last executing test programs:

35.598084922s ago: executing program 0 (id=518):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a91", 0x5)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000001900)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9b9", 0x11}], 0x1, 0x0, 0x0, 0x2}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000004a00)=[{{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000500)=""/10, 0xa}, {&(0x7f0000000540)=""/107, 0x6b}], 0x2}, 0x3ff}], 0x2, 0x2101, 0x0)

29.770537201s ago: executing program 0 (id=518):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a91", 0x5)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000001900)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9b9", 0x11}], 0x1, 0x0, 0x0, 0x2}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000004a00)=[{{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000500)=""/10, 0xa}, {&(0x7f0000000540)=""/107, 0x6b}], 0x2}, 0x3ff}], 0x2, 0x2101, 0x0)

23.154100945s ago: executing program 0 (id=518):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a91", 0x5)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000001900)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9b9", 0x11}], 0x1, 0x0, 0x0, 0x2}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000004a00)=[{{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000500)=""/10, 0xa}, {&(0x7f0000000540)=""/107, 0x6b}], 0x2}, 0x3ff}], 0x2, 0x2101, 0x0)

16.828941519s ago: executing program 0 (id=518):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a91", 0x5)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000001900)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9b9", 0x11}], 0x1, 0x0, 0x0, 0x2}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000004a00)=[{{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000500)=""/10, 0xa}, {&(0x7f0000000540)=""/107, 0x6b}], 0x2}, 0x3ff}], 0x2, 0x2101, 0x0)

10.841592272s ago: executing program 0 (id=518):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a91", 0x5)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000001900)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9b9", 0x11}], 0x1, 0x0, 0x0, 0x2}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000004a00)=[{{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000500)=""/10, 0xa}, {&(0x7f0000000540)=""/107, 0x6b}], 0x2}, 0x3ff}], 0x2, 0x2101, 0x0)

5.269575531s ago: executing program 0 (id=518):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a91", 0x5)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000001900)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9b9", 0x11}], 0x1, 0x0, 0x0, 0x2}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000004a00)=[{{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000500)=""/10, 0xa}, {&(0x7f0000000540)=""/107, 0x6b}], 0x2}, 0x3ff}], 0x2, 0x2101, 0x0)

390.233357ms ago: executing program 2 (id=1104):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x458, 0x0, 0x230, 0x2c8, 0x130, 0x0, 0x3c0, 0x3c0, 0x3c0, 0x3c0, 0x3c0, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x6, 0x0, 0x18}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20}}}, {{@ip={@remote, @local, 0x0, 0x0, 'dummy0\x00', 'netdevsim0\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@uncond, 0x0, 0xc0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@remote}}}, {{@ip={@multicast1, @private, 0x0, 0xff000000, 'pim6reg0\x00', 'erspan0\x00', {}, {}, 0x2e}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x2, 0x2, 0x6, 0x6, 0x1, 0x1], 0x4, 0x2}, {0x2, [0x2, 0x2, 0x4, 0x1, 0x1, 0x3], 0x0, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8)

389.86721ms ago: executing program 1 (id=1106):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x3e}, 0x48)

320.438812ms ago: executing program 2 (id=1107):
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="05f300000000000000002000000004000380"], 0x18}}, 0x0)

320.159215ms ago: executing program 1 (id=1108):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
socket$inet6(0xa, 0x2, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0)
openat$cgroup_type(r2, &(0x7f0000000040), 0x2, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$kcm(0x2, 0x200000000000001, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
socket(0x10, 0x80002, 0x0)
socket$rds(0x15, 0x5, 0x0)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x6}, 0x10)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r4], 0x30}}, 0x0)

271.370773ms ago: executing program 2 (id=1109):
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4400, 0x3, @dev={0xfe, 0x80, '\x00', 0x22}, 0x3}, 0x1c)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl(r0, 0x8b2c, &(0x7f0000000040))

238.632117ms ago: executing program 1 (id=1110):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001e008d2a2abd", @ANYRES32=0x0, @ANYBLOB="0000000014"], 0x30}}, 0x40000c0)

237.276245ms ago: executing program 2 (id=1111):
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd00000010000100060808004149014006040800", 0x58}], 0x1)

127.620725ms ago: executing program 2 (id=1112):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfd, {{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa0, 0x80, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x101, 0x0, 0x0, 0x4, 0xb}, {0x2, 0x800000000008}, 0x4, 0x400000, 0x0, 0x0, 0x0, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x44}, 0x40)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb00148008000b"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

127.432328ms ago: executing program 1 (id=1113):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f0000c808ffffffea080006000700000008000400", @ANYRES32=r0, @ANYBLOB="06001c004e21000008000100ac1414", @ANYRES16], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040084)

98.554817ms ago: executing program 2 (id=1114):
r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
close(r0)

312.978µs ago: executing program 1 (id=1115):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c00000010000304000000000000000100000300", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e00000062000280080040408c02ae"], 0x3c}}, 0x0)

0s ago: executing program 1 (id=1116):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
close(0x3)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={<r3=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={<r4=>r3, 0x81}, &(0x7f00000000c0)=0x8)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={r4, 0x6, 0x2, 0x40006, 0x1, 0x400}, &(0x7f0000000100)=0x14)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:14764' (ED25519) to the list of known hosts.
syzkaller login: [   48.443846][ T5788] cgroup: Unknown subsys name 'net'
[   48.550747][ T5788] cgroup: Unknown subsys name 'cpuset'
[   48.556292][ T5788] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.013705][ T5788] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.425979][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.430230][ T5828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.433340][ T5828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.436693][ T5828] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.439816][ T5828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.498754][ T5218] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.502071][ T5218] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.506977][ T5218] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.510607][ T5218] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.513753][ T5218] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.523866][ T5218] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.527107][ T5218] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.530079][ T5218] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.533978][ T5218] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.537450][ T5218] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   54.632312][ T5826] chnl_net:caif_netlink_parms(): no params data found
[   54.753583][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.756306][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.759221][ T5826] bridge_slave_0: entered allmulticast mode
[   54.762621][ T5826] bridge_slave_0: entered promiscuous mode
[   54.772679][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.775144][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.777998][ T5826] bridge_slave_1: entered allmulticast mode
[   54.780706][ T5826] bridge_slave_1: entered promiscuous mode
[   54.868756][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.897053][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.963703][ T5826] team0: Port device team_slave_0 added
[   54.969324][ T5826] team0: Port device team_slave_1 added
[   54.976053][ T5830] chnl_net:caif_netlink_parms(): no params data found
[   55.015640][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.018363][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.027737][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.044215][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   55.049883][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.052226][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.062090][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.164382][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.167357][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.169667][ T5830] bridge_slave_0: entered allmulticast mode
[   55.172364][ T5830] bridge_slave_0: entered promiscuous mode
[   55.184186][ T5826] hsr_slave_0: entered promiscuous mode
[   55.187034][ T5826] hsr_slave_1: entered promiscuous mode
[   55.190097][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.192557][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.194880][ T5830] bridge_slave_1: entered allmulticast mode
[   55.198993][ T5830] bridge_slave_1: entered promiscuous mode
[   55.230834][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.233848][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.238512][ T5833] bridge_slave_0: entered allmulticast mode
[   55.242394][ T5833] bridge_slave_0: entered promiscuous mode
[   55.258554][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.261648][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.264699][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.268397][ T5833] bridge_slave_1: entered allmulticast mode
[   55.272350][ T5833] bridge_slave_1: entered promiscuous mode
[   55.290809][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.354136][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.366047][ T5830] team0: Port device team_slave_0 added
[   55.370725][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.381588][ T5830] team0: Port device team_slave_1 added
[   55.460312][ T5833] team0: Port device team_slave_0 added
[   55.469922][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.472189][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.481887][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.487305][ T5833] team0: Port device team_slave_1 added
[   55.495435][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.497963][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.506333][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.537500][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.540207][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.551904][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.564441][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.567114][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.578236][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.609398][ T5830] hsr_slave_0: entered promiscuous mode
[   55.611786][ T5830] hsr_slave_1: entered promiscuous mode
[   55.613926][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.616736][ T5830] Cannot create hsr debugfs directory
[   55.675708][ T5833] hsr_slave_0: entered promiscuous mode
[   55.679367][ T5833] hsr_slave_1: entered promiscuous mode
[   55.681440][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.683871][ T5833] Cannot create hsr debugfs directory
[   55.753164][ T5826] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   55.775068][ T5826] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   55.787584][ T5826] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   55.803881][ T5826] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   55.908993][ T5830] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   55.917950][ T5830] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   55.922950][ T5830] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   55.930982][ T5830] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   55.985088][ T5833] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   55.997323][ T5833] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.005027][ T5833] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.012061][ T5833] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.035902][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.080326][ T5826] 8021q: adding VLAN 0 to HW filter on device team0
[   56.098841][   T33] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.102121][   T33] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.114883][   T33] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.117952][   T33] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.144785][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.209980][ T5830] 8021q: adding VLAN 0 to HW filter on device team0
[   56.228480][   T33] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.231483][   T33] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.235735][   T33] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.238670][   T33] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.263326][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.291383][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   56.313017][   T33] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.315963][   T33] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.330022][   T33] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.332596][   T33] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.420813][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.475911][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.487335][ T5218] Bluetooth: hci0: command tx timeout
[   56.508652][ T5826] veth0_vlan: entered promiscuous mode
[   56.533059][ T5826] veth1_vlan: entered promiscuous mode
[   56.541389][ T5830] veth0_vlan: entered promiscuous mode
[   56.556096][ T5830] veth1_vlan: entered promiscuous mode
[   56.559215][ T5828] Bluetooth: hci1: command tx timeout
[   56.561771][ T5218] Bluetooth: hci2: command tx timeout
[   56.588405][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.608154][ T5826] veth0_macvtap: entered promiscuous mode
[   56.618542][ T5830] veth0_macvtap: entered promiscuous mode
[   56.633867][ T5826] veth1_macvtap: entered promiscuous mode
[   56.642296][ T5830] veth1_macvtap: entered promiscuous mode
[   56.662478][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.675561][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.683075][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.695690][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.701346][ T5833] veth0_vlan: entered promiscuous mode
[   56.704525][ T5826] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.711393][ T5826] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.714861][ T5826] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.719911][ T5826] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.728214][ T5830] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.731963][ T5830] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.735605][ T5830] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.740952][ T5830] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.751662][ T5833] veth1_vlan: entered promiscuous mode
[   56.841232][ T5833] veth0_macvtap: entered promiscuous mode
[   56.859669][ T5833] veth1_macvtap: entered promiscuous mode
[   56.869102][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.872143][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.894553][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.913704][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.917440][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.920661][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.944515][ T5833] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.950279][ T5833] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.953955][ T5833] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.958019][ T5833] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.989031][   T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.992880][   T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.999119][   T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.002370][   T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.073099][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.076343][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.110295][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.149650][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.155407][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.219147][ T5892] lo speed is unknown, defaulting to 1000
[   57.221778][ T5892] lo speed is unknown, defaulting to 1000
[   57.230760][ T5892] lo speed is unknown, defaulting to 1000
[   57.240336][ T5892] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   57.246845][ T5893] wg2: entered promiscuous mode
[   57.253791][ T5893] wg2: entered allmulticast mode
[   57.261515][ T5892] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   57.296096][ T5894] Zero length message leads to an empty skb
[   57.305167][ T5892] lo speed is unknown, defaulting to 1000
[   57.309861][ T5892] lo speed is unknown, defaulting to 1000
[   57.313477][ T5892] lo speed is unknown, defaulting to 1000
[   57.486127][ T5903] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   57.495791][ T5903] Cannot find add_set index 0 as target
[   57.729079][ T5917] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   57.823279][ T5923] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17'.
[   57.965501][ T5933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21'.
[   58.061028][ T5938] ipt_REJECT: TCP_RESET invalid for non-tcp
[   58.128092][ T5941] tipc: Started in network mode
[   58.130146][ T5941] tipc: Node identity 7, cluster identity 4711
[   58.132315][ T5941] tipc: Node number set to 7
[   58.342842][ T5952] lo speed is unknown, defaulting to 1000
[   58.375279][ T5955] xt_hashlimit: size too large, truncated to 1048576
[   58.436171][ T5961] netlink: 4 bytes leftover after parsing attributes in process `syz.1.28'.
[   58.568128][ T5967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.30'.
[   58.572132][ T5218] Bluetooth: hci0: command tx timeout
[   58.622057][ T5967] gtp0: entered promiscuous mode
[   58.641465][ T5218] Bluetooth: hci2: command tx timeout
[   58.641942][ T5967] gtp0: entered allmulticast mode
[   58.643493][ T5218] Bluetooth: hci1: command tx timeout
[   58.775181][ T5975] warning: `syz.0.33' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   58.893389][ T5983] Cannot find add_set index 3 as target
[   58.959720][ T5987] netlink: 60 bytes leftover after parsing attributes in process `syz.0.39'.
[   59.114764][ T6001] netlink: 28 bytes leftover after parsing attributes in process `syz.2.46'.
[   59.126918][ T6001] netlink: 28 bytes leftover after parsing attributes in process `syz.2.46'.
[   59.489958][ T6023] netlink: 60 bytes leftover after parsing attributes in process `syz.2.56'.
[   59.492852][ T6023] netlink: 28 bytes leftover after parsing attributes in process `syz.2.56'.
[   59.713696][ T6037] syz.2.64 uses obsolete (PF_INET,SOCK_PACKET)
[   60.070085][ T6067] netlink: 24 bytes leftover after parsing attributes in process `syz.0.78'.
[   60.638004][ T5828] Bluetooth: hci0: command tx timeout
[   60.716603][ T5828] Bluetooth: hci1: command tx timeout
[   60.719616][ T5828] Bluetooth: hci2: command tx timeout
[   62.550771][ T6256] veth0: entered promiscuous mode
[   62.717073][ T5218] Bluetooth: hci0: command tx timeout
[   62.796704][ T5218] Bluetooth: hci2: command tx timeout
[   62.798800][ T5218] Bluetooth: hci1: command tx timeout
[   62.937544][ T6281] xt_hashlimit: max too large, truncated to 1048576
[   63.199523][ T6301] __nla_validate_parse: 3 callbacks suppressed
[   63.199536][ T6301] netlink: 52 bytes leftover after parsing attributes in process `syz.0.149'.
[   63.419421][ T6316] netlink: 12 bytes leftover after parsing attributes in process `syz.0.155'.
[   64.147891][ T6333] lo speed is unknown, defaulting to 1000
[   64.180204][ T6339] sctp: [Deprecated]: syz.1.166 (pid 6339) Use of int in maxseg socket option.
[   64.180204][ T6339] Use struct sctp_assoc_value instead
[   64.539381][ T6371] lo speed is unknown, defaulting to 1000
[   65.111982][ T6399] netlink: 12 bytes leftover after parsing attributes in process `syz.1.192'.
[   65.138103][ T6399] 8021q: adding VLAN 0 to HW filter on device bond1
[   65.166195][ T6399] bond1: (slave veth1): Enslaving as an active interface with an up link
[   65.186308][ T6399] vlan2: entered allmulticast mode
[   65.188518][ T6399] veth1: entered allmulticast mode
[   65.194826][ T6399] bond1: (slave vlan2): Enslaving as an active interface with an up link
[   65.262177][ T6402] netlink: 28 bytes leftover after parsing attributes in process `syz.1.193'.
[   66.173844][ T6416] 8021q: adding VLAN 0 to HW filter on device bond1
[   66.316311][ T6433] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.208'.
[   66.415706][ T6445] netlink: 32 bytes leftover after parsing attributes in process `syz.0.214'.
[   66.630600][ T6471] bridge: RTM_NEWNEIGH with invalid ether address
[   66.643174][ T6473] netlink: 12 bytes leftover after parsing attributes in process `syz.0.227'.
[   66.656017][ T6473] netlink: 'syz.0.227': attribute type 1 has an invalid length.
[   66.660536][ T6473] netlink: 'syz.0.227': attribute type 2 has an invalid length.
[   66.663814][ T6473] netlink: 80 bytes leftover after parsing attributes in process `syz.0.227'.
[   66.678164][ T6475] netlink: 12 bytes leftover after parsing attributes in process `syz.1.228'.
[   66.918145][ T6502] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[   66.922621][ T6501] IPVS: stopping master sync thread 6502 ...
[   67.161723][ T6525] netlink: 20 bytes leftover after parsing attributes in process `syz.1.252'.
[   67.168028][ T6525] netlink: 'syz.1.252': attribute type 3 has an invalid length.
[   67.171170][ T6525] netlink: 'syz.1.252': attribute type 2 has an invalid length.
[   67.173683][ T6525] netlink: 'syz.1.252': attribute type 2 has an invalid length.
[   67.249177][ T6534] netlink: 'syz.0.257': attribute type 1 has an invalid length.
[   67.271472][ T6536] netlink: 'syz.1.256': attribute type 7 has an invalid length.
[   67.276258][ T6536] netlink: 'syz.1.256': attribute type 8 has an invalid length.
[   68.389851][ T6586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   68.746771][ T6599] vlan2: entered promiscuous mode
[   68.748458][ T6599] bond0: entered promiscuous mode
[   68.750627][ T6599] bond_slave_0: entered promiscuous mode
[   68.753029][ T6599] bond_slave_1: entered promiscuous mode
[   68.860160][ T6607] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   68.934957][ T6611] Driver unsupported XDP return value 0 on prog  (id 43) dev N/A, expect packet loss!
[   68.944345][ T6615] __nla_validate_parse: 5 callbacks suppressed
[   68.944355][ T6615] netlink: 144 bytes leftover after parsing attributes in process `syz.2.295'.
[   69.083114][ T6629] Bluetooth: MGMT ver 1.23
[   69.260144][ T6646] netlink: 'syz.0.308': attribute type 13 has an invalid length.
[   69.263494][ T6646] netlink: 'syz.0.308': attribute type 17 has an invalid length.
[   69.343301][ T6646] lo speed is unknown, defaulting to 1000
[   69.387715][ T6641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   69.453326][ T6641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   69.485122][ T6656] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   69.522979][ T6641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   70.152509][ T6667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.315'.
[   70.156228][ T6667] netlink: 32 bytes leftover after parsing attributes in process `syz.1.315'.
[   70.332741][ T6687] netlink: 52 bytes leftover after parsing attributes in process `syz.1.324'.
[   70.673011][ T6723] netlink: 16 bytes leftover after parsing attributes in process `syz.0.341'.
[   70.880978][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   70.885009][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   70.912328][ T6745] ip6tnl1: entered promiscuous mode
[   70.914591][ T6745] ip6tnl1: entered allmulticast mode
[   70.920387][ T6745] team0: Device ip6tnl1 is of different type
[   71.575247][ T6798] netlink: 12 bytes leftover after parsing attributes in process `syz.0.377'.
[   71.801650][ T6824] validate_nla: 5 callbacks suppressed
[   71.801666][ T6824] netlink: 'syz.1.388': attribute type 9 has an invalid length.
[   71.807925][ T6824] netlink: 'syz.1.388': attribute type 6 has an invalid length.
[   71.810797][ T6824] netlink: 'syz.1.388': attribute type 7 has an invalid length.
[   71.815954][ T6824] netlink: 'syz.1.388': attribute type 8 has an invalid length.
[   71.993385][ T6841] netlink: 4 bytes leftover after parsing attributes in process `syz.0.395'.
[   72.385076][ T6865] hsr0: entered promiscuous mode
[   72.387484][ T6865] hsr0: entered allmulticast mode
[   72.389171][ T6865] hsr_slave_0: entered allmulticast mode
[   72.391531][ T6865] hsr_slave_1: entered allmulticast mode
[   72.846380][ T6894] netlink: 240 bytes leftover after parsing attributes in process `syz.1.416'.
[   72.901300][ T6897] netlink: 28 bytes leftover after parsing attributes in process `syz.0.420'.
[   72.904920][ T6897] netlink: 32 bytes leftover after parsing attributes in process `syz.0.420'.
[   72.988233][ T6903] netlink: 'syz.0.423': attribute type 1 has an invalid length.
[   73.320390][ T6931] netlink: 'syz.1.437': attribute type 27 has an invalid length.
[   73.399465][ T5835] IPVS: starting estimator thread 0...
[   73.506653][ T6941] IPVS: using max 80 ests per chain, 192000 per kthread
[   73.519196][ T6949] netlink: 'syz.0.446': attribute type 13 has an invalid length.
[   73.831938][ T6984] team0: No ports can be present during mode change
[   73.903281][ T6988] bridge2: entered promiscuous mode
[   73.932847][ T6988] bridge2: entered allmulticast mode
[   73.940446][ T6988] team0: Port device bridge2 added
[   73.951848][ T6988] __nla_validate_parse: 6 callbacks suppressed
[   73.951859][ T6988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.462'.
[   74.079395][ T6988] team0 (unregistering): Port device team_slave_0 removed
[   74.086331][ T6988] team0 (unregistering): Port device team_slave_1 removed
[   74.093392][ T6988] team0 (unregistering): Port device bridge2 removed
[   74.390487][ T7016] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   74.435951][ T7022] dvmrp1: entered allmulticast mode
[   74.451375][ T7022] dvmrp1: left allmulticast mode
[   75.266346][ T7105] netlink: 20 bytes leftover after parsing attributes in process `syz.2.517'.
[   75.349490][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.357056][ T5828] Bluetooth: hci2: command tx timeout
[   75.425739][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.471376][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.554746][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.714051][   T13] bridge_slave_1: left allmulticast mode
[   75.721876][   T13] bridge_slave_1: left promiscuous mode
[   75.725589][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.739931][   T13] bridge_slave_0: left allmulticast mode
[   75.742317][   T13] bridge_slave_0: left promiscuous mode
[   75.744801][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.832779][ T5218] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   75.837424][ T5218] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   75.843302][ T5218] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   75.848091][ T5218] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   75.852027][ T5218] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   76.219855][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   76.223737][   T13] bond_slave_0: left promiscuous mode
[   76.245818][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   76.250981][   T13] bond_slave_1: left promiscuous mode
[   76.253890][   T13] bond0 (unregistering): Released all slaves
[   76.321626][   T13] bond1 (unregistering): Released all slaves
[   76.362142][ T7121] lo speed is unknown, defaulting to 1000
[   76.709830][ T7121] chnl_net:caif_netlink_parms(): no params data found
[   76.752879][ T7164] 8021q: adding VLAN 0 to HW filter on device bond3
[   76.840248][ T7164] bond3: (slave gretap1): Enslaving as an active interface with an up link
[   76.912442][   T13] hsr_slave_0: left promiscuous mode
[   76.915482][   T13] hsr_slave_1: left promiscuous mode
[   76.927109][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   76.947210][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   76.954136][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   76.960567][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   76.978733][   T13] veth1_macvtap: left promiscuous mode
[   76.981440][   T13] veth0_macvtap: left promiscuous mode
[   76.983914][   T13] veth1_vlan: left promiscuous mode
[   76.986369][   T13] veth0_vlan: left promiscuous mode
[   77.446411][ T7164] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.450295][ T7164] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.512923][ T5889] lo speed is unknown, defaulting to 1000
[   77.517257][ T5889] infiniband syz2: ib_query_port failed (-19)
[   77.610786][ T7121] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.622541][ T7121] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.625322][ T7121] bridge_slave_0: entered allmulticast mode
[   77.632463][ T7121] bridge_slave_0: entered promiscuous mode
[   77.645503][ T7121] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.648992][ T7121] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.654700][ T7121] bridge_slave_1: entered allmulticast mode
[   77.668566][ T7121] bridge_slave_1: entered promiscuous mode
[   77.734926][ T7121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.765634][ T7121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.851985][ T7121] team0: Port device team_slave_0 added
[   77.856035][ T7121] team0: Port device team_slave_1 added
[   77.918757][ T5828] Bluetooth: hci0: command tx timeout
[   78.711868][ T7121] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.719593][ T7121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.731387][ T7121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.740427][ T7121] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.743547][ T7121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.754756][ T7121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.855353][ T7215] netlink: 12 bytes leftover after parsing attributes in process `syz.1.554'.
[   78.859432][ T7215] nbd: couldn't find a device at index 65546
[   78.882506][ T7121] hsr_slave_0: entered promiscuous mode
[   78.900517][ T7121] hsr_slave_1: entered promiscuous mode
[   79.850286][ T7264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.571'.
[   79.854023][ T7264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.571'.
[   79.898810][ T7121] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   79.917063][ T7121] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   79.929633][ T7121] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   79.950161][ T7121] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   79.962611][ T7270] netlink: 32 bytes leftover after parsing attributes in process `syz.1.573'.
[   79.996773][ T5828] Bluetooth: hci0: command tx timeout
[   80.151145][ T7121] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.193877][ T7121] 8021q: adding VLAN 0 to HW filter on device team0
[   80.221007][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.223933][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.274002][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.277295][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.360926][ T7121] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   80.397890][ T7300] netlink: 20 bytes leftover after parsing attributes in process `syz.2.581'.
[   80.618816][ T7121] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.712159][ T7121] veth0_vlan: entered promiscuous mode
[   80.742275][ T7121] veth1_vlan: entered promiscuous mode
[   80.794348][ T7121] veth0_macvtap: entered promiscuous mode
[   80.805493][ T7333] netlink: 5 bytes leftover after parsing attributes in process `syz.1.593'.
[   80.813150][ T7121] veth1_macvtap: entered promiscuous mode
[   80.828335][ T7121] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.841143][ T7121] batman_adv: batadv0: Interface activated: batadv_slave_1
[   80.856182][ T7121] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.874531][ T7121] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.891476][ T7121] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.895158][ T7121] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.036114][ T1378] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.054723][ T1378] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.114371][ T1378] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.137196][  T971] cfg80211: failed to load regulatory.db
[   81.142157][ T1378] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.406619][ T7367] netlink: 596 bytes leftover after parsing attributes in process `syz.1.603'.
[   81.841718][ T7398] netlink: 24 bytes leftover after parsing attributes in process `syz.1.613'.
[   81.955977][ T7402] syzkaller0: entered promiscuous mode
[   81.960349][ T7402] syzkaller0: entered allmulticast mode
[   82.973269][ T5854] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.021485][ T5218] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   83.025435][ T5218] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   83.028950][ T5218] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   83.032621][ T5218] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   83.035915][ T5218] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   83.223462][ T7406] chnl_net:caif_netlink_parms(): no params data found
[   83.343723][ T5854] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.374009][ T7406] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.380601][ T7406] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.383672][ T7406] bridge_slave_0: entered allmulticast mode
[   83.392970][ T7406] bridge_slave_0: entered promiscuous mode
[   83.417816][ T7406] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.428826][ T7406] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.431953][ T7406] bridge_slave_1: entered allmulticast mode
[   83.441427][ T7406] bridge_slave_1: entered promiscuous mode
[   83.500943][ T7406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   83.512063][ T7406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   83.533897][ T7438] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   83.538416][   T13] bond0: (slave bond_slave_0): interface is now down
[   83.541273][   T13] bond0: (slave bond_slave_1): interface is now down
[   83.557487][   T13] bond0: (slave bond_slave_0): interface is now down
[   83.559616][ T7406] team0: Port device team_slave_0 added
[   83.559998][   T13] bond0: (slave bond_slave_1): interface is now down
[   83.564586][ T7406] team0: Port device team_slave_1 added
[   83.577340][   T13] bond0: (slave bond_slave_0): interface is now down
[   83.579898][   T13] bond0: (slave bond_slave_1): interface is now down
[   83.597631][   T13] bond0: (slave bond_slave_0): interface is now down
[   83.603212][   T13] bond0: (slave bond_slave_1): interface is now down
[   83.617338][   T13] bond0: (slave bond_slave_0): interface is now down
[   83.624602][   T13] bond0: (slave bond_slave_1): interface is now down
[   83.643444][ T7406] batman_adv: batadv0: Adding interface: batadv_slave_0
[   83.646322][ T7406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   83.657452][   T13] bond0: (slave bond_slave_0): interface is now down
[   83.660868][   T13] bond0: (slave bond_slave_1): interface is now down
[   83.666092][ T7406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   83.677887][   T13] bond0: (slave bond_slave_0): interface is now down
[   83.682590][   T13] bond0: (slave bond_slave_1): interface is now down
[   83.686918][   T13] bond0: now running without any active interface!
[   83.724261][ T7406] batman_adv: batadv0: Adding interface: batadv_slave_1
[   83.730919][ T7406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   83.741514][ T7406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   83.785226][ T7406] hsr_slave_0: entered promiscuous mode
[   83.788417][ T7406] hsr_slave_1: entered promiscuous mode
[   83.797159][ T7406] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   83.800362][ T7406] Cannot create hsr debugfs directory
[   83.991801][   T10] IPVS: starting estimator thread 0...
[   84.072216][ T5854] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.077489][ T7465] IPVS: using max 49 ests per chain, 117600 per kthread
[   84.158832][ T5854] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.324316][ T5854] bridge_slave_1: left allmulticast mode
[   84.329131][ T5854] bridge_slave_1: left promiscuous mode
[   84.331597][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.357569][ T5854] bridge_slave_0: left allmulticast mode
[   84.360181][ T5854] bridge_slave_0: left promiscuous mode
[   84.362652][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.679160][ T5854] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   84.684875][ T5854] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   84.689671][ T5854] bond0 (unregistering): Released all slaves
[   84.925616][ T7498] delete_channel: no stack
[   85.127293][ T5218] Bluetooth: hci0: command tx timeout
[   85.149663][ T5854] hsr_slave_0: left promiscuous mode
[   85.152870][ T5854] hsr_slave_1: left promiscuous mode
[   85.155919][ T5854] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   85.163396][ T5854] batman_adv: batadv0: Removing interface: batadv_slave_0
[   85.170792][ T5854] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   85.174631][ T5854] batman_adv: batadv0: Removing interface: batadv_slave_1
[   85.204590][ T5854] veth1_macvtap: left promiscuous mode
[   85.208919][ T5854] veth0_macvtap: left promiscuous mode
[   85.211461][ T5854] veth1_vlan: left promiscuous mode
[   85.213884][ T5854] veth0_vlan: left promiscuous mode
[   85.279027][ T7488] syz.1.650 (7488) used greatest stack depth: 19704 bytes left
[   85.606362][ T5854] team0 (unregistering): Port device team_slave_1 removed
[   85.633993][ T5854] team0 (unregistering): Port device team_slave_0 removed
[   86.000402][ T7406] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   86.024423][ T7406] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   86.036224][ T7406] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   86.058567][ T7406] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   86.360707][ T7406] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.440604][ T7406] 8021q: adding VLAN 0 to HW filter on device team0
[   86.557299][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.560222][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   86.616600][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.619550][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   86.808208][ T7406] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   86.938461][ T7569] netlink: 4 bytes leftover after parsing attributes in process `syz.1.667'.
[   87.186065][ T7406] 8021q: adding VLAN 0 to HW filter on device batadv0
[   87.196974][ T5218] Bluetooth: hci0: command tx timeout
[   87.272570][ T7406] veth0_vlan: entered promiscuous mode
[   87.282275][ T7406] veth1_vlan: entered promiscuous mode
[   87.322754][ T7406] veth0_macvtap: entered promiscuous mode
[   87.333625][ T7406] veth1_macvtap: entered promiscuous mode
[   87.366140][ T7406] batman_adv: batadv0: Interface activated: batadv_slave_0
[   87.431925][ T7406] batman_adv: batadv0: Interface activated: batadv_slave_1
[   87.441378][ T7406] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.444959][ T7406] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.448725][ T7406] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.452386][ T7406] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.584172][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.591976][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.627536][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.630840][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.814506][ T7611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.675'.
[   88.442078][ T7648] netlink: 104 bytes leftover after parsing attributes in process `syz.1.687'.
[   88.522176][ T5690] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.549582][ T7652] netlink: 'syz.1.689': attribute type 1 has an invalid length.
[   88.552457][ T7652] netlink: 2 bytes leftover after parsing attributes in process `syz.1.689'.
[   88.649971][ T7655] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[   88.887854][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   88.898512][ T5828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   88.902229][ T5828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   88.906114][ T5828] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   88.910320][ T5828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   89.073130][ T7676] bridge_slave_0: left allmulticast mode
[   89.074999][ T7676] bridge_slave_0: left promiscuous mode
[   89.078585][ T7676] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.082883][ T7676] bridge_slave_1: left allmulticast mode
[   89.084764][ T7676] bridge_slave_1: left promiscuous mode
[   89.088071][ T7676] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.094651][ T7676] bond0: (slave bond_slave_0): Releasing backup interface
[   89.102422][ T7676] bond0: (slave bond_slave_1): Releasing backup interface
[   89.116295][ T7676] team0: Port device team_slave_0 removed
[   89.124030][ T7677] netlink: 'syz.1.699': attribute type 10 has an invalid length.
[   89.124883][ T7676] team0: Port device team_slave_1 removed
[   89.131188][ T7676] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   89.134521][ T7676] batman_adv: batadv0: Removing interface: batadv_slave_0
[   89.140873][ T7676] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   89.145075][ T7676] batman_adv: batadv0: Removing interface: batadv_slave_1
[   89.160887][ T7676] bond1: (slave veth1): Releasing backup interface
[   89.163964][ T7676] bond1: (slave veth1): the permanent HWaddr of slave - c6:e4:a0:03:d5:0e - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[   89.175421][ T7676] bond1: (slave vlan2): Releasing backup interface
[   89.180970][ T7676] bond3: (slave gretap1): Releasing backup interface
[   89.221820][ T5690] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.271493][ T7678] IPv6: sit1: Disabled Multicast RS
[   89.314683][ T7664] chnl_net:caif_netlink_parms(): no params data found
[   89.462311][ T7664] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.465061][ T7664] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.477090][ T7664] bridge_slave_0: entered allmulticast mode
[   89.480921][ T7664] bridge_slave_0: entered promiscuous mode
[   89.485316][ T7664] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.491296][ T7664] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.493882][ T7664] bridge_slave_1: entered allmulticast mode
[   89.502391][ T7664] bridge_slave_1: entered promiscuous mode
[   89.543889][ T7664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.554984][ T7664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.600906][ T7664] team0: Port device team_slave_0 added
[   89.606114][ T7664] team0: Port device team_slave_1 added
[   89.654363][ T7664] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.658377][ T7664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.670550][ T7664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.679399][ T7664] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.682462][ T7664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.693978][ T7664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.770825][ T5690] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.790209][ T7664] hsr_slave_0: entered promiscuous mode
[   89.794997][ T7664] hsr_slave_1: entered promiscuous mode
[   89.969459][ T7713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.712'.
[   90.023291][ T5690] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.165853][ T7725] netlink: 136 bytes leftover after parsing attributes in process `syz.1.718'.
[   90.170392][ T7725] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[   90.181091][ T5690] bridge_slave_1: left allmulticast mode
[   90.183458][ T5690] bridge_slave_1: left promiscuous mode
[   90.185958][ T5690] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.205814][ T5690] bridge_slave_0: left allmulticast mode
[   90.210282][ T5690] bridge_slave_0: left promiscuous mode
[   90.212736][ T5690] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.345224][ T7739] xt_l2tp: v2 doesn't support IP mode
[   90.459572][ T7745] xt_socket: unknown flags 0xfc
[   90.601882][ T5690] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   90.618625][ T5690] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   90.623255][ T5690] bond0 (unregistering): Released all slaves
[   90.956642][ T5218] Bluetooth: hci0: command tx timeout
[   91.085877][ T5690] hsr_slave_0: left promiscuous mode
[   91.094504][ T5690] hsr_slave_1: left promiscuous mode
[   91.102144][ T5690] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   91.105480][ T5690] batman_adv: batadv0: Removing interface: batadv_slave_0
[   91.121669][ T5690] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   91.124614][ T5690] batman_adv: batadv0: Removing interface: batadv_slave_1
[   91.153426][ T5690] veth1_macvtap: left promiscuous mode
[   91.155869][ T5690] veth0_macvtap: left promiscuous mode
[   91.165837][ T5690] veth1_vlan: left promiscuous mode
[   91.168347][ T5690] veth0_vlan: left promiscuous mode
[   91.573655][ T5690] team0 (unregistering): Port device team_slave_1 removed
[   91.600474][ T5690] team0 (unregistering): Port device team_slave_0 removed
[   91.897207][ T7790] syzkaller0: entered promiscuous mode
[   91.899295][ T7790] syzkaller0: entered allmulticast mode
[   91.927044][ T7664] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   92.702261][ T7664] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   92.718356][ T7803] netlink: 176 bytes leftover after parsing attributes in process `syz.1.746'.
[   92.723827][ T7803] ip6gretap0: entered promiscuous mode
[   92.726090][ T7664] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   92.744098][ T7664] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   92.753567][ T7803] netlink: 176 bytes leftover after parsing attributes in process `syz.1.746'.
[   92.874596][ T7664] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.902648][ T7664] 8021q: adding VLAN 0 to HW filter on device team0
[   92.916672][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.919433][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.942437][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.945197][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.038450][ T5218] Bluetooth: hci0: command tx timeout
[   93.104420][ T7664] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.151790][ T7827] netlink: 24 bytes leftover after parsing attributes in process `syz.1.753'.
[   93.179262][ T7664] veth0_vlan: entered promiscuous mode
[   93.192363][ T7664] veth1_vlan: entered promiscuous mode
[   93.239610][ T7664] veth0_macvtap: entered promiscuous mode
[   93.258863][ T7664] veth1_macvtap: entered promiscuous mode
[   93.273207][ T7664] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.296671][ T7664] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.308793][ T7664] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.312423][ T7664] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.316050][ T7664] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.323133][ T7664] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.436155][   T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.456825][   T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.499541][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.502789][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.601847][ T7851] xt_TCPMSS: Only works on TCP SYN packets
[   93.847613][ T7868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.773'.
[   93.872460][ T7868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.773'.
[   93.953921][ T7874] netlink: 4 bytes leftover after parsing attributes in process `syz.2.776'.
[   93.959227][ T7874] netlink: 4 bytes leftover after parsing attributes in process `syz.2.776'.
[   94.005527][ T7876] netlink: 'syz.2.777': attribute type 4 has an invalid length.
[   94.135650][ T7882] syz.2.780 uses old SIOCAX25GETINFO
[   94.276768][ T7892] netlink: 'syz.2.785': attribute type 1 has an invalid length.
[   94.488604][ T7903] netlink: 48 bytes leftover after parsing attributes in process `syz.2.790'.
[   94.618644][ T7913] netlink: 36 bytes leftover after parsing attributes in process `syz.1.793'.
[   94.914639][ T7934] tipc: Enabled bearer <eth:batadv0>, priority 10
[   95.021927][ T7945] netlink: 52 bytes leftover after parsing attributes in process `syz.2.808'.
[   95.133297][ T5854] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.660452][ T7956] netlink: 'syz.1.812': attribute type 1 has an invalid length.
[   95.663066][ T7956] netlink: 'syz.1.812': attribute type 11 has an invalid length.
[   95.835080][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   95.838812][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   95.841930][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   95.844935][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   95.849188][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   96.100115][ T7970] chnl_net:caif_netlink_parms(): no params data found
[   96.314186][ T7970] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.317452][ T7970] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.322452][ T7970] bridge_slave_0: entered allmulticast mode
[   96.327757][ T7970] bridge_slave_0: entered promiscuous mode
[   96.339640][ T7970] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.347982][ T7970] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.351098][ T7970] bridge_slave_1: entered allmulticast mode
[   96.365368][ T7970] bridge_slave_1: entered promiscuous mode
[   96.459078][ T5854] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.471937][ T7970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   96.483689][ T7970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   96.572109][ T5854] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.606213][ T7970] team0: Port device team_slave_0 added
[   96.614933][ T7970] team0: Port device team_slave_1 added
[   96.665176][ T5854] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.698498][ T7970] batman_adv: batadv0: Adding interface: batadv_slave_0
[   96.701433][ T7970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   96.714420][ T7970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   96.726399][ T7970] batman_adv: batadv0: Adding interface: batadv_slave_1
[   96.741609][ T7970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   96.765845][ T7970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   96.878168][ T7970] hsr_slave_0: entered promiscuous mode
[   96.881325][ T7970] hsr_slave_1: entered promiscuous mode
[   96.884128][ T7970] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   96.889315][ T7970] Cannot create hsr debugfs directory
[   97.041750][ T5854] bridge_slave_1: left allmulticast mode
[   97.044694][ T5854] bridge_slave_1: left promiscuous mode
[   97.048175][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.054498][ T5854] bridge_slave_0: left allmulticast mode
[   97.059048][ T5854] bridge_slave_0: left promiscuous mode
[   97.060961][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.129580][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880281c0800: rx timeout, send abort
[   97.298812][ T5854] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   97.303472][ T5854] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   97.307756][ T5854] bond0 (unregistering): Released all slaves
[   97.630319][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880281c1c00: rx timeout, send abort
[   97.633992][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880281c0800: abort rx timeout. Force session deactivation
[   97.668537][ T5854] hsr_slave_0: left promiscuous mode
[   97.671519][ T5854] hsr_slave_1: left promiscuous mode
[   97.674293][ T5854] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   97.694912][ T5854] batman_adv: batadv0: Removing interface: batadv_slave_0
[   97.699544][ T5854] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   97.701977][ T5854] batman_adv: batadv0: Removing interface: batadv_slave_1
[   97.741441][ T5854] veth1_macvtap: left promiscuous mode
[   97.743786][ T5854] veth0_macvtap: left promiscuous mode
[   97.746047][ T5854] veth1_vlan: left promiscuous mode
[   97.758563][ T5854] veth0_vlan: left promiscuous mode
[   97.916689][ T5218] Bluetooth: hci0: command tx timeout
[   98.133981][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880281c1c00: abort rx timeout. Force session deactivation
[   98.152689][ T5854] team0 (unregistering): Port device team_slave_1 removed
[   98.180619][ T5854] team0 (unregistering): Port device team_slave_0 removed
[   98.707270][ T8065] netlink: 'syz.2.843': attribute type 6 has an invalid length.
[   98.875336][ T7970] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   98.899513][ T7970] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   98.912673][ T7970] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   98.928590][ T7970] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   98.948153][ T8073] Bluetooth: MGMT ver 1.23
[   98.966048][ T8079] xt_bpf: check failed: parse error
[   98.974348][ T8073] netlink: 'syz.2.846': attribute type 39 has an invalid length.
[   99.022332][ T8086] __nla_validate_parse: 4 callbacks suppressed
[   99.022342][ T8086] netlink: 4 bytes leftover after parsing attributes in process `syz.1.847'.
[   99.052738][ T8086] netlink: 4 bytes leftover after parsing attributes in process `syz.1.847'.
[   99.152346][ T7970] 8021q: adding VLAN 0 to HW filter on device bond0
[   99.179827][ T7970] 8021q: adding VLAN 0 to HW filter on device team0
[   99.199032][   T29] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.201677][   T29] bridge0: port 1(bridge_slave_0) entered forwarding state
[   99.205198][   T29] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.207760][   T29] bridge0: port 2(bridge_slave_1) entered forwarding state
[   99.239915][ T8092] netlink: 212 bytes leftover after parsing attributes in process `syz.2.848'.
[   99.288696][ T8097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.849'.
[   99.298098][ T8097] erspan0: entered promiscuous mode
[   99.300244][ T8097] macvtap1: entered promiscuous mode
[   99.302110][ T8097] macvtap1: entered allmulticast mode
[   99.304054][ T8097] erspan0: entered allmulticast mode
[   99.320545][ T8097] netlink: 28 bytes leftover after parsing attributes in process `syz.2.849'.
[   99.331184][ T8097] netlink: 52 bytes leftover after parsing attributes in process `syz.2.849'.
[   99.333900][ T7970] 8021q: adding VLAN 0 to HW filter on device batadv0
[   99.373462][ T7970] veth0_vlan: entered promiscuous mode
[   99.381423][ T7970] veth1_vlan: entered promiscuous mode
[   99.403411][ T7970] veth0_macvtap: entered promiscuous mode
[   99.408298][ T7970] veth1_macvtap: entered promiscuous mode
[   99.423412][ T8100] netlink: 4 bytes leftover after parsing attributes in process `syz.2.850'.
[   99.439722][ T7970] batman_adv: batadv0: Interface activated: batadv_slave_0
[   99.452111][ T7970] batman_adv: batadv0: Interface activated: batadv_slave_1
[   99.461845][ T7970] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.465823][ T7970] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.470295][ T7970] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.474056][ T7970] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.511409][ T8102] vlan0: entered promiscuous mode
[   99.565845][   T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.571610][   T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.598392][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.601537][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.040355][ T8124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.861'.
[  100.043876][ T8124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.861'.
[  101.153894][ T8186] lo speed is unknown, defaulting to 1000
[  101.159528][ T8186] lo speed is unknown, defaulting to 1000
[  101.162174][ T8186] lo speed is unknown, defaulting to 1000
[  101.174362][ T8186] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  101.194760][ T8186] lo speed is unknown, defaulting to 1000
[  101.201218][ T8186] lo speed is unknown, defaulting to 1000
[  101.203837][ T8186] lo speed is unknown, defaulting to 1000
[  101.243620][ T8192] netlink: 16 bytes leftover after parsing attributes in process `syz.1.894'.
[  101.365138][ T8200] lo speed is unknown, defaulting to 1000
[  101.441241][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.193429][ T8213] dvmrp8: entered allmulticast mode
[  102.207355][ T8212] dvmrp8: left allmulticast mode
[  102.255824][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  102.259435][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  102.262499][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  102.268675][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  102.273118][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  102.295809][ T8216] lo speed is unknown, defaulting to 1000
[  102.428291][ T8216] chnl_net:caif_netlink_parms(): no params data found
[  102.503700][ T8216] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.506365][ T8216] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.509230][ T8216] bridge_slave_0: entered allmulticast mode
[  102.511900][ T8216] bridge_slave_0: entered promiscuous mode
[  102.515362][ T8216] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.518088][ T8216] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.521043][ T8216] bridge_slave_1: entered allmulticast mode
[  102.524483][ T8216] bridge_slave_1: entered promiscuous mode
[  102.582001][ T8216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  102.590518][ T8216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  102.609311][ T8243] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  102.622561][ T8216] team0: Port device team_slave_0 added
[  102.626345][ T8216] team0: Port device team_slave_1 added
[  102.649124][ T8216] batman_adv: batadv0: Adding interface: batadv_slave_0
[  102.651384][ T8216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  102.664752][ T8216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  102.670440][ T8216] batman_adv: batadv0: Adding interface: batadv_slave_1
[  102.673633][ T8216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  102.685447][ T8216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  102.720062][ T8250] syzkaller1: tun_chr_ioctl cmd 1074025677
[  102.722887][ T8250] syzkaller1: linktype set to 270
[  102.728389][ T8216] hsr_slave_0: entered promiscuous mode
[  102.730762][ T8216] hsr_slave_1: entered promiscuous mode
[  103.006049][ T8262] netlink: 'syz.2.921': attribute type 1 has an invalid length.
[  103.006942][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.064743][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.131323][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.355129][   T13] bridge_slave_1: left allmulticast mode
[  103.363976][   T13] bridge_slave_1: left promiscuous mode
[  103.370084][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.378856][   T13] bridge_slave_0: left allmulticast mode
[  103.381187][   T13] bridge_slave_0: left promiscuous mode
[  103.383616][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.485518][ T8280] "syz.1.926" (8280) uses obsolete ecb(arc4) skcipher
[  103.629483][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  103.633469][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  103.637951][   T13] bond0 (unregistering): Released all slaves
[  103.960879][   T13] hsr_slave_0: left promiscuous mode
[  103.971885][   T13] hsr_slave_1: left promiscuous mode
[  103.974118][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  103.978321][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  103.981144][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  103.983581][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  103.995603][   T13] veth1_macvtap: left promiscuous mode
[  103.997740][   T13] veth0_macvtap: left promiscuous mode
[  103.999620][   T13] veth1_vlan: left promiscuous mode
[  104.001516][   T13] veth0_vlan: left promiscuous mode
[  104.192354][ T8310] xt_HMARK: proto mask must be zero with L3 mode
[  104.326791][ T5834] Bluetooth: hci0: command tx timeout
[  104.334075][   T13] team0 (unregistering): Port device team_slave_1 removed
[  104.382482][   T13] team0 (unregistering): Port device team_slave_0 removed
[  104.733352][ T8323] __nla_validate_parse: 4 callbacks suppressed
[  104.733367][ T8323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.937'.
[  104.812486][ T8216] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  104.819861][ T8216] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  104.836287][ T8216] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  104.856154][ T8216] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  105.056723][ T8348] netlink: 4 bytes leftover after parsing attributes in process `syz.1.942'.
[  105.058696][ T8216] 8021q: adding VLAN 0 to HW filter on device bond0
[  105.132942][ T8216] 8021q: adding VLAN 0 to HW filter on device team0
[  105.159297][ T6192] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.162353][ T6192] bridge0: port 1(bridge_slave_0) entered forwarding state
[  105.202595][ T6192] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.205604][ T6192] bridge0: port 2(bridge_slave_1) entered forwarding state
[  105.371235][ T8216] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  105.375435][ T8216] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  105.388827][ T8370] openvswitch: netlink: Key type 251 is out of range max 32
[  105.402390][ T8367] af_packet: tpacket_rcv: packet too big, clamped from 1480 to 4294967272. macoff=96
[  105.511329][ T8216] 8021q: adding VLAN 0 to HW filter on device batadv0
[  105.561408][ T8216] veth0_vlan: entered promiscuous mode
[  105.571326][ T8216] veth1_vlan: entered promiscuous mode
[  105.598856][ T8216] veth0_macvtap: entered promiscuous mode
[  105.602767][ T8216] veth1_macvtap: entered promiscuous mode
[  105.614435][ T8216] batman_adv: batadv0: Interface activated: batadv_slave_0
[  105.622929][ T8216] batman_adv: batadv0: Interface activated: batadv_slave_1
[  105.627835][ T8216] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  105.631860][ T8216] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  105.634887][ T8216] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  105.638716][ T8216] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  105.677556][ T8387] netlink: 28 bytes leftover after parsing attributes in process `syz.2.954'.
[  105.681083][ T8387] netlink: 'syz.2.954': attribute type 7 has an invalid length.
[  105.684654][ T8387] netlink: 'syz.2.954': attribute type 8 has an invalid length.
[  105.688016][ T8387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.954'.
[  105.734797][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  105.738251][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  105.790333][   T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  105.793758][   T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  105.930389][ T8405] netlink: 8 bytes leftover after parsing attributes in process `syz.2.962'.
[  105.989691][ T8409] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.964'.
[  106.116904][ T8411] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  106.150677][ T8411] lo speed is unknown, defaulting to 1000
[  106.679583][ T8451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.985'.
[  106.790815][ T8458] lo speed is unknown, defaulting to 1000
[  106.914716][ T8459] lo speed is unknown, defaulting to 1000
[  107.434262][ T5690] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.471761][ T5218] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  108.475870][ T5218] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  108.481447][ T5218] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  108.485433][ T5218] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  108.488643][ T5218] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  108.523335][ T8531] lo speed is unknown, defaulting to 1000
[  108.618613][ T8531] chnl_net:caif_netlink_parms(): no params data found
[  108.675425][ T8531] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.678188][ T8531] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.680754][ T8531] bridge_slave_0: entered allmulticast mode
[  108.683416][ T8531] bridge_slave_0: entered promiscuous mode
[  108.687106][ T8531] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.689681][ T8531] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.692156][ T8531] bridge_slave_1: entered allmulticast mode
[  108.694873][ T8531] bridge_slave_1: entered promiscuous mode
[  108.716010][ T8531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  108.721913][ T8531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  108.742958][ T8531] team0: Port device team_slave_0 added
[  108.747470][ T8531] team0: Port device team_slave_1 added
[  108.765242][ T8531] batman_adv: batadv0: Adding interface: batadv_slave_0
[  108.769338][ T8531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  108.779104][ T8531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  108.783660][ T8531] batman_adv: batadv0: Adding interface: batadv_slave_1
[  108.785970][ T8531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  108.794992][ T8531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  108.821893][ T8531] hsr_slave_0: entered promiscuous mode
[  108.824371][ T8531] hsr_slave_1: entered promiscuous mode
[  108.827259][ T8531] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  108.830467][ T8531] Cannot create hsr debugfs directory
[  109.089205][ T5690] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.164763][ T5690] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.230184][ T5690] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.353754][ T5690] bridge_slave_1: left allmulticast mode
[  109.362197][ T5690] bridge_slave_1: left promiscuous mode
[  109.366158][ T5690] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.373317][ T5690] bridge_slave_0: left allmulticast mode
[  109.375729][ T5690] bridge_slave_0: left promiscuous mode
[  109.381196][ T5690] bridge0: port 1(bridge_slave_0) entered disabled state
[  109.714967][ T5690] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  109.721070][ T5690] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  109.727191][ T5690] bond0 (unregistering): Released all slaves
[  109.740254][ T8567] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1003'.
[  109.743371][ T8567] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1003'.
[  109.778841][ T8558] lo speed is unknown, defaulting to 1000
[  109.783657][ T8558] lo speed is unknown, defaulting to 1000
[  109.789642][ T8558] lo speed is unknown, defaulting to 1000
[  109.850079][ T8563] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  109.877503][ T5889] lo speed is unknown, defaulting to 1000
[  110.018322][ T8558] infiniband syz0: set active
[  110.020517][ T8558] infiniband syz0: added lo
[  110.043416][ T8558] RDS/IB: syz0: added
[  110.045203][ T8558] smc: adding ib device syz0 with port count 1
[  110.047512][ T8558] smc:    ib device syz0 port 1 has pnetid 
[  110.055584][  T971] lo speed is unknown, defaulting to 1000
[  110.098057][ T8558] lo speed is unknown, defaulting to 1000
[  110.102666][ T5835] lo speed is unknown, defaulting to 1000
[  110.255654][ T8584] syzkaller1: entered promiscuous mode
[  110.260805][ T8584] syzkaller1: entered allmulticast mode
[  110.277183][ T8558] lo speed is unknown, defaulting to 1000
[  110.451361][ T8531] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  110.472597][ T8531] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  110.499375][ T8531] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  110.524140][ T8531] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  110.560818][ T5834] Bluetooth: hci0: command tx timeout
[  110.665495][ T8531] 8021q: adding VLAN 0 to HW filter on device bond0
[  110.694756][ T8531] 8021q: adding VLAN 0 to HW filter on device team0
[  110.712114][   T29] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.715361][   T29] bridge0: port 1(bridge_slave_0) entered forwarding state
[  110.732570][   T29] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.735681][   T29] bridge0: port 2(bridge_slave_1) entered forwarding state
[  110.769315][ T8558] lo speed is unknown, defaulting to 1000
[  110.925132][ T8613] Bluetooth: MGMT ver 1.23
[  110.986015][ T8531] 8021q: adding VLAN 0 to HW filter on device batadv0
[  111.052417][ T8558] lo speed is unknown, defaulting to 1000
[  111.052824][ T8531] veth0_vlan: entered promiscuous mode
[  111.069722][ T8531] veth1_vlan: entered promiscuous mode
[  111.094738][ T8531] veth0_macvtap: entered promiscuous mode
[  111.101188][ T8531] veth1_macvtap: entered promiscuous mode
[  111.113793][ T8531] batman_adv: batadv0: Interface activated: batadv_slave_0
[  111.133420][ T8531] batman_adv: batadv0: Interface activated: batadv_slave_1
[  111.141749][ T8531] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  111.145300][ T8531] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  111.150098][ T8531] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  111.153616][ T8531] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  111.239973][ T8621] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1019'.
[  111.244967][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  111.250906][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  111.322686][   T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  111.327491][   T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  111.349104][ T8558] lo speed is unknown, defaulting to 1000
[  111.582256][ T8558] lo speed is unknown, defaulting to 1000
[  111.867761][ T5690] hsr_slave_0: left promiscuous mode
[  111.872409][ T5690] hsr_slave_1: left promiscuous mode
[  111.874531][ T5690] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  111.879560][ T5690] batman_adv: batadv0: Removing interface: batadv_slave_0
[  111.887137][ T5690] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  111.889554][ T5690] batman_adv: batadv0: Removing interface: batadv_slave_1
[  111.905398][ T5690] veth1_macvtap: left promiscuous mode
[  111.916668][ T5690] veth0_macvtap: left promiscuous mode
[  111.918633][ T5690] veth1_vlan: left promiscuous mode
[  111.920398][ T5690] veth0_vlan: left promiscuous mode
[  112.031998][ T8644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1030'.
[  112.231220][ T5690] team0 (unregistering): Port device team_slave_1 removed
[  112.259115][ T5690] team0 (unregistering): Port device team_slave_0 removed
[  112.308543][ T8653] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1033'.
[  112.488336][ T8644] syz_tun: entered allmulticast mode
[  112.699591][ T8664] netlink: 'syz.1.1038': attribute type 21 has an invalid length.
[  112.702281][ T8664] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1038'.
[  112.718199][    C0] Unknown status report in ack skb
[  112.792825][ T8670] ip6t_rpfilter: unknown options
[  112.995583][ T8682] netlink: 'syz.2.1047': attribute type 4 has an invalid length.
[  113.032152][ T5874] lo speed is unknown, defaulting to 1000
[  113.034640][ T5874] syz0: Port: 1 Link DOWN
[  113.040445][ T5874] lo speed is unknown, defaulting to 1000
[  113.449066][ T5690] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.983116][ T8693] netlink: 34 bytes leftover after parsing attributes in process `syz.2.1052'.
[  113.997230][ T8693] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1052'.
[  114.124336][ T5218] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  114.128215][ T5218] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  114.136628][ T5218] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  114.141226][ T5218] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  114.144393][ T5218] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  114.203346][ T8703] lo speed is unknown, defaulting to 1000
[  114.267860][ T8703] lo speed is unknown, defaulting to 1000
[  114.404946][ T5690] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.442368][ T8712] : entered promiscuous mode
[  114.474633][ T8712] trusted_key: syz.2.1059 sent an empty control message without MSG_MORE.
[  114.625937][ T8717] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1060'.
[  114.631816][ T8717] openvswitch: netlink: nsh attr 0 has unexpected len 7 expected 0
[  114.635814][ T8717] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  114.690982][ T5690] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.698702][ T8703] chnl_net:caif_netlink_parms(): no params data found
[  114.809625][ T5690] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.841106][ T8703] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.843517][ T8703] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.845808][ T8703] bridge_slave_0: entered allmulticast mode
[  114.852202][ T8703] bridge_slave_0: entered promiscuous mode
[  114.859786][ T8703] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.862140][ T8703] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.864431][ T8703] bridge_slave_1: entered allmulticast mode
[  114.887205][ T8703] bridge_slave_1: entered promiscuous mode
[  114.947144][ T8703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  114.951814][ T8703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  115.020419][ T8703] team0: Port device team_slave_0 added
[  115.062445][ T8703] team0: Port device team_slave_1 added
[  115.102313][ T8703] batman_adv: batadv0: Adding interface: batadv_slave_0
[  115.104680][ T8703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  115.115827][ T8703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  115.119560][ T5690] bridge_slave_1: left allmulticast mode
[  115.121764][ T5690] bridge_slave_1: left promiscuous mode
[  115.123586][ T5690] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.147243][ T5690] bridge_slave_0: left allmulticast mode
[  115.158514][ T5690] bridge_slave_0: left promiscuous mode
[  115.161077][ T5690] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.303927][ T8748] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1071'.
[  115.444080][ T5690] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  115.449240][ T5690] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  115.453120][ T5690] bond0 (unregistering): Released all slaves
[  115.460695][ T8703] batman_adv: batadv0: Adding interface: batadv_slave_1
[  115.462929][ T8703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  115.472604][ T8703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  115.573029][ T8703] hsr_slave_0: entered promiscuous mode
[  115.575403][ T8703] hsr_slave_1: entered promiscuous mode
[  115.774563][ T8771] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1079'.
[  115.999950][ T5690] hsr_slave_0: left promiscuous mode
[  116.002846][ T5690] hsr_slave_1: left promiscuous mode
[  116.005070][ T5690] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  116.008791][ T5690] batman_adv: batadv0: Removing interface: batadv_slave_0
[  116.011693][ T5690] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  116.014179][ T5690] batman_adv: batadv0: Removing interface: batadv_slave_1
[  116.026401][ T5690] veth1_macvtap: left promiscuous mode
[  116.046630][ T5690] veth0_macvtap: left promiscuous mode
[  116.048528][ T5690] veth1_vlan: left promiscuous mode
[  116.050295][ T5690] veth0_vlan: left promiscuous mode
[  116.238487][ T5218] Bluetooth: hci0: command tx timeout
[  116.330311][ T5690] team0 (unregistering): Port device team_slave_1 removed
[  116.357084][ T5690] team0 (unregistering): Port device team_slave_0 removed
[  116.727099][ T8793] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1088'.
[  116.777011][ T8797] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input4
[  116.819609][ T8800] Bluetooth: MGMT ver 1.23
[  116.883521][ T8793] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1088'.
[  116.991691][ T8807] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1092'.
[  117.020289][ T8807] batadv1: entered promiscuous mode
[  117.022530][ T8807] batadv1: entered allmulticast mode
[  117.190736][ T8815] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.193792][ T8815] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.222562][ T8807] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1092'.
[  117.227806][ T8815] tipc: Resetting bearer <eth:batadv0>
[  117.270863][ T8815] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  117.277269][ T8815] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  117.319628][ T8815] vlan0: left promiscuous mode
[  117.344717][ T8815] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  117.347967][ T8815] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  117.351330][ T8815] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  117.354610][ T8815] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  117.399115][ T8815] erspan0: left allmulticast mode
[  117.401519][ T8815] macvtap1: left promiscuous mode
[  117.403676][ T8815] macvtap1: left allmulticast mode
[  117.447039][ T8703] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  117.456046][ T8703] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  117.475410][ T8703] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  117.482763][ T8703] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  117.585524][ T8703] 8021q: adding VLAN 0 to HW filter on device bond0
[  117.609014][ T8703] 8021q: adding VLAN 0 to HW filter on device team0
[  117.622341][   T29] bridge0: port 1(bridge_slave_0) entered blocking state
[  117.624771][   T29] bridge0: port 1(bridge_slave_0) entered forwarding state
[  117.647509][   T29] bridge0: port 2(bridge_slave_1) entered blocking state
[  117.649911][   T29] bridge0: port 2(bridge_slave_1) entered forwarding state
[  117.671083][ T8703] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  117.819770][ T8703] 8021q: adding VLAN 0 to HW filter on device batadv0
[  117.845463][ T8856] xt_TPROXY: Can be used only with -p tcp or -p udp
[  117.876008][ T8703] veth0_vlan: entered promiscuous mode
[  117.892687][ T8703] veth1_vlan: entered promiscuous mode
[  117.928427][ T8703] veth0_macvtap: entered promiscuous mode
[  117.939809][ T8703] veth1_macvtap: entered promiscuous mode
[  117.958651][ T8703] batman_adv: batadv0: Interface activated: batadv_slave_0
[  117.977822][ T8703] batman_adv: batadv0: Interface activated: batadv_slave_1
[  117.984421][ T8703] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  117.991062][ T8703] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  117.994399][ T8703] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  117.999082][ T8703] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  118.074015][   T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.077616][   T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.099707][ T6192] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.101312][ T8876] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  118.103005][ T6192] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.152179][ T8879] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1113'.
[  118.213603][ T8883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1115'.
[  118.301373][ T8703] 
[  118.302433][ T8703] ======================================================
[  118.305218][ T8703] WARNING: possible circular locking dependency detected
[  118.307868][ T8703] 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 Not tainted
[  118.311404][ T8703] ------------------------------------------------------
[  118.313778][ T8703] syz-executor/8703 is trying to acquire lock:
[  118.315834][ T8703] ffff888104a7e840 ((work_completion)(&(&conn->info_timer)->work)){+.+.}-{0:0}, at: __flush_work+0xd2/0xbc0
[  118.319385][ T8703] 
[  118.319385][ T8703] but task is already holding lock:
[  118.322184][ T8703] ffff888104a7eb38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680
[  118.325941][ T8703] 
[  118.325941][ T8703] which lock already depends on the new lock.
[  118.325941][ T8703] 
[  118.330285][ T8703] 
[  118.330285][ T8703] the existing dependency chain (in reverse order) is:
[  118.333955][ T8703] 
[  118.333955][ T8703] -> #1 (&conn->lock#2){+.+.}-{4:4}:
[  118.336986][ T8703]        lock_acquire+0x120/0x360
[  118.339093][ T8703]        __mutex_lock+0x182/0xe80
[  118.341233][ T8703]        l2cap_info_timeout+0x60/0xa0
[  118.343452][ T8703]        process_scheduled_works+0xae1/0x17b0
[  118.346032][ T8703]        worker_thread+0x8a0/0xda0
[  118.348189][ T8703]        kthread+0x711/0x8a0
[  118.350121][ T8703]        ret_from_fork+0x3fc/0x770
[  118.352314][ T8703]        ret_from_fork_asm+0x1a/0x30
[  118.354632][ T8703] 
[  118.354632][ T8703] -> #0 ((work_completion)(&(&conn->info_timer)->work)){+.+.}-{0:0}:
[  118.358215][ T8703]        validate_chain+0xb9b/0x2140
[  118.360392][ T8703]        __lock_acquire+0xab9/0xd20
[  118.362053][ T8703]        lock_acquire+0x120/0x360
[  118.363695][ T8703]        __flush_work+0x6b8/0xbc0
[  118.365633][ T8703]        __cancel_work_sync+0xbe/0x110
[  118.367627][ T8703]        l2cap_conn_del+0x4f0/0x680
[  118.369635][ T8703]        hci_conn_hash_flush+0x10d/0x230
[  118.371405][ T8703]        hci_dev_close_sync+0xaef/0x1330
[  118.373418][ T8703]        hci_unregister_dev+0x21a/0x510
[  118.375455][ T8703]        vhci_release+0x80/0xd0
[  118.377096][ T8703]        __fput+0x44c/0xa70
[  118.378632][ T8703]        task_work_run+0x1d4/0x260
[  118.380358][ T8703]        do_exit+0x6b5/0x22e0
[  118.381963][ T8703]        do_group_exit+0x21c/0x2d0
[  118.383655][ T8703]        __x64_sys_exit_group+0x3f/0x40
[  118.385508][ T8703]        x64_sys_call+0x21ba/0x21c0
[  118.387176][ T8703]        do_syscall_64+0xfa/0x3b0
[  118.388821][ T8703]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.390878][ T8703] 
[  118.390878][ T8703] other info that might help us debug this:
[  118.390878][ T8703] 
[  118.394279][ T8703]  Possible unsafe locking scenario:
[  118.394279][ T8703] 
[  118.396560][ T8703]        CPU0                    CPU1
[  118.398210][ T8703]        ----                    ----
[  118.399851][ T8703]   lock(&conn->lock#2);
[  118.401190][ T8703]                                lock((work_completion)(&(&conn->info_timer)->work));
[  118.404218][ T8703]                                lock(&conn->lock#2);
[  118.406417][ T8703]   lock((work_completion)(&(&conn->info_timer)->work));
[  118.408653][ T8703] 
[  118.408653][ T8703]  *** DEADLOCK ***
[  118.408653][ T8703] 
[  118.411243][ T8703] 5 locks held by syz-executor/8703:
[  118.412935][ T8703]  #0: ffff8881031c4dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510
[  118.416166][ T8703]  #1: ffff8881031c40b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330
[  118.419387][ T8703]  #2: ffffffff8f684a48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230
[  118.422890][ T8703]  #3: ffff888104a7eb38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680
[  118.426328][ T8703]  #4: ffffffff8e13ee60 (rcu_read_lock){....}-{1:3}, at: __flush_work+0xd2/0xbc0
[  118.429357][ T8703] 
[  118.429357][ T8703] stack backtrace:
[  118.431589][ T8703] CPU: 1 UID: 0 PID: 8703 Comm: syz-executor Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  118.431598][ T8703] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  118.431603][ T8703] Call Trace:
[  118.431607][ T8703]  <TASK>
[  118.431612][ T8703]  dump_stack_lvl+0x189/0x250
[  118.431622][ T8703]  ? __pfx_dump_stack_lvl+0x10/0x10
[  118.431630][ T8703]  ? __pfx__printk+0x10/0x10
[  118.431640][ T8703]  ? print_lock_name+0xde/0x100
[  118.431649][ T8703]  print_circular_bug+0x2ee/0x310
[  118.431659][ T8703]  check_noncircular+0x134/0x160
[  118.431668][ T8703]  validate_chain+0xb9b/0x2140
[  118.431676][ T8703]  ? do_raw_spin_lock+0x121/0x290
[  118.431687][ T8703]  ? look_up_lock_class+0x74/0x170
[  118.431694][ T8703]  ? register_lock_class+0x51/0x320
[  118.431702][ T8703]  __lock_acquire+0xab9/0xd20
[  118.431709][ T8703]  ? __flush_work+0xd2/0xbc0
[  118.431718][ T8703]  lock_acquire+0x120/0x360
[  118.431724][ T8703]  ? __flush_work+0xd2/0xbc0
[  118.431733][ T8703]  ? _raw_spin_unlock_irq+0x23/0x50
[  118.431743][ T8703]  ? __flush_work+0xd2/0xbc0
[  118.431751][ T8703]  __flush_work+0x6b8/0xbc0
[  118.431759][ T8703]  ? __flush_work+0xd2/0xbc0
[  118.431767][ T8703]  ? __flush_work+0xd2/0xbc0
[  118.431776][ T8703]  ? __pfx___flush_work+0x10/0x10
[  118.431784][ T8703]  ? __pfx_wq_barrier_func+0x10/0x10
[  118.431794][ T8703]  ? __pfx___cancel_work+0x10/0x10
[  118.431803][ T8703]  ? hci_conn_drop+0x14d/0x280
[  118.431819][ T8703]  __cancel_work_sync+0xbe/0x110
[  118.431833][ T8703]  l2cap_conn_del+0x4f0/0x680
[  118.431848][ T8703]  ? __pfx_l2cap_disconn_cfm+0x10/0x10
[  118.431859][ T8703]  hci_conn_hash_flush+0x10d/0x230
[  118.431873][ T8703]  hci_dev_close_sync+0xaef/0x1330
[  118.431888][ T8703]  ? __pfx_hci_dev_close_sync+0x10/0x10
[  118.431900][ T8703]  ? up_write+0x1c4/0x420
[  118.431913][ T8703]  hci_unregister_dev+0x21a/0x510
[  118.431921][ T8703]  vhci_release+0x80/0xd0
[  118.431932][ T8703]  ? __pfx_vhci_release+0x10/0x10
[  118.431942][ T8703]  __fput+0x44c/0xa70
[  118.431954][ T8703]  task_work_run+0x1d4/0x260
[  118.431970][ T8703]  ? __pfx_task_work_run+0x10/0x10
[  118.431985][ T8703]  ? kmem_cache_free+0x18f/0x400
[  118.431999][ T8703]  do_exit+0x6b5/0x22e0
[  118.432015][ T8703]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  118.432036][ T8703]  ? __pfx_do_exit+0x10/0x10
[  118.432052][ T8703]  ? _raw_spin_unlock_irq+0x23/0x50
[  118.432064][ T8703]  ? lockdep_hardirqs_on+0x9c/0x150
[  118.432073][ T8703]  do_group_exit+0x21c/0x2d0
[  118.432096][ T8703]  __x64_sys_exit_group+0x3f/0x40
[  118.432111][ T8703]  x64_sys_call+0x21ba/0x21c0
[  118.432124][ T8703]  do_syscall_64+0xfa/0x3b0
[  118.432135][ T8703]  ? lockdep_hardirqs_on+0x9c/0x150
[  118.432144][ T8703]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.432154][ T8703]  ? exc_page_fault+0x9f/0xf0
[  118.432169][ T8703]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.432180][ T8703] RIP: 0033:0x7f93feb8e929
[  118.432190][ T8703] Code: Unable to access opcode bytes at 0x7f93feb8e8ff.
[  118.432195][ T8703] RSP: 002b:00007ffddf344718 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  118.432206][ T8703] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f93feb8e929
[  118.432214][ T8703] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043
[  118.432220][ T8703] RBP: 00007f93febee8f0 R08: 00007ffddf3424b7 R09: 0000000000000003
[  118.432227][ T8703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  118.432233][ T8703] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007ffddf3448d0
[  118.432244][ T8703]  </TASK>
[  118.549389][ T5218] Bluetooth: hci0: command tx timeout
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)

VM DIAGNOSIS:
01:10:06  Registers:
info registers vcpu 0

CPU#0
RAX=9764716bc3e9e801 RBX=dffffc0000000001 RCX=ffffffff84c7cebf RDX=0000000000000001
RSI=0000000000000028 RDI=ffffc90006a57890 RBP=0000000000000000 RSP=ffffc90006a577e0
R8 =ffffc90006a578b7 R9 =1ffff92000d4af16 R10=dffffc0000000000 R11=fffff52000d4af12
R12=0000000000000005 R13=0000000000000040 R14=fffff52000d4af17 R15=1ffff92000d4af12
RIP=ffffffff8223ca29 RFL=00000287 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fffb30841e8 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000ffffffff 0000000100000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffffff ffffffffffff00ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000079 RBX=0000000000000079 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90002f5ee30
R8 =ffff888108d58237 R9 =1ffff110211ab046 R10=dffffc0000000000 R11=ffffffff85475610
R12=dffffc0000000000 R13=ffffffff99af7905 R14=ffffffff99dfc760 R15=0000000000000000
RIP=ffffffff8547568c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055556b06c500 ffffffff 00c00000
GS =0000 ffff8881a3c1d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f0af0f7f2d8 CR3=000000002060c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00ff000000000000 ff00000000000000 XMM05=0000000000000001 0000000000030101
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffffff000000 XMM09=0000000000006011 0000000000347475
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
