20368] bridge_slave_1: entered promiscuous mode
[  349.194656][T20368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  349.199782][T20368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  349.230886][T20368] team0: Port device team_slave_0 added
[  349.234893][T20368] team0: Port device team_slave_1 added
[  349.236863][T20395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3487'.
[  349.243227][T20395] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3487'.
[  349.264350][T20395] gtp8: entered promiscuous mode
[  349.266779][T20395] gtp8: entered allmulticast mode
[  349.273814][T20368] batman_adv: batadv0: Adding interface: batadv_slave_0
[  349.276208][T20368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  349.286067][T20368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  349.292480][T20368] batman_adv: batadv0: Adding interface: batadv_slave_1
[  349.295160][T20368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  349.304773][T20368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  349.342688][T20368] hsr_slave_0: entered promiscuous mode
[  349.346047][T20368] hsr_slave_1: entered promiscuous mode
[  349.417380][T20398] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3488'.
[  349.791653][T20411] lo speed is unknown, defaulting to 1000
[  350.000877][T20412] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  350.177378][T20416] syzkaller0: entered promiscuous mode
[  350.179966][T20416] syzkaller0: entered allmulticast mode
[  350.868342][   T54] Bluetooth: hci2: command tx timeout
[  351.505844][ T5836] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  351.540513][T20424] netlink: 'syz.1.3495': attribute type 9 has an invalid length.
[  351.620028][ T5836] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  351.685314][T20426] sctp: [Deprecated]: syz.2.3496 (pid 20426) Use of int in max_burst socket option deprecated.
[  351.685314][T20426] Use struct sctp_assoc_value instead
[  351.716048][ T5836] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  351.723916][T20426] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  351.894566][ T5836] bridge_slave_1: left allmulticast mode
[  351.900479][ T5836] bridge_slave_1: left promiscuous mode
[  351.903531][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state
[  351.913656][ T5836] bridge_slave_0: left allmulticast mode
[  351.915705][ T5836] bridge_slave_0: left promiscuous mode
[  351.917935][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state
[  352.081798][T20435] netlink: 'syz.1.3499': attribute type 2 has an invalid length.
[  352.242655][ T5836] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  352.253611][ T5836] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  352.259562][ T5836] bond0 (unregistering): Released all slaves
[  352.277293][T20435] k*]: entered promiscuous mode
[  352.521469][T20441] vti0: entered promiscuous mode
[  352.556145][T20446] __nla_validate_parse: 2 callbacks suppressed
[  352.556164][T20446] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3502'.
[  352.942175][ T5836] hsr_slave_0: left promiscuous mode
[  352.949646][   T54] Bluetooth: hci2: command tx timeout
[  352.956988][ T5836] hsr_slave_1: left promiscuous mode
[  352.961728][ T5836] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  352.965035][ T5836] batman_adv: batadv0: Removing interface: batadv_slave_0
[  352.969257][ T5836] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  352.972507][ T5836] batman_adv: batadv0: Removing interface: batadv_slave_1
[  352.997605][ T5836] veth1_macvtap: left promiscuous mode
[  353.000333][ T5836] veth0_macvtap: left promiscuous mode
[  353.006937][ T5836] veth1_vlan: left promiscuous mode
[  353.010232][ T5836] veth0_vlan: left promiscuous mode
[  353.490975][ T5836] team0 (unregistering): Port device team_slave_1 removed
[  353.527512][ T5836] team0 (unregistering): Port device team_slave_0 removed
[  354.016359][T20368] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  354.023768][T20368] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  354.044148][T20368] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  354.062887][T20368] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  354.080950][T20482] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3508'.
[  354.113530][T20489] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3510'.
[  354.123964][T20497] pim6reg: entered allmulticast mode
[  354.159342][T20499] bridge35: entered promiscuous mode
[  354.161183][T20499] bridge35: entered allmulticast mode
[  354.222899][T20483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3509'.
[  354.351321][T20368] 8021q: adding VLAN 0 to HW filter on device bond0
[  354.398002][T20507] bridge32: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  354.406196][T20368] 8021q: adding VLAN 0 to HW filter on device team0
[  354.412657][ T6207] bridge0: port 1(bridge_slave_0) entered blocking state
[  354.415782][ T6207] bridge0: port 1(bridge_slave_0) entered forwarding state
[  354.468672][ T6207] bridge0: port 2(bridge_slave_1) entered blocking state
[  354.471789][ T6207] bridge0: port 2(bridge_slave_1) entered forwarding state
[  354.559834][   T60] block nbd2: Possible stuck request ffff888020ea8000: control (read@0,1024B). Runtime 60 seconds
[  354.563411][   T60] block nbd2: Possible stuck request ffff888020ea8200: control (read@1024,1024B). Runtime 60 seconds
[  354.566868][   T60] block nbd2: Possible stuck request ffff888020ea8400: control (read@2048,1024B). Runtime 60 seconds
[  354.573610][   T60] block nbd2: Possible stuck request ffff888020ea8600: control (read@3072,1024B). Runtime 60 seconds
[  354.596993][T20510] batadv_slave_0: entered promiscuous mode
[  354.607985][T20510] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3513'.
[  354.765169][T20368] 8021q: adding VLAN 0 to HW filter on device batadv0
[  354.831826][T20368] veth0_vlan: entered promiscuous mode
[  354.839182][T20527] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  354.869160][T20368] veth1_vlan: entered promiscuous mode
[  354.877334][T20530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3521'.
[  354.889902][T20530] netlink: 'syz.2.3521': attribute type 1 has an invalid length.
[  354.893177][T20530] netlink: 'syz.2.3521': attribute type 2 has an invalid length.
[  354.902720][T20531] lo speed is unknown, defaulting to 1000
[  354.915297][T20368] veth0_macvtap: entered promiscuous mode
[  354.922281][T20368] veth1_macvtap: entered promiscuous mode
[  354.935006][T20533] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3520'.
[  354.945759][T20533] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3520'.
[  354.946279][T20368] batman_adv: batadv0: Interface activated: batadv_slave_0
[  354.964934][T20368] batman_adv: batadv0: Interface activated: batadv_slave_1
[  354.974700][T20368] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  354.979921][T20368] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  354.983546][T20368] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  354.987266][T20368] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  355.028320][   T54] Bluetooth: hci2: command tx timeout
[  355.117997][ T6207] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  355.124842][ T6207] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  355.129796][T20537] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  355.133870][T20537] CPU: 1 UID: 0 PID: 20537 Comm: syz.2.3523 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  355.133884][T20537] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  355.133888][T20537] Call Trace:
[  355.133892][T20537]  <TASK>
[  355.133897][T20537]  dump_stack_lvl+0x189/0x250
[  355.133914][T20537]  ? __pfx_dump_stack_lvl+0x10/0x10
[  355.133926][T20537]  ? __pfx__printk+0x10/0x10
[  355.133936][T20537]  ? kernfs_path_from_node+0x2c/0x260
[  355.133946][T20537]  ? kernfs_path_from_node+0x2c/0x260
[  355.133954][T20537]  ? kernfs_path_from_node+0x2c/0x260
[  355.133967][T20537]  ? kernfs_path_from_node+0x22c/0x260
[  355.133975][T20537]  ? kernfs_path_from_node+0x2c/0x260
[  355.133986][T20537]  sysfs_warn_dup+0x8e/0xa0
[  355.133996][T20537]  sysfs_do_create_link_sd+0xc0/0x110
[  355.134005][T20537]  device_add_class_symlinks+0x1cf/0x240
[  355.134017][T20537]  device_add+0x475/0xb50
[  355.134028][T20537]  wiphy_register+0x199a/0x26b0
[  355.134044][T20537]  ? __pfx_wiphy_register+0x10/0x10
[  355.134053][T20537]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  355.134064][T20537]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  355.134075][T20537]  ieee80211_register_hw+0x33e1/0x4120
[  355.134092][T20537]  ? ieee80211_register_hw+0x14b1/0x4120
[  355.134106][T20537]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  355.134119][T20537]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  355.134134][T20537]  ? __hrtimer_setup+0x187/0x210
[  355.134145][T20537]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  355.134155][T20537]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  355.134179][T20537]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  355.134190][T20537]  ? trace_kmalloc+0x1f/0xd0
[  355.134196][T20537]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  355.134203][T20537]  ? kstrndup+0xbf/0x160
[  355.134217][T20537]  hwsim_new_radio_nl+0xea4/0x1b10
[  355.134227][T20537]  ? __pfx___nla_validate_parse+0x10/0x10
[  355.134243][T20537]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  355.134256][T20537]  ? __nla_parse+0x40/0x60
[  355.134267][T20537]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  355.134282][T20537]  genl_family_rcv_msg_doit+0x215/0x300
[  355.134296][T20537]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  355.134312][T20537]  ? bpf_lsm_capable+0x9/0x20
[  355.134318][T20537]  ? security_capable+0x7e/0x2e0
[  355.134330][T20537]  genl_rcv_msg+0x60e/0x790
[  355.134343][T20537]  ? __pfx_genl_rcv_msg+0x10/0x10
[  355.134353][T20537]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  355.134366][T20537]  netlink_rcv_skb+0x208/0x470
[  355.134374][T20537]  ? __pfx_genl_rcv_msg+0x10/0x10
[  355.134385][T20537]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  355.134400][T20537]  ? down_read+0x1ad/0x2e0
[  355.134408][T20537]  genl_rcv+0x28/0x40
[  355.134417][T20537]  netlink_unicast+0x75b/0x8d0
[  355.134429][T20537]  netlink_sendmsg+0x805/0xb30
[  355.134441][T20537]  ? __pfx_netlink_sendmsg+0x10/0x10
[  355.134451][T20537]  ? aa_sock_msg_perm+0x94/0x160
[  355.134461][T20537]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  355.134470][T20537]  ? __pfx_netlink_sendmsg+0x10/0x10
[  355.134479][T20537]  __sock_sendmsg+0x21c/0x270
[  355.134491][T20537]  ____sys_sendmsg+0x505/0x830
[  355.134503][T20537]  ? __pfx_____sys_sendmsg+0x10/0x10
[  355.134515][T20537]  ? import_iovec+0x74/0xa0
[  355.134524][T20537]  ___sys_sendmsg+0x21f/0x2a0
[  355.134534][T20537]  ? __pfx____sys_sendmsg+0x10/0x10
[  355.134558][T20537]  ? __fget_files+0x2a/0x420
[  355.134572][T20537]  ? __fget_files+0x3a0/0x420
[  355.134585][T20537]  __x64_sys_sendmsg+0x19b/0x260
[  355.134598][T20537]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  355.134612][T20537]  ? rcu_is_watching+0x15/0xb0
[  355.134628][T20537]  ? do_syscall_64+0xbe/0x3b0
[  355.134636][T20537]  do_syscall_64+0xfa/0x3b0
[  355.134642][T20537]  ? lockdep_hardirqs_on+0x9c/0x150
[  355.134653][T20537]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  355.134661][T20537]  ? exc_page_fault+0x9f/0xf0
[  355.134699][T20537]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  355.134706][T20537] RIP: 0033:0x7fde5418e929
[  355.134714][T20537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  355.134722][T20537] RSP: 002b:00007fde54f65038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  355.134732][T20537] RAX: ffffffffffffffda RBX: 00007fde543b5fa0 RCX: 00007fde5418e929
[  355.134737][T20537] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 000000000000000c
[  355.134742][T20537] RBP: 00007fde54210b39 R08: 0000000000000000 R09: 0000000000000000
[  355.134746][T20537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  355.134750][T20537] R13: 0000000000000000 R14: 00007fde543b5fa0 R15: 00007ffdc18c42b8
[  355.134762][T20537]  </TASK>
[  355.340931][T20540] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3525'.
[  355.421977][ T6214] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  355.424606][ T6214] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  355.779770][T20573] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3531'.
[  355.803808][T20573] 8021q: adding VLAN 0 to HW filter on device bond67
[  355.823694][T20573] macvlan6: entered promiscuous mode
[  355.826061][T20573] macvlan6: entered allmulticast mode
[  355.876016][T20583] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  355.884153][T20584] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  355.887825][T20583] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  355.891964][T20583] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  355.895931][T20583] tipc: Resetting bearer <eth:syzkaller0>
[  355.917856][T20584] tipc: Resetting bearer <eth:syzkaller0>
[  355.965819][ T6207] tipc: Resetting bearer <eth:syzkaller0>
[  356.098274][T20593] geneve1: entered promiscuous mode
[  356.100609][T20593] geneve1: entered allmulticast mode
[  356.103226][T20593] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  356.351755][T20601] lo speed is unknown, defaulting to 1000
[  356.393225][T20602] netlink: 'syz.1.3539': attribute type 21 has an invalid length.
[  356.396930][T20602] netlink: 'syz.1.3539': attribute type 6 has an invalid length.
[  356.644464][T20608] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  356.661685][T20608] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  356.673270][T20608] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  356.928565][ T5836] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  357.352348][ T5815] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  357.359613][ T5815] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  357.364585][ T5815] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  357.370187][ T5815] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  357.374357][ T5815] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  357.396060][T20619] lo speed is unknown, defaulting to 1000
[  357.513539][T20633] ipvlan0: entered promiscuous mode
[  357.515797][T20633] bridge0: port 2(ipvlan0) entered blocking state
[  357.518039][T20633] bridge0: port 2(ipvlan0) entered disabled state
[  357.521673][T20633] ipvlan0: entered allmulticast mode
[  357.524438][T20633] ipvlan0: left allmulticast mode
[  357.661598][T20619] chnl_net:caif_netlink_parms(): no params data found
[  357.731586][T20619] bridge0: port 1(bridge_slave_0) entered blocking state
[  357.734109][T20619] bridge0: port 1(bridge_slave_0) entered disabled state
[  357.736532][T20619] bridge_slave_0: entered allmulticast mode
[  357.739457][T20619] bridge_slave_0: entered promiscuous mode
[  357.743019][T20619] bridge0: port 2(bridge_slave_1) entered blocking state
[  357.745403][T20619] bridge0: port 2(bridge_slave_1) entered disabled state
[  357.747889][T20619] bridge_slave_1: entered allmulticast mode
[  357.752337][T20619] bridge_slave_1: entered promiscuous mode
[  357.773762][T20619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  357.778888][T20619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  357.805558][T20619] team0: Port device team_slave_0 added
[  357.813730][T20619] team0: Port device team_slave_1 added
[  357.833461][T20619] batman_adv: batadv0: Adding interface: batadv_slave_0
[  357.838315][T20619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  357.849353][T20619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  357.856192][T20647] lo speed is unknown, defaulting to 1000
[  357.859560][T20619] batman_adv: batadv0: Adding interface: batadv_slave_1
[  357.861891][T20619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  357.878318][T20619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  357.884816][T20649] __nla_validate_parse: 12 callbacks suppressed
[  357.884838][T20649] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3550'.
[  357.952333][T20619] hsr_slave_0: entered promiscuous mode
[  357.954990][T20619] hsr_slave_1: entered promiscuous mode
[  357.957597][T20619] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  357.961886][T20619] Cannot create hsr debugfs directory
[  358.135181][T20656] lo speed is unknown, defaulting to 1000
[  358.402899][ T5836] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  358.424513][T20677] netlink: 'syz.1.3557': attribute type 1 has an invalid length.
[  358.433675][T20677] netlink: 172 bytes leftover after parsing attributes in process `syz.1.3557'.
[  358.450109][ T5836] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  358.487216][T20681] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  358.525551][ T5836] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  358.534231][T20684] veth0_to_bridge: left allmulticast mode
[  358.536828][T20684] veth0_to_bridge: left promiscuous mode
[  358.539904][T20684] bridge0: port 1(veth0_to_bridge) entered disabled state
[  358.547099][T20684] bond62: (slave veth1): Releasing active interface
[  358.553665][T20684] bond0: (slave bond64): Releasing backup interface
[  358.670999][T20688] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3559'.
[  358.683333][ T5836] bridge_slave_1: left allmulticast mode
[  358.685341][ T5836] bridge_slave_1: left promiscuous mode
[  358.687395][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state
[  358.696508][ T5836] bridge_slave_0: left allmulticast mode
[  358.701109][ T5836] bridge_slave_0: left promiscuous mode
[  358.703219][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state
[  358.986644][ T5836] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  358.991943][ T5836] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  358.996134][ T5836] bond0 (unregistering): Released all slaves
[  359.368049][ T5836] hsr_slave_0: left promiscuous mode
[  359.396817][ T5836] hsr_slave_1: left promiscuous mode
[  359.401272][ T5836] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  359.403849][ T5836] batman_adv: batadv0: Removing interface: batadv_slave_0
[  359.406829][ T5836] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  359.409862][ T5836] batman_adv: batadv0: Removing interface: batadv_slave_1
[  359.428503][   T54] Bluetooth: hci2: command tx timeout
[  359.436402][ T5836] veth1_macvtap: left promiscuous mode
[  359.442466][ T5836] veth0_macvtap: left promiscuous mode
[  359.444868][ T5836] veth1_vlan: left promiscuous mode
[  359.447041][ T5836] veth0_vlan: left promiscuous mode
[  359.936320][ T5836] team0 (unregistering): Port device team_slave_1 removed
[  359.971452][ T5836] team0 (unregistering): Port device team_slave_0 removed
[  360.398839][T20719] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3563'.
[  360.474236][T20619] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  360.486791][T20619] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  360.519863][T20619] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  360.533504][T20719] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3563'.
[  360.543090][T20619] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  360.613175][T20739] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3565'.
[  360.710304][T20619] 8021q: adding VLAN 0 to HW filter on device bond0
[  360.748521][T20619] 8021q: adding VLAN 0 to HW filter on device team0
[  360.852682][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  360.855950][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  360.866084][T20749] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3568'.
[  360.872924][T20749] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3568'.
[  360.876735][T20749] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3568'.
[  360.886061][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  360.889359][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  360.929839][T20752] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3570'.
[  360.982635][T20619] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  361.195104][T20619] 8021q: adding VLAN 0 to HW filter on device batadv0
[  361.313233][T20764] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  361.319794][T20764] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  361.328432][T20764] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  361.337245][T20619] veth0_vlan: entered promiscuous mode
[  361.351135][T20619] veth1_vlan: entered promiscuous mode
[  361.397898][T20619] veth0_macvtap: entered promiscuous mode
[  361.410912][T20619] veth1_macvtap: entered promiscuous mode
[  361.440366][T20766] 8021q: adding VLAN 0 to HW filter on device team0
[  361.454719][T20619] batman_adv: batadv0: Interface activated: batadv_slave_0
[  361.465880][T20619] batman_adv: batadv0: Interface activated: batadv_slave_1
[  361.473055][T20619] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  361.476704][T20619] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  361.481725][T20619] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  361.486119][T20619] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  361.509480][   T54] Bluetooth: hci2: command tx timeout
[  361.575407][T20772] netlink: 'syz.1.3576': attribute type 39 has an invalid length.
[  361.576200][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  361.581914][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  361.584102][T20772] netlink: 'syz.1.3576': attribute type 39 has an invalid length.
[  361.629954][   T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  361.635488][   T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  362.009638][T20792] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  362.284447][T20808] lo speed is unknown, defaulting to 1000
[  362.887094][T20831] netlink: 'syz.2.3589': attribute type 16 has an invalid length.
[  362.890038][T20831] netlink: 'syz.2.3589': attribute type 17 has an invalid length.
[  362.981510][T20831] tipc: Resetting bearer <eth:syzkaller0>
[  362.993272][T20833] IPv6: NLM_F_REPLACE set, but no existing node found!
[  362.995733][ T1270] lo speed is unknown, defaulting to 1000
[  363.000330][ T1270] syz0: Port: 1 Link DOWN
[  363.001964][ T1270] lo speed is unknown, defaulting to 1000
[  363.022223][T19991] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  363.031184][T20832] __nla_validate_parse: 8 callbacks suppressed
[  363.031196][T20832] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3589'.
[  363.729993][T20850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  363.734474][T20850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  363.740598][T20850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  363.743854][T20850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  363.746502][T20850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  363.775823][T20855] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3594'.
[  363.779781][T20855] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3594'.
[  363.780035][T20848] lo speed is unknown, defaulting to 1000
[  363.827797][T20857] netlink: 136 bytes leftover after parsing attributes in process `syz.2.3595'.
[  363.832024][T20857] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3595'.
[  363.996480][T20848] chnl_net:caif_netlink_parms(): no params data found
[  364.078918][T20848] bridge0: port 1(bridge_slave_0) entered blocking state
[  364.081331][T20848] bridge0: port 1(bridge_slave_0) entered disabled state
[  364.083910][T20848] bridge_slave_0: entered allmulticast mode
[  364.087019][T20848] bridge_slave_0: entered promiscuous mode
[  364.093255][T20848] bridge0: port 2(bridge_slave_1) entered blocking state
[  364.095745][T20848] bridge0: port 2(bridge_slave_1) entered disabled state
[  364.098190][T20848] bridge_slave_1: entered allmulticast mode
[  364.101109][T20848] bridge_slave_1: entered promiscuous mode
[  364.142156][T19991] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  364.162844][T20848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  364.175312][T20848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  364.222058][T20848] team0: Port device team_slave_0 added
[  364.235283][T20848] team0: Port device team_slave_1 added
[  364.276088][T20848] batman_adv: batadv0: Adding interface: batadv_slave_0
[  364.278600][T20848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  364.287397][T20848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  364.292804][T20848] batman_adv: batadv0: Adding interface: batadv_slave_1
[  364.295039][T20848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  364.304078][T20848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  364.341408][T19991] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  364.366039][T20848] hsr_slave_0: entered promiscuous mode
[  364.370904][T20848] hsr_slave_1: entered promiscuous mode
[  364.441954][T19991] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  364.589616][T20874] tun1: tun_chr_ioctl cmd 2147767520
[  364.631609][T19991] bridge_slave_1: left allmulticast mode
[  364.633502][T19991] bridge_slave_1: left promiscuous mode
[  364.635415][T19991] bridge0: port 2(bridge_slave_1) entered disabled state
[  364.645524][T19991] bridge_slave_0: left allmulticast mode
[  364.648669][T19991] bridge_slave_0: left promiscuous mode
[  364.650601][T19991] bridge0: port 1(bridge_slave_0) entered disabled state
[  364.810851][T20877] netlink: 'syz.2.3599': attribute type 1 has an invalid length.
[  364.979197][T19991] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  364.984005][T19991] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  364.987959][T19991] bond0 (unregistering): Released all slaves
[  365.059634][T20878] bond63: (slave gretap4): making interface the new active one
[  365.063322][T20878] bond63: (slave gretap4): Enslaving as an active interface with an up link
[  365.332993][T20885] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check.
[  365.407229][T20887] netlink: 'syz.2.3602': attribute type 3 has an invalid length.
[  365.531195][T20890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3604'.
[  365.535045][T20890] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3604'.
[  365.539806][T19991] hsr_slave_0: left promiscuous mode
[  365.542744][T19991] hsr_slave_1: left promiscuous mode
[  365.545574][T19991] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  365.550400][T19991] batman_adv: batadv0: Removing interface: batadv_slave_0
[  365.555844][T19991] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  365.559146][T19991] batman_adv: batadv0: Removing interface: batadv_slave_1
[  365.609003][T19991] veth1_macvtap: left promiscuous mode
[  365.611519][T19991] veth0_macvtap: left promiscuous mode
[  365.614038][T19991] veth1_vlan: left promiscuous mode
[  365.616625][T19991] veth0_vlan: left promiscuous mode
[  365.644799][T20898] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3604'.
[  365.832969][   T54] Bluetooth: hci2: command tx timeout
[  366.022749][T19991] team0 (unregistering): Port device team_slave_1 removed
[  366.049951][T19991] team0 (unregistering): Port device team_slave_0 removed
[  366.466751][T20848] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  366.486729][T20848] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  366.509027][T20848] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  366.531558][T20848] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  366.544709][T20905] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3605'.
[  366.554586][T20905] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3605'.
[  366.666499][T20848] 8021q: adding VLAN 0 to HW filter on device bond0
[  366.680803][T20848] 8021q: adding VLAN 0 to HW filter on device team0
[  366.688905][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  366.690855][T20922] netlink: 'syz.1.3608': attribute type 1 has an invalid length.
[  366.691778][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  366.736914][T20922] 8021q: adding VLAN 0 to HW filter on device bond69
[  366.761158][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  366.763436][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  366.921755][T20848] 8021q: adding VLAN 0 to HW filter on device batadv0
[  367.000480][T20848] veth0_vlan: entered promiscuous mode
[  367.027753][T20848] veth1_vlan: entered promiscuous mode
[  367.043814][ T5817] cgroup: fork rejected by pids controller in /syz1
[  367.106715][T20848] veth0_macvtap: entered promiscuous mode
[  367.135494][T20848] veth1_macvtap: entered promiscuous mode
[  367.154577][T20848] batman_adv: batadv0: Interface activated: batadv_slave_0
[  367.172592][T20848] batman_adv: batadv0: Interface activated: batadv_slave_1
[  367.180960][T20848] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  367.186595][T20848] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  367.190803][T20848] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  367.194547][T20848] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  367.258032][ T6214] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  367.269307][ T6214] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  367.286714][ T6207] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  367.292398][ T6207] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  367.495098][T20850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  367.498876][T20850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  367.501698][T20850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  367.504600][T20850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  367.508903][T20850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  367.533873][T20964] lo speed is unknown, defaulting to 1000
[  367.711783][T20964] chnl_net:caif_netlink_parms(): no params data found
[  367.731601][T20975] netlink: 'syz.2.3621': attribute type 7 has an invalid length.
[  367.734933][T20975] netlink: 'syz.2.3621': attribute type 8 has an invalid length.
[  367.815150][T20964] bridge0: port 1(bridge_slave_0) entered blocking state
[  367.818384][T20964] bridge0: port 1(bridge_slave_0) entered disabled state
[  367.821524][T20964] bridge_slave_0: entered allmulticast mode
[  367.825453][T20964] bridge_slave_0: entered promiscuous mode
[  367.831154][T20964] bridge0: port 2(bridge_slave_1) entered blocking state
[  367.834236][T20964] bridge0: port 2(bridge_slave_1) entered disabled state
[  367.837491][T20964] bridge_slave_1: entered allmulticast mode
[  367.842101][T20964] bridge_slave_1: entered promiscuous mode
[  367.893778][T20964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  367.903627][T20964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  367.949734][T20964] team0: Port device team_slave_0 added
[  367.955450][T20964] team0: Port device team_slave_1 added
[  367.977294][T20964] batman_adv: batadv0: Adding interface: batadv_slave_0
[  367.982228][T20964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  367.998566][T20964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  368.003208][T20964] batman_adv: batadv0: Adding interface: batadv_slave_1
[  368.005524][T20964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  368.016271][T20964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  368.056368][T20964] hsr_slave_0: entered promiscuous mode
[  368.059550][T20964] hsr_slave_1: entered promiscuous mode
[  368.062176][T20964] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  368.064991][T20964] Cannot create hsr debugfs directory
[  368.099014][T20992] __nla_validate_parse: 7 callbacks suppressed
[  368.099026][T20992] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3623'.
[  368.163632][T20994] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3624'.
[  368.441844][T20964] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  368.456399][T20964] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  368.465125][T20964] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  368.469469][T20964] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  368.495148][T20964] bridge0: port 2(bridge_slave_1) entered blocking state
[  368.497661][T20964] bridge0: port 2(bridge_slave_1) entered forwarding state
[  368.500246][T20964] bridge0: port 1(bridge_slave_0) entered blocking state
[  368.502563][T20964] bridge0: port 1(bridge_slave_0) entered forwarding state
[  368.531303][T21005] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  368.550433][T20964] 8021q: adding VLAN 0 to HW filter on device bond0
[  368.567276][ T6207] bridge0: port 1(bridge_slave_0) entered disabled state
[  368.576590][ T6207] bridge0: port 2(bridge_slave_1) entered disabled state
[  368.595785][T21007] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  368.601669][T21007] D: left promiscuous mode
[  368.603168][T21007] D: left allmulticast mode
[  368.605420][T21007] bond51: left promiscuous mode
[  368.607040][T21007] bond51: left allmulticast mode
[  368.610022][T21007] bond62: left promiscuous mode
[  368.612232][T21007] tipc: Resetting bearer <eth:syzkaller0>
[  368.622385][T21007] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  368.624823][T21007] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  368.635983][T20964] 8021q: adding VLAN 0 to HW filter on device team0
[  368.650262][ T6207] bridge0: port 1(bridge_slave_0) entered blocking state
[  368.653472][ T6207] bridge0: port 1(bridge_slave_0) entered forwarding state
[  368.662857][T21007] Set syz1 is full, maxelem 65536 reached
[  368.677314][ T6207] bridge0: port 2(bridge_slave_1) entered blocking state
[  368.680655][ T6207] bridge0: port 2(bridge_slave_1) entered forwarding state
[  368.771013][ T5836] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  368.931018][T20964] 8021q: adding VLAN 0 to HW filter on device batadv0
[  368.963847][T20964] veth0_vlan: entered promiscuous mode
[  368.973282][T20964] veth1_vlan: entered promiscuous mode
[  369.011336][T20964] veth0_macvtap: entered promiscuous mode
[  369.020933][T20964] veth1_macvtap: entered promiscuous mode
[  369.034867][T20964] batman_adv: batadv0: Interface activated: batadv_slave_0
[  369.044794][T20964] batman_adv: batadv0: Interface activated: batadv_slave_1
[  369.051117][T20964] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  369.054778][T20964] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  369.059870][T20964] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  369.063516][T20964] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  369.136865][  T941] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  369.139983][  T941] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  369.168030][   T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  369.173327][   T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  369.490724][T21023] syz.1.3616 (21023) used obsolete PPPIOCDETACH ioctl
[  369.590201][T20850] Bluetooth: hci1: command tx timeout
[  369.614062][T21028] netlink: 'syz.1.3629': attribute type 1 has an invalid length.
[  369.621009][T21028] gretap1: entered promiscuous mode
[  369.650648][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  369.654258][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  369.657062][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  369.660120][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  369.662755][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  369.697598][T21031] lo speed is unknown, defaulting to 1000
[  369.745301][T21039] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3632'.
[  369.774598][T21042] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  369.886922][ T5836] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  369.933392][T21053] workqueue: Failed to create a rescuer kthread for wq "bond64": -EINTR
[  370.002089][T21031] chnl_net:caif_netlink_parms(): no params data found
[  370.120453][T21076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3638'.
[  370.166518][T21031] bridge0: port 1(bridge_slave_0) entered blocking state
[  370.172842][T21031] bridge0: port 1(bridge_slave_0) entered disabled state
[  370.175349][T21031] bridge_slave_0: entered allmulticast mode
[  370.178540][T21031] bridge_slave_0: entered promiscuous mode
[  370.185161][T21031] bridge0: port 2(bridge_slave_1) entered blocking state
[  370.185646][T21079] xt_hashlimit: max too large, truncated to 1048576
[  370.187612][T21031] bridge0: port 2(bridge_slave_1) entered disabled state
[  370.195415][T21031] bridge_slave_1: entered allmulticast mode
[  370.198842][T21031] bridge_slave_1: entered promiscuous mode
[  370.201642][ T6214] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  370.208450][ T6214] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  370.231301][T21031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  370.237316][T21031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  370.259763][T21031] team0: Port device team_slave_0 added
[  370.264337][T21031] team0: Port device team_slave_1 added
[  370.278794][T21079] pimreg3: entered allmulticast mode
[  370.296047][T21078] pimreg3: left allmulticast mode
[  370.319265][T21031] batman_adv: batadv0: Adding interface: batadv_slave_0
[  370.322634][T21031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  370.333037][T21031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  370.371200][ T5836] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  370.388706][T21031] batman_adv: batadv0: Adding interface: batadv_slave_1
[  370.391886][T21031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  370.426331][T21031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  370.467365][ T5836] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  370.477602][T21089] netlink: 'syz.1.3641': attribute type 10 has an invalid length.
[  370.545101][T21031] hsr_slave_0: entered promiscuous mode
[  370.555347][T21031] hsr_slave_1: entered promiscuous mode
[  370.557913][T21031] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  370.560835][T21031] Cannot create hsr debugfs directory
[  370.639359][T21099] netlink: 'syz.1.3642': attribute type 42 has an invalid length.
[  370.761664][T21108] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3645'.
[  370.780177][T21108] bridge0: port 1(batadv0) entered blocking state
[  370.782587][T21108] bridge0: port 1(batadv0) entered disabled state
[  370.784969][T21108] batadv0: entered allmulticast mode
[  370.788043][T21108] batadv0: entered promiscuous mode
[  370.808501][ T5836] bridge_slave_1: left allmulticast mode
[  370.810930][ T5836] bridge_slave_1: left promiscuous mode
[  370.813494][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state
[  370.827269][ T5836] bridge_slave_0: left allmulticast mode
[  370.830364][ T5836] bridge_slave_0: left promiscuous mode
[  370.832876][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state
[  371.141733][ T5836] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  371.146732][ T5836] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  371.150978][ T5836] bond0 (unregistering): Released all slaves
[  371.165011][T21116] batman_adv: batadv0: Adding interface: dummy0
[  371.167503][T21116] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  371.177786][T21116] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  371.289220][T19991] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  371.293123][T19991] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  371.337032][T21129] netlink: 'syz.1.3650': attribute type 1 has an invalid length.
[  371.415131][T21133] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3651'.
[  371.510686][T21141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3653'.
[  371.513489][T21141] netlink: 'syz.2.3653': attribute type 30 has an invalid length.
[  371.515969][T21141] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3653'.
[  371.529562][T21141] netlink: 'syz.2.3653': attribute type 2 has an invalid length.
[  371.552581][T21142] vxcan2: entered promiscuous mode
[  371.668944][   T54] Bluetooth: hci1: command tx timeout
[  371.725200][ T5836] hsr_slave_0: left promiscuous mode
[  371.731233][ T5836] hsr_slave_1: left promiscuous mode
[  371.734114][ T5836] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  371.737049][ T5836] batman_adv: batadv0: Removing interface: batadv_slave_0
[  371.747913][ T5836] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  371.751610][   T54] Bluetooth: hci2: command tx timeout
[  371.755737][T21149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3657'.
[  371.762548][ T5836] batman_adv: batadv0: Removing interface: batadv_slave_1
[  371.787036][ T5836] veth1_macvtap: left promiscuous mode
[  371.789206][ T5836] veth0_macvtap: left promiscuous mode
[  371.791124][ T5836] veth1_vlan: left promiscuous mode
[  371.793210][ T5836] veth0_vlan: left promiscuous mode
[  372.148008][ T5836] team0 (unregistering): Port device team_slave_1 removed
[  372.179610][ T5836] team0 (unregistering): Port device team_slave_0 removed
[  372.487890][T21145] lo speed is unknown, defaulting to 1000
[  372.598818][T21031] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  372.610296][T21031] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  372.626477][T21031] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  372.664588][T21031] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  372.767972][T21164] netlink: 'syz.2.3659': attribute type 1 has an invalid length.
[  372.808002][T21164] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3659'.
[  372.813712][T21164] 8021q: adding VLAN 0 to HW filter on device bond64
[  372.857136][T21031] 8021q: adding VLAN 0 to HW filter on device bond0
[  372.895819][T21031] 8021q: adding VLAN 0 to HW filter on device team0
[  372.952697][ T6196] bridge0: port 1(bridge_slave_0) entered blocking state
[  372.955005][ T6196] bridge0: port 1(bridge_slave_0) entered forwarding state
[  372.978616][ T6196] bridge0: port 2(bridge_slave_1) entered blocking state
[  372.981248][ T6196] bridge0: port 2(bridge_slave_1) entered forwarding state
[  373.015856][T21031] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  373.022358][T21031] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  373.143159][T21178] IPv6: sit10: Disabled Multicast RS
[  373.163213][T21178] vlan3: entered promiscuous mode
[  373.165315][T21178] vlan3: entered allmulticast mode
[  373.213560][T21031] 8021q: adding VLAN 0 to HW filter on device batadv0
[  373.286017][T21031] veth0_vlan: entered promiscuous mode
[  373.286024][T21187] __nla_validate_parse: 1 callbacks suppressed
[  373.286037][T21187] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3665'.
[  373.306074][T21031] veth1_vlan: entered promiscuous mode
[  373.311823][T21187] netlink: 'syz.1.3665': attribute type 1 has an invalid length.
[  373.326152][T21189] netlink: 'syz.2.3666': attribute type 13 has an invalid length.
[  373.329187][T21189] netlink: 'syz.2.3666': attribute type 17 has an invalid length.
[  373.349485][T21189] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  373.354833][   T10] lo speed is unknown, defaulting to 1000
[  373.357802][   T10] syz0: Port: 1 Link ACTIVE
[  373.369739][   T10] lo speed is unknown, defaulting to 1000
[  373.378820][T21031] veth0_macvtap: entered promiscuous mode
[  373.382569][T21031] veth1_macvtap: entered promiscuous mode
[  373.393697][T21031] batman_adv: batadv0: Interface activated: batadv_slave_0
[  373.410092][T21189] lo speed is unknown, defaulting to 1000
[  373.413397][T21031] batman_adv: batadv0: Interface activated: batadv_slave_1
[  373.418969][T21031] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  373.422300][T21031] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  373.425594][T21031] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  373.429307][T21031] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  373.499960][  T941] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  373.503131][  T941] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  373.549620][  T941] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  373.553048][  T941] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  373.557778][T21196] netlink: 'syz.1.3668': attribute type 11 has an invalid length.
[  373.645979][T21200] netlink: 248 bytes leftover after parsing attributes in process `syz.1.3669'.
[  373.649659][T21199] netlink: 240 bytes leftover after parsing attributes in process `syz.1.3669'.
[  373.751842][   T54] Bluetooth: hci1: command tx timeout
[  373.806473][T21207] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3671'.
[  373.813356][T21207] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3671'.
[  373.817076][T21207] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3671'.
[  373.882974][T21209] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3672'.
[  373.896370][T21209] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3672'.
[  374.014905][T21213] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  374.017599][T21213] IPv6: NLM_F_CREATE should be set when creating new route
[  374.022604][T21213] lo: entered allmulticast mode
[  374.026749][T21213] tunl0: entered allmulticast mode
[  374.030840][T21213] gre0: entered allmulticast mode
[  374.036997][T21213] gretap0: entered allmulticast mode
[  374.041627][T21213] erspan0: entered allmulticast mode
[  374.046025][T21213] ip_vti0: entered allmulticast mode
[  374.050052][T21213] ip6_vti0: entered allmulticast mode
[  374.054609][T21213] sit0: entered allmulticast mode
[  374.059592][T21213] ip6tnl0: entered allmulticast mode
[  374.063814][T21213] ip6gre0: entered allmulticast mode
[  374.067611][T21213] syz_tun: entered allmulticast mode
[  374.078158][T21213] ip6gretap0: entered allmulticast mode
[  374.082830][T21213] bridge0: port 2(bridge_slave_1) entered disabled state
[  374.085591][T21213] bridge0: port 1(bridge_slave_0) entered disabled state
[  374.089203][T21213] bridge0: entered allmulticast mode
[  374.094556][T21213] vcan0: entered allmulticast mode
[  374.102034][T21213] bond0: entered allmulticast mode
[  374.104067][T21213] bond_slave_0: entered allmulticast mode
[  374.106342][T21213] bond_slave_1: entered allmulticast mode
[  374.114748][T21213] team0: entered allmulticast mode
[  374.116744][T21213] team_slave_0: entered allmulticast mode
[  374.119109][T21213] team_slave_1: entered allmulticast mode
[  374.122720][T21213] dummy0: entered allmulticast mode
[  374.125266][T21213] nlmon0: entered allmulticast mode
[  374.128388][T21213] caif0: entered allmulticast mode
[  374.130725][T21213] batadv0: entered allmulticast mode
[  374.135442][T21213] vxcan0: entered allmulticast mode
[  374.138519][T21213] vxcan1: entered allmulticast mode
[  374.144090][T21213] veth0: entered allmulticast mode
[  374.152375][T21213] veth1: entered allmulticast mode
[  374.159831][T21213] wg0: entered allmulticast mode
[  374.179892][T21213] wg1: entered allmulticast mode
[  374.185925][T21213] wg2: entered allmulticast mode
[  374.197975][T21213] veth0_to_bridge: entered allmulticast mode
[  374.206593][T21218] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:0
[  374.207837][T21213] veth1_to_bridge: entered allmulticast mode
[  374.237789][T21213] veth0_to_bond: entered allmulticast mode
[  374.254228][T21213] veth1_to_bond: entered allmulticast mode
[  374.263473][T21213] veth0_to_team: entered allmulticast mode
[  374.279118][T21213] veth1_to_team: entered allmulticast mode
[  374.286018][T21213] veth0_to_batadv: entered allmulticast mode
[  374.292800][T21213] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  374.296183][T21213] batadv_slave_0: entered allmulticast mode
[  374.304060][T21213] veth1_to_batadv: entered allmulticast mode
[  374.311194][T21213] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  374.316918][T21213] batadv_slave_1: entered allmulticast mode
[  374.323901][T21213] xfrm0: entered allmulticast mode
[  374.330166][T21213] veth0_to_hsr: entered allmulticast mode
[  374.335452][T21213] hsr_slave_0: entered allmulticast mode
[  374.345683][T21213] veth1_to_hsr: entered allmulticast mode
[  374.351043][T21213] hsr_slave_1: entered allmulticast mode
[  374.356607][T21213] hsr0: entered allmulticast mode
[  374.363069][T21213] veth1_virt_wifi: entered allmulticast mode
[  374.369078][T21213] veth0_virt_wifi: entered allmulticast mode
[  374.374126][T21213] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  374.379328][T21213] veth1_vlan: entered allmulticast mode
[  374.385120][T21213] veth0_vlan: entered allmulticast mode
[  374.394598][T21213] vlan0: entered allmulticast mode
[  374.396380][T21213] vlan1: entered allmulticast mode
[  374.399812][T21213] macvlan0: entered allmulticast mode
[  374.405342][T21213] macvlan1: entered allmulticast mode
[  374.410227][T21213] ipvlan0: entered allmulticast mode
[  374.412526][T21213] ipvlan1: entered allmulticast mode
[  374.415971][T21213] veth1_macvtap: entered allmulticast mode
[  374.422743][T21213] veth0_macvtap: entered allmulticast mode
[  374.429657][T21213] macvtap0: entered allmulticast mode
[  374.435259][T21213] macsec0: entered allmulticast mode
[  374.443623][T21213] geneve0: entered allmulticast mode
[  374.450563][T21213] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  374.454104][T21213] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  374.457596][T21213] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  374.461632][T21213] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  374.465518][T21213] geneve1: entered allmulticast mode
[  374.471314][T21213] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  374.474231][T21213] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  374.478948][T21213] netdevsim netdevsim1 netdevsim1: entered allmulticast mode
[  374.485301][T21213] netdevsim netdevsim1 netdevsim2: entered allmulticast mode
[  374.491178][T21213] netdevsim netdevsim1 netdevsim3: entered allmulticast mode
[  374.505433][T21213] mac80211_hwsim hwsim102 wlan0: entered allmulticast mode
[  374.516314][T21213] mac80211_hwsim hwsim103 wlan1: entered allmulticast mode
[  374.522427][T21213] gretap1: left promiscuous mode
[  374.524509][T21213] gretap1: entered allmulticast mode
[  374.526744][T21213] veth2: entered allmulticast mode
[  374.529136][T21213] veth3: entered allmulticast mode
[  374.530880][T21213] bond1: entered allmulticast mode
[  374.532606][T21213] ip6gretap1: entered allmulticast mode
[  374.534460][T21213] gretap2: entered allmulticast mode
[  374.639638][T21228] netlink: 'syz.1.3678': attribute type 10 has an invalid length.
[  374.644289][T21228] bridge_slave_1: left allmulticast mode
[  374.646664][T21228] bridge_slave_1: left promiscuous mode
[  374.653340][T21228] bridge0: port 2(bridge_slave_1) entered disabled state
[  374.697201][T21228] bridge_slave_1: entered allmulticast mode
[  374.704258][T21228] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  374.725750][T21225] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3677'.
[  374.844806][T21234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3679'.
[  374.896372][T21230] lo speed is unknown, defaulting to 1000
[  374.951678][T21236] tipc: Started in network mode
[  374.953343][T21236] tipc: Node identity 8e49e083b42d, cluster identity 4711
[  374.955648][T21236] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  374.958672][T21236] syzkaller0: entered promiscuous mode
[  374.960460][T21236] syzkaller0: entered allmulticast mode
[  374.981737][T21237] tipc: Resetting bearer <eth:syzkaller0>
[  374.988602][T21235] tipc: Resetting bearer <eth:syzkaller0>
[  375.023902][T21235] tipc: Disabling bearer <eth:syzkaller0>
[  375.373818][T19991] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  375.828457][   T54] Bluetooth: hci1: command tx timeout
[  376.099326][T21244] netlink: 'syz.1.3681': attribute type 3 has an invalid length.
[  376.138050][T20850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  376.142509][T20850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  376.145597][T20850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  376.151229][T20850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  376.154253][T20850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  376.191866][T21255] lo speed is unknown, defaulting to 1000
[  376.460050][T21262] lo speed is unknown, defaulting to 1000
[  376.490809][T21266] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  376.493675][T21266] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  376.496635][T21266] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  376.500438][T21266] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  376.552625][T21268] netlink: 'syz.1.3686': attribute type 1 has an invalid length.
[  376.607825][T21268] bond2: (slave gretap3): making interface the new active one
[  376.613507][T21268] bond2: (slave gretap3): Enslaving as an active interface with an up link
[  376.654681][T19991] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  376.662342][T21268] 8021q: adding VLAN 0 to HW filter on device bond2
[  376.857216][T19991] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  376.887219][T21255] chnl_net:caif_netlink_parms(): no params data found
[  376.983901][T19991] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  377.034968][T21255] bridge0: port 1(bridge_slave_0) entered blocking state
[  377.037956][T21255] bridge0: port 1(bridge_slave_0) entered disabled state
[  377.040986][T21255] bridge_slave_0: entered allmulticast mode
[  377.043689][T21255] bridge_slave_0: entered promiscuous mode
[  377.052655][T21255] bridge0: port 2(bridge_slave_1) entered blocking state
[  377.055056][T21255] bridge0: port 2(bridge_slave_1) entered disabled state
[  377.058259][T21255] bridge_slave_1: entered allmulticast mode
[  377.070616][T21255] bridge_slave_1: entered promiscuous mode
[  377.160162][T21297] IPv6: sit1: Disabled Multicast RS
[  377.162872][T21297] sit1: entered allmulticast mode
[  377.180826][T21255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  377.189073][T21255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  377.233883][T21297] netlink: 'syz.1.3690': attribute type 32 has an invalid length.
[  377.239026][T21297] (unnamed net_device) (uninitialized): option coupled_control: invalid value (76)
[  377.246743][T21299] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  377.249973][T21299] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  377.252898][T21299] tipc: Resetting bearer <eth:syzkaller0>
[  377.259316][T21255] team0: Port device team_slave_0 added
[  377.263620][T21255] team0: Port device team_slave_1 added
[  377.288591][T19991] bridge_slave_1: left allmulticast mode
[  377.290749][T19991] bridge_slave_1: left promiscuous mode
[  377.293817][T19991] bridge0: port 2(bridge_slave_1) entered disabled state
[  377.305938][T19991] bridge_slave_0: left allmulticast mode
[  377.309340][T19991] bridge_slave_0: left promiscuous mode
[  377.311824][T19991] bridge0: port 1(bridge_slave_0) entered disabled state
[  377.590929][T19991] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  377.596839][T19991] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  377.601717][T19991] bond0 (unregistering): Released all slaves
[  377.636676][T21255] batman_adv: batadv0: Adding interface: batadv_slave_0
[  377.643231][T21255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  377.656225][T21255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  377.666183][T21255] batman_adv: batadv0: Adding interface: batadv_slave_1
[  377.684485][T21255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  377.698048][T21255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  377.797628][T21255] hsr_slave_0: entered promiscuous mode
[  377.800644][T21255] hsr_slave_1: entered promiscuous mode
[  377.826777][T21310] xt_hashlimit: size too large, truncated to 1048576
[  378.169274][T21321] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  378.172644][T21321] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  378.175931][T21321] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  378.183484][T21321] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  378.187478][T21321] geneve1: entered allmulticast mode
[  378.238015][T19991] hsr_slave_0: left promiscuous mode
[  378.241316][   T54] Bluetooth: hci2: command tx timeout
[  378.258903][T19991] hsr_slave_1: left promiscuous mode
[  378.262276][T19991] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  378.282792][T19991] batman_adv: batadv0: Removing interface: batadv_slave_0
[  378.288502][T21328] __nla_validate_parse: 22 callbacks suppressed
[  378.288513][T21328] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3697'.
[  378.297727][T21328] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3697'.
[  378.304834][T19991] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  378.314098][T19991] batman_adv: batadv0: Removing interface: batadv_slave_1
[  378.360147][T19991] veth1_macvtap: left promiscuous mode
[  378.362092][T19991] veth0_macvtap: left promiscuous mode
[  378.364455][T19991] veth1_vlan: left promiscuous mode
[  378.366621][T19991] veth0_vlan: left promiscuous mode
[  379.030689][T19991] team0 (unregistering): Port device team_slave_1 removed
[  379.063001][T19991] team0 (unregistering): Port device team_slave_0 removed
[  379.470059][T21340] lo speed is unknown, defaulting to 1000
[  379.500501][T21343] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3700'.
[  379.857996][T21356] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3703'.
[  379.892134][T21356] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3703'.
[  379.965138][T21255] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  379.976545][T21255] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  380.021311][T21255] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  380.037174][T21255] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  380.149106][T21255] 8021q: adding VLAN 0 to HW filter on device bond0
[  380.191526][T21255] 8021q: adding VLAN 0 to HW filter on device team0
[  380.200701][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  380.203732][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  380.236786][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  380.239893][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  380.308591][   T54] Bluetooth: hci2: command tx timeout
[  380.337427][T21369] lo speed is unknown, defaulting to 1000
[  380.358719][ T6203] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  380.361783][ T6203] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  380.382905][T21374] netlink: 'syz.2.3705': attribute type 21 has an invalid length.
[  380.385854][T21374] netlink: 'syz.2.3705': attribute type 6 has an invalid length.
[  380.400410][T21374] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3705'.
[  380.406625][T21374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3705'.
[  380.412690][T21374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3705'.
[  380.433601][T21255] 8021q: adding VLAN 0 to HW filter on device batadv0
[  380.437547][T21374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3705'.
[  380.534254][T21255] veth0_vlan: entered promiscuous mode
[  380.552483][T21255] veth1_vlan: entered promiscuous mode
[  380.624251][T21255] veth0_macvtap: entered promiscuous mode
[  380.632735][T21255] veth1_macvtap: entered promiscuous mode
[  380.652167][T21255] batman_adv: batadv0: Interface activated: batadv_slave_0
[  380.684895][T21255] batman_adv: batadv0: Interface activated: batadv_slave_1
[  380.691035][T21255] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  380.694107][T21255] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  380.697094][T21255] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  380.711744][T21255] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  380.866187][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  380.870405][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  380.939062][ T6203] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  380.942303][ T6203] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  381.212623][T21402] veth5: entered allmulticast mode
[  381.215661][T21402] team0: Port device veth5 added
[  381.242211][T21404] netlink: 'syz.2.3714': attribute type 13 has an invalid length.
[  381.249025][T21404] netlink: 'syz.2.3714': attribute type 17 has an invalid length.
[  381.257003][T21404] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  381.305264][T21404] lo speed is unknown, defaulting to 1000
[  381.727911][T21412] netlink: 'syz.2.3717': attribute type 1 has an invalid length.
[  381.763713][T21416] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3718'.
[  382.176997][T21435] : entered promiscuous mode
[  382.184381][T21438] C: renamed from lo (while UP)
[  382.187934][T21438] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  382.253670][T21440] netlink: 'syz.1.3726': attribute type 21 has an invalid length.
[  382.293631][T21440] batman_adv: batadv0: Removing interface: batadv_slave_1
[  382.465532][T21457] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  382.570548][ T5836] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  383.529195][T21473] __nla_validate_parse: 3 callbacks suppressed
[  383.529206][T21473] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3732'.
[  383.569642][T21473] C speed is unknown, defaulting to 1000
[  383.610085][T20850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  383.614438][T20850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  383.617832][T20850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  383.621457][T20850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  383.624326][T20850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  383.722974][ T5836] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  383.755652][T21474] C speed is unknown, defaulting to 1000
[  383.944631][T21493] x_tables: duplicate underflow at hook 2
[  383.949208][ T5836] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  384.054256][ T5836] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  384.077270][ T6207] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  384.082076][ T6207] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  384.107852][T21474] chnl_net:caif_netlink_parms(): no params data found
[  384.231927][T21510] C speed is unknown, defaulting to 1000
[  384.314841][T21474] bridge0: port 1(bridge_slave_0) entered blocking state
[  384.317192][T21474] bridge0: port 1(bridge_slave_0) entered disabled state
[  384.323604][T21474] bridge_slave_0: entered allmulticast mode
[  384.326353][T21474] bridge_slave_0: entered promiscuous mode
[  384.343022][T21474] bridge0: port 2(bridge_slave_1) entered blocking state
[  384.345687][T21474] bridge0: port 2(bridge_slave_1) entered disabled state
[  384.348698][T21474] bridge_slave_1: entered allmulticast mode
[  384.352773][T21474] bridge_slave_1: entered promiscuous mode
[  384.391366][ T5836] bridge_slave_1: left allmulticast mode
[  384.393223][ T5836] bridge_slave_1: left promiscuous mode
[  384.395064][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state
[  384.399268][T21517] netlink: 'syz.1.3742': attribute type 13 has an invalid length.
[  384.403254][ T5836] bridge_slave_0: left allmulticast mode
[  384.405211][T21518] netlink: 'syz.1.3742': attribute type 13 has an invalid length.
[  384.407837][ T5836] bridge_slave_0: left promiscuous mode
[  384.410142][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state
[  384.641342][   T60] block nbd2: Possible stuck request ffff888020ea8000: control (read@0,1024B). Runtime 90 seconds
[  384.646396][   T60] block nbd2: Possible stuck request ffff888020ea8200: control (read@1024,1024B). Runtime 90 seconds
[  384.651339][   T60] block nbd2: Possible stuck request ffff888020ea8400: control (read@2048,1024B). Runtime 90 seconds
[  384.655825][   T60] block nbd2: Possible stuck request ffff888020ea8600: control (read@3072,1024B). Runtime 90 seconds
[  384.696480][ T5836] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  384.702085][ T5836] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  384.707093][ T5836] bond0 (unregistering): Released all slaves
[  384.811884][T21474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  384.851592][T21474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  384.893486][T21474] team0: Port device team_slave_0 added
[  384.966208][T21474] team0: Port device team_slave_1 added
[  384.984426][T21522] tipc: Resetting bearer <eth:syzkaller0>
[  384.991568][T21474] batman_adv: batadv0: Adding interface: batadv_slave_0
[  384.994100][T21474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  385.003358][T21474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  385.061900][T21474] batman_adv: batadv0: Adding interface: batadv_slave_1
[  385.064115][T21474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  385.072570][T21474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  385.077675][T21526] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3745'.
[  385.278583][ T5836] hsr_slave_0: left promiscuous mode
[  385.281645][ T5836] hsr_slave_1: left promiscuous mode
[  385.284521][ T5836] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  385.287551][ T5836] batman_adv: batadv0: Removing interface: batadv_slave_0
[  385.296838][ T5836] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  385.300394][ T5836] batman_adv: batadv0: Removing interface: batadv_slave_1
[  385.339325][ T5836] veth1_macvtap: left promiscuous mode
[  385.341775][ T5836] veth0_macvtap: left promiscuous mode
[  385.344167][ T5836] veth1_vlan: left promiscuous mode
[  385.348033][ T5836] veth0_vlan: left promiscuous mode
[  385.351984][T21536] netlink: 'syz.2.3747': attribute type 1 has an invalid length.
[  385.683804][T20850] Bluetooth: hci2: command tx timeout
[  385.775426][ T5836] team0 (unregistering): Port device team_slave_1 removed
[  385.813345][ T5836] team0 (unregistering): Port device team_slave_0 removed
[  386.140848][T21536] 8021q: adding VLAN 0 to HW filter on device bond65
[  386.152441][T21538] macvlan4: entered promiscuous mode
[  386.154801][T21538] macvlan4: entered allmulticast mode
[  386.163678][T21538] bond65: entered promiscuous mode
[  386.167107][T21538] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  386.174097][T21538] bond65: left promiscuous mode
[  386.197783][T21543] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  386.205556][T21544] syzkaller0: entered promiscuous mode
[  386.207535][T21544] syzkaller0: entered allmulticast mode
[  386.272100][T21474] hsr_slave_0: entered promiscuous mode
[  386.275490][T21474] hsr_slave_1: entered promiscuous mode
[  386.308885][T21545] tipc: Resetting bearer <eth:syzkaller0>
[  386.337947][T21545] tipc: Disabling bearer <eth:syzkaller0>
[  386.416553][T21554] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3749'.
[  386.423956][T21554] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 46479 - 0
[  386.426982][T21554] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 46479 - 0
[  386.430904][T21554] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 46479 - 0
[  386.434601][T21554] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 46479 - 0
[  386.454564][T21554] geneve2: entered promiscuous mode
[  386.456331][T21554] geneve2: entered allmulticast mode
[  386.625410][T21568] mac80211_hwsim hwsim3 syzkaller0: Caught tx_queue_len zero misconfig
[  386.676377][T21572] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3753'.
[  386.711560][T21571] tipc: Resetting bearer <eth:syzkaller0>
[  386.713543][T21571] tipc: Resetting bearer <eth:syzkaller0>
[  386.725279][T21573] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3753'.
[  386.750200][T21571] geneve1: left allmulticast mode
[  386.753507][T21571] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  386.755994][T21571] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  386.774658][T21571] tipc: Resetting bearer <eth:syzkaller0>
[  386.868016][T21577] netlink: 'syz.2.3756': attribute type 58 has an invalid length.
[  386.879998][T21577] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3756'.
[  387.045525][T21582] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  387.049946][T21582] tipc: Resetting bearer <eth:syzkaller0>
[  387.057129][T21582] macsec1: entered allmulticast mode
[  387.062496][T21582] macsec0: entered allmulticast mode
[  387.066329][T21474] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  387.135376][T21474] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  387.154465][T21474] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  387.156127][T21584] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3758'.
[  387.163478][T21474] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  387.264147][T21474] 8021q: adding VLAN 0 to HW filter on device bond0
[  387.293287][T21474] 8021q: adding VLAN 0 to HW filter on device team0
[  387.311607][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  387.313958][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  387.325149][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  387.327513][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  387.368329][T21598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3762'.
[  387.407213][T21598] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3762'.
[  387.451267][T21604] 8021q: adding VLAN 0 to HW filter on device bond3
[  387.474085][T21474] 8021q: adding VLAN 0 to HW filter on device batadv0
[  387.512072][T21474] veth0_vlan: entered promiscuous mode
[  387.527004][T21474] veth1_vlan: entered promiscuous mode
[  387.537063][T21612] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3764'.
[  387.540626][T21612] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  387.575369][T21474] veth0_macvtap: entered promiscuous mode
[  387.585195][T21474] veth1_macvtap: entered promiscuous mode
[  387.611784][T21474] batman_adv: batadv0: Interface activated: batadv_slave_0
[  387.629573][T21474] batman_adv: batadv0: Interface activated: batadv_slave_1
[  387.638043][T21474] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  387.643744][T21474] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  387.646691][T21474] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  387.650489][T21474] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  387.728969][ T1085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  387.731782][ T1085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  387.748664][T20850] Bluetooth: hci2: command tx timeout
[  387.779465][   T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  387.782435][   T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  388.085551][T21632] netlink: 'syz.2.3769': attribute type 1 has an invalid length.
[  388.097701][T21633] netlink: 'syz.2.3769': attribute type 1 has an invalid length.
[  388.123414][T21632] 8021q: adding VLAN 0 to HW filter on device bond66
[  388.152652][T21633] 8021q: adding VLAN 0 to HW filter on device bond66
[  388.155793][T21633] bond66: (slave vxcan5): The slave device specified does not support setting the MAC address
[  388.163203][T21633] bond66: (slave vxcan5): Error -95 calling set_mac_address
[  388.189293][T21632] bond66: (slave vxcan5): The slave device specified does not support setting the MAC address
[  388.194732][T21632] bond66: (slave vxcan5): Error -95 calling set_mac_address
[  388.321689][T21640] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  388.593292][T21651] netlink: 'syz.1.3774': attribute type 1 has an invalid length.
[  388.613117][T21651] __nla_validate_parse: 2 callbacks suppressed
[  388.613129][T21651] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3774'.
[  388.622688][T21651] 8021q: adding VLAN 0 to HW filter on device bond4
[  388.665729][T21654] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3775'.
[  388.724987][T21656] C speed is unknown, defaulting to 1000
[  388.767444][T21657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3776'.
[  388.784281][T21657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3776'.
[  388.794249][T21657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3776'.
[  388.940167][T21660] bridge2: entered promiscuous mode
[  388.941973][T21660] bridge2: entered allmulticast mode
[  388.955607][T21660] team0: Port device bridge2 added
[  389.214520][T21664] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3779'.
[  389.251150][T21664] 8021q: adding VLAN 0 to HW filter on device bond5
[  389.255475][T21664] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3779'.
[  389.263030][T21664] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3779'.
[  389.547809][T19991] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  389.582484][T21684] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3782'.
[  390.627537][T21694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3785'.
[  390.733382][T21698] tipc: Resetting bearer <eth:syzkaller0>
[  390.738638][T21698] bond63: (slave gretap4): Releasing active interface
[  390.742374][T21698] batadv0: left allmulticast mode
[  390.744579][T21698] batadv0: left promiscuous mode
[  390.746930][T21698] bridge0: port 1(batadv0) entered disabled state
[  390.761316][T21701] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[  390.767688][T21701] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[  390.803163][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  390.807769][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  390.814636][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  390.821580][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  390.824957][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  390.883964][T21703] C speed is unknown, defaulting to 1000
[  390.921311][T21709] xfrm1: entered promiscuous mode
[  390.923849][T21709] xfrm1: entered allmulticast mode
[  391.175589][T19991] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  391.279137][T19991] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  391.345077][T19991] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  391.374022][T21703] chnl_net:caif_netlink_parms(): no params data found
[  391.499401][T21703] bridge0: port 1(bridge_slave_0) entered blocking state
[  391.502295][T21703] bridge0: port 1(bridge_slave_0) entered disabled state
[  391.505004][T21703] bridge_slave_0: entered allmulticast mode
[  391.513785][T21703] bridge_slave_0: entered promiscuous mode
[  391.555705][T21703] bridge0: port 2(bridge_slave_1) entered blocking state
[  391.559165][T21703] bridge0: port 2(bridge_slave_1) entered disabled state
[  391.561969][T21703] bridge_slave_1: entered allmulticast mode
[  391.567004][T21703] bridge_slave_1: entered promiscuous mode
[  391.632502][T21738] netlink: 'syz.2.3794': attribute type 13 has an invalid length.
[  391.635290][T21738] netlink: 'syz.2.3794': attribute type 17 has an invalid length.
[  391.649475][T21738] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  391.657353][T21703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  391.671550][T21703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  391.746664][T19991] bridge_slave_1: left allmulticast mode
[  391.754698][T19991] bridge_slave_1: left promiscuous mode
[  391.757591][T19991] bridge0: port 2(bridge_slave_1) entered disabled state
[  391.771756][T19991] bridge_slave_0: left allmulticast mode
[  391.773639][T19991] bridge_slave_0: left promiscuous mode
[  391.776014][T19991] bridge0: port 1(bridge_slave_0) entered disabled state
[  392.093261][T19991] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  392.108912][T19991] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  392.116291][T19991] bond0 (unregistering): Released all slaves
[  392.135548][T21703] team0: Port device team_slave_0 added
[  392.154253][T21703] team0: Port device team_slave_1 added
[  392.321940][T21703] batman_adv: batadv0: Adding interface: batadv_slave_0
[  392.324287][T21703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  392.343298][T21703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  392.352992][T21703] batman_adv: batadv0: Adding interface: batadv_slave_1
[  392.355421][T21703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  392.365339][T21703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  392.492279][T21703] hsr_slave_0: entered promiscuous mode
[  392.495418][T21703] hsr_slave_1: entered promiscuous mode
[  392.499707][T21703] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  392.503044][T21703] Cannot create hsr debugfs directory
[  392.506939][T21751] Unsupported ieee802154 address type: 0
[  392.577262][T21761] ipvlan0: entered promiscuous mode
[  392.584285][T21761] bridge0: port 2(ipvlan0) entered blocking state
[  392.586574][T21761] bridge0: port 2(ipvlan0) entered disabled state
[  392.589534][T21761] ipvlan0: entered allmulticast mode
[  392.605684][T21761] ipvlan0: left allmulticast mode
[  392.672929][T19991] hsr_slave_0: left promiscuous mode
[  392.675260][T19991] hsr_slave_1: left promiscuous mode
[  392.677459][T19991] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  392.684548][T19991] batman_adv: batadv0: Removing interface: batadv_slave_0
[  392.688334][T19991] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  392.690824][T19991] batman_adv: batadv0: Removing interface: batadv_slave_1
[  392.704049][T21764] netlink: 'syz.2.3799': attribute type 1 has an invalid length.
[  392.716222][T19991] veth1_macvtap: left promiscuous mode
[  392.719077][T19991] veth0_macvtap: left promiscuous mode
[  392.720958][T19991] veth1_vlan: left promiscuous mode
[  392.723354][T19991] veth0_vlan: left promiscuous mode
[  392.892365][   T54] Bluetooth: hci2: command tx timeout
[  393.101639][T19991] team0 (unregistering): Port device team_slave_1 removed
[  393.130214][T19991] team0 (unregistering): Port device team_slave_0 removed
[  393.536931][T21774] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  393.540283][T21774] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  393.543116][T21774] tipc: Resetting bearer <eth:syzkaller0>
[  393.599371][T21774] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check.
[  393.886133][T21703] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  393.891213][T21703] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  393.895641][T21703] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  393.906684][T21703] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  393.966094][T21703] 8021q: adding VLAN 0 to HW filter on device bond0
[  393.984042][T21703] 8021q: adding VLAN 0 to HW filter on device team0
[  393.992634][ T6203] bridge0: port 1(bridge_slave_0) entered blocking state
[  393.995524][ T6203] bridge0: port 1(bridge_slave_0) entered forwarding state
[  394.012692][ T6203] bridge0: port 2(bridge_slave_1) entered blocking state
[  394.015703][ T6203] bridge0: port 2(bridge_slave_1) entered forwarding state
[  394.173538][T21703] 8021q: adding VLAN 0 to HW filter on device batadv0
[  394.215514][T21703] veth0_vlan: entered promiscuous mode
[  394.223428][T21703] veth1_vlan: entered promiscuous mode
[  394.249656][T21703] veth0_macvtap: entered promiscuous mode
[  394.255496][T21703] veth1_macvtap: entered promiscuous mode
[  394.275595][T21703] batman_adv: batadv0: Interface activated: batadv_slave_0
[  394.289454][T21703] batman_adv: batadv0: Interface activated: batadv_slave_1
[  394.295811][T21703] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  394.299707][T21703] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  394.303397][T21703] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  394.307045][T21703] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  394.394630][ T6203] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  394.397910][ T6203] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  394.484564][ T6203] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  394.487076][ T6203] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  394.491037][T21793] __nla_validate_parse: 5 callbacks suppressed
[  394.491049][T21793] netlink: 248 bytes leftover after parsing attributes in process `syz.1.3805'.
[  394.542895][T21795] netlink: 248 bytes leftover after parsing attributes in process `syz.1.3805'.
[  394.558931][T21794] netlink: 'syz.2.3804': attribute type 1 has an invalid length.
[  394.734889][T21798] bond67: (slave bridge38): making interface the new active one
[  394.737641][T21798] bond67: (slave bridge38): Enslaving as an active interface with an up link
[  394.949101][T21811] vlan0: entered promiscuous mode
[  394.952023][T21811] batman_adv: batadv0: Adding interface: macvlan4
[  394.954631][T21811] batman_adv: batadv0: The MTU of interface macvlan4 is too small (1536) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  394.965821][T21811] batman_adv: batadv0: Interface activated: macvlan4
[  394.973454][T21813] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3809'.
[  394.984266][T21813] pim6reg: entered allmulticast mode
[  394.987011][T21811] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3808'.
[  394.991001][T21813] pim6reg: left allmulticast mode
[  395.030784][T21815] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  395.033759][T21815] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  395.036900][T21815] tipc: Resetting bearer <eth:syzkaller0>
[  395.104154][T21822] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3813'.
[  395.148365][T21824] mac80211_hwsim hwsim102 wlan0: entered promiscuous mode
[  395.151099][T21824] mac80211_hwsim hwsim102 wlan0: left allmulticast mode
[  395.184305][T21826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3816'.
[  395.187073][T21826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3816'.
[  395.188296][T21829] netlink: 'syz.2.3815': attribute type 5 has an invalid length.
[  395.192597][T21829] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3815'.
[  395.227549][T21834] netlink: 'syz.1.3817': attribute type 2 has an invalid length.
[  395.231301][T21834] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3817'.
[  395.359977][T21836] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  395.364413][T21836] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 46479 - 0
[  395.420891][T21836] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  395.424248][T21836] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 46479 - 0
[  395.492261][T21836] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  395.496251][T21836] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 46479 - 0
[  395.520267][T21839] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  395.582312][T21836] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  395.585670][T21836] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 46479 - 0
[  395.664824][T21836] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  395.667611][T21836] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 46479 - 0
[  395.677692][T21836] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  395.688330][T21836] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 46479 - 0
[  395.702998][T21836] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  395.705638][T21836] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 46479 - 0
[  395.711964][T21847] netlink: 'syz.2.3821': attribute type 4 has an invalid length.
[  395.720817][T21836] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  395.723578][T21836] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 46479 - 0
[  395.792947][T21849] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  395.850611][T21849] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3822'.
[  395.924183][T21861] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  395.926733][T21861] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  395.930143][T21861] tipc: Resetting bearer <eth:syzkaller0>
[  395.986582][T21865] lo: left allmulticast mode
[  395.989742][T21865] tunl0: left allmulticast mode
[  395.991620][T21865] gre0: left allmulticast mode
[  395.993569][T21865] gretap0: left allmulticast mode
[  395.995546][T21865] erspan0: left allmulticast mode
[  395.997810][T21865] ip_vti0: left allmulticast mode
[  396.000745][T21865] ip6_vti0: left allmulticast mode
[  396.002982][T21865] sit0: left allmulticast mode
[  396.004613][T21865] ip6tnl0: left allmulticast mode
[  396.006311][T21865] ip6gre0: left allmulticast mode
[  396.012943][T21865] ip6gretap0: left allmulticast mode
[  396.015371][T21865] bridge0: left allmulticast mode
[  396.017463][T21865] vcan0: left allmulticast mode
[  396.019760][T21865] bond0: left allmulticast mode
[  396.021361][T21865] bridge_slave_1: left allmulticast mode
[  396.023302][T21865] team0: left allmulticast mode
[  396.024835][T21865] veth5: left allmulticast mode
[  396.026476][T21865] dummy0: left allmulticast mode
[  396.028534][T21865] nlmon0: left allmulticast mode
[  396.030729][T21865] caif0: left allmulticast mode
[  396.032952][T21865] batadv0: left allmulticast mode
[  396.035356][T21865] vxcan0: left allmulticast mode
[  396.037582][T21865] vxcan1: left allmulticast mode
[  396.040270][T21865] veth0: left allmulticast mode
[  396.042418][T21865] veth1: left allmulticast mode
[  396.044578][T21865] wg0: left allmulticast mode
[  396.046799][T21865] wg1: left allmulticast mode
[  396.049844][T21865] wg2: left allmulticast mode
[  396.051902][T21865] veth0_to_bridge: left allmulticast mode
[  396.054554][T21865] veth1_to_bridge: left allmulticast mode
[  396.057622][T21865] veth0_to_bond: left allmulticast mode
[  396.065203][T21865] bond_slave_0: left allmulticast mode
[  396.067678][T21865] veth1_to_bond: left allmulticast mode
[  396.070842][T21865] bond_slave_1: left allmulticast mode
[  396.072962][T21865] veth0_to_team: left allmulticast mode
[  396.074802][T21865] team_slave_0: left allmulticast mode
[  396.076600][T21865] veth1_to_team: left allmulticast mode
[  396.079571][T21865] team_slave_1: left allmulticast mode
[  396.082004][T21865] veth0_to_batadv: left allmulticast mode
[  396.084461][T21865] batadv_slave_0: left allmulticast mode
[  396.086853][T21865] xfrm0: left allmulticast mode
[  396.089342][T21865] veth0_to_hsr: left allmulticast mode
[  396.091741][T21865] veth1_to_hsr: left allmulticast mode
[  396.094134][T21865] hsr0: left allmulticast mode
[  396.095665][T21865] hsr_slave_0: left allmulticast mode
[  396.097376][T21865] hsr_slave_1: left allmulticast mode
[  396.099934][T21865] veth1_virt_wifi: left allmulticast mode
[  396.102415][T21865] veth0_virt_wifi: left allmulticast mode
[  396.104878][T21865] net veth1_virt_wifi virt_wifi0: left allmulticast mode
[  396.107233][T21865] veth1_macvtap: left allmulticast mode
[  396.109431][T21865] veth0_macvtap: left allmulticast mode
[  396.111329][T21865] macvtap0: left allmulticast mode
[  396.113220][T21865] macsec0: left allmulticast mode
[  396.115007][T21865] geneve0: left allmulticast mode
[  396.116725][T21865] geneve1: left allmulticast mode
[  396.119036][T21865] mac80211_hwsim hwsim102 wlan0: left promiscuous mode
[  396.121274][T21865] mac80211_hwsim hwsim103 wlan1: left allmulticast mode
[  396.123672][T21865] gretap1: left allmulticast mode
[  396.125449][T21865] veth2: left allmulticast mode
[  396.127332][T21865] veth3: left allmulticast mode
[  396.129613][T21865] bond1: left allmulticast mode
[  396.131448][T21865] ip6gretap1: left allmulticast mode
[  396.133388][T21865] gretap2: left allmulticast mode
[  396.135570][T21865] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  396.138501][T21865] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  396.141153][T21865] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  396.143772][T21865] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  396.156144][T21865] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 46479 - 0
[  396.159398][T21865] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 46479 - 0
[  396.162391][T21865] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 46479 - 0
[  396.165674][T21865] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 46479 - 0
[  396.169434][T21865] geneve2: left promiscuous mode
[  396.171070][T21865] geneve2: left allmulticast mode
[  396.177005][T21865] bridge2: left promiscuous mode
[  396.179036][T21865] bridge2: left allmulticast mode
[  396.184371][T21865] xfrm1: left promiscuous mode
[  396.185968][T21865] xfrm1: left allmulticast mode
[  396.584748][ T5846] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  397.830842][ T5846] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  397.881673][T20850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  397.892288][T20850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  397.895392][T20850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  397.895481][ T5846] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  397.902827][T20850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  397.905894][T20850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  397.930666][T21895] C speed is unknown, defaulting to 1000
[  397.963566][ T5846] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  398.099805][ T5846] bridge_slave_1: left allmulticast mode
[  398.102143][ T5846] bridge_slave_1: left promiscuous mode
[  398.105263][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[  398.113257][ T5846] bridge_slave_0: left allmulticast mode
[  398.115654][ T5846] bridge_slave_0: left promiscuous mode
[  398.119395][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[  398.463685][ T5846] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  398.470963][ T5846] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  398.476314][ T5846] bond0 (unregistering): Released all slaves
[  398.704597][T21895] chnl_net:caif_netlink_parms(): no params data found
[  398.720632][T21910] bond0: option min_links: invalid value (18446744073709551604)
[  398.723429][T21910] bond0: option min_links: allowed values 0 - 2147483647
[  398.774338][T21903] syzkaller0: entered promiscuous mode
[  398.776335][T21903] syzkaller0: entered allmulticast mode
[  400.002157][   T54] Bluetooth: hci2: command tx timeout
[  400.203302][ T5846] hsr_slave_0: left promiscuous mode
[  400.208484][ T5846] hsr_slave_1: left promiscuous mode
[  400.211400][ T5846] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  400.213886][ T5846] batman_adv: batadv0: Removing interface: batadv_slave_0
[  400.217581][ T5846] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  400.232322][ T5846] batman_adv: batadv0: Removing interface: batadv_slave_1
[  400.259477][ T5846] veth1_macvtap: left promiscuous mode
[  400.261395][ T5846] veth0_macvtap: left promiscuous mode
[  400.263280][ T5846] veth1_vlan: left promiscuous mode
[  400.265001][ T5846] veth0_vlan: left promiscuous mode
[  400.620954][ T5846] team0 (unregistering): Port device team_slave_1 removed
[  400.652150][ T5846] team0 (unregistering): Port device team_slave_0 removed
[  400.987652][T21928] __nla_validate_parse: 5 callbacks suppressed
[  400.987663][T21928] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3841'.
[  401.012731][T21895] bridge0: port 1(bridge_slave_0) entered blocking state
[  401.016543][T21895] bridge0: port 1(bridge_slave_0) entered disabled state
[  401.022381][T21895] bridge_slave_0: entered allmulticast mode
[  401.025141][T21895] bridge_slave_0: entered promiscuous mode
[  401.028583][T21895] bridge0: port 2(bridge_slave_1) entered blocking state
[  401.030951][T21895] bridge0: port 2(bridge_slave_1) entered disabled state
[  401.033303][T21895] bridge_slave_1: entered allmulticast mode
[  401.036155][T21895] bridge_slave_1: entered promiscuous mode
[  401.066556][T21895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  401.071332][T21895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  401.111195][T21895] team0: Port device team_slave_0 added
[  401.116039][T21895] team0: Port device team_slave_1 added
[  401.161728][T21895] batman_adv: batadv0: Adding interface: batadv_slave_0
[  401.164760][T21895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  401.188365][T21895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  401.194537][T21895] batman_adv: batadv0: Adding interface: batadv_slave_1
[  401.197503][T21895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  401.218757][T21895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  401.264900][T21895] hsr_slave_0: entered promiscuous mode
[  401.269012][T21895] hsr_slave_1: entered promiscuous mode
[  401.556447][T21944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3844'.
[  401.601683][T21944] team0: Port device team_slave_0 removed
[  401.703424][T21946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3845'.
[  401.843909][T21946] C speed is unknown, defaulting to 1000
[  401.902849][T21895] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  401.916567][T21949] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3846'.
[  401.923443][T21895] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  401.929641][T21895] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  401.940064][T21895] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  402.013756][T21957] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3846'.
[  402.014709][T21895] 8021q: adding VLAN 0 to HW filter on device bond0
[  402.042608][T21895] 8021q: adding VLAN 0 to HW filter on device team0
[  402.050978][  T941] bridge0: port 1(bridge_slave_0) entered blocking state
[  402.054018][  T941] bridge0: port 1(bridge_slave_0) entered forwarding state
[  402.069812][  T941] bridge0: port 2(bridge_slave_1) entered blocking state
[  402.069844][   T54] Bluetooth: hci2: command tx timeout
[  402.072588][  T941] bridge0: port 2(bridge_slave_1) entered forwarding state
[  402.276606][T21895] 8021q: adding VLAN 0 to HW filter on device batadv0
[  402.316516][T21895] veth0_vlan: entered promiscuous mode
[  402.324769][T21895] veth1_vlan: entered promiscuous mode
[  402.383772][T21895] veth0_macvtap: entered promiscuous mode
[  402.392162][T21895] veth1_macvtap: entered promiscuous mode
[  402.424623][T21895] batman_adv: batadv0: Interface activated: batadv_slave_0
[  402.440763][T21895] batman_adv: batadv0: Interface activated: batadv_slave_1
[  402.453874][T21895] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  402.457650][T21895] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  402.464183][T21895] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  402.467887][T21895] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  402.601422][T21965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3847'.
[  402.676729][  T941] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  402.679885][  T941] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  402.744262][ T6207] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  402.747524][ T6207] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  402.814426][T21968] netlink: 'syz.1.3848': attribute type 10 has an invalid length.
[  402.911952][T21973] C speed is unknown, defaulting to 1000
[  403.166379][T21970] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3849'.
[  403.345369][T21982] netlink: 'syz.2.3852': attribute type 1 has an invalid length.
[  403.404593][T21984] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3853'.
[  403.407762][T21984] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3853'.
[  403.447287][T21988] netlink: 'syz.2.3854': attribute type 1 has an invalid length.
[  403.704331][T21995] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  403.744230][T21995] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  403.827230][T21995] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  403.913050][T21995] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  404.023911][T21995] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  404.032340][T21995] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  404.039898][T21995] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  404.047000][T21995] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  404.089253][T22004] netlink: 'syz.2.3858': attribute type 1 has an invalid length.
[  404.114569][T22004] bond68: entered promiscuous mode
[  404.116728][T22004] bond68: entered allmulticast mode
[  404.119756][T22004] 8021q: adding VLAN 0 to HW filter on device bond68
[  404.123313][T22004] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3858'.
[  404.133493][T22004] netlink: 'syz.2.3858': attribute type 1 has an invalid length.
[  404.315542][T22016] C speed is unknown, defaulting to 1000
[  404.535681][ T5710] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  405.963600][T20850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  405.968575][T20850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  405.974856][T20850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  405.986157][T22024] C speed is unknown, defaulting to 1000
[  405.992760][T20850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  405.995819][T20850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  406.091114][ T5710] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  406.120848][T22026] C speed is unknown, defaulting to 1000
[  406.173509][ T5710] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  406.189755][T22035] netlink: 'syz.1.3864': attribute type 8 has an invalid length.
[  406.202826][T22035] __nla_validate_parse: 6 callbacks suppressed
[  406.202838][T22035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3864'.
[  406.290046][ T5710] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  406.316877][T22038] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  406.502730][T22047] netlink: 'syz.2.3868': attribute type 1 has an invalid length.
[  406.521082][T22047] workqueue: Failed to create a rescuer kthread for wq "bond69": -EINTR
[  406.597232][T22026] chnl_net:caif_netlink_parms(): no params data found
[  406.611478][ T5710] bridge_slave_1: left allmulticast mode
[  406.613611][ T5710] bridge_slave_1: left promiscuous mode
[  406.615931][ T5710] bridge0: port 2(bridge_slave_1) entered disabled state
[  406.633444][ T5710] bridge_slave_0: left allmulticast mode
[  406.635326][ T5710] bridge_slave_0: left promiscuous mode
[  406.637273][ T5710] bridge0: port 1(bridge_slave_0) entered disabled state
[  406.692179][  T788] hid-generic 0005:0B57:0007.0001: collection stack underflow
[  406.694712][  T788] hid-generic 0005:0B57:0007.0001: item 0 0 0 12 parsing failed
[  406.697403][  T788] hid-generic 0005:0B57:0007.0001: probe with driver hid-generic failed with error -22
[  407.082947][ T5710] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  407.088906][ T5710] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  407.093010][ T5710] bond0 (unregistering): Released all slaves
[  407.224580][T22071] netlink: 596 bytes leftover after parsing attributes in process `syz.1.3874'.
[  407.239642][T22071] netlink: 'syz.1.3874': attribute type 11 has an invalid length.
[  407.242545][T22071] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3874'.
[  407.271276][T22026] bridge0: port 1(bridge_slave_0) entered blocking state
[  407.273569][T22026] bridge0: port 1(bridge_slave_0) entered disabled state
[  407.276102][T22026] bridge_slave_0: entered allmulticast mode
[  407.281028][T22026] bridge_slave_0: entered promiscuous mode
[  407.284175][T22026] bridge0: port 2(bridge_slave_1) entered blocking state
[  407.286414][T22026] bridge0: port 2(bridge_slave_1) entered disabled state
[  407.290703][T22026] bridge_slave_1: entered allmulticast mode
[  407.295019][T22026] bridge_slave_1: entered promiscuous mode
[  407.372038][T22026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  407.376843][T22026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  407.406682][T22076] bridge0: failed insert local address into bridge forwarding table
[  407.446560][T22080] netlink: 'syz.1.3876': attribute type 4 has an invalid length.
[  407.464391][T22081] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3876'.
[  407.518804][T22026] team0: Port device team_slave_0 added
[  407.621536][T22026] team0: Port device team_slave_1 added
[  407.671737][ T5710] hsr_slave_0: left promiscuous mode
[  407.674873][ T5710] hsr_slave_1: left promiscuous mode
[  407.677747][ T5710] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  407.685834][ T5710] batman_adv: batadv0: Removing interface: batadv_slave_0
[  407.690406][ T5710] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  407.693438][ T5710] batman_adv: batadv0: Removing interface: batadv_slave_1
[  407.717231][ T5710] veth1_macvtap: left promiscuous mode
[  407.720206][ T5710] veth0_macvtap: left promiscuous mode
[  407.722362][ T5710] veth1_vlan: left promiscuous mode
[  407.724556][ T5710] veth0_vlan: left promiscuous mode
[  407.824689][T22093] netlink: 'syz.1.3878': attribute type 4 has an invalid length.
[  407.885202][T22094] netlink: 'syz.1.3878': attribute type 4 has an invalid length.
[  408.079198][   T54] Bluetooth: hci2: command tx timeout
[  408.152784][ T5710] team0 (unregistering): Port device team_slave_1 removed
[  408.187897][ T5710] team0 (unregistering): Port device team_slave_0 removed
[  408.631400][T22026] batman_adv: batadv0: Adding interface: batadv_slave_0
[  408.634270][T22026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  408.649043][T22026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  408.663152][T22026] batman_adv: batadv0: Adding interface: batadv_slave_1
[  408.668166][T22026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  408.698524][T22026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  408.772564][T22103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3880'.
[  408.774860][T22026] hsr_slave_0: entered promiscuous mode
[  408.775715][T22103] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3880'.
[  408.778028][T22026] hsr_slave_1: entered promiscuous mode
[  408.987727][T22111] C speed is unknown, defaulting to 1000
[  409.394662][T22026] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  409.406286][T22026] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  409.416494][T22026] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  409.427427][T22026] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  409.513434][T22026] 8021q: adding VLAN 0 to HW filter on device bond0
[  409.533572][T22026] 8021q: adding VLAN 0 to HW filter on device team0
[  409.546145][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  409.549365][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  409.565453][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  409.568632][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  409.751617][T22132] netlink: 'syz.2.3884': attribute type 3 has an invalid length.
[  409.763927][T22026] 8021q: adding VLAN 0 to HW filter on device batadv0
[  409.767260][T22132] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3884'.
[  409.793612][T22132] bond69: (slave vcan1): The slave device specified does not support setting the MAC address
[  409.802512][T22132] bond69: (slave vcan1): Error -95 calling set_mac_address
[  409.822575][T22026] veth0_vlan: entered promiscuous mode
[  409.827395][T22026] veth1_vlan: entered promiscuous mode
[  409.844414][T22026] veth0_macvtap: entered promiscuous mode
[  409.850182][T22026] veth1_macvtap: entered promiscuous mode
[  409.866785][T22026] batman_adv: batadv0: Interface activated: batadv_slave_0
[  409.873386][T22026] batman_adv: batadv0: Interface activated: batadv_slave_1
[  409.881045][T22026] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  409.883957][T22026] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  409.886838][T22026] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  409.890582][T22026] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  409.953059][T22135] syzkaller1: entered promiscuous mode
[  409.955465][T22135] syzkaller1: entered allmulticast mode
[  409.994472][ T6214] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  410.004311][ T6214] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  410.025593][ T6203] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  410.029418][ T6203] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  410.074212][T22026] 
[  410.075126][T22026] ======================================================
[  410.077455][T22026] WARNING: possible circular locking dependency detected
[  410.079960][T22026] 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 Not tainted
[  410.083619][T22026] ------------------------------------------------------
[  410.085876][T22026] syz-executor/22026 is trying to acquire lock:
[  410.087953][T22026] ffff888038ba7840 ((work_completion)(&(&conn->info_timer)->work)){+.+.}-{0:0}, at: __flush_work+0xd2/0xbc0
[  410.091783][T22026] 
[  410.091783][T22026] but task is already holding lock:
[  410.094634][T22026] ffff888038ba7b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680
[  410.097840][T22026] 
[  410.097840][T22026] which lock already depends on the new lock.
[  410.097840][T22026] 
[  410.101422][T22026] 
[  410.101422][T22026] the existing dependency chain (in reverse order) is:
[  410.104621][T22026] 
[  410.104621][T22026] -> #1 (&conn->lock#2){+.+.}-{4:4}:
[  410.107114][T22026]        lock_acquire+0x120/0x360
[  410.108844][T22026]        __mutex_lock+0x182/0xe80
[  410.110709][T22026]        l2cap_info_timeout+0x60/0xa0
[  410.112696][T22026]        process_scheduled_works+0xae1/0x17b0
[  410.114732][T22026]        worker_thread+0x8a0/0xda0
[  410.116449][T22026]        kthread+0x711/0x8a0
[  410.118019][T22026]        ret_from_fork+0x3fc/0x770
[  410.120047][T22026]        ret_from_fork_asm+0x1a/0x30
[  410.121950][T22026] 
[  410.121950][T22026] -> #0 ((work_completion)(&(&conn->info_timer)->work)){+.+.}-{0:0}:
[  410.125274][T22026]        validate_chain+0xb9b/0x2140
[  410.126991][T22026]        __lock_acquire+0xab9/0xd20
[  410.128875][T22026]        lock_acquire+0x120/0x360
[  410.130547][T22026]        __flush_work+0x6b8/0xbc0
[  410.132241][T22026]        __cancel_work_sync+0xbe/0x110
[  410.134067][T22026]        l2cap_conn_del+0x4f0/0x680
[  410.135743][T22026]        hci_conn_hash_flush+0x10d/0x230
[  410.137595][T22026]        hci_dev_close_sync+0xaef/0x1330
[  410.139672][T22026]        hci_unregister_dev+0x21a/0x510
[  410.141730][T22026]        vhci_release+0x80/0xd0
[  410.143518][T22026]        __fput+0x44c/0xa70
[  410.145198][T22026]        task_work_run+0x1d4/0x260
[  410.147100][T22026]        do_exit+0x6b5/0x22e0
[  410.148649][T22026]        do_group_exit+0x21c/0x2d0
[  410.150401][T22026]        __x64_sys_exit_group+0x3f/0x40
[  410.152377][T22026]        x64_sys_call+0x21ba/0x21c0
[  410.154140][T22026]        do_syscall_64+0xfa/0x3b0
[  410.155774][T22026]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  410.157863][T22026] 
[  410.157863][T22026] other info that might help us debug this:
[  410.157863][T22026] 
[  410.161301][T22026]  Possible unsafe locking scenario:
[  410.161301][T22026] 
[  410.163859][T22026]        CPU0                    CPU1
[  410.165539][T22026]        ----                    ----
[  410.167278][T22026]   lock(&conn->lock#2);
[  410.168656][T22026]                                lock((work_completion)(&(&conn->info_timer)->work));
[  410.172141][T22026]                                lock(&conn->lock#2);
[  410.174307][T22026]   lock((work_completion)(&(&conn->info_timer)->work));
[  410.176554][T22026] 
[  410.176554][T22026]  *** DEADLOCK ***
[  410.176554][T22026] 
[  410.179554][T22026] 5 locks held by syz-executor/22026:
[  410.181553][T22026]  #0: ffff888046598dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510
[  410.185159][T22026]  #1: ffff8880465980b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330
[  410.188692][T22026]  #2: ffffffff8f6780c8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230
[  410.192488][T22026]  #3: ffff888038ba7b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680
[  410.195886][T22026]  #4: ffffffff8e13ee60 (rcu_read_lock){....}-{1:3}, at: __flush_work+0xd2/0xbc0
[  410.199247][T22026] 
[  410.199247][T22026] stack backtrace:
[  410.201487][T22026] CPU: 0 UID: 0 PID: 22026 Comm: syz-executor Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  410.201504][T22026] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  410.201511][T22026] Call Trace:
[  410.201518][T22026]  <TASK>
[  410.201525][T22026]  dump_stack_lvl+0x189/0x250
[  410.201547][T22026]  ? __pfx_dump_stack_lvl+0x10/0x10
[  410.201561][T22026]  ? __pfx__printk+0x10/0x10
[  410.201573][T22026]  ? print_lock_name+0xde/0x100
[  410.201584][T22026]  print_circular_bug+0x2ee/0x310
[  410.201595][T22026]  check_noncircular+0x134/0x160
[  410.201606][T22026]  validate_chain+0xb9b/0x2140
[  410.201615][T22026]  ? do_raw_spin_lock+0x121/0x290
[  410.201627][T22026]  ? look_up_lock_class+0x74/0x170
[  410.201643][T22026]  ? register_lock_class+0x51/0x320
[  410.201657][T22026]  __lock_acquire+0xab9/0xd20
[  410.201671][T22026]  ? __flush_work+0xd2/0xbc0
[  410.201681][T22026]  lock_acquire+0x120/0x360
[  410.201693][T22026]  ? __flush_work+0xd2/0xbc0
[  410.201703][T22026]  ? _raw_spin_unlock_irq+0x23/0x50
[  410.201718][T22026]  ? __flush_work+0xd2/0xbc0
[  410.201727][T22026]  __flush_work+0x6b8/0xbc0
[  410.201735][T22026]  ? __flush_work+0xd2/0xbc0
[  410.201745][T22026]  ? __flush_work+0xd2/0xbc0
[  410.201754][T22026]  ? __pfx___flush_work+0x10/0x10
[  410.201763][T22026]  ? __pfx_wq_barrier_func+0x10/0x10
[  410.201781][T22026]  ? __pfx___cancel_work+0x10/0x10
[  410.201790][T22026]  ? hci_conn_drop+0x14d/0x280
[  410.201805][T22026]  __cancel_work_sync+0xbe/0x110
[  410.201816][T22026]  l2cap_conn_del+0x4f0/0x680
[  410.201829][T22026]  ? __pfx_l2cap_disconn_cfm+0x10/0x10
[  410.201839][T22026]  hci_conn_hash_flush+0x10d/0x230
[  410.201854][T22026]  hci_dev_close_sync+0xaef/0x1330
[  410.201867][T22026]  ? __pfx_hci_dev_close_sync+0x10/0x10
[  410.201877][T22026]  ? up_write+0x1c4/0x420
[  410.201888][T22026]  hci_unregister_dev+0x21a/0x510
[  410.201904][T22026]  vhci_release+0x80/0xd0
[  410.201919][T22026]  ? __pfx_vhci_release+0x10/0x10
[  410.201959][T22026]  __fput+0x44c/0xa70
[  410.201975][T22026]  task_work_run+0x1d4/0x260
[  410.201987][T22026]  ? __pfx_task_work_run+0x10/0x10
[  410.201998][T22026]  ? kmem_cache_free+0x18f/0x400
[  410.202009][T22026]  do_exit+0x6b5/0x22e0
[  410.202024][T22026]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  410.202035][T22026]  ? __pfx_do_exit+0x10/0x10
[  410.202047][T22026]  ? _raw_spin_unlock_irq+0x23/0x50
[  410.202060][T22026]  ? lockdep_hardirqs_on+0x9c/0x150
[  410.202073][T22026]  do_group_exit+0x21c/0x2d0
[  410.202086][T22026]  __x64_sys_exit_group+0x3f/0x40
[  410.202097][T22026]  x64_sys_call+0x21ba/0x21c0
[  410.202108][T22026]  do_syscall_64+0xfa/0x3b0
[  410.202117][T22026]  ? lockdep_hardirqs_on+0x9c/0x150
[  410.202130][T22026]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  410.202140][T22026]  ? exc_page_fault+0x9f/0xf0
[  410.202152][T22026]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  410.202162][T22026] RIP: 0033:0x7f405a58e929
[  410.202172][T22026] Code: Unable to access opcode bytes at 0x7f405a58e8ff.
[  410.202177][T22026] RSP: 002b:00007ffe3b02c5a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  410.202189][T22026] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f405a58e929
[  410.202196][T22026] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043
[  410.202203][T22026] RBP: 00007f405a5ee8f0 R08: 00007ffe3b02a347 R09: 0000000000000003
[  410.202209][T22026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  410.202216][T22026] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007ffe3b02c760
[  410.202226][T22026]  </TASK>
[  410.317621][   T54] Bluetooth: hci2: command tx timeout
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  413.586048][ T5264] udevd[5264]: worker [16665] /devices/virtual/block/nbd2 is taking a long time
[  414.728233][   T60] block nbd2: Possible stuck request ffff888020ea8000: control (read@0,1024B). Runtime 120 seconds
[  414.732745][   T60] block nbd2: Possible stuck request ffff888020ea8200: control (read@1024,1024B). Runtime 120 seconds
[  414.737320][   T60] block nbd2: Possible stuck request ffff888020ea8400: control (read@2048,1024B). Runtime 120 seconds
[  414.741488][   T60] block nbd2: Possible stuck request ffff888020ea8600: control (read@3072,1024B). Runtime 120 seconds

VM DIAGNOSIS:
10:33:49  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000031 RBX=0000000000000031 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900039cee30
R8 =ffff888107878237 R9 =1ffff11020f0f046 R10=dffffc0000000000 R11=ffffffff85474610
R12=dffffc0000000000 R13=ffffffff99ac48ef R14=ffffffff99dc9760 R15=0000000000000000
RIP=ffffffff8547468c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555590fd5500 ffffffff 00c00000
GS =0000 ffff8880b8650000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffe3b029e48 CR3=0000000027d02000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0d8c577061e3c069 45b3aafce768f90d
XMM02=54438a24662d39ad 0d0c46700b421051 XMM03=9b391afed91be7a2 a80fbae39732ffff
XMM04=ffff020101647890 890b00006600c00f XMM05=ffff020101647890 890b00006600c00f
XMM06=9b391afed91be7a2 a80fbae39732ffff XMM07=54438a24662d39ad 0d0c46700b421051
XMM08=ad7398606f4aa510 d3c4d30759732a61 XMM09=0000000000000000 00007fde54211c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=3f0acb46f9809600 RBX=ffffffff81974d58 RCX=3f0acb46f9809600 RDX=0000000000000001
RSI=ffffffff8be28d20 RDI=ffffffff81974d58 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f5b R9 =1ffff11026cc65eb R10=dffffc0000000000 R11=ffffed1026cc65ec
R12=ffffffff8fa10cf0 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d1000
RIP=ffffffff8b66b4a3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c50000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000010000 CR3=0000000027d02000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0d8c577061e3c069 45b3aafce768f90d
XMM02=54438a24662d39ad 0d0c46700b421051 XMM03=9b391afed91be7a2 a80fbae39732ffff
XMM04=ffff020101647890 890b00006600c00f XMM05=ffff020101647890 890b00006600c00f
XMM06=9b391afed91be7a2 a80fbae39732ffff XMM07=54438a24662d39ad 0d0c46700b421051
XMM08=ad7398606f4aa510 d3c4d30759732a61 XMM09=0000000000000000 00007fde54211c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
