last executing test programs:

1m22.041443173s ago: executing program 2 (id=172):
r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, r0, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {0x0, 0x800b}}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0)

1m14.309947526s ago: executing program 2 (id=172):
r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, r0, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {0x0, 0x800b}}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0)

1m12.620297466s ago: executing program 1 (id=424):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)={0x14, 0x17, 0x301, 0x0, 0x0, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0)

1m6.050049917s ago: executing program 2 (id=172):
r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, r0, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {0x0, 0x800b}}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0)

1m4.586504356s ago: executing program 1 (id=424):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)={0x14, 0x17, 0x301, 0x0, 0x0, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0)

57.740835211s ago: executing program 2 (id=172):
r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, r0, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {0x0, 0x800b}}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0)

57.188598577s ago: executing program 1 (id=424):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)={0x14, 0x17, 0x301, 0x0, 0x0, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0)

50.594044012s ago: executing program 2 (id=172):
r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, r0, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {0x0, 0x800b}}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0)

49.565883232s ago: executing program 1 (id=424):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)={0x14, 0x17, 0x301, 0x0, 0x0, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0)

43.655206651s ago: executing program 2 (id=172):
r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, r0, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {0x0, 0x800b}}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0)

12.70799738s ago: executing program 0 (id=970):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x1, 0x0)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x4000, 0x3, 0x0, 0xffdfffff}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

12.707622135s ago: executing program 0 (id=971):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x300, 0x4)
connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10)
sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8130000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa", 0x6f, 0x40001, 0x0, 0x0)

12.677797723s ago: executing program 0 (id=972):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r1 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000580)="1e", 0x1}], 0x1, 0x0, 0x0, 0x4090}, 0x0)
read$alg(r1, &(0x7f0000003780)=""/4096, 0x1000)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6)
ioctl$sock_bt_hci(r0, 0x400448ca, 0x0)

12.677330718s ago: executing program 0 (id=973):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000001c0)={r0, r0, 0xfffe, 0x0, 0x0, 0xc2, 0x4c, 0x15c2, 0x5882, 0x4006, 0x0, 0x0, 'syz0\x00'}) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0xd0}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
preadv(r3, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000680)=""/180, 0xb4}], 0x2, 0x3, 0x7) (async)
ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f00000000c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}})

11.762103102s ago: executing program 0 (id=974):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(0x0, r0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={r2, 0x0, 0xfffffffffffffffe}, 0x10)
r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
close(r3)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000003"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000"], 0x0, 0x2}, 0x94)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000340)={r4, r4, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'})
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800"/12], &(0x7f0000000140)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10)
shutdown(r4, 0x1)
ioctl$sock_bt_hidp_HIDPCONNDEL(r5, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)

10.892261813s ago: executing program 0 (id=975):
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000340)={r1, r1, 0xc, 0x13, &(0x7f00000009c0)="160000000000000000b2317233f54c843626ac", 0x9, 0x1, 0x16c0, 0x5505, 0x8b, 0x1, 0x0, 'syz0\x00'})
ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x9})

5.171945616s ago: executing program 1 (id=424):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)={0x14, 0x17, 0x301, 0x0, 0x0, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0)

0s ago: executing program 1 (id=424):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)={0x14, 0x17, 0x301, 0x0, 0x0, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0)

kernel console output (not intermixed with test programs):

tate
[  162.957533][ T5840] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  162.963299][ T5840] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  162.967627][ T5840] bond0 (unregistering): Released all slaves
[  163.004036][ T8821] team0: Port device team_slave_0 added
[  163.011401][ T8821] team0: Port device team_slave_1 added
[  163.053554][ T8821] batman_adv: batadv0: Adding interface: batadv_slave_0
[  163.056244][ T8821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  163.065994][ T8821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  163.073338][ T8821] batman_adv: batadv0: Adding interface: batadv_slave_1
[  163.076021][ T8821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  163.086231][ T8821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  163.157014][ T8821] hsr_slave_0: entered promiscuous mode
[  163.159770][ T8821] hsr_slave_1: entered promiscuous mode
[  163.376501][   T10] hid-generic 0005:16C0:5505.0006: unknown main item tag 0x0
[  163.385309][   T10] hid-generic 0005:16C0:5505.0006: unknown main item tag 0x0
[  163.387817][   T10] hid-generic 0005:16C0:5505.0006: unknown main item tag 0x0
[  163.400409][   T10] hid-generic 0005:16C0:5505.0006: unknown main item tag 0x0
[  163.404794][   T10] hid-generic 0005:16C0:5505.0006: unknown main item tag 0x0
[  163.411374][   T10] hid-generic 0005:16C0:5505.0006: unknown main item tag 0x0
[  163.414445][ T5840] hsr_slave_0: left promiscuous mode
[  163.417282][ T5840] hsr_slave_1: left promiscuous mode
[  163.420067][ T5840] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  163.420327][   T10] hid-generic 0005:16C0:5505.0006: unknown main item tag 0x3
[  163.425090][ T5840] batman_adv: batadv0: Removing interface: batadv_slave_0
[  163.427300][   T10] hid-generic 0005:16C0:5505.0006: item fetching failed at offset 17/19
[  163.433441][ T5840] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  163.436670][   T10] hid-generic 0005:16C0:5505.0006: probe with driver hid-generic failed with error -22
[  163.438652][ T5840] batman_adv: batadv0: Removing interface: batadv_slave_1
[  163.496491][ T5840] veth1_macvtap: left promiscuous mode
[  163.499041][ T5840] veth0_macvtap: left promiscuous mode
[  163.505277][ T5840] veth1_vlan: left promiscuous mode
[  163.507145][ T5840] veth0_vlan: left promiscuous mode
[  163.544401][ T5203] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  163.548496][ T5203] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  163.552957][ T5203] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  163.556260][ T5203] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  163.562275][ T5203] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  163.814933][ T5840] team0 (unregistering): Port device team_slave_1 removed
[  163.842819][ T5840] team0 (unregistering): Port device team_slave_0 removed
[  164.129416][ T8847] dummy0 speed is unknown, defaulting to 1000
[  164.635118][ T8847] chnl_net:caif_netlink_parms(): no params data found
[  164.646995][ T8821] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  164.669713][ T8821] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  164.702786][ T5840] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.740434][ T8821] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  164.749780][ T8821] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  164.809033][ T5840] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.832408][ T8886] netlink: 48 bytes leftover after parsing attributes in process `syz.0.698'.
[  164.924051][ T5840] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.930793][ T8847] bridge0: port 1(bridge_slave_0) entered blocking state
[  164.933864][ T8847] bridge0: port 1(bridge_slave_0) entered disabled state
[  164.942749][ T8847] bridge_slave_0: entered allmulticast mode
[  164.946045][ T8847] bridge_slave_0: entered promiscuous mode
[  164.949480][ T8847] bridge0: port 2(bridge_slave_1) entered blocking state
[  164.952857][ T8847] bridge0: port 2(bridge_slave_1) entered disabled state
[  164.961049][ T8847] bridge_slave_1: entered allmulticast mode
[  164.972968][ T8847] bridge_slave_1: entered promiscuous mode
[  165.028181][ T5840] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.079794][ T8847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  165.103002][ T8847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  165.171140][ T8847] team0: Port device team_slave_0 added
[  165.202168][ T8847] team0: Port device team_slave_1 added
[  165.306558][ T8847] batman_adv: batadv0: Adding interface: batadv_slave_0
[  165.309460][ T8847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  165.328513][ T8847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  165.334524][ T5840] bridge_slave_1: left allmulticast mode
[  165.336914][ T5840] bridge_slave_1: left promiscuous mode
[  165.343813][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state
[  165.352273][ T5840] bridge_slave_0: left allmulticast mode
[  165.354524][ T5840] bridge_slave_0: left promiscuous mode
[  165.356545][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state
[  165.646802][ T5817] Bluetooth: hci1: command tx timeout
[  165.974379][ T8996] netlink: 'syz.0.705': attribute type 21 has an invalid length.
[  165.977825][ T8996] netlink: 128 bytes leftover after parsing attributes in process `syz.0.705'.
[  166.072056][ T5840] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  166.077934][ T5840] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  166.085181][ T5840] bond0 (unregistering): Released all slaves
[  166.103459][ T8847] batman_adv: batadv0: Adding interface: batadv_slave_1
[  166.106481][ T8847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  166.116194][ T8847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  166.126068][ T8996] netlink: 'syz.0.705': attribute type 4 has an invalid length.
[  166.129252][ T8996] netlink: 'syz.0.705': attribute type 5 has an invalid length.
[  166.134117][ T8996] netlink: 3 bytes leftover after parsing attributes in process `syz.0.705'.
[  166.163595][ T8821] 8021q: adding VLAN 0 to HW filter on device bond0
[  166.212975][ T8821] 8021q: adding VLAN 0 to HW filter on device team0
[  166.286370][ T3800] bridge0: port 1(bridge_slave_0) entered blocking state
[  166.289394][ T3800] bridge0: port 1(bridge_slave_0) entered forwarding state
[  166.301647][ T8847] hsr_slave_0: entered promiscuous mode
[  166.305551][ T8847] hsr_slave_1: entered promiscuous mode
[  166.309284][ T8847] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  166.314621][ T8847] Cannot create hsr debugfs directory
[  166.316980][ T8999] syz.0.706: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  166.331028][ T8999] CPU: 0 UID: 0 PID: 8999 Comm: syz.0.706 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  166.331051][ T8999] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  166.331061][ T8999] Call Trace:
[  166.331066][ T8999]  <TASK>
[  166.331073][ T8999]  dump_stack_lvl+0x189/0x250
[  166.331105][ T8999]  ? __pfx_dump_stack_lvl+0x10/0x10
[  166.331126][ T8999]  ? __pfx__printk+0x10/0x10
[  166.331142][ T8999]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  166.331156][ T8999]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  166.331172][ T8999]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  166.331188][ T8999]  warn_alloc+0x214/0x310
[  166.331213][ T8999]  ? stack_depot_save_flags+0x40/0x900
[  166.331233][ T8999]  ? __pfx_warn_alloc+0x10/0x10
[  166.331247][ T8999]  ? kasan_save_track+0x4f/0x80
[  166.331265][ T8999]  ? xskq_create+0x56/0x170
[  166.331282][ T8999]  ? xsk_init_queue+0xb0/0x110
[  166.331299][ T8999]  ? xsk_setsockopt+0x43f/0x710
[  166.331311][ T8999]  ? do_sock_setsockopt+0x25a/0x3e0
[  166.331325][ T8999]  ? __x64_sys_setsockopt+0x18b/0x220
[  166.331338][ T8999]  ? do_syscall_64+0xfa/0x3b0
[  166.331347][ T8999]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  166.331366][ T8999]  __vmalloc_node_range_noprof+0x125/0x12f0
[  166.331404][ T8999]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  166.331420][ T8999]  ? xskq_create+0x56/0x170
[  166.331438][ T8999]  ? __kasan_kmalloc+0x93/0xb0
[  166.331453][ T8999]  vmalloc_user_noprof+0xad/0xf0
[  166.331467][ T8999]  ? xskq_create+0xbf/0x170
[  166.331484][ T8999]  xskq_create+0xbf/0x170
[  166.331504][ T8999]  xsk_init_queue+0xb0/0x110
[  166.331524][ T8999]  xsk_setsockopt+0x43f/0x710
[  166.331544][ T8999]  ? __pfx_xsk_setsockopt+0x10/0x10
[  166.331557][ T8999]  ? __lock_acquire+0xab9/0xd20
[  166.331581][ T8999]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  166.331598][ T8999]  ? __pfx_xsk_setsockopt+0x10/0x10
[  166.331615][ T8999]  do_sock_setsockopt+0x25a/0x3e0
[  166.331630][ T8999]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  166.331649][ T8999]  ? __fget_files+0x2a/0x420
[  166.331671][ T8999]  __x64_sys_setsockopt+0x18b/0x220
[  166.331689][ T8999]  do_syscall_64+0xfa/0x3b0
[  166.331700][ T8999]  ? lockdep_hardirqs_on+0x9c/0x150
[  166.331718][ T8999]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  166.331730][ T8999]  ? exc_page_fault+0x9f/0xf0
[  166.331749][ T8999]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  166.331760][ T8999] RIP: 0033:0x7ff9f738e929
[  166.331773][ T8999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  166.331784][ T8999] RSP: 002b:00007ff9f81ea038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  166.331798][ T8999] RAX: ffffffffffffffda RBX: 00007ff9f75b5fa0 RCX: 00007ff9f738e929
[  166.331808][ T8999] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008
[  166.331816][ T8999] RBP: 00007ff9f7410b39 R08: 0000000000000004 R09: 0000000000000000
[  166.331824][ T8999] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  166.331831][ T8999] R13: 0000000000000000 R14: 00007ff9f75b5fa0 R15: 00007ffc5d764018
[  166.331851][ T8999]  </TASK>
[  166.331856][ T8999] Mem-Info:
[  166.453065][ T8999] active_anon:6188 inactive_anon:0 isolated_anon:0
[  166.453065][ T8999]  active_file:888 inactive_file:38298 isolated_file:0
[  166.453065][ T8999]  unevictable:1768 dirty:82 writeback:0
[  166.453065][ T8999]  slab_reclaimable:9417 slab_unreclaimable:57937
[  166.453065][ T8999]  mapped:18241 shmem:2430 pagetables:1017
[  166.453065][ T8999]  sec_pagetables:0 bounce:0
[  166.453065][ T8999]  kernel_misc_reclaimable:0
[  166.453065][ T8999]  free:296625 free_pcp:19591 free_cma:0
[  166.472487][ T8999] Node 0 active_anon:13304kB inactive_anon:0kB active_file:3160kB inactive_file:147136kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:49604kB dirty:252kB writeback:0kB shmem:4880kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6448kB pagetables:2032kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  166.485823][ T8999] Node 1 active_anon:11244kB inactive_anon:0kB active_file:392kB inactive_file:6056kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:23224kB dirty:76kB writeback:0kB shmem:4840kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5516kB pagetables:2172kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  166.503519][ T8999] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  166.516197][ T8999] lowmem_reserve[]: 0 815 815 815 815
[  166.522528][ T8999] Node 0 DMA32 free:246164kB boost:0kB min:33716kB low:42144kB high:50572kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13304kB inactive_anon:0kB active_file:3160kB inactive_file:147136kB unevictable:3536kB writepending:252kB present:1556484kB managed:834740kB mlocked:0kB bounce:0kB free_pcp:38492kB local_pcp:18148kB free_cma:0kB
[  166.543726][ T8999] lowmem_reserve[]: 0 0 0 0 0
[  166.556254][ T8999] Node 1 DMA32 free:458492kB boost:0kB min:19168kB low:23960kB high:28752kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  166.567473][ T8999] lowmem_reserve[]: 0 0 854 854 854
[  166.569753][ T8999] Node 1 Normal free:466196kB boost:0kB min:36576kB low:45720kB high:54864kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11244kB inactive_anon:0kB active_file:392kB inactive_file:6056kB unevictable:3536kB writepending:76kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:40892kB local_pcp:22528kB free_cma:0kB
[  166.583065][ T8999] lowmem_reserve[]: 0 0 0 0 0
[  166.584755][ T8999] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  166.588906][ T8999] Node 0 DMA32: 3*4kB (UME) 15*8kB (ME) 183*16kB (ME) 123*32kB (UME) 49*64kB (ME) 31*128kB (UME) 17*256kB (UM) 12*512kB (UME) 5*1024kB (UM) 4*2048kB (UME) 51*4096kB (M) = 246804kB
[  166.597044][ T8999] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  166.612578][ T3800] bridge0: port 2(bridge_slave_1) entered blocking state
[  166.615065][ T3800] bridge0: port 2(bridge_slave_1) entered forwarding state
[  166.629068][ T8999] Node 1 Normal: 1037*4kB (UME) 1390*8kB (UME) 979*16kB (UME) 786*32kB (UME) 204*64kB (UME) 89*128kB (UME) 28*256kB (UM) 16*512kB (UM) 9*1024kB (UME) 6*2048kB (UM) 85*4096kB (M) = 465556kB
[  166.636554][ T8999] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  166.641322][ T8999] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  166.644532][ T8999] 41616 total pagecache pages
[  166.646117][ T8999] 0 pages in swap cache
[  166.647490][ T8999] Free swap  = 124996kB
[  166.648850][ T8999] Total swap = 124996kB
[  166.652147][ T8999] 786301 pages RAM
[  166.653442][ T8999] 0 pages HighMem/MovableOnly
[  166.655010][ T8999] 240368 pages reserved
[  166.658841][ T8999] 0 pages cma reserved
[  166.820971][ T5840] hsr_slave_0: left promiscuous mode
[  166.823066][ T5840] hsr_slave_1: left promiscuous mode
[  166.825310][ T5840] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  166.827787][ T5840] batman_adv: batadv0: Removing interface: batadv_slave_0
[  166.834004][ T5840] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  166.836407][ T5840] batman_adv: batadv0: Removing interface: batadv_slave_1
[  166.853274][ T5840] veth1_macvtap: left promiscuous mode
[  166.855258][ T5840] veth0_macvtap: left promiscuous mode
[  166.857181][ T5840] veth1_vlan: left promiscuous mode
[  166.859826][ T5840] veth0_vlan: left promiscuous mode
[  167.193465][ T5840] team0 (unregistering): Port device team_slave_1 removed
[  167.223184][ T5840] team0 (unregistering): Port device team_slave_0 removed
[  167.720280][ T5817] Bluetooth: hci1: command tx timeout
[  167.733033][ T9026] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input17
[  167.753459][ T8821] 8021q: adding VLAN 0 to HW filter on device batadv0
[  167.953823][ T9034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.709'.
[  167.968547][ T8821] veth0_vlan: entered promiscuous mode
[  167.981200][ T8821] veth1_vlan: entered promiscuous mode
[  168.008914][ T8821] veth0_macvtap: entered promiscuous mode
[  168.056745][ T8821] veth1_macvtap: entered promiscuous mode
[  168.103171][ T8821] batman_adv: batadv0: Interface activated: batadv_slave_0
[  168.131030][ T8821] batman_adv: batadv0: Interface activated: batadv_slave_1
[  168.138251][ T8847] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  168.151638][ T8821] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  168.155827][ T8821] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  168.159401][ T8821] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  168.166255][ T8821] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  168.193944][ T8847] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  168.202545][ T8847] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  168.207703][ T9049] netlink: 56 bytes leftover after parsing attributes in process `syz.0.711'.
[  168.214635][ T8847] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  168.241435][ T9049] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input18
[  168.317382][ T3800] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  168.324730][ T3800] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  168.368075][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  168.373106][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  168.402578][ T8847] 8021q: adding VLAN 0 to HW filter on device bond0
[  168.433222][ T8847] 8021q: adding VLAN 0 to HW filter on device team0
[  168.452012][  T559] bridge0: port 1(bridge_slave_0) entered blocking state
[  168.454355][  T559] bridge0: port 1(bridge_slave_0) entered forwarding state
[  168.469963][ T3800] bridge0: port 2(bridge_slave_1) entered blocking state
[  168.472335][ T3800] bridge0: port 2(bridge_slave_1) entered forwarding state
[  168.666936][ T9078] netlink: 'syz.0.715': attribute type 1 has an invalid length.
[  168.669592][ T9078] netlink: 224 bytes leftover after parsing attributes in process `syz.0.715'.
[  168.729988][ T8847] 8021q: adding VLAN 0 to HW filter on device batadv0
[  168.776138][ T8847] veth0_vlan: entered promiscuous mode
[  168.789060][ T8847] veth1_vlan: entered promiscuous mode
[  168.801467][ T9084] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input19
[  168.816247][ T8847] veth0_macvtap: entered promiscuous mode
[  168.824157][ T8847] veth1_macvtap: entered promiscuous mode
[  168.847992][ T8847] batman_adv: batadv0: Interface activated: batadv_slave_0
[  168.854611][ T8847] batman_adv: batadv0: Interface activated: batadv_slave_1
[  168.859757][ T8847] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  168.863820][ T8847] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  168.866550][ T8847] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  168.869396][ T8847] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  168.910012][ T8968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  168.914812][ T8968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  168.936110][ T8968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  168.939441][ T9087] netlink: 4 bytes leftover after parsing attributes in process `syz.0.718'.
[  168.942577][ T8968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  168.978603][ T5649] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.983908][ T9087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.718'.
[  168.986812][ T9087] netlink: 4 bytes leftover after parsing attributes in process `syz.0.718'.
[  168.989689][ T9087] netlink: 'syz.0.718': attribute type 18 has an invalid length.
[  169.053983][   T52] hid-generic 0005:16C0:5505.0007: unknown main item tag 0x0
[  169.056488][   T52] hid-generic 0005:16C0:5505.0007: unknown main item tag 0x0
[  169.058917][   T52] hid-generic 0005:16C0:5505.0007: unknown main item tag 0x0
[  169.063176][   T52] hid-generic 0005:16C0:5505.0007: unknown main item tag 0x0
[  169.071964][   T52] hid-generic 0005:16C0:5505.0007: unknown main item tag 0x0
[  169.074332][   T52] hid-generic 0005:16C0:5505.0007: unknown main item tag 0x0
[  169.079766][   T52] hid-generic 0005:16C0:5505.0007: unknown main item tag 0x3
[  169.089706][   T52] hid-generic 0005:16C0:5505.0007: item fetching failed at offset 17/19
[  169.095290][   T52] hid-generic 0005:16C0:5505.0007: probe with driver hid-generic failed with error -22
[  169.503500][ T5649] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.074402][ T5649] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.486375][ T5649] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.615626][ T5649] bridge_slave_1: left allmulticast mode
[  170.617579][ T5649] bridge_slave_1: left promiscuous mode
[  170.619595][ T5649] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.634924][ T5649] bridge_slave_0: left allmulticast mode
[  170.641787][ T5649] bridge_slave_0: left promiscuous mode
[  170.651396][ T5649] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.959619][ T5203] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  170.963274][ T5203] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  170.967060][ T5203] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  170.971896][ T5203] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  170.974734][ T5203] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  171.042536][ T5649] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  171.046878][ T5649] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  171.051068][ T5649] bond0 (unregistering): Released all slaves
[  171.092155][ T9101] dummy0 speed is unknown, defaulting to 1000
[  171.423891][ T5649] hsr_slave_0: left promiscuous mode
[  171.426178][ T5649] hsr_slave_1: left promiscuous mode
[  171.428298][ T5649] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  171.431919][ T5649] batman_adv: batadv0: Removing interface: batadv_slave_0
[  171.434775][ T5649] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  171.437249][ T5649] batman_adv: batadv0: Removing interface: batadv_slave_1
[  171.447325][ T5649] veth1_macvtap: left promiscuous mode
[  171.449218][ T5649] veth0_macvtap: left promiscuous mode
[  171.451688][ T5649] veth1_vlan: left promiscuous mode
[  171.453948][ T5649] veth0_vlan: left promiscuous mode
[  171.714637][ T5649] team0 (unregistering): Port device team_slave_1 removed
[  171.746997][ T5649] team0 (unregistering): Port device team_slave_0 removed
[  172.058762][ T9101] chnl_net:caif_netlink_parms(): no params data found
[  172.194943][ T9101] bridge0: port 1(bridge_slave_0) entered blocking state
[  172.202360][ T9101] bridge0: port 1(bridge_slave_0) entered disabled state
[  172.204764][ T9101] bridge_slave_0: entered allmulticast mode
[  172.208755][ T9101] bridge_slave_0: entered promiscuous mode
[  172.213304][ T9101] bridge0: port 2(bridge_slave_1) entered blocking state
[  172.215796][ T9101] bridge0: port 2(bridge_slave_1) entered disabled state
[  172.218329][ T9101] bridge_slave_1: entered allmulticast mode
[  172.221190][ T9101] bridge_slave_1: entered promiscuous mode
[  172.284399][ T9101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  172.289060][ T9101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  172.326554][ T9101] team0: Port device team_slave_0 added
[  172.352187][ T9101] team0: Port device team_slave_1 added
[  172.393329][ T9101] batman_adv: batadv0: Adding interface: batadv_slave_0
[  172.400354][ T9101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  172.408612][ T9101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  172.431465][ T9101] batman_adv: batadv0: Adding interface: batadv_slave_1
[  172.432990][ T5817] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  172.433799][ T9101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  172.433839][ T9101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  172.450719][ T5817] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  172.453789][ T5817] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  172.456674][ T5817] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  172.459313][ T5817] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  172.499953][ T5649] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.561443][ T9101] hsr_slave_0: entered promiscuous mode
[  172.563873][ T9101] hsr_slave_1: entered promiscuous mode
[  172.588912][ T5649] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.623647][ T9147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.722'.
[  172.626590][ T9147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.722'.
[  172.631993][ T9140] dummy0 speed is unknown, defaulting to 1000
[  172.666239][ T9147] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input20
[  172.686923][ T5649] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.826915][ T5649] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.000531][ T5817] Bluetooth: hci0: command tx timeout
[  173.225284][ T9140] chnl_net:caif_netlink_parms(): no params data found
[  173.241826][ T5649] bridge_slave_1: left allmulticast mode
[  173.243775][ T5649] bridge_slave_1: left promiscuous mode
[  173.245736][ T5649] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.254756][ T5649] bridge_slave_0: left allmulticast mode
[  173.256588][ T5649] bridge_slave_0: left promiscuous mode
[  173.258516][ T5649] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.488829][ T5649] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  173.494537][ T5649] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  173.498182][ T5649] bond0 (unregistering): Released all slaves
[  173.675537][ T9140] bridge0: port 1(bridge_slave_0) entered blocking state
[  173.678903][ T9177] netlink: 92 bytes leftover after parsing attributes in process `syz.0.727'.
[  173.678949][ T9140] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.687828][ T9140] bridge_slave_0: entered allmulticast mode
[  173.704716][ T9140] bridge_slave_0: entered promiscuous mode
[  173.741520][ T9140] bridge0: port 2(bridge_slave_1) entered blocking state
[  173.745013][ T9140] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.747488][ T9140] bridge_slave_1: entered allmulticast mode
[  173.751620][ T9140] bridge_slave_1: entered promiscuous mode
[  173.830472][   T52] hid-generic 0005:18CF:05DE.0008: item fetching failed at offset 0/1
[  173.835356][ T9140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  173.840073][   T52] hid-generic 0005:18CF:05DE.0008: probe with driver hid-generic failed with error -22
[  173.884891][ T9101] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  173.895948][ T9140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  173.899842][ T9101] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  173.936770][ T9101] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  173.948393][ T9101] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  173.984423][ T9140] team0: Port device team_slave_0 added
[  174.031049][ T9140] team0: Port device team_slave_1 added
[  174.084011][ T9196] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  174.192413][ T9140] batman_adv: batadv0: Adding interface: batadv_slave_0
[  174.194822][ T9140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  174.207971][ T9140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  174.214840][ T9140] batman_adv: batadv0: Adding interface: batadv_slave_1
[  174.220385][ T9140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  174.239599][ T9140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  174.251275][ T5649] hsr_slave_0: left promiscuous mode
[  174.253461][ T5649] hsr_slave_1: left promiscuous mode
[  174.255568][ T5649] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  174.258211][ T5649] batman_adv: batadv0: Removing interface: batadv_slave_0
[  174.262606][ T5649] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  174.264998][ T5649] batman_adv: batadv0: Removing interface: batadv_slave_1
[  174.282923][ T5649] veth1_macvtap: left promiscuous mode
[  174.284842][ T5649] veth0_macvtap: left promiscuous mode
[  174.286672][ T5649] veth1_vlan: left promiscuous mode
[  174.288423][ T5649] veth0_vlan: left promiscuous mode
[  174.521356][ T5817] Bluetooth: hci1: command tx timeout
[  174.560001][   T33] audit: type=1800 audit(1751645094.191:3): pid=9205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.733" name="cgroup.controllers" dev="tmpfs" ino=2556 res=0 errno=0
[  174.661698][ T5649] team0 (unregistering): Port device team_slave_1 removed
[  174.684675][ T5649] team0 (unregistering): Port device team_slave_0 removed
[  175.012453][ T9140] hsr_slave_0: entered promiscuous mode
[  175.015079][ T9140] hsr_slave_1: entered promiscuous mode
[  175.024686][ T9140] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  175.027671][ T9140] Cannot create hsr debugfs directory
[  175.049571][ T9101] 8021q: adding VLAN 0 to HW filter on device bond0
[  175.228868][ T9101] 8021q: adding VLAN 0 to HW filter on device team0
[  175.304525][ T3800] bridge0: port 1(bridge_slave_0) entered blocking state
[  175.307471][ T3800] bridge0: port 1(bridge_slave_0) entered forwarding state
[  175.355896][ T3800] bridge0: port 2(bridge_slave_1) entered blocking state
[  175.358321][ T3800] bridge0: port 2(bridge_slave_1) entered forwarding state
[  175.555550][ T9101] 8021q: adding VLAN 0 to HW filter on device batadv0
[  175.585174][ T9244] netlink: 24 bytes leftover after parsing attributes in process `syz.0.740'.
[  175.605411][ T9101] veth0_vlan: entered promiscuous mode
[  175.611242][ T9101] veth1_vlan: entered promiscuous mode
[  175.629161][ T9101] veth0_macvtap: entered promiscuous mode
[  175.633683][ T9101] veth1_macvtap: entered promiscuous mode
[  175.654051][ T9101] batman_adv: batadv0: Interface activated: batadv_slave_0
[  175.672555][ T9101] batman_adv: batadv0: Interface activated: batadv_slave_1
[  175.692384][ T9101] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  175.695418][ T9101] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  175.698275][ T9101] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  175.714548][ T9101] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  175.829939][ T9140] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  175.840675][ T9140] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  175.845451][ T9140] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  175.849695][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  175.854694][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  175.862612][ T9140] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  175.903217][ T9258] dummy0 speed is unknown, defaulting to 1000
[  175.903460][ T3800] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  175.908477][ T3800] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  176.038834][ T9140] 8021q: adding VLAN 0 to HW filter on device bond0
[  176.107155][ T9140] 8021q: adding VLAN 0 to HW filter on device team0
[  176.126969][ T8968] bridge0: port 1(bridge_slave_0) entered blocking state
[  176.129345][ T8968] bridge0: port 1(bridge_slave_0) entered forwarding state
[  176.134889][ T8968] bridge0: port 2(bridge_slave_1) entered blocking state
[  176.137223][ T8968] bridge0: port 2(bridge_slave_1) entered forwarding state
[  176.149976][ T9140] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  176.155817][ T9140] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  176.356581][ T9140] 8021q: adding VLAN 0 to HW filter on device batadv0
[  176.442377][ T9140] veth0_vlan: entered promiscuous mode
[  176.464150][ T9140] veth1_vlan: entered promiscuous mode
[  176.489742][ T9140] veth0_macvtap: entered promiscuous mode
[  176.501642][ T9140] veth1_macvtap: entered promiscuous mode
[  176.529487][ T9140] batman_adv: batadv0: Interface activated: batadv_slave_0
[  176.552603][ T9140] batman_adv: batadv0: Interface activated: batadv_slave_1
[  176.559642][ T9140] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  176.564928][ T9140] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  176.572688][ T9140] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  176.575569][ T9140] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  176.610375][ T5817] Bluetooth: hci1: command tx timeout
[  176.714675][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  176.717369][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  176.758316][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  176.772649][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  177.018743][ T7027] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.734522][ T7027] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.345159][ T9300] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  178.459040][ T7027] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.484684][ T5203] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  178.489891][ T5203] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  178.494057][ T5203] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  178.498561][ T5203] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  178.503735][ T5203] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  178.534047][ T7027] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.562436][ T9301] dummy0 speed is unknown, defaulting to 1000
[  178.644853][ T7027] bridge_slave_1: left allmulticast mode
[  178.646839][ T7027] bridge_slave_1: left promiscuous mode
[  178.649546][ T7027] bridge0: port 2(bridge_slave_1) entered disabled state
[  178.670981][ T7027] bridge_slave_0: left allmulticast mode
[  178.673431][ T7027] bridge_slave_0: left promiscuous mode
[  178.675901][ T7027] bridge0: port 1(bridge_slave_0) entered disabled state
[  178.965619][ T7027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  178.972005][ T7027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  178.975897][ T7027] bond0 (unregistering): Released all slaves
[  179.232337][ T9301] chnl_net:caif_netlink_parms(): no params data found
[  179.421628][ T7027] hsr_slave_0: left promiscuous mode
[  179.430317][ T7027] hsr_slave_1: left promiscuous mode
[  179.432769][ T7027] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  179.435438][ T7027] batman_adv: batadv0: Removing interface: batadv_slave_0
[  179.439901][ T7027] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  179.442754][ T7027] batman_adv: batadv0: Removing interface: batadv_slave_1
[  179.458318][ T7027] veth1_macvtap: left promiscuous mode
[  179.460539][ T7027] veth0_macvtap: left promiscuous mode
[  179.462464][ T7027] veth1_vlan: left promiscuous mode
[  179.464228][ T7027] veth0_vlan: left promiscuous mode
[  179.759336][ T7027] team0 (unregistering): Port device team_slave_1 removed
[  179.817207][ T7027] team0 (unregistering): Port device team_slave_0 removed
[  179.914636][ T5817] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  179.917898][ T5817] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  179.921884][ T5817] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  179.924922][ T5817] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  179.928460][ T5817] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  180.115441][ T9301] bridge0: port 1(bridge_slave_0) entered blocking state
[  180.117943][ T9301] bridge0: port 1(bridge_slave_0) entered disabled state
[  180.120480][ T9301] bridge_slave_0: entered allmulticast mode
[  180.123234][ T9301] bridge_slave_0: entered promiscuous mode
[  180.148826][ T9301] bridge0: port 2(bridge_slave_1) entered blocking state
[  180.156229][ T9301] bridge0: port 2(bridge_slave_1) entered disabled state
[  180.158623][ T9301] bridge_slave_1: entered allmulticast mode
[  180.161752][ T9301] bridge_slave_1: entered promiscuous mode
[  180.196221][ T9301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  180.204361][ T9301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  180.228439][ T9329] dummy0 speed is unknown, defaulting to 1000
[  180.229540][ T9301] team0: Port device team_slave_0 added
[  180.236218][ T9301] team0: Port device team_slave_1 added
[  180.306842][ T9301] batman_adv: batadv0: Adding interface: batadv_slave_0
[  180.309163][ T9301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  180.327975][ T9301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  180.333420][ T9301] batman_adv: batadv0: Adding interface: batadv_slave_1
[  180.335776][ T9301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  180.345063][ T9301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  180.379126][ T9301] hsr_slave_0: entered promiscuous mode
[  180.383182][ T9301] hsr_slave_1: entered promiscuous mode
[  180.675968][ T7027] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.765975][ T7027] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.779412][ T9329] chnl_net:caif_netlink_parms(): no params data found
[  180.847961][ T7027] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.917647][ T7027] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.974869][ T9329] bridge0: port 1(bridge_slave_0) entered blocking state
[  180.977370][ T9329] bridge0: port 1(bridge_slave_0) entered disabled state
[  180.979887][ T9329] bridge_slave_0: entered allmulticast mode
[  180.983182][ T9329] bridge_slave_0: entered promiscuous mode
[  180.987201][ T9329] bridge0: port 2(bridge_slave_1) entered blocking state
[  180.989615][ T9329] bridge0: port 2(bridge_slave_1) entered disabled state
[  180.998592][ T9329] bridge_slave_1: entered allmulticast mode
[  181.002448][ T9329] bridge_slave_1: entered promiscuous mode
[  181.058814][ T9329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  181.086653][ T9329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  181.159346][ T9329] team0: Port device team_slave_0 added
[  181.185318][ T9329] team0: Port device team_slave_1 added
[  181.228428][ T9329] batman_adv: batadv0: Adding interface: batadv_slave_0
[  181.234414][ T9329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  181.250016][ T9329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  181.324971][ T9329] batman_adv: batadv0: Adding interface: batadv_slave_1
[  181.327302][ T9329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  181.338141][ T9329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  181.376577][ T7027] bridge_slave_1: left allmulticast mode
[  181.378970][ T7027] bridge_slave_1: left promiscuous mode
[  181.381792][ T7027] bridge0: port 2(bridge_slave_1) entered disabled state
[  181.387298][ T7027] bridge_slave_0: left allmulticast mode
[  181.389693][ T7027] bridge_slave_0: left promiscuous mode
[  181.394954][ T7027] bridge0: port 1(bridge_slave_0) entered disabled state
[  181.442619][ T9353] xt_CT: No such helper "syz0"
[  181.708856][ T7027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  181.715792][ T7027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  181.722164][ T7027] bond0 (unregistering): Released all slaves
[  181.766750][ T9301] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  181.814944][ T9301] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  181.866135][ T9357] netlink: 'syz.0.752': attribute type 39 has an invalid length.
[  181.866178][ T9329] hsr_slave_0: entered promiscuous mode
[  181.874615][ T9329] hsr_slave_1: entered promiscuous mode
[  181.877735][ T9329] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  181.881764][ T9329] Cannot create hsr debugfs directory
[  181.885648][ T9301] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  181.896563][ T9301] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  181.966757][ T5817] Bluetooth: hci1: command tx timeout
[  182.180917][ T7027] hsr_slave_0: left promiscuous mode
[  182.183310][ T7027] hsr_slave_1: left promiscuous mode
[  182.185428][ T7027] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  182.188075][ T7027] batman_adv: batadv0: Removing interface: batadv_slave_0
[  182.194205][ T7027] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  182.196993][ T7027] batman_adv: batadv0: Removing interface: batadv_slave_1
[  182.209692][ T7027] veth1_macvtap: left promiscuous mode
[  182.212224][ T7027] veth0_macvtap: left promiscuous mode
[  182.214150][ T7027] veth1_vlan: left promiscuous mode
[  182.215852][ T7027] veth0_vlan: left promiscuous mode
[  182.330597][ T9376] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input21
[  182.639079][ T7027] team0 (unregistering): Port device team_slave_1 removed
[  182.674477][ T7027] team0 (unregistering): Port device team_slave_0 removed
[  183.123215][ T9301] 8021q: adding VLAN 0 to HW filter on device bond0
[  183.147591][ T9301] 8021q: adding VLAN 0 to HW filter on device team0
[  183.189091][  T559] bridge0: port 1(bridge_slave_0) entered blocking state
[  183.192164][  T559] bridge0: port 1(bridge_slave_0) entered forwarding state
[  183.220816][  T559] bridge0: port 2(bridge_slave_1) entered blocking state
[  183.223972][  T559] bridge0: port 2(bridge_slave_1) entered forwarding state
[  183.309474][ T9301] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  183.328167][ T9301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  183.339504][ T9398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.761'.
[  183.379425][ T9398] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input22
[  183.546383][ T9301] 8021q: adding VLAN 0 to HW filter on device batadv0
[  183.602488][ T9329] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  183.611281][ T9416] ieee802154 phy0 wpan0: encryption failed: -90
[  183.617621][ T9301] veth0_vlan: entered promiscuous mode
[  183.624167][ T9329] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  183.639579][ T9329] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  183.645601][ T9329] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  183.654489][ T9301] veth1_vlan: entered promiscuous mode
[  183.748508][ T9301] veth0_macvtap: entered promiscuous mode
[  183.762276][ T9301] veth1_macvtap: entered promiscuous mode
[  183.784416][ T9301] batman_adv: batadv0: Interface activated: batadv_slave_0
[  183.799976][ T9301] batman_adv: batadv0: Interface activated: batadv_slave_1
[  183.814813][ T9329] 8021q: adding VLAN 0 to HW filter on device bond0
[  183.822402][ T9301] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  183.826061][ T9301] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  183.832668][   T10] IPVS: starting estimator thread 0...
[  183.835002][ T9301] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  183.837775][ T9301] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  183.900721][ T9329] 8021q: adding VLAN 0 to HW filter on device team0
[  183.924619][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  183.927199][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  183.933973][ T9435] IPVS: using max 80 ests per chain, 192000 per kthread
[  183.955641][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  183.958266][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  183.986489][ T8976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  183.997520][ T8976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  184.039070][ T9329] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  184.040763][ T5817] Bluetooth: hci1: command tx timeout
[  184.048643][ T8976] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  184.057771][ T8976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  184.205346][ T9329] 8021q: adding VLAN 0 to HW filter on device batadv0
[  184.258731][ T9329] veth0_vlan: entered promiscuous mode
[  184.268321][ T9329] veth1_vlan: entered promiscuous mode
[  184.318757][ T9329] veth0_macvtap: entered promiscuous mode
[  184.327657][ T9329] veth1_macvtap: entered promiscuous mode
[  184.347057][ T9329] batman_adv: batadv0: Interface activated: batadv_slave_0
[  184.357734][ T9329] batman_adv: batadv0: Interface activated: batadv_slave_1
[  184.368437][ T9329] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  184.374580][ T9329] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  184.379403][ T9329] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  184.385527][ T9329] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  184.464026][ T8976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  184.467254][ T8976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  184.495706][ T8976] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  184.498996][ T8976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  184.606856][   T33] audit: type=1800 audit(1751645104.241:4): pid=9446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.766" name="cgroup.controllers" dev="tmpfs" ino=2728 res=0 errno=0
[  184.947626][ T5649] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.485293][ T5649] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.253212][ T5649] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.483464][ T5649] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.582762][ T5203] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  186.586176][ T5203] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  186.588793][ T5203] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  186.592061][ T5203] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  186.594818][ T5203] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  186.624370][ T5649] bridge_slave_1: left allmulticast mode
[  186.626268][ T5649] bridge_slave_1: left promiscuous mode
[  186.633111][ T5649] bridge0: port 2(bridge_slave_1) entered disabled state
[  186.637262][ T5649] bridge_slave_0: left allmulticast mode
[  186.639119][ T5649] bridge_slave_0: left promiscuous mode
[  186.641249][ T5649] bridge0: port 1(bridge_slave_0) entered disabled state
[  186.847228][ T5649] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  186.853407][ T5649] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  186.857308][ T5649] bond0 (unregistering): Released all slaves
[  186.866285][ T9452] dummy0 speed is unknown, defaulting to 1000
[  187.234482][ T5649] hsr_slave_0: left promiscuous mode
[  187.236772][ T5649] hsr_slave_1: left promiscuous mode
[  187.238892][ T5649] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  187.242014][ T5649] batman_adv: batadv0: Removing interface: batadv_slave_0
[  187.245701][ T5649] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  187.248406][ T5649] batman_adv: batadv0: Removing interface: batadv_slave_1
[  187.267597][ T5649] veth1_macvtap: left promiscuous mode
[  187.269483][ T5649] veth0_macvtap: left promiscuous mode
[  187.271593][ T5649] veth1_vlan: left promiscuous mode
[  187.273749][ T5649] veth0_vlan: left promiscuous mode
[  187.546564][ T5649] team0 (unregistering): Port device team_slave_1 removed
[  187.569465][ T5649] team0 (unregistering): Port device team_slave_0 removed
[  187.851438][ T9452] chnl_net:caif_netlink_parms(): no params data found
[  188.001320][ T9452] bridge0: port 1(bridge_slave_0) entered blocking state
[  188.003953][ T9452] bridge0: port 1(bridge_slave_0) entered disabled state
[  188.006522][ T9452] bridge_slave_0: entered allmulticast mode
[  188.029761][ T9452] bridge_slave_0: entered promiscuous mode
[  188.034143][ T9452] bridge0: port 2(bridge_slave_1) entered blocking state
[  188.036765][ T9452] bridge0: port 2(bridge_slave_1) entered disabled state
[  188.043451][ T9452] bridge_slave_1: entered allmulticast mode
[  188.049187][ T9452] bridge_slave_1: entered promiscuous mode
[  188.053741][ T9481] netlink: 'syz.0.769': attribute type 1 has an invalid length.
[  188.113319][ T9452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  188.142463][ T9452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  188.183691][ T5817] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  188.187919][ T5817] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  188.194805][ T5817] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  188.210345][ T5817] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  188.214792][ T5817] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  188.218668][ T9452] team0: Port device team_slave_0 added
[  188.229189][ T9452] team0: Port device team_slave_1 added
[  188.261888][ T9452] batman_adv: batadv0: Adding interface: batadv_slave_0
[  188.264799][ T9452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  188.290813][ T9452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  188.296683][ T9452] batman_adv: batadv0: Adding interface: batadv_slave_1
[  188.308839][ T9452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  188.320009][ T9452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  188.350468][ T9485] dummy0 speed is unknown, defaulting to 1000
[  188.400205][ T9452] hsr_slave_0: entered promiscuous mode
[  188.404978][ T9452] hsr_slave_1: entered promiscuous mode
[  188.487542][ T5649] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.564203][ T5649] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.630324][ T5649] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.681699][ T5203] Bluetooth: hci0: command tx timeout
[  188.685569][ T5649] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.957650][ T9485] chnl_net:caif_netlink_parms(): no params data found
[  188.967708][ T5649] bridge_slave_1: left allmulticast mode
[  188.976990][ T5649] bridge_slave_1: left promiscuous mode
[  188.984425][ T5649] bridge0: port 2(bridge_slave_1) entered disabled state
[  188.989223][ T5649] bridge_slave_0: left allmulticast mode
[  188.992603][ T5649] bridge_slave_0: left promiscuous mode
[  189.000390][ T5649] bridge0: port 1(bridge_slave_0) entered disabled state
[  189.113277][ T9506] netlink: 28 bytes leftover after parsing attributes in process `syz.0.772'.
[  189.296597][ T5649] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  189.302371][ T5649] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  189.306346][ T5649] bond0 (unregistering): Released all slaves
[  189.459294][ T9515] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input23
[  189.585153][ T9485] bridge0: port 1(bridge_slave_0) entered blocking state
[  189.589030][ T9485] bridge0: port 1(bridge_slave_0) entered disabled state
[  189.595555][ T9485] bridge_slave_0: entered allmulticast mode
[  189.599425][ T9485] bridge_slave_0: entered promiscuous mode
[  189.661116][ T9485] bridge0: port 2(bridge_slave_1) entered blocking state
[  189.664114][ T9485] bridge0: port 2(bridge_slave_1) entered disabled state
[  189.667041][ T9485] bridge_slave_1: entered allmulticast mode
[  189.671395][ T9485] bridge_slave_1: entered promiscuous mode
[  189.727291][ T9485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  189.761916][ T9485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  189.849258][ T9485] team0: Port device team_slave_0 added
[  189.864986][ T9485] team0: Port device team_slave_1 added
[  189.867551][ T9452] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  189.886079][ T9452] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  189.933333][ T9485] batman_adv: batadv0: Adding interface: batadv_slave_0
[  189.936249][ T9485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  189.947681][ T9485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  189.956840][ T5649] hsr_slave_0: left promiscuous mode
[  189.959549][ T5649] hsr_slave_1: left promiscuous mode
[  189.963753][ T5649] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  189.966905][ T5649] batman_adv: batadv0: Removing interface: batadv_slave_0
[  189.975161][ T5649] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  189.978435][ T5649] batman_adv: batadv0: Removing interface: batadv_slave_1
[  189.990952][ T5649] veth1_macvtap: left promiscuous mode
[  189.993330][ T5649] veth0_macvtap: left promiscuous mode
[  189.995731][ T5649] veth1_vlan: left promiscuous mode
[  189.997930][ T5649] veth0_vlan: left promiscuous mode
[  190.147818][ T9533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.777'.
[  190.207917][ T9535] netlink: 12 bytes leftover after parsing attributes in process `syz.0.777'.
[  190.294773][ T5203] Bluetooth: hci1: command tx timeout
[  190.342314][ T5649] team0 (unregistering): Port device team_slave_1 removed
[  190.380599][ T5649] team0 (unregistering): Port device team_slave_0 removed
[  190.391659][   T10] hid-generic 0005:16BF:5505.0009: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  190.653464][ T9452] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  190.659721][ T9452] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  190.668861][ T9485] batman_adv: batadv0: Adding interface: batadv_slave_1
[  190.672219][ T9485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  190.690324][ T9485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  190.806020][ T9485] hsr_slave_0: entered promiscuous mode
[  190.808820][ T9485] hsr_slave_1: entered promiscuous mode
[  190.813401][ T9485] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  190.815928][ T9485] Cannot create hsr debugfs directory
[  190.936822][ T9547] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input24
[  191.024895][ T9452] 8021q: adding VLAN 0 to HW filter on device bond0
[  191.057139][ T9452] 8021q: adding VLAN 0 to HW filter on device team0
[  191.068011][ T3800] bridge0: port 1(bridge_slave_0) entered blocking state
[  191.071251][ T3800] bridge0: port 1(bridge_slave_0) entered forwarding state
[  191.083687][ T3800] bridge0: port 2(bridge_slave_1) entered blocking state
[  191.086696][ T3800] bridge0: port 2(bridge_slave_1) entered forwarding state
[  191.384840][ T9485] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  191.395948][ T9485] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  191.413320][ T9452] 8021q: adding VLAN 0 to HW filter on device batadv0
[  191.416346][ T9485] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  191.432158][ T9485] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  191.483258][ T9452] veth0_vlan: entered promiscuous mode
[  191.503532][ T9452] veth1_vlan: entered promiscuous mode
[  191.579573][ T9452] veth0_macvtap: entered promiscuous mode
[  191.594094][ T9452] veth1_macvtap: entered promiscuous mode
[  191.615683][ T9485] 8021q: adding VLAN 0 to HW filter on device bond0
[  191.639701][ T9452] batman_adv: batadv0: Interface activated: batadv_slave_0
[  191.647684][ T9485] 8021q: adding VLAN 0 to HW filter on device team0
[  191.664263][ T9452] batman_adv: batadv0: Interface activated: batadv_slave_1
[  191.668511][  T559] bridge0: port 1(bridge_slave_0) entered blocking state
[  191.671737][  T559] bridge0: port 1(bridge_slave_0) entered forwarding state
[  191.687158][ T9452] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  191.692288][ T9452] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  191.710274][ T9452] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  191.713930][ T9452] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  191.733219][  T559] bridge0: port 2(bridge_slave_1) entered blocking state
[  191.736192][  T559] bridge0: port 2(bridge_slave_1) entered forwarding state
[  191.914651][ T3800] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  191.917805][ T3800] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  191.961578][  T559] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  191.966624][  T559] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  192.003501][ T9601] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input25
[  192.037943][ T9601] netlink: 256 bytes leftover after parsing attributes in process `syz.0.781'.
[  192.078707][ T9485] 8021q: adding VLAN 0 to HW filter on device batadv0
[  192.102313][ T9608] ..@: renamed from bond_slave_0
[  192.127778][ T9485] veth0_vlan: entered promiscuous mode
[  192.140769][ T9485] veth1_vlan: entered promiscuous mode
[  192.165580][ T9485] veth0_macvtap: entered promiscuous mode
[  192.169663][ T9485] veth1_macvtap: entered promiscuous mode
[  192.183410][ T9485] batman_adv: batadv0: Interface activated: batadv_slave_0
[  192.189225][ T9610] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input26
[  192.195031][ T9485] batman_adv: batadv0: Interface activated: batadv_slave_1
[  192.198903][ T9485] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  192.208454][ T9485] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  192.212439][ T9485] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  192.215226][ T9485] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  192.312221][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  192.315446][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  192.336737][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  192.339653][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  192.361048][ T5203] Bluetooth: hci1: command tx timeout
[  192.458477][ T9619] syz.0.785: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  192.466739][ T9619] CPU: 1 UID: 0 PID: 9619 Comm: syz.0.785 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  192.466759][ T9619] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  192.466767][ T9619] Call Trace:
[  192.466774][ T9619]  <TASK>
[  192.466780][ T9619]  dump_stack_lvl+0x189/0x250
[  192.466809][ T9619]  ? __pfx_dump_stack_lvl+0x10/0x10
[  192.466828][ T9619]  ? __pfx__printk+0x10/0x10
[  192.466843][ T9619]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  192.466867][ T9619]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  192.466884][ T9619]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  192.466901][ T9619]  warn_alloc+0x214/0x310
[  192.466917][ T9619]  ? stack_depot_save_flags+0x40/0x900
[  192.466937][ T9619]  ? __pfx_warn_alloc+0x10/0x10
[  192.466952][ T9619]  ? kasan_save_track+0x4f/0x80
[  192.466973][ T9619]  ? xskq_create+0x56/0x170
[  192.466989][ T9619]  ? xsk_init_queue+0xb0/0x110
[  192.467004][ T9619]  ? xsk_setsockopt+0x43f/0x710
[  192.467018][ T9619]  ? do_sock_setsockopt+0x25a/0x3e0
[  192.467033][ T9619]  ? __x64_sys_setsockopt+0x18b/0x220
[  192.467046][ T9619]  ? do_syscall_64+0xfa/0x3b0
[  192.467058][ T9619]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  192.467075][ T9619]  __vmalloc_node_range_noprof+0x125/0x12f0
[  192.467109][ T9619]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  192.467126][ T9619]  ? __kasan_kmalloc+0x93/0xb0
[  192.467140][ T9619]  vmalloc_user_noprof+0xad/0xf0
[  192.467154][ T9619]  ? xskq_create+0xbf/0x170
[  192.467172][ T9619]  xskq_create+0xbf/0x170
[  192.467190][ T9619]  xsk_init_queue+0xb0/0x110
[  192.467209][ T9619]  xsk_setsockopt+0x43f/0x710
[  192.467227][ T9619]  ? __pfx_xsk_setsockopt+0x10/0x10
[  192.467242][ T9619]  ? __lock_acquire+0xab9/0xd20
[  192.467266][ T9619]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  192.467281][ T9619]  ? __pfx_xsk_setsockopt+0x10/0x10
[  192.467298][ T9619]  do_sock_setsockopt+0x25a/0x3e0
[  192.467314][ T9619]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  192.467331][ T9619]  ? __fget_files+0x2a/0x420
[  192.467352][ T9619]  __x64_sys_setsockopt+0x18b/0x220
[  192.467370][ T9619]  do_syscall_64+0xfa/0x3b0
[  192.467380][ T9619]  ? lockdep_hardirqs_on+0x9c/0x150
[  192.467397][ T9619]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  192.467410][ T9619]  ? exc_page_fault+0x9f/0xf0
[  192.467429][ T9619]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  192.467442][ T9619] RIP: 0033:0x7ff9f738e929
[  192.467454][ T9619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  192.467463][ T9619] RSP: 002b:00007ff9f81c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  192.467477][ T9619] RAX: ffffffffffffffda RBX: 00007ff9f75b6080 RCX: 00007ff9f738e929
[  192.467486][ T9619] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000b
[  192.467494][ T9619] RBP: 00007ff9f7410b39 R08: 0000000000000004 R09: 0000000000000000
[  192.467503][ T9619] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  192.467511][ T9619] R13: 0000000000000000 R14: 00007ff9f75b6080 R15: 00007ffc5d764018
[  192.467531][ T9619]  </TASK>
[  192.467536][ T9619] Mem-Info:
[  192.586542][ T9619] active_anon:6300 inactive_anon:0 isolated_anon:0
[  192.586542][ T9619]  active_file:888 inactive_file:38323 isolated_file:0
[  192.586542][ T9619]  unevictable:1768 dirty:85 writeback:0
[  192.586542][ T9619]  slab_reclaimable:9484 slab_unreclaimable:57286
[  192.586542][ T9619]  mapped:19245 shmem:2453 pagetables:885
[  192.586542][ T9619]  sec_pagetables:0 bounce:0
[  192.586542][ T9619]  kernel_misc_reclaimable:0
[  192.586542][ T9619]  free:293942 free_pcp:20932 free_cma:0
[  192.611495][ T9619] Node 0 active_anon:12036kB inactive_anon:0kB active_file:3160kB inactive_file:147164kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:8720kB dirty:280kB writeback:0kB shmem:4940kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6788kB pagetables:1696kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  192.625723][ T9619] Node 1 active_anon:13164kB inactive_anon:0kB active_file:392kB inactive_file:6128kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:68260kB dirty:60kB writeback:0kB shmem:4872kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5068kB pagetables:1844kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  192.639157][ T9619] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  192.649932][ T9619] lowmem_reserve[]: 0 815 815 815 815
[  192.653166][ T9619] Node 0 DMA32 free:337196kB boost:0kB min:33716kB low:42144kB high:50572kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12036kB inactive_anon:0kB active_file:3160kB inactive_file:147164kB unevictable:3536kB writepending:280kB present:1556484kB managed:834740kB mlocked:0kB bounce:0kB free_pcp:33892kB local_pcp:15040kB free_cma:0kB
[  192.666519][ T9619] lowmem_reserve[]: 0 0 0 0 0
[  192.668086][ T9619] Node 1 DMA32 free:458492kB boost:0kB min:19168kB low:23960kB high:28752kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[  192.677618][ T9619] lowmem_reserve[]: 0 0 854 854 854
[  192.679325][ T9619] Node 1 Normal free:364720kB boost:0kB min:36576kB low:45720kB high:54864kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13164kB inactive_anon:0kB active_file:392kB inactive_file:6128kB unevictable:3536kB writepending:60kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:50260kB local_pcp:29732kB free_cma:0kB
[  192.692133][ T9619] lowmem_reserve[]: 0 0 0 0 0
[  192.695694][ T9619] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  192.701049][ T9619] Node 0 DMA32: 1547*4kB (UME) 1516*8kB (UME) 990*16kB (UME) 1000*32kB (UME) 320*64kB (UME) 97*128kB (UME) 62*256kB (UM) 16*512kB (UME) 5*1024kB (UM) 4*2048kB (ME) 49*4096kB (M) = 337132kB
[  192.708634][ T9619] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  192.716219][ T9619] Node 1 Normal: 2*4kB (E) 5*8kB (E) 20*16kB (UE) 70*32kB (ME) 42*64kB (ME) 10*128kB (ME) 1*256kB (U) 5*512kB (UM) 5*1024kB (ME) 7*2048kB (UM) 82*4096kB (M) = 364720kB
[  192.723240][ T9619] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  192.726982][ T9619] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  192.731289][ T9619] 41665 total pagecache pages
[  192.733293][ T9619] 0 pages in swap cache
[  192.735082][ T9619] Free swap  = 124996kB
[  192.736808][ T9619] Total swap = 124996kB
[  192.738560][ T9619] 786301 pages RAM
[  192.740362][ T9619] 0 pages HighMem/MovableOnly
[  192.742352][ T9619] 240368 pages reserved
[  192.744075][ T9619] 0 pages cma reserved
[  193.059708][ T9635] Unsupported ieee802154 address type: 0
[  193.263547][   T14] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.810817][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  193.813367][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  193.983170][ T5817] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  193.986880][ T5817] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  193.991345][ T5817] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  193.995376][ T5817] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  193.999396][ T5817] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  194.032501][ T9637] dummy0 speed is unknown, defaulting to 1000
[  194.231458][ T9637] chnl_net:caif_netlink_parms(): no params data found
[  194.278397][ T9637] bridge0: port 1(bridge_slave_0) entered blocking state
[  194.281192][ T9637] bridge0: port 1(bridge_slave_0) entered disabled state
[  194.283561][ T9637] bridge_slave_0: entered allmulticast mode
[  194.286212][ T9637] bridge_slave_0: entered promiscuous mode
[  194.289842][ T9637] bridge0: port 2(bridge_slave_1) entered blocking state
[  194.292902][ T9637] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.295266][ T9637] bridge_slave_1: entered allmulticast mode
[  194.298823][ T9637] bridge_slave_1: entered promiscuous mode
[  194.320743][ T9637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  194.326591][ T9637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  194.347237][ T9637] team0: Port device team_slave_0 added
[  194.351408][ T9637] team0: Port device team_slave_1 added
[  194.368262][ T9637] batman_adv: batadv0: Adding interface: batadv_slave_0
[  194.371166][ T9637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  194.379647][ T9637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  194.385673][ T9637] batman_adv: batadv0: Adding interface: batadv_slave_1
[  194.388278][ T9637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  194.397053][ T9637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  194.435313][ T9637] hsr_slave_0: entered promiscuous mode
[  194.438226][ T9637] hsr_slave_1: entered promiscuous mode
[  194.445396][ T9637] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  194.448602][ T9637] Cannot create hsr debugfs directory
[  194.703698][   T14] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.989820][   T14] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.049982][   T14] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.158500][   T14] bridge_slave_1: left allmulticast mode
[  195.161146][   T14] bridge_slave_1: left promiscuous mode
[  195.163412][   T14] bridge0: port 2(bridge_slave_1) entered disabled state
[  195.167843][   T14] bridge_slave_0: left allmulticast mode
[  195.169755][   T14] bridge_slave_0: left promiscuous mode
[  195.172709][   T14] bridge0: port 1(bridge_slave_0) entered disabled state
[  195.402266][   T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  195.412078][   T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  195.416883][   T14] bond0 (unregistering): Released all slaves
[  195.643247][ T5203] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  195.648532][ T5203] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  195.656093][ T5203] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  195.659527][ T5203] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  195.667023][ T5203] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  195.736181][ T9659] tipc: Started in network mode
[  195.738412][ T9659] tipc: Node identity e68a490df06f, cluster identity 4711
[  195.742690][ T9659] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  195.768674][ T9659] tipc: Disabling bearer <eth:syzkaller0>
[  195.807478][ T9656] dummy0 speed is unknown, defaulting to 1000
[  195.811681][ T9660] netlink: 'syz.0.792': attribute type 5 has an invalid length.
[  195.969354][ T9637] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  195.975869][ T9637] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  196.028170][   T14] hsr_slave_0: left promiscuous mode
[  196.036127][   T14] hsr_slave_1: left promiscuous mode
[  196.038636][   T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  196.041817][ T5203] Bluetooth: hci0: command tx timeout
[  196.047284][ T9668] Bluetooth: MGMT ver 1.23
[  196.049994][   T14] batman_adv: batadv0: Removing interface: batadv_slave_0
[  196.063320][   T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  196.066440][   T14] batman_adv: batadv0: Removing interface: batadv_slave_1
[  196.097238][   T14] veth1_macvtap: left promiscuous mode
[  196.099597][   T14] veth0_macvtap: left promiscuous mode
[  196.110481][   T14] veth1_vlan: left promiscuous mode
[  196.112736][   T14] veth0_vlan: left promiscuous mode
[  196.422411][   T14] team0 (unregistering): Port device team_slave_1 removed
[  196.445781][   T14] team0 (unregistering): Port device team_slave_0 removed
[  196.686881][ T9637] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  196.691159][ T9637] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  196.907602][ T9656] chnl_net:caif_netlink_parms(): no params data found
[  196.954982][ T9689] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input27
[  196.962797][ T9637] 8021q: adding VLAN 0 to HW filter on device bond0
[  197.045249][ T9637] 8021q: adding VLAN 0 to HW filter on device team0
[  197.083907][ T8976] bridge0: port 1(bridge_slave_0) entered blocking state
[  197.086927][ T8976] bridge0: port 1(bridge_slave_0) entered forwarding state
[  197.095139][ T9656] bridge0: port 1(bridge_slave_0) entered blocking state
[  197.098762][ T9656] bridge0: port 1(bridge_slave_0) entered disabled state
[  197.103005][ T9656] bridge_slave_0: entered allmulticast mode
[  197.106948][ T9656] bridge_slave_0: entered promiscuous mode
[  197.138990][   T14] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.151173][ T8976] bridge0: port 2(bridge_slave_1) entered blocking state
[  197.154216][ T8976] bridge0: port 2(bridge_slave_1) entered forwarding state
[  197.161010][ T9656] bridge0: port 2(bridge_slave_1) entered blocking state
[  197.164023][ T9656] bridge0: port 2(bridge_slave_1) entered disabled state
[  197.167099][ T9656] bridge_slave_1: entered allmulticast mode
[  197.173087][ T9656] bridge_slave_1: entered promiscuous mode
[  197.213027][   T14] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.223940][ T9656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  197.236158][ T9656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  197.274206][   T14] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.298365][ T9656] team0: Port device team_slave_0 added
[  197.303979][ T9656] team0: Port device team_slave_1 added
[  197.322577][   T14] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.362972][ T9656] batman_adv: batadv0: Adding interface: batadv_slave_0
[  197.365483][ T9656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  197.377069][ T9656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  197.385434][ T9656] batman_adv: batadv0: Adding interface: batadv_slave_1
[  197.388021][ T9656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  197.397927][ T9656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  197.465309][ T9656] hsr_slave_0: entered promiscuous mode
[  197.467960][ T9656] hsr_slave_1: entered promiscuous mode
[  197.546263][   T14] bridge_slave_1: left allmulticast mode
[  197.548283][   T14] bridge_slave_1: left promiscuous mode
[  197.561886][   T14] bridge0: port 2(bridge_slave_1) entered disabled state
[  197.565966][   T14] bridge_slave_0: left allmulticast mode
[  197.567925][   T14] bridge_slave_0: left promiscuous mode
[  197.569956][   T14] bridge0: port 1(bridge_slave_0) entered disabled state
[  197.730492][ T5203] Bluetooth: hci1: command tx timeout
[  197.830748][   T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  197.834980][   T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  197.838647][   T14] bond0 (unregistering): Released all slaves
[  197.928895][ T9718] raw_sendmsg: syz.0.798 forgot to set AF_INET. Fix it!
[  197.997981][ T9637] 8021q: adding VLAN 0 to HW filter on device batadv0
[  198.161790][ T9637] veth0_vlan: entered promiscuous mode
[  198.210823][ T9637] veth1_vlan: entered promiscuous mode
[  198.262390][ T9637] veth0_macvtap: entered promiscuous mode
[  198.279558][ T9637] veth1_macvtap: entered promiscuous mode
[  198.337565][ T9637] batman_adv: batadv0: Interface activated: batadv_slave_0
[  198.375933][   T14] hsr_slave_0: left promiscuous mode
[  198.379129][   T14] hsr_slave_1: left promiscuous mode
[  198.381849][   T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  198.384333][   T14] batman_adv: batadv0: Removing interface: batadv_slave_0
[  198.387709][   T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  198.391968][   T14] batman_adv: batadv0: Removing interface: batadv_slave_1
[  198.401098][   T14] veth1_macvtap: left promiscuous mode
[  198.402910][   T14] veth0_macvtap: left promiscuous mode
[  198.404880][   T14] veth1_vlan: left promiscuous mode
[  198.406715][   T14] veth0_vlan: left promiscuous mode
[  198.696597][   T14] team0 (unregistering): Port device team_slave_1 removed
[  198.736091][   T14] team0 (unregistering): Port device team_slave_0 removed
[  198.975369][ T9637] batman_adv: batadv0: Interface activated: batadv_slave_1
[  198.999731][ T9637] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  199.003933][ T9637] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  199.006894][ T9637] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  199.021891][ T9637] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  199.110069][ T9656] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  199.123804][ T9656] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  199.128806][ T9656] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  199.134766][ T9656] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  199.213130][ T8976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  199.216277][ T8976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  199.246708][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  199.249433][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  199.319755][ T9656] 8021q: adding VLAN 0 to HW filter on device bond0
[  199.333681][ T9656] 8021q: adding VLAN 0 to HW filter on device team0
[  199.374345][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[  199.377162][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[  199.387364][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[  199.390618][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[  199.563817][ T9656] 8021q: adding VLAN 0 to HW filter on device batadv0
[  199.589114][ T9656] veth0_vlan: entered promiscuous mode
[  199.596149][ T9656] veth1_vlan: entered promiscuous mode
[  199.616997][ T9656] veth0_macvtap: entered promiscuous mode
[  199.621885][ T9656] veth1_macvtap: entered promiscuous mode
[  199.631540][ T9656] batman_adv: batadv0: Interface activated: batadv_slave_0
[  199.638422][ T9656] batman_adv: batadv0: Interface activated: batadv_slave_1
[  199.644149][ T9656] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  199.647282][ T9656] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  199.650844][ T9656] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  199.653701][ T9656] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  199.699955][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  199.706450][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  199.723825][ T8968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  199.726847][ T8968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  200.038151][ T9763] syzkaller0: entered promiscuous mode
[  200.041276][ T9763] syzkaller0: entered allmulticast mode
[  200.049051][ T9763] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  200.057727][ T9762] tipc: Resetting bearer <eth:syzkaller0>
[  200.068623][ T9762] tipc: Disabling bearer <eth:syzkaller0>
[  200.264155][ T9775] netlink: 44 bytes leftover after parsing attributes in process `syz.0.807'.
[  200.267620][ T9775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.807'.
[  200.272467][ T9775] netlink: 16 bytes leftover after parsing attributes in process `syz.0.807'.
[  200.418837][ T5841] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.443289][ T9784] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input28
[  200.974438][ T5841] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.045206][ T5841] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.083476][ T5841] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.181647][ T5841] bridge_slave_1: left allmulticast mode
[  201.184101][ T5841] bridge_slave_1: left promiscuous mode
[  201.186627][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state
[  201.193832][ T5841] bridge_slave_0: left allmulticast mode
[  201.196248][ T5841] bridge_slave_0: left promiscuous mode
[  201.198705][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state
[  201.429223][ T9794] netlink: 124 bytes leftover after parsing attributes in process `syz.0.810'.
[  201.509236][ T5841] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  201.513811][ T5841] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  201.517836][ T5841] bond0 (unregistering): Released all slaves
[  201.651793][ T5817] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  201.657109][ T5817] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  201.661732][ T5817] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  201.665144][ T5817] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  201.668742][ T5817] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  201.703821][ T9800] dummy0 speed is unknown, defaulting to 1000
[  202.074614][ T5841] hsr_slave_0: left promiscuous mode
[  202.076851][ T5841] hsr_slave_1: left promiscuous mode
[  202.078887][ T5841] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  202.081680][ T5841] batman_adv: batadv0: Removing interface: batadv_slave_0
[  202.084514][ T5841] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  202.087351][ T5841] batman_adv: batadv0: Removing interface: batadv_slave_1
[  202.101920][ T5841] veth1_macvtap: left promiscuous mode
[  202.104108][ T5841] veth0_macvtap: left promiscuous mode
[  202.106423][ T5841] veth1_vlan: left promiscuous mode
[  202.108574][ T5841] veth0_vlan: left promiscuous mode
[  202.399349][ T5841] team0 (unregistering): Port device team_slave_1 removed
[  202.424136][ T5841] team0 (unregistering): Port device team_slave_0 removed
[  202.734646][ T9800] chnl_net:caif_netlink_parms(): no params data found
[  202.785220][ T9800] bridge0: port 1(bridge_slave_0) entered blocking state
[  202.788054][ T9800] bridge0: port 1(bridge_slave_0) entered disabled state
[  202.793131][ T9800] bridge_slave_0: entered allmulticast mode
[  202.795782][ T9800] bridge_slave_0: entered promiscuous mode
[  202.799764][ T9800] bridge0: port 2(bridge_slave_1) entered blocking state
[  202.802948][ T9800] bridge0: port 2(bridge_slave_1) entered disabled state
[  202.805837][ T9800] bridge_slave_1: entered allmulticast mode
[  202.809632][ T9800] bridge_slave_1: entered promiscuous mode
[  202.848630][ T9800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  202.859648][ T9800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  202.886071][ T9800] team0: Port device team_slave_0 added
[  202.889550][ T9800] team0: Port device team_slave_1 added
[  202.928083][ T9800] batman_adv: batadv0: Adding interface: batadv_slave_0
[  202.931895][ T9800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  202.940923][ T9800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  202.945351][ T9800] batman_adv: batadv0: Adding interface: batadv_slave_1
[  202.947879][ T9800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  202.959339][ T9800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  202.990572][ T5841] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.010845][ T9800] hsr_slave_0: entered promiscuous mode
[  203.013464][ T9800] hsr_slave_1: entered promiscuous mode
[  203.015544][ T9800] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  203.017884][ T9800] Cannot create hsr debugfs directory
[  203.051738][ T5841] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.109607][ T5841] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.185354][ T5841] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.381059][ T5817] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  203.384546][ T5817] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  203.387530][ T5817] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  203.396369][ T5817] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  203.399673][ T5817] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  203.464327][ T5841] bridge_slave_1: left allmulticast mode
[  203.466876][ T5841] bridge_slave_1: left promiscuous mode
[  203.468771][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state
[  203.482837][ T5841] bridge_slave_0: left allmulticast mode
[  203.484886][ T5841] bridge_slave_0: left promiscuous mode
[  203.486995][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state
[  203.534987][ T9847] x_tables: duplicate entry at hook 1
[  203.714496][ T5841] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  203.719740][ T5841] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  203.723445][ T5817] Bluetooth: hci0: command tx timeout
[  203.728579][ T5841] bond0 (unregistering): Released all slaves
[  203.892496][ T9852] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input29
[  203.943735][ T9837] dummy0 speed is unknown, defaulting to 1000
[  204.090579][ T9800] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  204.123375][ T9800] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  204.164331][ T9800] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  204.187439][ T9800] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  204.224842][ T9855] dummy0 speed is unknown, defaulting to 1000
[  204.342277][ T9800] 8021q: adding VLAN 0 to HW filter on device bond0
[  204.391787][ T9800] 8021q: adding VLAN 0 to HW filter on device team0
[  204.412286][ T9837] chnl_net:caif_netlink_parms(): no params data found
[  204.487489][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  204.490178][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  204.504291][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  204.506640][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  204.572754][ T9837] bridge0: port 1(bridge_slave_0) entered blocking state
[  204.575842][ T9837] bridge0: port 1(bridge_slave_0) entered disabled state
[  204.587146][ T9837] bridge_slave_0: entered allmulticast mode
[  204.598625][ T9837] bridge_slave_0: entered promiscuous mode
[  204.616084][ T9877] netlink: 20 bytes leftover after parsing attributes in process `syz.0.818'.
[  204.639587][ T9837] bridge0: port 2(bridge_slave_1) entered blocking state
[  204.658045][ T9837] bridge0: port 2(bridge_slave_1) entered disabled state
[  204.672026][ T9837] bridge_slave_1: entered allmulticast mode
[  204.676212][ T9837] bridge_slave_1: entered promiscuous mode
[  204.777598][ T9837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  204.794683][ T5841] hsr_slave_0: left promiscuous mode
[  204.797622][ T5841] hsr_slave_1: left promiscuous mode
[  204.801085][ T5841] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  204.804385][ T5841] batman_adv: batadv0: Removing interface: batadv_slave_0
[  204.808029][ T5841] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  204.811247][ T5841] batman_adv: batadv0: Removing interface: batadv_slave_1
[  204.824155][ T5841] veth1_macvtap: left promiscuous mode
[  204.826483][ T5841] veth0_macvtap: left promiscuous mode
[  204.828749][ T5841] veth1_vlan: left promiscuous mode
[  204.831419][ T5841] veth0_vlan: left promiscuous mode
[  205.104175][ T5841] team0 (unregistering): Port device team_slave_1 removed
[  205.127366][ T5841] team0 (unregistering): Port device team_slave_0 removed
[  205.366139][ T9837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  205.411627][ T9800] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  205.456984][ T9837] team0: Port device team_slave_0 added
[  205.482078][ T5817] Bluetooth: hci1: command tx timeout
[  205.483223][ T9837] team0: Port device team_slave_1 added
[  205.548700][   T10] hid-generic 0005:10CF:05DF.000A: item fetching failed at offset 0/1
[  205.584011][   T10] hid-generic 0005:10CF:05DF.000A: probe with driver hid-generic failed with error -22
[  205.605007][ T9837] batman_adv: batadv0: Adding interface: batadv_slave_0
[  205.607325][ T9837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  205.630346][ T9837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  205.639199][ T9837] batman_adv: batadv0: Adding interface: batadv_slave_1
[  205.650156][ T9837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  205.658269][ T9837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  205.749674][ T9800] 8021q: adding VLAN 0 to HW filter on device batadv0
[  205.759173][ T9837] hsr_slave_0: entered promiscuous mode
[  205.763836][ T9837] hsr_slave_1: entered promiscuous mode
[  205.811385][ T5203] Bluetooth: hci0: command tx timeout
[  205.842297][ T9913] netlink: 76 bytes leftover after parsing attributes in process `syz.0.822'.
[  205.935469][ T9800] veth0_vlan: entered promiscuous mode
[  206.073565][ T9800] veth1_vlan: entered promiscuous mode
[  206.151861][ T9800] veth0_macvtap: entered promiscuous mode
[  206.175776][ T9800] veth1_macvtap: entered promiscuous mode
[  206.242779][ T9800] batman_adv: batadv0: Interface activated: batadv_slave_0
[  206.254352][ T9800] batman_adv: batadv0: Interface activated: batadv_slave_1
[  206.260014][ T9800] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  206.266977][ T9800] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  206.274214][ T9800] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  206.277846][ T9800] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  206.283386][   T10] hid-generic 0005:16C0:5505.000B: unknown main item tag 0x0
[  206.294519][   T10] hid-generic 0005:16C0:5505.000B: unknown main item tag 0x0
[  206.297643][   T10] hid-generic 0005:16C0:5505.000B: unknown main item tag 0x0
[  206.303393][   T10] hid-generic 0005:16C0:5505.000B: unknown main item tag 0x0
[  206.313036][   T10] hid-generic 0005:16C0:5505.000B: unknown main item tag 0x0
[  206.316247][   T10] hid-generic 0005:16C0:5505.000B: unknown main item tag 0x0
[  206.319601][   T10] hid-generic 0005:16C0:5505.000B: unknown main item tag 0x3
[  206.331612][   T10] hid-generic 0005:16C0:5505.000B: unknown main item tag 0x0
[  206.334887][   T10] hid-generic 0005:16C0:5505.000B: unknown main item tag 0x0
[  206.338099][   T10] hid-generic 0005:16C0:5505.000B: unknown main item tag 0x0
[  206.343647][   T10] hid-generic 0005:16C0:5505.000B: unknown main item tag 0x0
[  206.346764][   T10] hid-generic 0005:16C0:5505.000B: unknown main item tag 0x0
[  206.349891][   T10] hid-generic 0005:16C0:5505.000B: unknown main item tag 0x0
[  206.352994][   T10] hid-generic 0005:16C0:5505.000B: unknown main item tag 0x0
[  206.355411][   T10] hid-generic 0005:16C0:5505.000B: unknown main item tag 0x0
[  206.358265][   T10] hid-generic 0005:16C0:5505.000B: unknown main item tag 0x0
[  206.363886][   T10] hid-generic 0005:16C0:5505.000B: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa
[  206.476780][ T8976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  206.479668][ T8976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  206.504861][ T9940] netlink: 56 bytes leftover after parsing attributes in process `syz.0.829'.
[  206.506004][ T8976] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  206.517247][ T8976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  206.518068][ T9940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.829'.
[  206.613014][ T9837] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  206.617783][ T9837] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  206.625020][ T9837] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  206.629005][ T9837] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  206.672559][ T9837] 8021q: adding VLAN 0 to HW filter on device bond0
[  206.682762][ T9837] 8021q: adding VLAN 0 to HW filter on device team0
[  206.694114][ T8976] bridge0: port 1(bridge_slave_0) entered blocking state
[  206.696522][ T8976] bridge0: port 1(bridge_slave_0) entered forwarding state
[  206.721676][ T8976] bridge0: port 2(bridge_slave_1) entered blocking state
[  206.724057][ T8976] bridge0: port 2(bridge_slave_1) entered forwarding state
[  206.744700][ T9837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  206.873166][ T9837] 8021q: adding VLAN 0 to HW filter on device batadv0
[  206.927202][ T9837] veth0_vlan: entered promiscuous mode
[  206.932827][ T9837] veth1_vlan: entered promiscuous mode
[  206.955422][ T9837] veth0_macvtap: entered promiscuous mode
[  206.962494][ T9837] veth1_macvtap: entered promiscuous mode
[  206.981243][ T9837] batman_adv: batadv0: Interface activated: batadv_slave_0
[  206.989269][ T9837] batman_adv: batadv0: Interface activated: batadv_slave_1
[  206.999630][ T9837] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  207.003238][ T9837] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  207.006570][ T9837] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  207.009742][ T9837] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  207.064169][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  207.067022][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  207.087969][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  207.091348][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  207.385216][   T14] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.560575][ T5203] Bluetooth: hci1: command tx timeout
[  207.725605][   T14] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.921172][   T14] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.182651][   T14] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.416665][   T14] bridge_slave_1: left allmulticast mode
[  208.419526][   T14] bridge_slave_1: left promiscuous mode
[  208.423118][   T14] bridge0: port 2(bridge_slave_1) entered disabled state
[  208.429033][   T14] bridge_slave_0: left allmulticast mode
[  208.433967][   T14] bridge_slave_0: left promiscuous mode
[  208.436299][   T14] bridge0: port 1(bridge_slave_0) entered disabled state
[  208.671304][   T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  208.675581][   T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  208.682262][   T14] bond0 (unregistering): Released all slaves
[  209.008698][   T14] hsr_slave_0: left promiscuous mode
[  209.013837][   T14] hsr_slave_1: left promiscuous mode
[  209.015913][   T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  209.018646][   T14] batman_adv: batadv0: Removing interface: batadv_slave_0
[  209.024186][   T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  209.026731][   T14] batman_adv: batadv0: Removing interface: batadv_slave_1
[  209.035718][   T14] veth1_macvtap: left promiscuous mode
[  209.037769][   T14] veth0_macvtap: left promiscuous mode
[  209.039661][   T14] veth1_vlan: left promiscuous mode
[  209.044321][   T14] veth0_vlan: left promiscuous mode
[  209.307484][   T14] team0 (unregistering): Port device team_slave_1 removed
[  209.343200][   T14] team0 (unregistering): Port device team_slave_0 removed
[  209.727815][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  209.731464][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  209.734277][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  209.738450][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  209.752419][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  209.779997][T10016] netlink: 27 bytes leftover after parsing attributes in process `syz.0.838'.
[  209.811785][T10012] dummy0 speed is unknown, defaulting to 1000
[  210.088313][T10012] chnl_net:caif_netlink_parms(): no params data found
[  210.134495][T10012] bridge0: port 1(bridge_slave_0) entered blocking state
[  210.136796][T10012] bridge0: port 1(bridge_slave_0) entered disabled state
[  210.139058][T10012] bridge_slave_0: entered allmulticast mode
[  210.143464][T10012] bridge_slave_0: entered promiscuous mode
[  210.147877][T10012] bridge0: port 2(bridge_slave_1) entered blocking state
[  210.150682][T10012] bridge0: port 2(bridge_slave_1) entered disabled state
[  210.153220][T10012] bridge_slave_1: entered allmulticast mode
[  210.155907][T10012] bridge_slave_1: entered promiscuous mode
[  210.177038][T10012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  210.182236][T10012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  210.206000][T10012] team0: Port device team_slave_0 added
[  210.209430][T10012] team0: Port device team_slave_1 added
[  210.227805][T10012] batman_adv: batadv0: Adding interface: batadv_slave_0
[  210.230020][T10012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  210.239232][T10012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  210.243806][T10012] batman_adv: batadv0: Adding interface: batadv_slave_1
[  210.246067][T10012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  210.255834][T10012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  210.283007][T10012] hsr_slave_0: entered promiscuous mode
[  210.285553][T10012] hsr_slave_1: entered promiscuous mode
[  210.287703][T10012] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  210.295198][T10012] Cannot create hsr debugfs directory
[  210.707263][T10012] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  210.712077][T10012] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  210.716134][T10012] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  210.728256][T10012] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  210.761892][T10012] bridge0: port 2(bridge_slave_1) entered blocking state
[  210.764288][T10012] bridge0: port 2(bridge_slave_1) entered forwarding state
[  210.766653][T10012] bridge0: port 1(bridge_slave_0) entered blocking state
[  210.768874][T10012] bridge0: port 1(bridge_slave_0) entered forwarding state
[  210.773117][   T26] bridge0: port 1(bridge_slave_0) entered disabled state
[  210.780936][   T26] bridge0: port 2(bridge_slave_1) entered disabled state
[  210.822521][T10012] 8021q: adding VLAN 0 to HW filter on device bond0
[  210.841261][T10012] 8021q: adding VLAN 0 to HW filter on device team0
[  210.852438][ T8976] bridge0: port 1(bridge_slave_0) entered blocking state
[  210.854738][ T8976] bridge0: port 1(bridge_slave_0) entered forwarding state
[  210.864861][T10070] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input30
[  210.883265][ T8976] bridge0: port 2(bridge_slave_1) entered blocking state
[  210.886021][ T8976] bridge0: port 2(bridge_slave_1) entered forwarding state
[  210.935542][T10012] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  210.938789][T10012] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  210.957761][T10076] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  211.055867][T10012] 8021q: adding VLAN 0 to HW filter on device batadv0
[  211.083620][T10012] veth0_vlan: entered promiscuous mode
[  211.088764][T10012] veth1_vlan: entered promiscuous mode
[  211.108103][T10012] veth0_macvtap: entered promiscuous mode
[  211.116062][T10012] veth1_macvtap: entered promiscuous mode
[  211.125998][T10012] batman_adv: batadv0: Interface activated: batadv_slave_0
[  211.135655][T10012] batman_adv: batadv0: Interface activated: batadv_slave_1
[  211.140996][T10012] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  211.143940][T10012] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  211.146871][T10012] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  211.149692][T10012] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  211.205226][ T8968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  211.213942][ T8968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  211.229326][ T8976] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  211.233963][ T8976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  211.810550][ T5203] Bluetooth: hci0: command tx timeout
[  213.023836][T10124] dummy0 speed is unknown, defaulting to 1000
[  213.210681][T10124] netlink: 20 bytes leftover after parsing attributes in process `syz.0.850'.
[  213.289908][T10129] netlink: 'syz.0.851': attribute type 1 has an invalid length.
[  213.293333][T10129] netlink: 4 bytes leftover after parsing attributes in process `syz.0.851'.
[  213.326980][T10131] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input31
[  213.434960][T10134] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input32
[  213.646018][T10144] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input33
[  213.759547][T10153] netdevsim netdevsim0: Direct firmware load for .
[  213.759547][T10153]  failed with error -2
[  213.766109][T10153] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  213.766109][T10153] 
[  214.637466][T10157] netlink: 'syz.0.860': attribute type 11 has an invalid length.
[  215.136852][T10183] netlink: 'syz.0.870': attribute type 2 has an invalid length.
[  215.139689][T10183] netlink: 119 bytes leftover after parsing attributes in process `syz.0.870'.
[  215.146323][T10183] netlink: 224 bytes leftover after parsing attributes in process `syz.0.870'.
[  215.224128][T10187] netlink: 80 bytes leftover after parsing attributes in process `syz.0.872'.
[  215.235381][T10187] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input34
[  216.749100][T10219] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615)
[  216.753995][T10219] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[  216.804599][T10219] netlink: 4 bytes leftover after parsing attributes in process `syz.0.883'.
[  216.809527][T10219] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input35
[  216.979658][T10233] netlink: 12 bytes leftover after parsing attributes in process `syz.0.886'.
[  216.989085][T10233] sch_tbf: burst 5 is lower than device bridge2 mtu (1514) !
[  217.147181][T10237] syz.0.888: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  217.152420][T10237] CPU: 1 UID: 0 PID: 10237 Comm: syz.0.888 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  217.152433][T10237] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  217.152438][T10237] Call Trace:
[  217.152442][T10237]  <TASK>
[  217.152446][T10237]  dump_stack_lvl+0x189/0x250
[  217.152463][T10237]  ? __pfx_dump_stack_lvl+0x10/0x10
[  217.152491][T10237]  ? __pfx__printk+0x10/0x10
[  217.152499][T10237]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  217.152509][T10237]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  217.152518][T10237]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  217.152527][T10237]  warn_alloc+0x214/0x310
[  217.152536][T10237]  ? stack_depot_save_flags+0x40/0x900
[  217.152547][T10237]  ? __pfx_warn_alloc+0x10/0x10
[  217.152555][T10237]  ? kasan_save_track+0x4f/0x80
[  217.152566][T10237]  ? xskq_create+0x56/0x170
[  217.152577][T10237]  ? xsk_init_queue+0xb0/0x110
[  217.152591][T10237]  ? xsk_setsockopt+0x43f/0x710
[  217.152599][T10237]  ? do_sock_setsockopt+0x25a/0x3e0
[  217.152608][T10237]  ? __x64_sys_setsockopt+0x18b/0x220
[  217.152615][T10237]  ? do_syscall_64+0xfa/0x3b0
[  217.152622][T10237]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  217.152633][T10237]  __vmalloc_node_range_noprof+0x125/0x12f0
[  217.152653][T10237]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  217.152663][T10237]  ? __kasan_kmalloc+0x93/0xb0
[  217.152673][T10237]  vmalloc_user_noprof+0xad/0xf0
[  217.152681][T10237]  ? xskq_create+0xbf/0x170
[  217.152692][T10237]  xskq_create+0xbf/0x170
[  217.152704][T10237]  xsk_init_queue+0xb0/0x110
[  217.152715][T10237]  xsk_setsockopt+0x43f/0x710
[  217.152725][T10237]  ? __pfx_xsk_setsockopt+0x10/0x10
[  217.152733][T10237]  ? __lock_acquire+0xab9/0xd20
[  217.152747][T10237]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  217.152756][T10237]  ? __pfx_xsk_setsockopt+0x10/0x10
[  217.152766][T10237]  do_sock_setsockopt+0x25a/0x3e0
[  217.152775][T10237]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  217.152785][T10237]  ? __fget_files+0x2a/0x420
[  217.152796][T10237]  __x64_sys_setsockopt+0x18b/0x220
[  217.152807][T10237]  do_syscall_64+0xfa/0x3b0
[  217.152812][T10237]  ? lockdep_hardirqs_on+0x9c/0x150
[  217.152822][T10237]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  217.152829][T10237]  ? exc_page_fault+0x9f/0xf0
[  217.152839][T10237]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  217.152846][T10237] RIP: 0033:0x7ff9f738e929
[  217.152854][T10237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  217.152860][T10237] RSP: 002b:00007ff9f81ea038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  217.152869][T10237] RAX: ffffffffffffffda RBX: 00007ff9f75b5fa0 RCX: 00007ff9f738e929
[  217.152874][T10237] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008
[  217.152879][T10237] RBP: 00007ff9f7410b39 R08: 0000000000000004 R09: 0000000000000000
[  217.152883][T10237] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  217.152888][T10237] R13: 0000000000000000 R14: 00007ff9f75b5fa0 R15: 00007ffc5d764018
[  217.152899][T10237]  </TASK>
[  217.152902][T10237] Mem-Info:
[  217.257448][T10237] active_anon:6341 inactive_anon:0 isolated_anon:0
[  217.257448][T10237]  active_file:905 inactive_file:38344 isolated_file:0
[  217.257448][T10237]  unevictable:1768 dirty:94 writeback:0
[  217.257448][T10237]  slab_reclaimable:9487 slab_unreclaimable:57722
[  217.257448][T10237]  mapped:18306 shmem:2424 pagetables:888
[  217.257448][T10237]  sec_pagetables:0 bounce:0
[  217.257448][T10237]  kernel_misc_reclaimable:0
[  217.257448][T10237]  free:293860 free_pcp:22302 free_cma:0
[  217.272251][T10237] Node 0 active_anon:12052kB inactive_anon:0kB active_file:3160kB inactive_file:147184kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:8920kB dirty:312kB writeback:0kB shmem:4868kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6788kB pagetables:1660kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  217.282768][T10237] Node 1 active_anon:13312kB inactive_anon:0kB active_file:460kB inactive_file:6192kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:64304kB dirty:64kB writeback:0kB shmem:4828kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5036kB pagetables:1892kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  217.293846][T10237] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  217.304627][T10237] lowmem_reserve[]: 0 815 815 815 815
[  217.306635][T10237] Node 0 DMA32 free:331124kB boost:0kB min:33716kB low:42144kB high:50572kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12052kB inactive_anon:0kB active_file:3160kB inactive_file:147184kB unevictable:3536kB writepending:312kB present:1556484kB managed:834740kB mlocked:0kB bounce:0kB free_pcp:42040kB local_pcp:17652kB free_cma:0kB
[  217.318022][T10237] lowmem_reserve[]: 0 0 0 0 0
[  217.319564][T10237] Node 1 DMA32 free:458492kB boost:0kB min:19168kB low:23960kB high:28752kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[  217.330007][T10237] lowmem_reserve[]: 0 0 854 854 854
[  217.333764][T10237] Node 1 Normal free:370464kB boost:0kB min:36576kB low:45720kB high:54864kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13312kB inactive_anon:0kB active_file:460kB inactive_file:6192kB unevictable:3536kB writepending:64kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:47052kB local_pcp:27476kB free_cma:0kB
[  217.344888][T10237] lowmem_reserve[]: 0 0 0 0 0
[  217.346714][T10237] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  217.353130][T10237] Node 0 DMA32: 2325*4kB (UME) 1468*8kB (UME) 586*16kB (UME) 431*32kB (UME) 404*64kB (UME) 159*128kB (UME) 72*256kB (UME) 20*512kB (UM) 5*1024kB (UM) 3*2048kB (ME) 49*4096kB (UM) = 331060kB
[  217.361428][T10237] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  217.367257][T10237] Node 1 Normal: 322*4kB (UME) 575*8kB (UME) 354*16kB (UME) 50*32kB (UM) 50*64kB (UME) 23*128kB (UM) 6*256kB (UME) 7*512kB (UME) 4*1024kB (M) 5*2048kB (ME) 81*4096kB (M) = 370528kB
[  217.374613][T10237] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  217.377492][T10237] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  217.381236][T10237] 41673 total pagecache pages
[  217.382862][T10237] 0 pages in swap cache
[  217.384186][T10237] Free swap  = 124996kB
[  217.385500][T10237] Total swap = 124996kB
[  217.386800][T10237] 786301 pages RAM
[  217.388021][T10237] 0 pages HighMem/MovableOnly
[  217.389528][T10237] 240368 pages reserved
[  217.392266][T10237] 0 pages cma reserved
[  217.469302][T10240] dummy0 speed is unknown, defaulting to 1000
[  217.603149][T10241] netlink: 20 bytes leftover after parsing attributes in process `syz.0.889'.
[  218.677412][T10253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.893'.
[  218.694994][T10253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.893'.
[  218.697879][T10253] netlink: 4 bytes leftover after parsing attributes in process `syz.0.893'.
[  218.701739][T10253] netlink: 14 bytes leftover after parsing attributes in process `syz.0.893'.
[  219.844840][T10275] netlink: 'syz.0.899': attribute type 8 has an invalid length.
[  220.055827][ T5203] Bluetooth: hci2: link tx timeout
[  220.057906][ T5203] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  220.064138][ T5813] Bluetooth: hci2: link tx timeout
[  220.066306][ T5813] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  220.891180][T10288] dummy0 speed is unknown, defaulting to 1000
[  221.026921][T10289] netlink: 20 bytes leftover after parsing attributes in process `syz.0.904'.
[  221.219420][T10295] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input36
[  221.348291][T10299] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input37
[  221.739782][T10312] netlink: 4 bytes leftover after parsing attributes in process `syz.0.911'.
[  221.743164][T10312] netlink: 4 bytes leftover after parsing attributes in process `syz.0.911'.
[  221.974582][T10320] netlink: 4 bytes leftover after parsing attributes in process `syz.0.914'.
[  222.121023][ T5813] Bluetooth: hci2: command 0x0405 tx timeout
[  223.249296][   T33] audit: type=1800 audit(1751645142.881:5): pid=10339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.921" name="cgroup.controllers" dev="tmpfs" ino=3545 res=0 errno=0
[  223.360024][T10346] xt_bpf: check failed: parse error
[  223.411935][T10346] netlink: 'syz.0.923': attribute type 8 has an invalid length.
[  224.606692][T10372] netlink: 20 bytes leftover after parsing attributes in process `syz.0.932'.
[  230.466845][T10434] dummy0 speed is unknown, defaulting to 1000
[  230.706937][T10440] dummy0 speed is unknown, defaulting to 1000
[  230.922802][T10440] netlink: 20 bytes leftover after parsing attributes in process `syz.0.954'.
[  232.019795][T10455] netlink: 8 bytes leftover after parsing attributes in process `syz.0.959'.
[  232.164888][T10459] netlink: 28 bytes leftover after parsing attributes in process `syz.0.960'.
[  233.018213][T10463] netlink: 'syz.0.962': attribute type 1 has an invalid length.
[  233.929210][T10467] netlink: 36 bytes leftover after parsing attributes in process `syz.0.964'.
[  245.827180][ T5840] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  245.902314][ T5840] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  245.966052][ T5840] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.022038][ T5840] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.118303][ T5840] bridge_slave_1: left allmulticast mode
[  246.123921][ T5840] bridge_slave_1: left promiscuous mode
[  246.126770][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state
[  246.141919][ T5840] bridge_slave_0: left allmulticast mode
[  246.144235][ T5840] bridge_slave_0: left promiscuous mode
[  246.146587][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state
[  246.434367][ T5840] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  246.439112][ T5840] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  246.446042][ T5840] bond0 (unregistering): Released all slaves
[  246.836066][ T5840] hsr_slave_0: left promiscuous mode
[  246.838825][ T5840] hsr_slave_1: left promiscuous mode
[  246.847103][ T5840] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  246.850333][ T5840] batman_adv: batadv0: Removing interface: batadv_slave_0
[  246.853942][ T5840] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  246.856794][ T5840] batman_adv: batadv0: Removing interface: batadv_slave_1
[  246.868223][ T5840] veth1_macvtap: left promiscuous mode
[  246.870070][ T5840] veth0_macvtap: left promiscuous mode
[  246.871952][ T5840] veth1_vlan: left promiscuous mode
[  246.873768][ T5840] veth0_vlan: left promiscuous mode
[  247.145802][ T5840] team0 (unregistering): Port device team_slave_1 removed
[  247.168465][ T5840] team0 (unregistering): Port device team_slave_0 removed
[  247.844864][ T5203] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  247.848920][ T5203] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  247.859420][ T5203] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  247.864112][ T5203] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  247.867699][ T5203] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  247.905939][T10541] dummy0 speed is unknown, defaulting to 1000
[  248.081939][T10541] chnl_net:caif_netlink_parms(): no params data found
[  248.127788][T10541] bridge0: port 1(bridge_slave_0) entered blocking state
[  248.130360][T10541] bridge0: port 1(bridge_slave_0) entered disabled state
[  248.132721][T10541] bridge_slave_0: entered allmulticast mode
[  248.135509][T10541] bridge_slave_0: entered promiscuous mode
[  248.138798][T10541] bridge0: port 2(bridge_slave_1) entered blocking state
[  248.142213][T10541] bridge0: port 2(bridge_slave_1) entered disabled state
[  248.144723][T10541] bridge_slave_1: entered allmulticast mode
[  248.147417][T10541] bridge_slave_1: entered promiscuous mode
[  248.165419][T10541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  248.171338][T10541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  248.193442][T10541] team0: Port device team_slave_0 added
[  248.196718][T10541] team0: Port device team_slave_1 added
[  248.214496][T10541] batman_adv: batadv0: Adding interface: batadv_slave_0
[  248.216765][T10541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  248.227437][T10541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  248.232273][T10541] batman_adv: batadv0: Adding interface: batadv_slave_1
[  248.234495][T10541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  248.244209][T10541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  248.281912][T10541] hsr_slave_0: entered promiscuous mode
[  248.284897][T10541] hsr_slave_1: entered promiscuous mode
[  248.694785][T10541] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  248.699668][T10541] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  248.704271][T10541] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  248.708292][T10541] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  248.725476][T10541] bridge0: port 2(bridge_slave_1) entered blocking state
[  248.727770][T10541] bridge0: port 2(bridge_slave_1) entered forwarding state
[  248.730245][T10541] bridge0: port 1(bridge_slave_0) entered blocking state
[  248.732570][T10541] bridge0: port 1(bridge_slave_0) entered forwarding state
[  248.762297][T10541] 8021q: adding VLAN 0 to HW filter on device bond0
[  248.765711][   T26] bridge0: port 1(bridge_slave_0) entered disabled state
[  248.768823][   T26] bridge0: port 2(bridge_slave_1) entered disabled state
[  248.794291][T10541] 8021q: adding VLAN 0 to HW filter on device team0
[  248.799401][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  248.802107][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  248.810851][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  248.813327][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  248.829275][T10541] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  248.833815][T10541] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  248.918515][T10541] 8021q: adding VLAN 0 to HW filter on device batadv0
[  248.948187][T10541] veth0_vlan: entered promiscuous mode
[  248.953709][T10541] veth1_vlan: entered promiscuous mode
[  248.969140][T10541] veth0_macvtap: entered promiscuous mode
[  248.973001][T10541] veth1_macvtap: entered promiscuous mode
[  248.982802][T10541] batman_adv: batadv0: Interface activated: batadv_slave_0
[  248.988729][T10541] batman_adv: batadv0: Interface activated: batadv_slave_1
[  248.995607][T10541] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  248.998396][T10541] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  249.002011][T10541] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  249.004808][T10541] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  249.057611][ T3800] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  249.061740][ T3800] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  249.081503][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  249.084029][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  250.998082][ T5840] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  251.401121][ T5862] ------------[ cut here ]------------
[  251.403073][ T5862] workqueue: cannot queue hci_conn_timeout on wq hci0
[  251.405336][ T5862] WARNING: CPU: 0 PID: 5862 at kernel/workqueue.c:2258 __queue_work+0xd62/0xfe0
[  251.408233][ T5862] Modules linked in:
[  251.410212][ T5862] CPU: 0 UID: 0 PID: 5862 Comm: kworker/0:4 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  251.415443][ T5862] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  251.419394][ T5862] Workqueue: events l2cap_chan_timeout
[  251.421211][ T5862] RIP: 0010:__queue_work+0xd62/0xfe0
[  251.423059][ T5862] Code: 42 80 3c 20 00 74 08 4c 89 ef e8 69 0f 99 00 49 8b 75 00 49 81 c7 78 01 00 00 48 c7 c7 40 e1 89 8b 4c 89 fa e8 1f 34 f9 ff 90 <0f> 0b 90 90 e9 f1 f4 ff ff e8 80 8b 35 00 90 0f 0b 90 e9 dd fc ff
[  251.430556][ T5862] RSP: 0018:ffffc90003cbf7a8 EFLAGS: 00010046
[  251.432610][ T5862] RAX: c357c55f8c579f00 RBX: 0000000000000020 RCX: ffff88801ef98000
[  251.435254][ T5862] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  251.437880][ T5862] RBP: 1ffff11020f5ff38 R08: ffff88804b024293 R09: 1ffff11009604852
[  251.440579][ T5862] R10: dffffc0000000000 R11: ffffed1009604853 R12: dffffc0000000000
[  251.443140][ T5862] R13: ffff888037fac960 R14: ffff88801a494008 R15: ffff888107aff978
[  251.445729][ T5862] FS:  0000000000000000(0000) GS:ffff8880b8650000(0000) knlGS:0000000000000000
[  251.449038][ T5862] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  251.451118][ T5862] CR2: 00007fb99a2e8710 CR3: 000000010948e000 CR4: 00000000000006f0
[  251.453645][ T5862] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  251.456257][ T5862] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  251.458725][ T5862] Call Trace:
[  251.459893][ T5862]  <TASK>
[  251.460875][ T5862]  ? __queue_delayed_work+0xe1/0x2d0
[  251.462577][ T5862]  queue_delayed_work_on+0x18b/0x280
[  251.464264][ T5862]  ? __pfx___cancel_work+0x10/0x10
[  251.465966][ T5862]  ? __pfx_queue_delayed_work_on+0x10/0x10
[  251.468075][ T5862]  ? hci_conn_drop+0x14d/0x280
[  251.469771][ T5862]  l2cap_chan_del+0x285/0x5e0
[  251.471358][ T5862]  l2cap_chan_close+0x597/0x980
[  251.472919][ T5862]  ? __pfx_l2cap_chan_close+0x10/0x10
[  251.474602][ T5862]  ? process_scheduled_works+0x9ef/0x17b0
[  251.476512][ T5862]  l2cap_chan_timeout+0x158/0x390
[  251.478183][ T5862]  ? process_scheduled_works+0x9ef/0x17b0
[  251.480081][ T5862]  process_scheduled_works+0xae1/0x17b0
[  251.481963][ T5862]  ? __pfx_process_scheduled_works+0x10/0x10
[  251.483909][ T5862]  worker_thread+0x8a0/0xda0
[  251.485500][ T5862]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  251.487686][ T5862]  ? __kthread_parkme+0x7b/0x200
[  251.489337][ T5862]  kthread+0x711/0x8a0
[  251.490687][ T5862]  ? __pfx_worker_thread+0x10/0x10
[  251.492430][ T5862]  ? __pfx_kthread+0x10/0x10
[  251.493924][ T5862]  ? _raw_spin_unlock_irq+0x23/0x50
[  251.495634][ T5862]  ? lockdep_hardirqs_on+0x9c/0x150
[  251.497489][ T5862]  ? __pfx_kthread+0x10/0x10
[  251.499143][ T5862]  ret_from_fork+0x3fc/0x770
[  251.500685][ T5862]  ? __pfx_ret_from_fork+0x10/0x10
[  251.502373][ T5862]  ? __switch_to_asm+0x39/0x70
[  251.503928][ T5862]  ? __switch_to_asm+0x33/0x70
[  251.505531][ T5862]  ? __pfx_kthread+0x10/0x10
[  251.507144][ T5862]  ret_from_fork_asm+0x1a/0x30
[  251.508772][ T5862]  </TASK>
[  251.509873][ T5862] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  251.512258][ T5862] CPU: 0 UID: 0 PID: 5862 Comm: kworker/0:4 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  251.516354][ T5862] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  251.519738][ T5862] Workqueue: events l2cap_chan_timeout
[  251.521582][ T5862] Call Trace:
[  251.522734][ T5862]  <TASK>
[  251.523784][ T5862]  dump_stack_lvl+0x99/0x250
[  251.525324][ T5862]  ? __asan_memcpy+0x40/0x70
[  251.526923][ T5862]  ? __pfx_dump_stack_lvl+0x10/0x10
[  251.528713][ T5862]  ? __pfx__printk+0x10/0x10
[  251.530274][ T5862]  panic+0x2db/0x790
[  251.531612][ T5862]  ? __pfx_panic+0x10/0x10
[  251.533207][ T5862]  ? show_trace_log_lvl+0x4fb/0x550
[  251.534892][ T5862]  ? ret_from_fork_asm+0x1a/0x30
[  251.536537][ T5862]  __warn+0x31b/0x4b0
[  251.537970][ T5862]  ? __queue_work+0xd62/0xfe0
[  251.539528][ T5862]  ? __queue_work+0xd62/0xfe0
[  251.541100][ T5862]  report_bug+0x2be/0x4f0
[  251.542515][ T5862]  ? __queue_work+0xd62/0xfe0
[  251.544061][ T5862]  ? __queue_work+0xd62/0xfe0
[  251.545617][ T5862]  ? __queue_work+0xd64/0xfe0
[  251.547276][ T5862]  handle_bug+0x84/0x160
[  251.548684][ T5862]  exc_invalid_op+0x1a/0x50
[  251.550199][ T5862]  asm_exc_invalid_op+0x1a/0x20
[  251.551804][ T5862] RIP: 0010:__queue_work+0xd62/0xfe0
[  251.553552][ T5862] Code: 42 80 3c 20 00 74 08 4c 89 ef e8 69 0f 99 00 49 8b 75 00 49 81 c7 78 01 00 00 48 c7 c7 40 e1 89 8b 4c 89 fa e8 1f 34 f9 ff 90 <0f> 0b 90 90 e9 f1 f4 ff ff e8 80 8b 35 00 90 0f 0b 90 e9 dd fc ff
[  251.559827][ T5862] RSP: 0018:ffffc90003cbf7a8 EFLAGS: 00010046
[  251.561801][ T5862] RAX: c357c55f8c579f00 RBX: 0000000000000020 RCX: ffff88801ef98000
[  251.564597][ T5862] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  251.567446][ T5862] RBP: 1ffff11020f5ff38 R08: ffff88804b024293 R09: 1ffff11009604852
[  251.570021][ T5862] R10: dffffc0000000000 R11: ffffed1009604853 R12: dffffc0000000000
[  251.572588][ T5862] R13: ffff888037fac960 R14: ffff88801a494008 R15: ffff888107aff978
[  251.575250][ T5862]  ? __queue_work+0xd61/0xfe0
[  251.576758][ T5862]  ? __queue_delayed_work+0xe1/0x2d0
[  251.578584][ T5862]  queue_delayed_work_on+0x18b/0x280
[  251.580380][ T5862]  ? __pfx___cancel_work+0x10/0x10
[  251.582100][ T5862]  ? __pfx_queue_delayed_work_on+0x10/0x10
[  251.584152][ T5862]  ? hci_conn_drop+0x14d/0x280
[  251.585802][ T5862]  l2cap_chan_del+0x285/0x5e0
[  251.587486][ T5862]  l2cap_chan_close+0x597/0x980
[  251.589182][ T5862]  ? __pfx_l2cap_chan_close+0x10/0x10
[  251.590893][ T5862]  ? process_scheduled_works+0x9ef/0x17b0
[  251.592817][ T5862]  l2cap_chan_timeout+0x158/0x390
[  251.594474][ T5862]  ? process_scheduled_works+0x9ef/0x17b0
[  251.596374][ T5862]  process_scheduled_works+0xae1/0x17b0
[  251.598366][ T5862]  ? __pfx_process_scheduled_works+0x10/0x10
[  251.600332][ T5862]  worker_thread+0x8a0/0xda0
[  251.601871][ T5862]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  251.603955][ T5862]  ? __kthread_parkme+0x7b/0x200
[  251.605677][ T5862]  kthread+0x711/0x8a0
[  251.607232][ T5862]  ? __pfx_worker_thread+0x10/0x10
[  251.609434][ T5862]  ? __pfx_kthread+0x10/0x10
[  251.611472][ T5862]  ? _raw_spin_unlock_irq+0x23/0x50
[  251.613689][ T5862]  ? lockdep_hardirqs_on+0x9c/0x150
[  251.615973][ T5862]  ? __pfx_kthread+0x10/0x10
[  251.618003][ T5862]  ret_from_fork+0x3fc/0x770
[  251.620026][ T5862]  ? __pfx_ret_from_fork+0x10/0x10
[  251.622265][ T5862]  ? __switch_to_asm+0x39/0x70
[  251.624347][ T5862]  ? __switch_to_asm+0x33/0x70
[  251.626349][ T5862]  ? __pfx_kthread+0x10/0x10
[  251.628150][ T5862]  ret_from_fork_asm+0x1a/0x30
[  251.630015][ T5862]  </TASK>
[  251.631666][ T5862] Kernel Offset: disabled
[  251.633153][ T5862] Rebooting in 86400 seconds..

VM DIAGNOSIS:
16:06:11  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000055 RBX=0000000000000055 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90003cbef50
R8 =ffff8880213a0237 R9 =1ffff11004274046 R10=dffffc0000000000 R11=ffffffff85474610
R12=dffffc0000000000 R13=ffffffff99ac48df R14=ffffffff99dc9760 R15=0000000000000000
RIP=ffffffff8547468c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8650000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fb99a2e8710 CR3=000000010948e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0806060167e00208 0006e00300100006
XMM02=d00300100006c003 02100006b0032810 XMM03=0005900300040028 a40300020028a203
XMM04=16020028a0030008 0028980300080028 XMM05=030008000690030f ffffffffffff0406
XMM06=0800288003288004 05800305800406a0 XMM07=90030c820400288c 032e040028880328
XMM08=0100100006800401 0000000806060167 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=ffff88801c691cc0 RCX=0000000080000000 RDX=0000000000000000
RSI=ffffffff8d995bdd RDI=ffffffff8be28d40 RBP=ffffc90000117a08 RSP=ffffc90000117908
R8 =ffffffff8fa10df7 R9 =1ffffffff1f421be R10=dffffc0000000000 R11=fffffbfff1f421bf
R12=ffffffff8b315bea R13=ffff8881192fdab0 R14=dffffc0000000000 R15=1ffff92000022f30
RIP=ffffffff8b66d233 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c50000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055615c92a7e8 CR3=0000000027600000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
