last executing test programs:

32.653285204s ago: executing program 1 (id=807):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="4d7e00000000fbdbdf252a00000008002f0000004000050036fff00000000c000500000000000000000008000200", @ANYRES32=r1, @ANYBLOB="05003700592c0035c9d1ed760100000024a8ba212f2a75be242226f19761115a22c46990c3ef39abb09610740c08d8a2f297064dbbe30b09b6d4ecad2ae04e929e1a6d09faa30ee76a6869942b68a137480519ded69f3fb8eb14dac860ea"], 0x40}, 0x4, 0x700000000000000}, 0x8850)

26.690505618s ago: executing program 1 (id=807):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="4d7e00000000fbdbdf252a00000008002f0000004000050036fff00000000c000500000000000000000008000200", @ANYRES32=r1, @ANYBLOB="05003700592c0035c9d1ed760100000024a8ba212f2a75be242226f19761115a22c46990c3ef39abb09610740c08d8a2f297064dbbe30b09b6d4ecad2ae04e929e1a6d09faa30ee76a6869942b68a137480519ded69f3fb8eb14dac860ea"], 0x40}, 0x4, 0x700000000000000}, 0x8850)

21.195995265s ago: executing program 1 (id=807):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="4d7e00000000fbdbdf252a00000008002f0000004000050036fff00000000c000500000000000000000008000200", @ANYRES32=r1, @ANYBLOB="05003700592c0035c9d1ed760100000024a8ba212f2a75be242226f19761115a22c46990c3ef39abb09610740c08d8a2f297064dbbe30b09b6d4ecad2ae04e929e1a6d09faa30ee76a6869942b68a137480519ded69f3fb8eb14dac860ea"], 0x40}, 0x4, 0x700000000000000}, 0x8850)

15.450484663s ago: executing program 1 (id=807):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="4d7e00000000fbdbdf252a00000008002f0000004000050036fff00000000c000500000000000000000008000200", @ANYRES32=r1, @ANYBLOB="05003700592c0035c9d1ed760100000024a8ba212f2a75be242226f19761115a22c46990c3ef39abb09610740c08d8a2f297064dbbe30b09b6d4ecad2ae04e929e1a6d09faa30ee76a6869942b68a137480519ded69f3fb8eb14dac860ea"], 0x40}, 0x4, 0x700000000000000}, 0x8850)

9.897958163s ago: executing program 1 (id=807):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="4d7e00000000fbdbdf252a00000008002f0000004000050036fff00000000c000500000000000000000008000200", @ANYRES32=r1, @ANYBLOB="05003700592c0035c9d1ed760100000024a8ba212f2a75be242226f19761115a22c46990c3ef39abb09610740c08d8a2f297064dbbe30b09b6d4ecad2ae04e929e1a6d09faa30ee76a6869942b68a137480519ded69f3fb8eb14dac860ea"], 0x40}, 0x4, 0x700000000000000}, 0x8850)

3.740925766s ago: executing program 1 (id=807):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="4d7e00000000fbdbdf252a00000008002f0000004000050036fff00000000c000500000000000000000008000200", @ANYRES32=r1, @ANYBLOB="05003700592c0035c9d1ed760100000024a8ba212f2a75be242226f19761115a22c46990c3ef39abb09610740c08d8a2f297064dbbe30b09b6d4ecad2ae04e929e1a6d09faa30ee76a6869942b68a137480519ded69f3fb8eb14dac860ea"], 0x40}, 0x4, 0x700000000000000}, 0x8850)

1.183180925s ago: executing program 2 (id=1449):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x43, 0x0, "0aaa8ff5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d13e6507e5a774ef95f2fc1b947e03d5c8379123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed3"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6803e10951cd4b347113e55eb289519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0xfffd, 0x4, @loopback, 0xfffffffc}}, 0x0, 0x0, 0xc, 0x0, "a1c1ddc200000000000000c3b03e10950cd4b347113e55eb4285bf274bca67efbff2fdf98328de9434031348589bf28046d14810000000e3ffffff00"}, 0xd8)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r5, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x8000000004)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
writev(r6, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff00fe00000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1)

1.182528897s ago: executing program 2 (id=1451):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x18)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x21}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x4c)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="70000000000901010000000000000000000000003c0002000c00028005000100000000002c000180140003000000000000000000000000000000000014000400ff02000000000000000000000000000108000540000000000c000480080101400000000009000100"], 0x70}}, 0x0)
socket$alg(0x26, 0x5, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}]}}}]}, 0x3c}}, 0x0)
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x4000)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a010400000000000000000200000034000580300001800e000100696d6d656469617465"], 0x88}}, 0x0)
unshare(0x6a040000)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x6c}}, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x4000)
socket$inet_udp(0x2, 0x2, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
recvmsg(r10, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r11, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)

193.038051ms ago: executing program 2 (id=1458):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newsa={0x150, 0x1a, 0x413, 0x70bd29, 0x0, {{@in=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x80, 0x21}, {@in=@multicast1, 0x0, 0x32}, @in6=@loopback={0x100000000000000}, {0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0x80000, 0x81}, {0x0, 0x5, 0x4, 0x4000006}, {0x0, 0xfffffff9, 0x80900}, 0x0, 0x0, 0x2, 0x1, 0x81, 0x68}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "25cac5216d3c8af0aa76902918bf448c5d9f5459"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x20000080)

192.708065ms ago: executing program 0 (id=1459):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x3c}}, 0x40010)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan0\x00', <r3=>0x0}) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r4=>0x0})
bind$can_raw(r1, &(0x7f0000000000)={0x1d, r4}, 0xfffffffffffffdb5) (async)
r5 = socket$inet6(0xa, 0x2, 0x0) (async)
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000280)={'vcan0\x00', <r7=>0x0})
sendmsg$inet6(r5, &(0x7f00000003c0)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=[@pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x1a}, r7}}}], 0x28}, 0x44000881)
r8 = socket$kcm(0x1e, 0x1, 0x0) (async)
r9 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x0) (async)
setsockopt$TIPC_DEST_DROPPABLE(r9, 0x10f, 0x81, &(0x7f00000001c0)=0x101, 0x4)
recvmmsg(r8, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000000c0)=""/226, 0xe2}], 0x1}, 0x519bb39b}], 0x1, 0x2, 0x0) (async)
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@getchain={0x74, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x6}, {0xffff, 0xfff1}, {0x1}}, [{0x8, 0xb, 0xffffffff}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x3e}, {0x8, 0xb, 0x545}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x75}]}, 0x74}, 0x1, 0x0, 0x0, 0x4c000}, 0x0)

192.594734ms ago: executing program 2 (id=1460):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x1], 0x0, [0x5, 0x6, 0x2, 0x0, 0x8, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}]}}]}, 0x94}}, 0x0)

122.303422ms ago: executing program 0 (id=1461):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000100e1ff0000000000000000850000001900000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@bridge_dellink={0x50, 0x11, 0x100, 0x70bd2b, 0x25dfdbfc, {0x7, 0x0, 0x0, 0x0, 0x4000, 0x8}, [@IFLA_MAP={0x24, 0xe, {0x18000, 0x5, 0x6028, 0x1, 0xc, 0xaf}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}]}, 0x50}}, 0x2408c010)

118.802067ms ago: executing program 2 (id=1462):
syz_emit_ethernet(0x4a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd600a843500140600fe8000000000000000004100000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="fdfd77771667eb99"], 0x0)

39.974019ms ago: executing program 0 (id=1463):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0xffffffffffffffa6, 0x0, 0xffffffffffffffff, 0x60}, 0x48) (async)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) (async)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x8000, @mcast2, 0x2}], 0x1c)

34.583508ms ago: executing program 2 (id=1464):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0200000002"], 0x10)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2}, 0x10)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000040000000000eaffffffffffffff0000", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r7}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x32}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x2000)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="02000000000000000000eaffffff000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000000000000400"/28], 0x50)
close(r4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
syz_extract_tcp_res$synack(0x0, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
socket$key(0xf, 0x3, 0x2)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r9 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r9, 0x0, 0x8, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000200), 0x8}, 0x94)

34.432718ms ago: executing program 0 (id=1465):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000007fffffff0000000000cfa57480d257db803eb6233adb93498155131e8cc1a8dab9cc101ceaef4d7b327deb0ea756bda8df3addd41ad56e6d363c3a80dba2f4e3d0a8aaccdced0ba7f07081fceac428fcfe15b65524f49a30e24ff07bc38b112e72edface9aa8c06955c4dc40dc18e025aa04299671237d629677f1ef1e61846100d2e9491abb8c04", @ANYRES32, @ANYBLOB="000096000a000200aaaaaaaaaa0c00000600050001"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)

299.081µs ago: executing program 0 (id=1466):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'wlan0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82000000}})
write(r0, &(0x7f0000000040)="09000000010000", 0x7)

0s ago: executing program 0 (id=1467):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@o_path={&(0x7f0000000340)='./file0\x00', 0x0, 0x4008, r1}, 0x18)
write$cgroup_pid(r1, &(0x7f0000000000), 0x2a979d)
ioctl$SIOCSIFHWADDR(r1, 0x401c5820, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014)
sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000840)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000800)={&(0x7f0000000600)=ANY=[@ANYBLOB="97cc0100", @ANYRES16=r3, @ANYBLOB="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"], 0x1cc}, 0x1, 0x0, 0x0, 0x4}, 0x8000)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r2}, 0x8)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', <r4=>0x0})
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000880)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa8, 0xa8, 0x5, [@const={0x2, 0x0, 0x0, 0xa, 0x4}, @decl_tag={0xb, 0x0, 0x0, 0x11, 0x2, 0x2}, @volatile={0xa, 0x0, 0x0, 0x9, 0x4}, @func_proto={0x0, 0xa, 0x0, 0xd, 0x0, [{0xd, 0x3}, {0xd, 0x1}, {0x3, 0x3}, {0xb, 0x5}, {0x1, 0x4}, {0x9, 0x5}, {0x10, 0x3}, {0x0, 0x4}, {0x2, 0x2}, {0x1, 0x4}]}, @volatile, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0xe4b6}}]}, {0x0, [0x30, 0x2e, 0x30]}}, &(0x7f0000000980)=""/205, 0xc5, 0xcd, 0x0, 0x800}, 0x28)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x17, 0x5, 0xfffffff8, 0x1, 0x41403, r1, 0xa05c, '\x00', r4, r5, 0x0, 0x3}, 0x50)
r7 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, 0x8)
connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x0, 0x9}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r6}, &(0x7f0000000280), &(0x7f00000002c0)='%-5lx  \x00'}, 0x20)
r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$SIOCNRDECOBS(r8, 0x89e2)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r9}, 0x10)
r10 = socket(0x10, 0x3, 0x0)
write(r10, &(0x7f0000000000)="fc0000001a000700ab092500090007000aab0700a90100001d60369321000100ff0500000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc0003000500000014000027000089fee1434f1e596534d07302ade0bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201800015b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb00d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a8700"/252, 0xfc)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:41174' (ED25519) to the list of known hosts.
syzkaller login: [   56.762596][ T5803] cgroup: Unknown subsys name 'net'
[   56.866597][ T5803] cgroup: Unknown subsys name 'cpuset'
[   56.870714][ T5803] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.403759][ T5803] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   62.696889][ T5823] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   62.700897][ T5826] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   62.714177][ T5826] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   62.725122][ T5826] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   62.728249][ T5826] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   62.740891][ T5203] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   62.741023][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   62.747033][ T5827] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   62.750653][ T5827] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   62.751165][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   62.757611][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   62.760098][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   62.763270][ T5827] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   62.768710][ T5823] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   62.776348][ T5823] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   63.071227][ T5824] chnl_net:caif_netlink_parms(): no params data found
[   63.139507][ T5820] chnl_net:caif_netlink_parms(): no params data found
[   63.185059][ T5828] chnl_net:caif_netlink_parms(): no params data found
[   63.247709][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.251046][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.253688][ T5824] bridge_slave_0: entered allmulticast mode
[   63.256907][ T5824] bridge_slave_0: entered promiscuous mode
[   63.286348][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.288828][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.291467][ T5824] bridge_slave_1: entered allmulticast mode
[   63.294695][ T5824] bridge_slave_1: entered promiscuous mode
[   63.367733][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.370878][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.374827][ T5820] bridge_slave_0: entered allmulticast mode
[   63.377994][ T5820] bridge_slave_0: entered promiscuous mode
[   63.400415][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.405716][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.408864][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.411980][ T5820] bridge_slave_1: entered allmulticast mode
[   63.418680][ T5820] bridge_slave_1: entered promiscuous mode
[   63.422103][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.425103][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.427807][ T5828] bridge_slave_0: entered allmulticast mode
[   63.430687][ T5828] bridge_slave_0: entered promiscuous mode
[   63.434782][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.437083][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.439389][ T5828] bridge_slave_1: entered allmulticast mode
[   63.442057][ T5828] bridge_slave_1: entered promiscuous mode
[   63.445856][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.495749][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.500011][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.505281][ T5824] team0: Port device team_slave_0 added
[   63.508713][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.512558][ T5824] team0: Port device team_slave_1 added
[   63.516466][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.559704][ T5820] team0: Port device team_slave_0 added
[   63.572424][ T5828] team0: Port device team_slave_0 added
[   63.577321][ T5828] team0: Port device team_slave_1 added
[   63.587156][ T5820] team0: Port device team_slave_1 added
[   63.589701][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.592144][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.603059][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.638280][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.641304][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.653666][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.659238][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.662021][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.672748][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.678431][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.681292][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.692498][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.704034][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.706501][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.715470][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.720005][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.723014][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.735224][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.784892][ T5824] hsr_slave_0: entered promiscuous mode
[   63.787288][ T5824] hsr_slave_1: entered promiscuous mode
[   63.801568][ T5820] hsr_slave_0: entered promiscuous mode
[   63.804515][ T5820] hsr_slave_1: entered promiscuous mode
[   63.806718][ T5820] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   63.809640][ T5820] Cannot create hsr debugfs directory
[   63.864021][ T5828] hsr_slave_0: entered promiscuous mode
[   63.867163][ T5828] hsr_slave_1: entered promiscuous mode
[   63.870042][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   63.873112][ T5828] Cannot create hsr debugfs directory
[   64.184675][ T5820] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   64.194386][ T5820] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   64.201481][ T5820] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   64.208834][ T5820] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   64.268498][ T5824] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   64.290162][ T5824] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   64.297488][ T5824] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   64.317197][ T5824] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   64.363842][ T5828] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   64.371783][ T5828] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   64.387142][ T5828] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   64.394628][ T5828] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   64.481897][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.499020][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.508392][ T5820] 8021q: adding VLAN 0 to HW filter on device team0
[   64.519702][ T5824] 8021q: adding VLAN 0 to HW filter on device team0
[   64.528688][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.531358][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.543325][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.555532][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.558375][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.562391][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.565005][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.572127][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.574711][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.592154][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   64.627159][ T3605] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.629470][ T3605] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.633272][ T3605] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.635684][ T3605] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.812001][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.814969][ T5823] Bluetooth: hci0: command tx timeout
[   64.821873][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.825997][ T5823] Bluetooth: hci2: command tx timeout
[   64.828092][ T5823] Bluetooth: hci1: command tx timeout
[   64.834312][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.893478][ T5820] veth0_vlan: entered promiscuous mode
[   64.906801][ T5828] veth0_vlan: entered promiscuous mode
[   64.915297][ T5824] veth0_vlan: entered promiscuous mode
[   64.918432][ T5820] veth1_vlan: entered promiscuous mode
[   64.922595][ T5828] veth1_vlan: entered promiscuous mode
[   64.934993][ T5824] veth1_vlan: entered promiscuous mode
[   64.962807][ T5828] veth0_macvtap: entered promiscuous mode
[   64.971007][ T5828] veth1_macvtap: entered promiscuous mode
[   64.978687][ T5820] veth0_macvtap: entered promiscuous mode
[   64.991290][ T5820] veth1_macvtap: entered promiscuous mode
[   65.001049][ T5824] veth0_macvtap: entered promiscuous mode
[   65.009367][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.019778][ T5824] veth1_macvtap: entered promiscuous mode
[   65.027270][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.040473][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.047508][ T5828] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.050467][ T5828] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.053272][ T5828] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.056626][ T5828] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.068232][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.081602][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.088572][ T5820] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.092360][ T5820] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.099074][ T5820] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.102817][ T5820] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.118574][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.140280][ T5824] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.144646][ T5824] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.148292][ T5824] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.151880][ T5824] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.277069][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.280473][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.302099][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.306311][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.333170][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.336663][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.369420][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.372060][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.374953][ T3571] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.377434][ T3571] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.401391][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   65.404469][ T3605] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.409347][ T3605] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.476016][ T5890] Zero length message leads to an empty skb
[   65.556263][ T5895] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1'.
[   65.571383][ T5895] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1'.
[   65.714519][ T5903] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4'.
[   65.725297][ T5906] ipvlan0: entered promiscuous mode
[   65.729440][ T5903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   65.810141][ T5897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   66.073067][ T5926] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12'.
[   66.080347][ T5860] hid-generic 0005:0458:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[   66.201855][ T5938] xt_l2tp: v2 doesn't support IP mode
[   66.375785][ T5943] netlink: 48 bytes leftover after parsing attributes in process `syz.1.17'.
[   66.459461][ T5943] bridge_slave_0: left allmulticast mode
[   66.461449][ T5943] bridge_slave_0: left promiscuous mode
[   66.465885][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.472705][ T5943] bridge_slave_1: left allmulticast mode
[   66.483864][ T5943] bridge_slave_1: left promiscuous mode
[   66.491526][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.521731][ T5943] bond0: (slave bond_slave_0): Releasing backup interface
[   66.532776][ T5943] bond0: (slave bond_slave_1): Releasing backup interface
[   66.543018][ T5951] netlink: 24 bytes leftover after parsing attributes in process `syz.0.20'.
[   66.575074][ T5943] team0: Port device team_slave_0 removed
[   66.586900][ T5943] team0: Port device team_slave_1 removed
[   66.590308][ T5943] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   66.595082][ T5943] batman_adv: batadv0: Removing interface: batadv_slave_0
[   66.601518][ T5943] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   66.605843][ T5943] batman_adv: batadv0: Removing interface: batadv_slave_1
[   66.895533][ T5823] Bluetooth: hci1: command tx timeout
[   66.903989][ T5823] Bluetooth: hci2: command tx timeout
[   66.904385][ T5826] Bluetooth: hci0: command tx timeout
[   67.268235][ T5984] syzkaller1: entered promiscuous mode
[   67.270257][ T5984] syzkaller1: entered allmulticast mode
[   67.711832][ T5888] IPVS: starting estimator thread 0...
[   67.750971][ T6010] netlink: 'syz.1.44': attribute type 1 has an invalid length.
[   67.756527][ T6010] netlink: 'syz.1.44': attribute type 3 has an invalid length.
[   67.759450][ T6010] netlink: 224 bytes leftover after parsing attributes in process `syz.1.44'.
[   67.816430][ T6008] IPVS: using max 79 ests per chain, 189600 per kthread
[   68.466397][ T6050] netlink: 20 bytes leftover after parsing attributes in process `syz.1.57'.
[   68.472348][ T6050] netlink: 44 bytes leftover after parsing attributes in process `syz.1.57'.
[   68.716361][ T6059] syzkaller0: entered promiscuous mode
[   68.718790][ T6059] syzkaller0: entered allmulticast mode
[   68.974512][ T5826] Bluetooth: hci2: command tx timeout
[   68.975538][ T5823] Bluetooth: hci1: command tx timeout
[   68.983908][ T5823] Bluetooth: hci0: command tx timeout
[   69.589736][ T6071] netlink: 48 bytes leftover after parsing attributes in process `syz.1.65'.
[   69.644962][ T6075] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   69.922801][ T6102] netlink: 'syz.0.75': attribute type 2 has an invalid length.
[   69.958023][ T6105] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[   69.963204][ T6105] netlink: 'syz.2.77': attribute type 12 has an invalid length.
[   69.970837][ T6105] netlink: 'syz.2.77': attribute type 11 has an invalid length.
[   70.469446][ T6136] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   70.472815][ T6136] batadv_slave_0: entered promiscuous mode
[   70.563221][ T6141] Driver unsupported XDP return value 0 on prog  (id 25) dev N/A, expect packet loss!
[   70.911055][ T6149] bridge_slave_1: default FDB implementation only supports local addresses
[   71.056007][ T5823] Bluetooth: hci0: command tx timeout
[   71.056408][ T5827] Bluetooth: hci1: command tx timeout
[   71.058726][ T5826] Bluetooth: hci2: command tx timeout
[   71.066716][ T6158] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   71.115989][ T6160] __nla_validate_parse: 6 callbacks suppressed
[   71.116008][ T6160] netlink: 56 bytes leftover after parsing attributes in process `syz.1.98'.
[   71.181277][ T6164] netlink: 10 bytes leftover after parsing attributes in process `syz.1.100'.
[   71.219568][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.278003][ T6168] netlink: 56 bytes leftover after parsing attributes in process `syz.1.102'.
[   71.377573][ T6174] pim6reg1: entered promiscuous mode
[   71.379964][ T6174] pim6reg1: entered allmulticast mode
[   71.404862][ T6174] netlink: 47 bytes leftover after parsing attributes in process `syz.1.105'.
[   71.409088][ T6172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.104'.
[   71.416300][ T6174] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   71.521677][ T6183] sctp: [Deprecated]: syz.0.107 (pid 6183) Use of int in max_burst socket option.
[   71.521677][ T6183] Use struct sctp_assoc_value instead
[   71.535757][ T6183] netlink: 8 bytes leftover after parsing attributes in process `syz.0.107'.
[   71.562837][ T6183] gretap1: entered promiscuous mode
[   71.568081][ T6183] gretap1: entered allmulticast mode
[   71.706856][ T6188] netlink: 8 bytes leftover after parsing attributes in process `syz.2.111'.
[   71.945847][ T6218] ksmbd: Unknown IPC event: 3, ignore.
[   72.667637][ T6264] netlink: 32 bytes leftover after parsing attributes in process `syz.1.139'.
[   72.771837][ T6276] netlink: 24 bytes leftover after parsing attributes in process `syz.0.144'.
[   72.845477][ T6281] ip6gre1: entered promiscuous mode
[   72.872672][ T6285] netlink: 8 bytes leftover after parsing attributes in process `syz.1.146'.
[   72.884537][ T6285] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[   73.047173][ T6297] syz.1.152 uses obsolete (PF_INET,SOCK_PACKET)
[   73.055037][ T6297] netlink: 'syz.1.152': attribute type 1 has an invalid length.
[   73.152250][ T6304] netlink: 'syz.1.154': attribute type 12 has an invalid length.
[   74.520951][ T6354] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   74.535194][ T6357] netlink: 'syz.2.178': attribute type 5 has an invalid length.
[   74.549377][ T6354] warning: `syz.0.175' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   74.565299][ T6354] bridge_slave_0: left allmulticast mode
[   74.567477][ T6354] bridge_slave_0: left promiscuous mode
[   74.569656][ T6354] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.581862][ T6354] bridge_slave_1: left allmulticast mode
[   74.594663][ T6354] bridge_slave_1: left promiscuous mode
[   74.597290][ T6354] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.616056][ T6361] netlink: 'syz.0.175': attribute type 10 has an invalid length.
[   74.628849][ T6354] bond0: (slave bond_slave_0): Releasing backup interface
[   74.637361][ T6354] bond0: (slave bond_slave_1): Releasing backup interface
[   74.678821][ T6354] team0: Port device team_slave_0 removed
[   74.829650][ T6354] team0: Port device team_slave_1 removed
[   74.832241][ T6354] batman_adv: batadv0: Removing interface: batadv_slave_0
[   74.837085][ T6354] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   74.839823][ T6354] batman_adv: batadv0: Removing interface: batadv_slave_1
[   74.873614][ T6361] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[   74.899780][ T6361] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.907783][ T6361] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   75.036341][ T6379] bond0: (slave wlan1): Releasing backup interface
[   75.190576][ T6397] bridge_slave_1: default FDB implementation only supports local addresses
[   75.238530][  T791] IPVS: starting estimator thread 0...
[   75.240727][ T6393] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   75.346101][ T6402] IPVS: using max 79 ests per chain, 189600 per kthread
[   75.599764][ T6430] batadv_slave_1: entered promiscuous mode
[   75.602725][ T6430] batadv_slave_1: left promiscuous mode
[   76.159037][ T6460] netlink: 'syz.2.213': attribute type 10 has an invalid length.
[   76.174028][ T6460] geneve2: entered promiscuous mode
[   76.218799][ T6460] sch_tbf: burst 0 is lower than device vlan0 mtu (1514) !
[   76.433793][ T6462] bridge_slave_1: default FDB implementation only supports local addresses
[   76.765983][ T6480] __nla_validate_parse: 9 callbacks suppressed
[   76.766007][ T6480] netlink: 12 bytes leftover after parsing attributes in process `syz.1.222'.
[   76.849822][ T6487] openvswitch: netlink: EtherType 10 is less than min 600
[   76.852897][ T6488] openvswitch: netlink: EtherType 10 is less than min 600
[   76.859445][ T6487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.223'.
[   76.912560][ T6490] netlink: 28 bytes leftover after parsing attributes in process `syz.0.225'.
[   76.921193][ T6490] netlink: 28 bytes leftover after parsing attributes in process `syz.0.225'.
[   77.025601][ T6488] vlan0: entered promiscuous mode
[   77.027853][ T6488] vlan0: entered allmulticast mode
[   77.029901][ T6488] hsr_slave_1: entered allmulticast mode
[   77.249678][ T6506] netlink: 16 bytes leftover after parsing attributes in process `syz.1.231'.
[   77.258803][ T6507] tipc: Started in network mode
[   77.260494][ T6507] tipc: Node identity 080211000001, cluster identity 4711
[   77.262853][ T6506] netlink: 24 bytes leftover after parsing attributes in process `syz.1.231'.
[   77.267332][ T6507] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   77.519738][ T6513] macsec1: entered promiscuous mode
[   77.522344][ T6513] macsec1: entered allmulticast mode
[   77.554304][ T6537] netlink: 12 bytes leftover after parsing attributes in process `syz.0.241'.
[   77.558911][ T6537] nbd: must specify a size in bytes for the device
[   77.599456][ T6540] netlink: 'syz.2.242': attribute type 3 has an invalid length.
[   77.666884][ T6550] netlink: 'syz.2.244': attribute type 5 has an invalid length.
[   77.693604][ T6550] netlink: 'syz.2.244': attribute type 1 has an invalid length.
[   77.709474][ T6550] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.244'.
[   77.732127][ T6555] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[   77.737569][ T6555] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[   78.025299][ T6570] netlink: 'syz.0.252': attribute type 1 has an invalid length.
[   78.387384][  T791] tipc: Node number set to 134418688
[   78.860719][ T6620] netlink: 'syz.0.269': attribute type 2 has an invalid length.
[   79.074691][ T6634] bridge_slave_1: default FDB implementation only supports local addresses
[   79.270698][ T6651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.279'.
[   79.274602][ T6651] netlink: 4 bytes leftover after parsing attributes in process `syz.2.279'.
[   79.485244][ T6657] bridge_slave_1: default FDB implementation only supports local addresses
[   79.820164][ T6675] syz_tun: entered allmulticast mode
[   79.866037][ T6674] syz_tun: left allmulticast mode
[   79.885322][ T6679] netlink: 'syz.1.287': attribute type 2 has an invalid length.
[   80.015328][ T6691] netlink: 'syz.1.290': attribute type 7 has an invalid length.
[   80.234615][ T6702] batadv0: entered promiscuous mode
[   80.237103][ T6702] macsec2: entered promiscuous mode
[   80.485028][ T6725] vlan0: entered allmulticast mode
[   80.498568][ T6725] bridge_slave_0: entered allmulticast mode
[   80.831577][ T6759] netlink: 'syz.2.311': attribute type 1 has an invalid length.
[   81.015554][ T6780] tipc: Started in network mode
[   81.019764][ T6780] tipc: Node identity 76d7f41a91ae, cluster identity 4711
[   81.028774][ T6780] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.032293][ T6780] syzkaller0: entered promiscuous mode
[   81.034503][ T6780] syzkaller0: entered allmulticast mode
[   81.052881][ T6780] tipc: Resetting bearer <eth:syzkaller0>
[   81.061377][ T6775] tipc: Resetting bearer <eth:syzkaller0>
[   81.071353][ T6775] tipc: Disabling bearer <eth:syzkaller0>
[   81.337622][ T6811] netlink: 'syz.1.330': attribute type 10 has an invalid length.
[   81.348977][ T6811] team0: entered promiscuous mode
[   81.356449][ T6811] team0: entered allmulticast mode
[   81.360295][ T6811] bridge0: port 1(team0) entered blocking state
[   81.362457][ T6811] bridge0: port 1(team0) entered disabled state
[   81.644003][ T6856] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[   81.799397][ T6877] __nla_validate_parse: 6 callbacks suppressed
[   81.799407][ T6877] netlink: 134788 bytes leftover after parsing attributes in process `syz.2.349'.
[   81.810062][ T6877] syz_tun: entered promiscuous mode
[   81.812443][ T6877] macsec3: entered promiscuous mode
[   81.815549][ T6877] macsec3: entered allmulticast mode
[   81.817886][ T6877] syz_tun: entered allmulticast mode
[   81.821250][ T6877] syz_tun: left allmulticast mode
[   81.823280][ T6877] syz_tun: left promiscuous mode
[   82.037891][ T6897] netlink: 56 bytes leftover after parsing attributes in process `syz.1.356'.
[   82.041625][ T6897] netlink: 248 bytes leftover after parsing attributes in process `syz.1.356'.
[   82.238722][ T6916] pim6reg1: entered promiscuous mode
[   82.240830][ T6916] pim6reg1: entered allmulticast mode
[   82.393192][ T6934] bridge_slave_1: default FDB implementation only supports local addresses
[   82.639621][ T6956] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   82.750553][ T6967] bridge_slave_1: default FDB implementation only supports local addresses
[   82.816786][ T6977] netlink: 24 bytes leftover after parsing attributes in process `syz.2.378'.
[   82.980281][ T6992] netlink: 16 bytes leftover after parsing attributes in process `syz.0.383'.
[   83.170159][ T7016] netlink: 56 bytes leftover after parsing attributes in process `syz.0.393'.
[   83.172981][ T7016] netlink: 56 bytes leftover after parsing attributes in process `syz.0.393'.
[   83.184359][ T7018] syzkaller1: entered promiscuous mode
[   83.186497][ T7018] syzkaller1: entered allmulticast mode
[   83.365845][ T7028] Bluetooth: MGMT ver 1.23
[   83.397255][ T7033] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   83.670177][ T7059] netlink: 'syz.2.406': attribute type 29 has an invalid length.
[   83.672814][ T7059] netlink: 'syz.2.406': attribute type 29 has an invalid length.
[   83.675785][ T7059] netlink: 'syz.2.406': attribute type 29 has an invalid length.
[   83.678396][ T7059] netlink: 'syz.2.406': attribute type 29 has an invalid length.
[   83.681464][ T7059] netlink: 'syz.2.406': attribute type 29 has an invalid length.
[   83.717535][ T7061] netlink: 4 bytes leftover after parsing attributes in process `syz.0.407'.
[   83.800300][ T7073] syz.2.411 uses old SIOCAX25GETINFO
[   84.022611][ T7087] netlink: 28 bytes leftover after parsing attributes in process `syz.2.414'.
[   84.025762][ T7090] netlink: 'syz.0.415': attribute type 21 has an invalid length.
[   84.040965][ T7088] netlink: 60 bytes leftover after parsing attributes in process `syz.2.414'.
[   84.102146][ T7099] netlink: 'syz.0.418': attribute type 1 has an invalid length.
[   84.106145][ T7099] netlink: 'syz.0.418': attribute type 11 has an invalid length.
[   84.154619][ T7103] netlink: 'syz.0.419': attribute type 142 has an invalid length.
[   84.434628][    C0] vcan0: j1939_tp_rxtimer: 0xffff88803ad15000: rx timeout, send abort
[   84.438340][    C0] vcan0: j1939_tp_rxtimer: 0xffff88803ad17c00: rx timeout, send abort
[   84.441101][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88803ad15000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[   84.446001][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88803ad17c00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[   84.540025][ T7115] netlink: 'syz.1.424': attribute type 4 has an invalid length.
[   84.917316][ T7156] netlink: 'syz.0.437': attribute type 2 has an invalid length.
[   84.919880][ T7156] netlink: 'syz.0.437': attribute type 1 has an invalid length.
[   85.680899][ T7206] netlink: 'syz.0.454': attribute type 1 has an invalid length.
[   85.686334][ T7206] netlink: 'syz.0.454': attribute type 1 has an invalid length.
[   85.701116][ T7206] dvmrp1: entered allmulticast mode
[   85.705591][ T7206] dvmrp1: left allmulticast mode
[   86.089987][ T7245] trusted_key: syz.2.466 sent an empty control message without MSG_MORE.
[   86.588112][   T47] cfg80211: failed to load regulatory.db
[   86.601130][ T7283] netlink: 'syz.0.480': attribute type 1 has an invalid length.
[   86.607518][ T7283] openvswitch: netlink: Flow actions attr not present in new flow.
[   86.850851][ T7303] __nla_validate_parse: 17 callbacks suppressed
[   86.850863][ T7303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.489'.
[   86.880769][ T7303] syzkaller0: entered promiscuous mode
[   86.882669][ T7303] syzkaller0: entered allmulticast mode
[   87.838268][ T7315] netlink: 16 bytes leftover after parsing attributes in process `syz.1.493'.
[   87.952279][ T7319] netlink: 52 bytes leftover after parsing attributes in process `syz.0.494'.
[   87.990047][ T7323] netlink: 3 bytes leftover after parsing attributes in process `syz.2.496'.
[   88.040128][ T7325] vlan0: entered promiscuous mode
[   88.042492][ T7325] vlan0: entered allmulticast mode
[   88.051339][ T7325] hsr_slave_1: entered allmulticast mode
[   88.086789][ T7331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.500'.
[   88.117306][ T7325] netlink: 4 bytes leftover after parsing attributes in process `syz.0.497'.
[   88.122571][ T7333] xt_bpf: check failed: parse error
[   88.202215][ T7331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.500'.
[   88.242794][ T7340] nbd: must specify an index to disconnect
[   88.246625][ T7340] xt_cluster: node mask cannot exceed total number of nodes
[   88.256194][ T7341] netlink: 20 bytes leftover after parsing attributes in process `syz.1.503'.
[   88.279129][ T7338] syzkaller0: entered promiscuous mode
[   88.281433][ T7338] syzkaller0: entered allmulticast mode
[   88.309030][ T7343] bridge_slave_0: invalid flags given to default FDB implementation
[   88.388612][ T7347] xt_SECMARK: invalid mode: 0
[   88.452332][ T7350] syzkaller0: entered promiscuous mode
[   88.459449][ T7350] syzkaller0: entered allmulticast mode
[   88.546898][ T7366] netlink: 76 bytes leftover after parsing attributes in process `syz.2.514'.
[   89.429867][ T7398] xt_hashlimit: size too large, truncated to 1048576
[   89.779513][ T7428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.531'.
[   89.954276][ T7456] validate_nla: 3 callbacks suppressed
[   89.954294][ T7456] netlink: 'syz.0.544': attribute type 14 has an invalid length.
[   90.004261][ T7460] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.006738][ T7460] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.011093][ T7460] bridge0: entered allmulticast mode
[   90.015059][ T7461] bridge_slave_1: left allmulticast mode
[   90.016936][ T7461] bridge_slave_1: left promiscuous mode
[   90.019727][ T7461] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.027431][ T7461] bridge_slave_0: left allmulticast mode
[   90.029288][ T7461] bridge_slave_0: left promiscuous mode
[   90.031367][ T7461] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.130341][ T7473] veth0: entered promiscuous mode
[   90.377432][ T7495] bridge0: entered allmulticast mode
[   90.535869][ T7509] netlink: 'syz.2.554': attribute type 1 has an invalid length.
[   90.568879][ T7509] bond1: entered promiscuous mode
[   90.570785][ T7509] 8021q: adding VLAN 0 to HW filter on device bond1
[   90.590240][ T7509] 8021q: adding VLAN 0 to HW filter on device bond1
[   90.592658][ T7509] bond1: (slave vcan1): The slave device specified does not support setting the MAC address
[   90.596825][ T7509] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode
[   90.602121][ T7509] bond1: (slave vcan1): making interface the new active one
[   90.605003][ T7509] vcan1: entered promiscuous mode
[   90.607630][ T7509] bond1: (slave vcan1): Enslaving as an active interface with an up link
[   90.875668][ T7541] tipc: Cannot configure node identity twice
[   91.141099][ T7573] delete_channel: no stack
[   91.324209][ T7583] netlink: 'syz.2.568': attribute type 1 has an invalid length.
[   91.458237][ T7620] netlink: 'syz.1.574': attribute type 10 has an invalid length.
[   91.467250][ T7620] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[   91.506381][ T7612] netlink: 'syz.2.573': attribute type 1 has an invalid length.
[   91.533659][ T7612] 8021q: adding VLAN 0 to HW filter on device bond2
[   91.547099][ T7629] netlink: 'syz.1.576': attribute type 10 has an invalid length.
[   91.934989][ T5826] Bluetooth: hci2: command tx timeout
[   92.786415][ T7695] __nla_validate_parse: 11 callbacks suppressed
[   92.786433][ T7695] netlink: 24 bytes leftover after parsing attributes in process `syz.0.593'.
[   92.819184][ T5874] IPVS: starting estimator thread 0...
[   92.821655][ T7698] IPVS: set_ctl: invalid protocol: 115 172.20.20.170:20001
[   92.831497][ T7698] netlink: 48 bytes leftover after parsing attributes in process `syz.0.594'.
[   92.905860][ T7705] ieee802154 phy0 wpan0: encryption failed: -22
[   92.913509][ T7699] IPVS: using max 79 ests per chain, 189600 per kthread
[   92.944504][ T7709] netlink: 4 bytes leftover after parsing attributes in process `syz.0.599'.
[   93.133027][ T7727] netlink: 17 bytes leftover after parsing attributes in process `syz.1.608'.
[   93.288407][ T7741] netlink: 84 bytes leftover after parsing attributes in process `syz.1.613'.
[   93.291864][ T7741] netlink: 84 bytes leftover after parsing attributes in process `syz.1.613'.
[   93.418099][ T7762] x_tables: duplicate underflow at hook 2
[   94.335412][ T7824] netlink: 28 bytes leftover after parsing attributes in process `syz.1.632'.
[   94.338459][ T7824] netlink: 28 bytes leftover after parsing attributes in process `syz.1.632'.
[   94.399072][ T7826] netlink: 'syz.1.633': attribute type 9 has an invalid length.
[   94.406900][ T7826] netlink: 'syz.1.633': attribute type 9 has an invalid length.
[   94.455009][ T7831] xt_hashlimit: max too large, truncated to 1048576
[   94.902822][ T7853] IPv6: NLM_F_CREATE should be specified when creating new route
[   95.075342][ T7862] netlink: 4 bytes leftover after parsing attributes in process `syz.2.644'.
[   95.078521][ T7862] hsr_slave_0: left promiscuous mode
[   95.080844][ T7862] hsr_slave_1: left promiscuous mode
[   95.390625][ T7878] netlink: 36 bytes leftover after parsing attributes in process `syz.1.651'.
[   95.480707][ T7880] netlink: 'syz.1.652': attribute type 2 has an invalid length.
[   95.487240][ T7880] netlink: 'syz.1.652': attribute type 1 has an invalid length.
[   95.538836][ T7893] netlink: 'syz.2.656': attribute type 5 has an invalid length.
[   95.664157][ T7904] netlink: 'syz.1.661': attribute type 29 has an invalid length.
[  116.282837][ T7929] __nla_validate_parse: 7 callbacks suppressed
[  116.282848][ T7929] netlink: 16 bytes leftover after parsing attributes in process `syz.1.666'.
[  116.291987][ T7929] netlink: 'syz.1.666': attribute type 1 has an invalid length.
[  116.354381][ T7936] netlink: 'syz.1.669': attribute type 1 has an invalid length.
[  116.356882][ T7936] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.669'.
[  117.253206][ T7968] netlink: 36 bytes leftover after parsing attributes in process `syz.0.681'.
[  117.256324][ T7968] netlink: 36 bytes leftover after parsing attributes in process `syz.0.681'.
[  117.405114][ T7979] can: request_module (can-proto-0) failed.
[  117.446126][ T7979] can: request_module (can-proto-0) failed.
[  117.455233][ T7983] netlink: 'syz.2.687': attribute type 1 has an invalid length.
[  117.457700][ T7983] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.687'.
[  117.522133][ T7993] netlink: 36 bytes leftover after parsing attributes in process `syz.1.680'.
[  117.688974][ T8001] netlink: 4 bytes leftover after parsing attributes in process `syz.2.693'.
[  117.692270][ T8001] netlink: 12 bytes leftover after parsing attributes in process `syz.2.693'.
[  117.714437][ T8001] netlink: 24 bytes leftover after parsing attributes in process `syz.2.693'.
[  117.762675][ T8024] netlink: 'syz.1.701': attribute type 1 has an invalid length.
[  117.767367][ T8024] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.701'.
[  117.774905][ T8027] netlink: 'syz.2.702': attribute type 4 has an invalid length.
[  117.788273][ T8026] netlink: 'syz.2.702': attribute type 4 has an invalid length.
[  117.819232][ T8034] netlink: 'syz.1.704': attribute type 39 has an invalid length.
[  117.942797][ T8040] netlink: 'syz.2.708': attribute type 178 has an invalid length.
[  118.166221][ T8083] netlink: 'syz.0.723': attribute type 18 has an invalid length.
[  118.355973][ T8107] xt_connbytes: Forcing CT accounting to be enabled
[  118.358274][ T8107] set match dimension is over the limit!
[  118.424259][ T8115] netlink: 'syz.0.737': attribute type 1 has an invalid length.
[  118.459590][ T8122] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  118.470797][ T8115] bond1: (slave ip6gretap1): making interface the new active one
[  118.475218][ T8115] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[  118.505033][ T8128] @: renamed from veth0_vlan (while UP)
[  118.610313][ T8141] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  118.648353][ T8148] syz_tun: entered allmulticast mode
[  118.657225][ T6826] wlan1: Trigger new scan to find an IBSS to join
[  118.661100][ T8147] pimreg: entered allmulticast mode
[  118.666162][ T8146] syz_tun: left allmulticast mode
[  118.900239][ T8179] pim6reg1: entered promiscuous mode
[  118.902054][ T8179] pim6reg1: entered allmulticast mode
[  119.123342][ T8197] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.181817][ T8197] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.245448][ T8197] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.312140][ T8197] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.371160][ T8234] bond0: (slave bridge_slave_1): Releasing backup interface
[  119.476678][ T8197] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  119.488703][ T8197] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  119.517509][ T8197] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  119.525708][ T8197] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  119.558997][ T8253] syzkaller0: entered promiscuous mode
[  119.570635][ T8253] syzkaller0: entered allmulticast mode
[  119.821280][ T5685] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.925181][ T5685] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.989599][ T5685] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.004599][ T8287] syzkaller1: entered promiscuous mode
[  120.006388][ T8287] syzkaller1: entered allmulticast mode
[  120.046688][ T5827] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  120.050794][ T5827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  120.055846][ T5827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  120.063538][ T5685] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.066997][ T5827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  120.069905][ T5827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  120.234776][ T5685] bridge0: port 1(team0) entered disabled state
[  120.456879][ T5685] bond0 (unregistering): Released all slaves
[  120.482070][ T8291] chnl_net:caif_netlink_parms(): no params data found
[  120.589374][ T8291] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.591729][ T8291] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.601174][ T8291] bridge_slave_0: entered allmulticast mode
[  120.604678][ T8291] bridge_slave_0: entered promiscuous mode
[  120.627621][ T8291] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.629961][ T8291] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.632269][ T8291] bridge_slave_1: entered allmulticast mode
[  120.635850][ T8291] bridge_slave_1: entered promiscuous mode
[  120.657468][ T8291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  120.670384][ T8291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  120.747653][ T5685] hsr_slave_0: left promiscuous mode
[  120.756027][ T5685] veth1_macvtap: left promiscuous mode
[  120.757867][ T5685] veth0_macvtap: left promiscuous mode
[  121.129448][ T8291] team0: Port device team_slave_0 added
[  121.143113][ T8291] team0: Port device team_slave_1 added
[  121.166456][ T8291] batman_adv: batadv0: Adding interface: batadv_slave_0
[  121.169480][ T8291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  121.178633][ T8291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  121.182822][ T8291] batman_adv: batadv0: Adding interface: batadv_slave_1
[  121.186328][ T8291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  121.195789][ T8291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  121.258239][ T8291] hsr_slave_0: entered promiscuous mode
[  121.261235][ T8291] hsr_slave_1: entered promiscuous mode
[  121.264533][ T8291] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  121.266942][ T8291] Cannot create hsr debugfs directory
[  121.313174][ T8347] validate_nla: 2 callbacks suppressed
[  121.313187][ T8347] netlink: 'syz.2.820': attribute type 1 has an invalid length.
[  121.323825][ T8347] __nla_validate_parse: 14 callbacks suppressed
[  121.323834][ T8347] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.820'.
[  121.348398][ T8347] netlink: 12 bytes leftover after parsing attributes in process `syz.2.820'.
[  121.387755][ T5685] IPVS: stop unused estimator thread 0...
[  121.640215][ T8364] IPVS: length: 128 != 55320
[  121.642304][ T8364] netlink: 24 bytes leftover after parsing attributes in process `syz.2.825'.
[  121.712671][ T8291] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  121.719848][ T8291] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  121.724994][ T8291] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  121.729614][ T8291] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  121.772654][ T8291] 8021q: adding VLAN 0 to HW filter on device bond0
[  121.799592][ T8291] 8021q: adding VLAN 0 to HW filter on device team0
[  121.806399][ T6826] bridge0: port 1(bridge_slave_0) entered blocking state
[  121.808698][ T6826] bridge0: port 1(bridge_slave_0) entered forwarding state
[  121.815565][ T6826] bridge0: port 2(bridge_slave_1) entered blocking state
[  121.818384][ T6826] bridge0: port 2(bridge_slave_1) entered forwarding state
[  121.969831][ T8291] 8021q: adding VLAN 0 to HW filter on device batadv0
[  122.010668][ T8291] veth0_vlan: entered promiscuous mode
[  122.025270][ T8291] veth1_vlan: entered promiscuous mode
[  122.053592][ T8291] veth0_macvtap: entered promiscuous mode
[  122.058904][ T8291] veth1_macvtap: entered promiscuous mode
[  122.077599][ T8291] batman_adv: batadv0: Interface activated: batadv_slave_0
[  122.092203][ T8291] batman_adv: batadv0: Interface activated: batadv_slave_1
[  122.095100][ T5827] Bluetooth: hci0: command tx timeout
[  122.102030][ T8291] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  122.107232][ T8291] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  122.110542][ T8291] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  122.124252][ T8291] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  122.152466][ T8412] netlink: 'syz.2.833': attribute type 1 has an invalid length.
[  122.163335][ T8412] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.833'.
[  122.185261][ T6826] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  122.187980][ T6826] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  122.211296][ T6808] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  122.215181][ T6808] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  122.692188][ T8451] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  122.727467][ T8454] netlink: 'syz.2.844': attribute type 1 has an invalid length.
[  122.730205][ T8454] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.844'.
[  122.985780][ T8474] netlink: 40 bytes leftover after parsing attributes in process `syz.2.852'.
[  123.141973][ T8481] netlink: 32 bytes leftover after parsing attributes in process `syz.2.855'.
[  123.186106][ T8486] netlink: 'syz.2.856': attribute type 1 has an invalid length.
[  123.189142][ T8486] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.856'.
[  123.235467][ T8488] tun0: tun_chr_ioctl cmd 2147767521
[  124.288454][ T5685] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.552491][ T8512] netlink: 'syz.2.863': attribute type 10 has an invalid length.
[  124.561523][ T8512] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  124.666010][ T8518] netlink: 'syz.2.865': attribute type 1 has an invalid length.
[  124.669471][ T8518] netlink: 4 bytes leftover after parsing attributes in process `syz.2.865'.
[  124.706872][ T5826] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  124.710230][ T5826] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  124.713133][ T5826] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  124.717041][ T5826] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  124.720433][ T5826] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  124.724605][ T8522] Bluetooth: MGMT ver 1.23
[  124.827591][ T8536] netlink: 12 bytes leftover after parsing attributes in process `syz.2.871'.
[  124.850939][ T8523] chnl_net:caif_netlink_parms(): no params data found
[  124.905834][ T8548] netlink: 'syz.2.873': attribute type 1 has an invalid length.
[  124.906129][ T8523] bridge0: port 1(bridge_slave_0) entered blocking state
[  124.910657][ T8523] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.913070][ T8523] bridge_slave_0: entered allmulticast mode
[  124.916226][ T8523] bridge_slave_0: entered promiscuous mode
[  124.920736][ T8523] bridge0: port 2(bridge_slave_1) entered blocking state
[  124.922985][ T8523] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.925371][ T8523] bridge_slave_1: entered allmulticast mode
[  124.928169][ T8523] bridge_slave_1: entered promiscuous mode
[  124.955277][ T8523] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  124.960209][ T8523] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  124.993131][ T8523] team0: Port device team_slave_0 added
[  124.996656][ T8523] team0: Port device team_slave_1 added
[  125.013075][ T8523] batman_adv: batadv0: Adding interface: batadv_slave_0
[  125.015479][ T8523] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  125.023345][ T8523] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  125.029081][ T8523] batman_adv: batadv0: Adding interface: batadv_slave_1
[  125.031288][ T8523] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  125.039319][ T8523] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  125.063195][ T8523] hsr_slave_0: entered promiscuous mode
[  125.065598][ T8523] hsr_slave_1: entered promiscuous mode
[  125.067721][ T8523] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  125.070550][ T8523] Cannot create hsr debugfs directory
[  125.296318][ T8564] sctp: [Deprecated]: syz.2.878 (pid 8564) Use of struct sctp_assoc_value in delayed_ack socket option.
[  125.296318][ T8564] Use struct sctp_sack_info instead
[  125.301775][ T8564] sctp: [Deprecated]: syz.2.878 (pid 8564) Use of struct sctp_assoc_value in delayed_ack socket option.
[  125.301775][ T8564] Use struct sctp_sack_info instead
[  125.549254][ T8569] netlink: 'syz.0.880': attribute type 4 has an invalid length.
[  125.596352][ T8571] netlink: 'syz.0.881': attribute type 1 has an invalid length.
[  125.893822][ T8585] netlink: 'syz.0.888': attribute type 1 has an invalid length.
[  126.226028][ T5685] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.232871][ T8603] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode
[  126.245712][ T8603] bond0: (slave bridge_slave_1): Releasing backup interface
[  126.251050][ T8603] bond0: (slave bond_slave_0): Releasing backup interface
[  126.259732][ T8603] bond0: (slave bond_slave_1): Releasing backup interface
[  126.272266][ T8603] team0: Port device team_slave_0 removed
[  126.278816][ T8603] team0: Port device team_slave_1 removed
[  126.281035][ T8603] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  126.284363][ T8603] batman_adv: batadv0: Removing interface: batadv_slave_0
[  126.287620][ T8603] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  126.289958][ T8603] batman_adv: batadv0: Removing interface: batadv_slave_1
[  126.300300][ T8603] bond1: (slave vcan1): Releasing backup interface
[  126.302368][ T8603] vcan1: left promiscuous mode
[  126.326335][ T5685] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.332220][ T8608] mac80211_hwsim hwsim4 wlan1: left allmulticast mode
[  126.340360][ T8608] 8021q: adding VLAN 0 to HW filter on device bond0
[  126.344174][ T8608] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  126.365842][ T5685] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.425905][ T5826] Bluetooth: hci2: link tx timeout
[  126.427731][ T5826] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  126.458134][ T5685] bridge_slave_1: left allmulticast mode
[  126.459940][ T5685] bridge_slave_1: left promiscuous mode
[  126.462284][ T5685] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.467389][ T5685] bridge_slave_0: left allmulticast mode
[  126.469182][ T5685] bridge_slave_0: left promiscuous mode
[  126.470995][ T5685] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.697609][ T5685] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  126.702959][ T5685] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  126.708049][ T5685] bond0 (unregistering): Released all slaves
[  126.978111][ T5685] hsr_slave_0: left promiscuous mode
[  126.980679][ T5685] hsr_slave_1: left promiscuous mode
[  126.983233][ T5685] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  126.990624][ T5685] batman_adv: batadv0: Removing interface: batadv_slave_0
[  126.996144][ T5685] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  126.999020][ T5685] batman_adv: batadv0: Removing interface: batadv_slave_1
[  127.010989][ T5685] veth1_macvtap: left promiscuous mode
[  127.013170][ T5685] veth0_macvtap: left promiscuous mode
[  127.016169][ T5685] veth1_vlan: left promiscuous mode
[  127.018357][ T5685] veth0_vlan: left promiscuous mode
[  127.185076][ T8627] validate_nla: 2 callbacks suppressed
[  127.185087][ T8627] netlink: 'syz.0.903': attribute type 1 has an invalid length.
[  127.189624][ T8627] __nla_validate_parse: 6 callbacks suppressed
[  127.189630][ T8627] netlink: 4 bytes leftover after parsing attributes in process `syz.0.903'.
[  127.349095][ T5685] team0 (unregistering): Port device team_slave_1 removed
[  127.371494][ T5685] team0 (unregistering): Port device team_slave_0 removed
[  127.682866][ T8634] SET target dimension over the limit!
[  127.685486][ T8634] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  127.752733][ T8523] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  127.775566][ T8523] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  127.786495][ T8523] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  127.798240][ T8523] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  127.803175][ T8640] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  127.807398][ T8640] netlink: 'syz.2.909': attribute type 39 has an invalid length.
[  127.893969][ T8523] 8021q: adding VLAN 0 to HW filter on device bond0
[  127.903299][ T8523] 8021q: adding VLAN 0 to HW filter on device team0
[  127.911837][ T6808] bridge0: port 1(bridge_slave_0) entered blocking state
[  127.914160][ T6808] bridge0: port 1(bridge_slave_0) entered forwarding state
[  127.919819][ T6808] bridge0: port 2(bridge_slave_1) entered blocking state
[  127.922187][ T6808] bridge0: port 2(bridge_slave_1) entered forwarding state
[  127.982845][ T8654] netlink: 'syz.2.913': attribute type 1 has an invalid length.
[  127.985714][ T8657] netlink: 100 bytes leftover after parsing attributes in process `syz.0.914'.
[  127.990042][ T8654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.913'.
[  128.032610][ T8660] netlink: 8 bytes leftover after parsing attributes in process `syz.0.915'.
[  128.055225][ T8664] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  128.057566][ T8664] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  128.069648][ T8523] 8021q: adding VLAN 0 to HW filter on device batadv0
[  128.099940][ T8523] veth0_vlan: entered promiscuous mode
[  128.111247][ T8523] veth1_vlan: entered promiscuous mode
[  128.142964][ T8523] veth0_macvtap: entered promiscuous mode
[  128.150036][ T8523] veth1_macvtap: entered promiscuous mode
[  128.165616][ T8672] netlink: 4 bytes leftover after parsing attributes in process `syz.0.915'.
[  128.171344][ T8523] batman_adv: batadv0: Interface activated: batadv_slave_0
[  128.175886][ T8672] IPv6: NLM_F_REPLACE set, but no existing node found!
[  128.186223][ T8523] batman_adv: batadv0: Interface activated: batadv_slave_1
[  128.203084][ T8523] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  128.205868][ T8674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.920'.
[  128.205887][ T8674] netlink: 120 bytes leftover after parsing attributes in process `syz.2.920'.
[  128.213009][ T8523] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  128.218751][ T8523] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  128.221549][ T8523] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  128.226944][ T8674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.920'.
[  128.232799][ T8674] netlink: 'syz.2.920': attribute type 10 has an invalid length.
[  128.285553][ T6826] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.288048][ T6826] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  128.319688][ T6826] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.321077][ T8679] netlink: 'syz.2.922': attribute type 1 has an invalid length.
[  128.322189][ T6826] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  128.327669][ T8679] netlink: 4 bytes leftover after parsing attributes in process `syz.2.922'.
[  128.494002][ T5827] Bluetooth: hci2: command 0x0406 tx timeout
[  128.588194][ T8695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.928'.
[  128.591082][ T8695] netlink: 'syz.2.928': attribute type 19 has an invalid length.
[  128.639531][ T8698] netlink: 'syz.2.929': attribute type 1 has an invalid length.
[  128.784688][ T8709] netlink: 'syz.2.933': attribute type 1 has an invalid length.
[  128.924797][ T8719] tunl0: entered allmulticast mode
[  129.139165][ T8745] xt_hashlimit: size too large, truncated to 1048576
[  129.145981][ T8746] netlink: 'syz.2.945': attribute type 3 has an invalid length.
[  129.191983][ T8748] : renamed from bridge_slave_0 (while UP)
[  129.303864][ T8762] netlink: 'syz.0.953': attribute type 1 has an invalid length.
[  129.322215][ T8764] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  129.600160][ T8792] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  129.791131][ T8807] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  129.872192][ T8807] syz.2.970 (8807) used greatest stack depth: 19672 bytes left
[  130.258264][ T8834] x9: renamed from veth1_virt_wifi (while UP)
[  130.446907][ T5853] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.661557][ T5827] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  130.665231][ T5827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  130.668021][ T5827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  130.670909][ T5827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  130.674449][ T5827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  130.767609][ T8848] chnl_net:caif_netlink_parms(): no params data found
[  130.812377][ T8848] bridge0: port 1(bridge_slave_0) entered blocking state
[  130.815332][ T8848] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.817767][ T8848] bridge_slave_0: entered allmulticast mode
[  130.820499][ T8848] bridge_slave_0: entered promiscuous mode
[  130.828173][ T8848] bridge0: port 2(bridge_slave_1) entered blocking state
[  130.830692][ T8848] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.833140][ T8848] bridge_slave_1: entered allmulticast mode
[  130.836310][ T8848] bridge_slave_1: entered promiscuous mode
[  130.856329][ T8848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  130.861038][ T8848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  130.882475][ T8848] team0: Port device team_slave_0 added
[  130.886738][ T8848] team0: Port device team_slave_1 added
[  130.905773][ T8848] batman_adv: batadv0: Adding interface: batadv_slave_0
[  130.908095][ T8848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  130.916520][ T8848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  130.920823][ T8848] batman_adv: batadv0: Adding interface: batadv_slave_1
[  130.923089][ T8848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  130.931553][ T8848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  130.956803][ T8848] hsr_slave_0: entered promiscuous mode
[  130.959180][ T8848] hsr_slave_1: entered promiscuous mode
[  130.961334][ T8848] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  130.964016][ T8848] Cannot create hsr debugfs directory
[  132.325858][ T5853] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.379149][ T5853] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.428099][ T5853] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.523081][ T5853] bridge_slave_1: left allmulticast mode
[  132.526577][ T5853] bridge_slave_1: left promiscuous mode
[  132.528579][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state
[  132.540681][ T5853] bridge_slave_0: left allmulticast mode
[  132.542543][ T5853] bridge_slave_0: left promiscuous mode
[  132.544816][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state
[  132.656138][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.736586][ T5827] Bluetooth: hci0: command tx timeout
[  132.740471][ T5853] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  132.745799][ T5853] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  132.750015][ T5853] bond0 (unregistering): Released all slaves
[  132.765700][ T8959] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  132.777117][ T8957] tipc: Resetting bearer <eth:syzkaller0>
[  132.819391][ T8962] validate_nla: 8 callbacks suppressed
[  132.819403][ T8962] netlink: 'syz.2.1017': attribute type 1 has an invalid length.
[  132.823968][ T8962] __nla_validate_parse: 19 callbacks suppressed
[  132.823975][ T8962] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1017'.
[  132.924185][ T8973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1020'.
[  132.981559][ T8981] netlink: 'syz.2.1022': attribute type 10 has an invalid length.
[  132.997166][ T8981] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1022'.
[  133.014470][ T5853] hsr_slave_0: left promiscuous mode
[  133.016606][ T5853] hsr_slave_1: left promiscuous mode
[  133.019041][ T5853] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  133.021360][ T5853] batman_adv: batadv0: Removing interface: batadv_slave_0
[  133.026546][ T5853] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  133.028875][ T5853] batman_adv: batadv0: Removing interface: batadv_slave_1
[  133.039048][ T5853] veth1_macvtap: left promiscuous mode
[  133.040784][ T5853] veth0_macvtap: left promiscuous mode
[  133.042560][ T5853] veth1_vlan: left promiscuous mode
[  133.044471][ T5853] veth0_vlan: left promiscuous mode
[  133.049261][ T8986] netlink: 'syz.2.1022': attribute type 10 has an invalid length.
[  133.053064][ T8986] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1022'.
[  133.281329][ T5853] team0 (unregistering): Port device team_slave_1 removed
[  133.301688][ T5853] team0 (unregistering): Port device team_slave_0 removed
[  133.545558][ T8986] batadv0: entered allmulticast mode
[  133.547451][ T8986] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  133.618851][ T8848] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  133.632627][ T8848] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  133.638253][ T8848] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  133.646386][ T8990] netlink: 'syz.2.1026': attribute type 1 has an invalid length.
[  133.649886][ T8990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1026'.
[  133.653710][ T8848] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  133.762171][ T8848] 8021q: adding VLAN 0 to HW filter on device bond0
[  133.763682][ T9007] netlink: 'syz.0.1030': attribute type 1 has an invalid length.
[  133.767001][ T9007] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1030'.
[  133.785514][ T8848] 8021q: adding VLAN 0 to HW filter on device team0
[  133.797771][ T6826] bridge0: port 1(bridge_slave_0) entered blocking state
[  133.800157][ T6826] bridge0: port 1(bridge_slave_0) entered forwarding state
[  133.810402][ T6826] bridge0: port 2(bridge_slave_1) entered blocking state
[  133.813547][ T6826] bridge0: port 2(bridge_slave_1) entered forwarding state
[  133.826621][ T9012] x_tables: duplicate underflow at hook 1
[  133.894537][ T5860] tipc: Node number set to 3883529242
[  133.952103][ T8848] 8021q: adding VLAN 0 to HW filter on device batadv0
[  133.986669][ T8848] veth0_vlan: entered promiscuous mode
[  133.991556][ T8848] veth1_vlan: entered promiscuous mode
[  134.008314][ T8848] veth0_macvtap: entered promiscuous mode
[  134.013157][ T8848] veth1_macvtap: entered promiscuous mode
[  134.021984][ T8848] batman_adv: batadv0: Interface activated: batadv_slave_0
[  134.028658][ T8848] batman_adv: batadv0: Interface activated: batadv_slave_1
[  134.034640][ T8848] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  134.037593][ T8848] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  134.040480][ T8848] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  134.043318][ T8848] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  134.085654][ T9031] netlink: 'syz.0.1035': attribute type 1 has an invalid length.
[  134.088338][ T6826] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  134.088342][ T9031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1035'.
[  134.097436][ T6826] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  134.114640][ T6808] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  134.117971][ T6808] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  134.347484][ T9040] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1038'.
[  134.657877][ T9063] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1045'.
[  134.717154][ T9071] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  134.825443][ T9078] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1052'.
[  134.850356][ T9080] netlink: 'syz.2.1053': attribute type 1 has an invalid length.
[  134.878082][ T9082] netlink: 'syz.2.1054': attribute type 1 has an invalid length.
[  134.892765][ T9082] 8021q: adding VLAN 0 to HW filter on device bond4
[  134.906356][ T9082] 8021q: adding VLAN 0 to HW filter on device bond4
[  134.909329][ T9082] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address
[  134.916196][ T9082] bond4: (slave vxcan3): Error -95 calling set_mac_address
[  135.206982][ T9103] netlink: 'syz.2.1060': attribute type 1 has an invalid length.
[  135.348384][ T9110] netlink: 'syz.2.1062': attribute type 1 has an invalid length.
[  135.792682][ T9138] No such timeout policy "syz1"
[  135.899491][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.527015][ T9158] netlink: 'syz.0.1082': attribute type 11 has an invalid length.
[  136.540617][ T5826] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  136.548483][ T5826] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  136.551224][ T5826] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  136.555367][ T5826] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  136.558307][ T5826] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  136.692566][ T9162] chnl_net:caif_netlink_parms(): no params data found
[  136.768787][ T9162] bridge0: port 1(bridge_slave_0) entered blocking state
[  136.771217][ T9162] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.774836][ T9162] bridge_slave_0: entered allmulticast mode
[  136.777536][ T9162] bridge_slave_0: entered promiscuous mode
[  136.780670][ T9162] bridge0: port 2(bridge_slave_1) entered blocking state
[  136.783014][ T9162] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.786772][ T9162] bridge_slave_1: entered allmulticast mode
[  136.790196][ T9162] bridge_slave_1: entered promiscuous mode
[  136.822153][ T9162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  136.829614][ T9162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  136.851452][ T9162] team0: Port device team_slave_0 added
[  136.855965][ T9162] team0: Port device team_slave_1 added
[  136.877358][ T9162] batman_adv: batadv0: Adding interface: batadv_slave_0
[  136.879669][ T9162] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  136.888540][ T9162] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  136.892838][ T9162] batman_adv: batadv0: Adding interface: batadv_slave_1
[  136.897862][ T9162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  136.913756][ T9162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  136.951644][ T9162] hsr_slave_0: entered promiscuous mode
[  136.954278][ T9162] hsr_slave_1: entered promiscuous mode
[  136.956458][ T9162] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  136.959434][ T9162] Cannot create hsr debugfs directory
[  136.972974][ T9208] xt_l2tp: missing protocol rule (udp|l2tpip)
[  137.446486][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  137.451071][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  137.565857][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.606183][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.665887][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.763966][   T13] bridge_slave_1: left allmulticast mode
[  137.765775][   T13] bridge_slave_1: left promiscuous mode
[  137.769414][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  137.773128][   T13] bridge_slave_0: left allmulticast mode
[  137.776410][   T13] bridge_slave_0: left promiscuous mode
[  137.778323][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  137.974431][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  137.978496][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  137.981976][   T13] bond0 (unregistering): Released all slaves
[  138.187776][   T13] hsr_slave_0: left promiscuous mode
[  138.190513][   T13] hsr_slave_1: left promiscuous mode
[  138.192798][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  138.195625][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  138.198695][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  138.201544][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  138.212266][   T13] veth1_macvtap: left promiscuous mode
[  138.214500][   T13] veth0_macvtap: left promiscuous mode
[  138.216524][   T13] veth1_vlan: left promiscuous mode
[  138.218400][   T13] veth0_vlan: left promiscuous mode
[  138.456421][ T9265] __nla_validate_parse: 19 callbacks suppressed
[  138.456433][ T9265] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1119'.
[  138.531980][   T13] team0 (unregistering): Port device team_slave_1 removed
[  138.554421][   T13] team0 (unregistering): Port device team_slave_0 removed
[  138.573958][ T5827] Bluetooth: hci0: command tx timeout
[  138.886751][ T9278] validate_nla: 5 callbacks suppressed
[  138.886762][ T9278] netlink: 'syz.0.1124': attribute type 1 has an invalid length.
[  138.891136][ T9278] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1124'.
[  138.909593][ T9162] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  138.919510][ T9162] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  138.925472][ T9162] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  138.929202][ T9279] netlink: 'syz.2.1123': attribute type 21 has an invalid length.
[  138.934600][ T9279] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1123'.
[  138.935987][ T9162] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  138.945853][ T9279] netlink: 'syz.2.1123': attribute type 5 has an invalid length.
[  138.949543][ T9279] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1123'.
[  139.007389][ T9162] 8021q: adding VLAN 0 to HW filter on device bond0
[  139.017671][ T9162] 8021q: adding VLAN 0 to HW filter on device team0
[  139.021309][ T9296] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1127'.
[  139.024661][ T9296] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1127'.
[  139.027614][ T9296] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1127'.
[  139.030584][ T9296] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1127'.
[  139.036538][ T9296] netlink: 'syz.0.1127': attribute type 1 has an invalid length.
[  139.037944][ T6825] bridge0: port 1(bridge_slave_0) entered blocking state
[  139.039063][ T9296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1127'.
[  139.041567][ T6825] bridge0: port 1(bridge_slave_0) entered forwarding state
[  139.059140][ T6825] bridge0: port 2(bridge_slave_1) entered blocking state
[  139.061409][ T6825] bridge0: port 2(bridge_slave_1) entered forwarding state
[  139.096302][ T9298] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1128'.
[  139.171249][ T9162] 8021q: adding VLAN 0 to HW filter on device batadv0
[  139.179135][ T9307] Cannot find add_set index 3 as target
[  139.207119][ T9162] veth0_vlan: entered promiscuous mode
[  139.216906][ T9162] veth1_vlan: entered promiscuous mode
[  139.232307][ T9162] veth0_macvtap: entered promiscuous mode
[  139.236747][ T9162] veth1_macvtap: entered promiscuous mode
[  139.246048][ T9162] batman_adv: batadv0: Interface activated: batadv_slave_0
[  139.252002][ T9162] batman_adv: batadv0: Interface activated: batadv_slave_1
[  139.261261][ T9162] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  139.264637][ T9162] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  139.269013][ T9162] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  139.272573][ T9162] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  139.320653][ T6826] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  139.328345][ T6826] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  139.351090][ T6825] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  139.356083][ T6825] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  139.951335][ T9354] xt_hashlimit: size too large, truncated to 1048576
[  140.002574][ T9358] netdevsim0: mtu less than device minimum
[  140.962341][ T9413] No such timeout policy "syz1"
[  141.108313][ T9428] netlink: 'syz.2.1170': attribute type 1 has an invalid length.
[  141.113582][ T9428] netlink: 'syz.2.1170': attribute type 4 has an invalid length.
[  141.118335][ T9428] netlink: 'syz.2.1170': attribute type 1 has an invalid length.
[  141.120838][ T9428] netlink: 'syz.2.1170': attribute type 4 has an invalid length.
[  141.299774][ T9452] netlink: 'syz.2.1179': attribute type 1 has an invalid length.
[  141.333723][ T9454] netlink: 'syz.2.1180': attribute type 1 has an invalid length.
[  141.686102][ T5853] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.444456][ T5826] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  142.447950][ T5826] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  142.450759][ T5826] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  142.454676][ T5826] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  142.457368][ T5826] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  142.561140][ T9475] chnl_net:caif_netlink_parms(): no params data found
[  142.625413][ T9475] bridge0: port 1(bridge_slave_0) entered blocking state
[  142.628280][ T9475] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.630637][ T9475] bridge_slave_0: entered allmulticast mode
[  142.633273][ T9475] bridge_slave_0: entered promiscuous mode
[  142.655223][ T9475] bridge0: port 2(bridge_slave_1) entered blocking state
[  142.657669][ T9475] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.660157][ T9475] bridge_slave_1: entered allmulticast mode
[  142.662892][ T9475] bridge_slave_1: entered promiscuous mode
[  142.689307][ T9475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  142.695367][ T9475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  142.729083][ T9475] team0: Port device team_slave_0 added
[  142.733208][ T9475] team0: Port device team_slave_1 added
[  142.756589][ T9475] batman_adv: batadv0: Adding interface: batadv_slave_0
[  142.758896][ T9475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  142.769346][ T9475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  142.774668][ T9475] batman_adv: batadv0: Adding interface: batadv_slave_1
[  142.777021][ T9475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  142.787500][ T9475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  142.817048][ T9475] hsr_slave_0: entered promiscuous mode
[  142.819748][ T9475] hsr_slave_1: entered promiscuous mode
[  142.825609][ T9475] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  142.828264][ T9475] Cannot create hsr debugfs directory
[  143.377814][ T9530] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  143.426840][ T9534] bridge: RTM_NEWNEIGH with invalid ether address
[  143.458392][ T5853] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.506123][ T5853] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.529509][ T9544] __nla_validate_parse: 19 callbacks suppressed
[  143.529522][ T9544] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1210'.
[  143.574957][ T9546] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  143.577980][ T9546] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  143.580817][ T9546] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  143.584905][ T9546] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  143.590408][ T9546] bond5: (slave geneve2): making interface the new active one
[  143.593478][ T9546] bond5: (slave geneve2): Enslaving as an active interface with an up link
[  143.603879][ T5853] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.614660][ T9546] bond5: (slave ip6gretap2): Enslaving as an active interface with an up link
[  143.645897][ T9553] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  143.650052][ T9553] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1213'.
[  143.725084][ T9557] bridge3: entered allmulticast mode
[  143.727200][ T5853] bridge_slave_1: left allmulticast mode
[  143.729124][ T5853] bridge_slave_1: left promiscuous mode
[  143.731409][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.738063][ T5853] bridge_slave_0: left allmulticast mode
[  143.740141][ T5853] bridge_slave_0: left promiscuous mode
[  143.742362][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.917407][ T5853] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  143.921717][ T5853] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  143.925439][ T5853] bond0 (unregistering): Released all slaves
[  143.947852][ T9560] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1215'.
[  144.106235][ T9572] validate_nla: 3 callbacks suppressed
[  144.106246][ T9572] netlink: 'syz.2.1222': attribute type 1 has an invalid length.
[  144.110941][ T9572] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1222'.
[  144.250644][ T5853] hsr_slave_0: left promiscuous mode
[  144.253028][ T5853] hsr_slave_1: left promiscuous mode
[  144.258843][ T5853] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  144.261299][ T5853] batman_adv: batadv0: Removing interface: batadv_slave_0
[  144.265481][ T5853] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  144.267960][ T5853] batman_adv: batadv0: Removing interface: batadv_slave_1
[  144.279201][ T5853] veth1_macvtap: left promiscuous mode
[  144.281097][ T5853] veth0_macvtap: left promiscuous mode
[  144.284604][ T9591] netlink: 'syz.0.1228': attribute type 1 has an invalid length.
[  144.284625][ T5853] veth1_vlan: left promiscuous mode
[  144.287169][ T9591] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1228'.
[  144.289371][ T5853] veth0_vlan: left promiscuous mode
[  144.494219][ T5826] Bluetooth: hci0: command tx timeout
[  144.536988][ T5853] team0 (unregistering): Port device team_slave_1 removed
[  144.558848][ T5853] team0 (unregistering): Port device team_slave_0 removed
[  144.805364][ T9597] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1231'.
[  144.811279][ T9475] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  144.847970][ T9475] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  144.857249][ T9475] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  144.864027][ T9475] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  144.901852][ T9608] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1234'.
[  144.908197][ T9608] netlink: 'syz.0.1234': attribute type 4 has an invalid length.
[  145.009542][ T9475] 8021q: adding VLAN 0 to HW filter on device bond0
[  145.022314][ T9475] 8021q: adding VLAN 0 to HW filter on device team0
[  145.031672][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[  145.034105][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[  145.046445][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[  145.048813][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[  145.061857][ T9620] netlink: 'syz.0.1237': attribute type 1 has an invalid length.
[  145.081019][ T9623] netlink: 'syz.2.1238': attribute type 1 has an invalid length.
[  145.091383][ T9623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1238'.
[  145.201509][ T9475] 8021q: adding VLAN 0 to HW filter on device batadv0
[  145.230560][ T9475] veth0_vlan: entered promiscuous mode
[  145.240725][ T9475] veth1_vlan: entered promiscuous mode
[  145.261095][ T9475] veth0_macvtap: entered promiscuous mode
[  145.276344][ T9475] veth1_macvtap: entered promiscuous mode
[  145.286226][ T9475] batman_adv: batadv0: Interface activated: batadv_slave_0
[  145.296959][ T9475] batman_adv: batadv0: Interface activated: batadv_slave_1
[  145.304827][ T9475] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  145.307545][ T9475] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  145.311171][ T9475] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  145.315542][ T9475] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  145.358469][ T9650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1248'.
[  145.361708][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  145.365399][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  145.397223][ T9650] tipc: Resetting bearer <eth:syzkaller0>
[  145.399271][ T9650] tipc: Resetting bearer <eth:syzkaller0>
[  145.407438][ T9650] netlink: 'syz.2.1248': attribute type 2 has an invalid length.
[  145.415141][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  145.417612][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  145.448559][ T9653] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1249'.
[  145.527388][ T9653] bond0 (unregistering): Released all slaves
[  145.606405][ T9663] netlink: 'syz.0.1251': attribute type 1 has an invalid length.
[  145.642787][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  145.645654][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  146.530600][ T9696] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  146.541301][ T9696] bond0 (unregistering): Released all slaves
[  146.656291][ T9705] pim6reg: entered allmulticast mode
[  146.659143][ T9707] pim6reg: left allmulticast mode
[  146.856804][ T9725] netdevsim0: mtu less than device minimum
[  146.920759][ T9716] netlink: 'syz.0.1271': attribute type 10 has an invalid length.
[  147.146017][ T9761] bridge_slave_1: default FDB implementation only supports local addresses
[  147.180840][ T9765] openvswitch: netlink: IP tunnel dst address not specified
[  147.201841][ T5853] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.977376][ T9781] netlink: 'syz.0.1295': attribute type 1 has an invalid length.
[  148.049033][ T5827] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  148.052199][ T5827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  148.055360][ T5827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  148.059078][ T5827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  148.061888][ T5827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  148.279209][ T9787] chnl_net:caif_netlink_parms(): no params data found
[  148.370106][ T9787] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.372550][ T9787] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.383654][ T9787] bridge_slave_0: entered allmulticast mode
[  148.386410][ T9787] bridge_slave_0: entered promiscuous mode
[  148.389598][ T9787] bridge0: port 2(bridge_slave_1) entered blocking state
[  148.392287][ T9787] bridge0: port 2(bridge_slave_1) entered disabled state
[  148.394847][ T9787] bridge_slave_1: entered allmulticast mode
[  148.397572][ T9787] bridge_slave_1: entered promiscuous mode
[  148.419972][ T9787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  148.428110][ T9787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  148.445117][ T9817] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  148.459005][ T9817] tunl0: left allmulticast mode
[  148.499716][ T9825] xt_hashlimit: size too large, truncated to 1048576
[  148.582596][ T9817] batadv_slave_0: left promiscuous mode
[  148.640327][ T9817] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  148.644391][ T9817] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  148.647823][ T9817] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  148.654234][ T9817] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  148.685346][ T9817] gretap1: left promiscuous mode
[  148.687139][ T9817] gretap1: left allmulticast mode
[  148.690433][ T9817] ip6gre1: left promiscuous mode
[  148.694982][ T9817] tipc: Resetting bearer <eth:syzkaller0>
[  148.698066][ T9817] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  148.701316][ T9817] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  148.769599][ T9787] team0: Port device team_slave_0 added
[  148.773653][ T9787] team0: Port device team_slave_1 added
[  148.811745][ T9787] batman_adv: batadv0: Adding interface: batadv_slave_0
[  148.817747][ T9787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  148.826982][ T9787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  148.836472][ T9842] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  148.839030][ T9842] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  148.850640][ T9787] batman_adv: batadv0: Adding interface: batadv_slave_1
[  148.853007][ T9787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  148.862091][ T9787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  148.897676][ T9848] netlink: 'syz.2.1316': attribute type 1 has an invalid length.
[  148.900993][ T9848] __nla_validate_parse: 14 callbacks suppressed
[  148.901001][ T9848] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1316'.
[  148.911439][ T9787] hsr_slave_0: entered promiscuous mode
[  148.913978][ T9787] hsr_slave_1: entered promiscuous mode
[  148.916110][ T9787] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  148.918505][ T9787] Cannot create hsr debugfs directory
[  148.920383][ T9850] netlink: 404 bytes leftover after parsing attributes in process `syz.0.1317'.
[  148.923196][ T9850] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1317'.
[  148.928312][ T9850] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1317'.
[  149.046002][ T9866] tipc: Resetting bearer <eth:syzkaller0>
[  149.063836][ T9868] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1323'.
[  149.150266][ T5853] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.184527][ T9883] validate_nla: 1 callbacks suppressed
[  149.184537][ T9883] netlink: 'syz.2.1330': attribute type 1 has an invalid length.
[  149.188353][ T5853] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.189684][ T9883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1330'.
[  149.235433][ T5853] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.243569][ T9889] bridge_slave_1: default FDB implementation only supports local addresses
[  149.307369][ T9896] netlink: 'syz.0.1335': attribute type 1 has an invalid length.
[  149.309971][ T9896] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1335'.
[  149.354844][ T9902] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1337'.
[  149.355678][ T5853] bridge_slave_1: left allmulticast mode
[  149.360504][ T5853] bridge_slave_1: left promiscuous mode
[  149.371480][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.377519][ T5853] bridge_slave_0: left allmulticast mode
[  149.379391][ T5853] bridge_slave_0: left promiscuous mode
[  149.381291][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.602943][ T5853] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  149.607405][ T5853] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  149.610954][ T5853] bond0 (unregistering): Released all slaves
[  149.667771][ T9912] xt_TCPMSS: Only works on TCP SYN packets
[  149.697474][ T9917] netlink: 'syz.2.1341': attribute type 11 has an invalid length.
[  149.701204][ T9917] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1341'.
[  149.800175][ T9922] batadv_slave_0: entered promiscuous mode
[  149.802122][ T9922] batadv_slave_0: entered allmulticast mode
[  149.838048][ T5853] hsr_slave_0: left promiscuous mode
[  149.840174][ T5853] hsr_slave_1: left promiscuous mode
[  149.842216][ T5853] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  149.844308][ T9925] netlink: 'syz.2.1344': attribute type 1 has an invalid length.
[  149.845366][ T5853] batman_adv: batadv0: Removing interface: batadv_slave_0
[  149.847337][ T9925] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1344'.
[  149.853035][ T5853] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  149.856394][ T5853] batman_adv: batadv0: Removing interface: batadv_slave_1
[  149.866657][ T5853] veth1_macvtap: left promiscuous mode
[  149.868461][ T5853] veth0_macvtap: left promiscuous mode
[  149.870224][ T5853] veth1_vlan: left promiscuous mode
[  149.871989][ T5853] veth0_vlan: left promiscuous mode
[  150.094352][ T5827] Bluetooth: hci0: command tx timeout
[  150.109806][ T5853] team0 (unregistering): Port device team_slave_1 removed
[  150.128245][ T5853] team0 (unregistering): Port device team_slave_0 removed
[  150.484303][ T9927] batadv0: left allmulticast mode
[  150.539064][ T9934] xt_hashlimit: size too large, truncated to 1048576
[  150.548946][ T9934] syz.0.1347: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1
[  150.557042][ T9927] batadv_slave_0: left promiscuous mode
[  150.558889][ T9927] batadv_slave_0: left allmulticast mode
[  150.563639][ T9934] CPU: 1 UID: 0 PID: 9934 Comm: syz.0.1347 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  150.563653][ T9934] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  150.563658][ T9934] Call Trace:
[  150.563662][ T9934]  <TASK>
[  150.563666][ T9934]  dump_stack_lvl+0x189/0x250
[  150.563684][ T9934]  ? __pfx_dump_stack_lvl+0x10/0x10
[  150.563695][ T9934]  ? __pfx__printk+0x10/0x10
[  150.563704][ T9934]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  150.563714][ T9934]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  150.563722][ T9934]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  150.563730][ T9934]  warn_alloc+0x214/0x310
[  150.563742][ T9934]  ? __pfx_warn_alloc+0x10/0x10
[  150.563753][ T9934]  ? __get_vm_area_node+0x28f/0x300
[  150.563761][ T9934]  ? htable_create+0xfc/0x7a0
[  150.563773][ T9934]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  150.563792][ T9934]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  150.563801][ T9934]  ? rcu_is_watching+0x15/0xb0
[  150.563813][ T9934]  ? htable_create+0xfc/0x7a0
[  150.563822][ T9934]  ? htable_create+0xfc/0x7a0
[  150.563830][ T9934]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  150.563838][ T9934]  ? htable_create+0xfc/0x7a0
[  150.563846][ T9934]  ? hashlimit_pernet+0x23/0x240
[  150.563858][ T9934]  htable_create+0xfc/0x7a0
[  150.563870][ T9934]  hashlimit_mt_check_common+0x719/0xa10
[  150.563890][ T9934]  hashlimit_mt_check_v1+0x221/0x360
[  150.563901][ T9934]  ? __pfx_hashlimit_mt_check_v1+0x10/0x10
[  150.563939][ T9934]  ? xt_find_match+0x1f7/0x250
[  150.563953][ T9934]  xt_check_match+0x3d1/0xab0
[  150.563962][ T9934]  ? __pfx___mutex_lock+0x10/0x10
[  150.563976][ T9934]  ? __pfx_xt_check_match+0x10/0x10
[  150.563986][ T9934]  ? pcpu_alloc_noprof+0xfdd/0x16b0
[  150.563997][ T9934]  ? xt_find_match+0x1f7/0x250
[  150.564008][ T9934]  translate_table+0x1553/0x2040
[  150.564026][ T9934]  ? __pfx_translate_table+0x10/0x10
[  150.564035][ T9934]  ? __might_fault+0xb0/0x130
[  150.564049][ T9934]  ? _copy_from_user+0x94/0xb0
[  150.564059][ T9934]  do_ip6t_set_ctl+0x970/0xce0
[  150.564070][ T9934]  ? rcu_is_watching+0x15/0xb0
[  150.564080][ T9934]  ? __pfx_do_ip6t_set_ctl+0x10/0x10
[  150.564096][ T9934]  ? __pfx___mutex_lock+0x10/0x10
[  150.564107][ T9934]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  150.564122][ T9934]  ? __pfx_futex_wait+0x10/0x10
[  150.564140][ T9934]  nf_setsockopt+0x26f/0x290
[  150.564152][ T9934]  rawv6_setsockopt+0x23b/0x5b0
[  150.564163][ T9934]  ? __lock_acquire+0xab9/0xd20
[  150.564174][ T9934]  ? __pfx_rawv6_setsockopt+0x10/0x10
[  150.564183][ T9934]  ? aa_sock_opt_perm+0x74/0x110
[  150.564194][ T9934]  ? sock_common_setsockopt+0x36/0xc0
[  150.564201][ T9934]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  150.564213][ T9934]  do_sock_setsockopt+0x25a/0x3e0
[  150.564223][ T9934]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  150.564233][ T9934]  ? __fget_files+0x2a/0x420
[  150.564244][ T9934]  __x64_sys_setsockopt+0x18b/0x220
[  150.564255][ T9934]  do_syscall_64+0xfa/0x3b0
[  150.564261][ T9934]  ? lockdep_hardirqs_on+0x9c/0x150
[  150.564271][ T9934]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.564278][ T9934]  ? exc_page_fault+0x9f/0xf0
[  150.564288][ T9934]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.564295][ T9934] RIP: 0033:0x7f40a198e929
[  150.564304][ T9934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  150.564310][ T9934] RSP: 002b:00007f409f7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  150.564335][ T9934] RAX: ffffffffffffffda RBX: 00007f40a1bb6160 RCX: 00007f40a198e929
[  150.564340][ T9934] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000024
[  150.564344][ T9934] RBP: 00007f40a1a10b39 R08: 00000000000004c0 R09: 0000000000000000
[  150.564349][ T9934] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000000
[  150.564353][ T9934] R13: 0000000000000000 R14: 00007f40a1bb6160 R15: 00007fff6e9fcb98
[  150.564364][ T9934]  </TASK>
[  150.564406][ T9934] Mem-Info:
[  150.691720][ T9934] active_anon:5329 inactive_anon:0 isolated_anon:0
[  150.691720][ T9934]  active_file:1111 inactive_file:38247 isolated_file:0
[  150.691720][ T9934]  unevictable:1768 dirty:162 writeback:0
[  150.691720][ T9934]  slab_reclaimable:9633 slab_unreclaimable:65249
[  150.691720][ T9934]  mapped:18303 shmem:2476 pagetables:926
[  150.691720][ T9934]  sec_pagetables:0 bounce:0
[  150.691720][ T9934]  kernel_misc_reclaimable:0
[  150.691720][ T9934]  free:282186 free_pcp:21729 free_cma:0
[  150.706170][ T9934] Node 0 active_anon:10668kB inactive_anon:0kB active_file:3468kB inactive_file:147012kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:10420kB dirty:304kB writeback:0kB shmem:4708kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5280kB pagetables:1620kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  150.716707][ T9934] Node 1 active_anon:10648kB inactive_anon:0kB active_file:976kB inactive_file:5976kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:62792kB dirty:344kB writeback:0kB shmem:5196kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6944kB pagetables:2084kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  150.727212][ T9934] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  150.736133][ T9934] lowmem_reserve[]: 0 815 815 815 815
[  150.737886][ T9934] Node 0 DMA32 free:283196kB boost:0kB min:33716kB low:42144kB high:50572kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10668kB inactive_anon:0kB active_file:3468kB inactive_file:147012kB unevictable:3536kB writepending:304kB present:1556484kB managed:834740kB mlocked:0kB bounce:0kB free_pcp:47188kB local_pcp:20660kB free_cma:0kB
[  150.748272][ T9934] lowmem_reserve[]: 0 0 0 0 0
[  150.749864][ T9934] Node 1 DMA32 free:458616kB boost:0kB min:19168kB low:23960kB high:28752kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  150.759624][ T9934] lowmem_reserve[]: 0 0 854 854 854
[  150.761326][ T9934] Node 1 Normal free:371572kB boost:0kB min:36576kB low:45720kB high:54864kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10632kB inactive_anon:0kB active_file:976kB inactive_file:5976kB unevictable:3536kB writepending:344kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:39948kB local_pcp:19276kB free_cma:0kB
[  150.771342][ T9934] lowmem_reserve[]: 0 0 0 0 0
[  150.772900][ T9934] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  150.776951][ T9934] Node 0 DMA32: 75*4kB (UME) 942*8kB (UM) 317*16kB (UM) 493*32kB (UM) 258*64kB (UM) 109*128kB (UM) 45*256kB (UM) 27*512kB (UME) 14*1024kB (UM) 10*2048kB (UME) 40*4096kB (M) = 283148kB
[  150.783632][ T9934] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  150.788519][ T9934] Node 1 Normal: 517*4kB (UM) 356*8kB (UME) 176*16kB (UME) 40*32kB (ME) 21*64kB (UME) 26*128kB (UME) 18*256kB (UM) 12*512kB (UME) 7*1024kB (UM) 4*2048kB (UM) 81*4096kB (M) = 371572kB
[  150.794198][ T9934] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  150.797231][ T9934] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  150.800234][ T9934] 41834 total pagecache pages
[  150.801828][ T9934] 0 pages in swap cache
[  150.803254][ T9934] Free swap  = 124996kB
[  150.804811][ T9934] Total swap = 124996kB
[  150.806213][ T9934] 786301 pages RAM
[  150.807501][ T9934] 0 pages HighMem/MovableOnly
[  150.807569][ T9927] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  150.809055][ T9934] 240368 pages reserved
[  150.809078][ T9934] 0 pages cma reserved
[  150.816805][ T9927] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  150.819694][ T9927] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  150.822572][ T9927] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  150.860205][ T9927] macsec1: left promiscuous mode
[  150.863955][ T9927] macsec1: left allmulticast mode
[  150.866368][ T9927] macsec2: left promiscuous mode
[  150.871566][ T9927] bond1: left promiscuous mode
[  150.878304][ T9927] tipc: Resetting bearer <eth:syzkaller0>
[  150.880702][ T9927] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  150.883105][ T9927] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  150.894332][ T9927] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  150.897354][ T9927] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  150.900369][ T9927] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  150.904475][ T9927] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  150.910157][ T9927] bridge3: left allmulticast mode
[  150.924679][ T9787] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  150.931132][ T9787] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  150.948691][ T9787] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  150.957139][ T9787] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  151.068232][ T9787] 8021q: adding VLAN 0 to HW filter on device bond0
[  151.085961][ T9787] 8021q: adding VLAN 0 to HW filter on device team0
[  151.097766][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state
[  151.100066][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state
[  151.117945][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state
[  151.120238][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state
[  151.129103][ T9956] SET target dimension over the limit!
[  151.153300][ T9787] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  151.196660][ T9966] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  151.245864][ T9787] 8021q: adding VLAN 0 to HW filter on device batadv0
[  151.273021][ T9787] veth0_vlan: entered promiscuous mode
[  151.286188][ T9787] veth1_vlan: entered promiscuous mode
[  151.305024][ T9787] veth0_macvtap: entered promiscuous mode
[  151.310562][ T9978] syz_tun: entered allmulticast mode
[  151.312521][ T9787] veth1_macvtap: entered promiscuous mode
[  151.326360][ T9978] dvmrp8: entered allmulticast mode
[  151.329593][ T9980] bridge_slave_1: default FDB implementation only supports local addresses
[  151.335443][ T9787] batman_adv: batadv0: Interface activated: batadv_slave_0
[  151.341306][ T9787] batman_adv: batadv0: Interface activated: batadv_slave_1
[  151.347450][ T9787] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  151.350406][ T9787] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  151.353113][ T9787] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  151.356663][ T9787] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  151.403001][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  151.407465][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  151.424392][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  151.427549][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  151.608083][ T9998] netlink: 'syz.2.1365': attribute type 1 has an invalid length.
[  151.696875][T10006] netlink: 'syz.2.1369': attribute type 1 has an invalid length.
[  151.804708][T10016] bridge_slave_1: default FDB implementation only supports local addresses
[  151.910840][T10024] netlink: 'syz.2.1377': attribute type 4 has an invalid length.
[  152.068380][T10036] netlink: 'syz.2.1383': attribute type 1 has an invalid length.
[  152.106888][T10038] Cannot find add_set index 0 as target
[  152.124019][ T9977] syz_tun: left allmulticast mode
[  152.159164][T10044] bridge_slave_1: default FDB implementation only supports local addresses
[  152.284265][T10058] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  152.330380][T10066] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  152.421294][T10078] x_tables: duplicate underflow at hook 1
[  153.396157][ T5852] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  154.323616][T10128] __nla_validate_parse: 17 callbacks suppressed
[  154.323628][T10128] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1420'.
[  154.438691][T10135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  154.442108][T10135] netlink: 'syz.0.1423': attribute type 3 has an invalid length.
[  154.447993][ T5826] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  154.451869][ T5826] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  154.455787][ T5826] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  154.459366][ T5826] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  154.462206][ T5826] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  154.496965][T10138] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1424'.
[  154.597350][T10133] chnl_net:caif_netlink_parms(): no params data found
[  154.658972][T10133] bridge0: port 1(bridge_slave_0) entered blocking state
[  154.661469][T10133] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.664081][T10133] bridge_slave_0: entered allmulticast mode
[  154.666728][T10133] bridge_slave_0: entered promiscuous mode
[  154.670010][T10133] bridge0: port 2(bridge_slave_1) entered blocking state
[  154.672464][T10133] bridge0: port 2(bridge_slave_1) entered disabled state
[  154.676306][T10133] bridge_slave_1: entered allmulticast mode
[  154.679056][T10133] bridge_slave_1: entered promiscuous mode
[  154.700293][T10133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  154.704473][T10149] xt_cgroup: path and classid specified
[  154.708286][T10149] netlink: zone id is out of range
[  154.709985][T10149] netlink: zone id is out of range
[  154.711733][T10149] netlink: zone id is out of range
[  154.717061][T10133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  154.723565][T10149] netlink: zone id is out of range
[  154.725356][T10149] netlink: zone id is out of range
[  154.728825][T10149] netlink: zone id is out of range
[  154.730499][T10149] netlink: zone id is out of range
[  154.732178][T10149] netlink: zone id is out of range
[  154.749817][T10149] netlink: zone id is out of range
[  154.758850][T10133] team0: Port device team_slave_0 added
[  154.762209][T10133] team0: Port device team_slave_1 added
[  154.790486][T10133] batman_adv: batadv0: Adding interface: batadv_slave_0
[  154.792801][T10133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  154.802482][T10133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  154.806992][T10133] batman_adv: batadv0: Adding interface: batadv_slave_1
[  154.809329][T10133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  154.821026][T10133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  154.847752][T10133] hsr_slave_0: entered promiscuous mode
[  154.850225][T10133] hsr_slave_1: entered promiscuous mode
[  154.852343][T10133] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  154.856017][T10133] Cannot create hsr debugfs directory
[  155.049632][T10159] netlink: 'syz.0.1428': attribute type 1 has an invalid length.
[  155.155589][T10166] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1430'.
[  155.208571][T10170] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1432'.
[  155.268341][ T5852] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.296774][   T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  155.299421][   T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  155.321884][ T5852] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.325776][    T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  155.346205][T10182] netlink: 'syz.0.1437': attribute type 1 has an invalid length.
[  155.348770][T10182] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1437'.
[  155.383788][ T5852] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.440842][T10188] xt_CT: You must specify a L4 protocol and not use inversions on it
[  155.458594][ T5852] bridge_slave_1: left allmulticast mode
[  155.463314][ T5852] bridge_slave_1: left promiscuous mode
[  155.473655][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.481553][ T5852] bridge_slave_0: left allmulticast mode
[  155.484364][ T5852] bridge_slave_0: left promiscuous mode
[  155.486602][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.716720][ T5852] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  155.720875][ T5852] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  155.724730][ T5852] bond0 (unregistering): Released all slaves
[  155.744588][    T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  155.796243][T10199] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  155.798732][T10199] IPv6: NLM_F_CREATE should be set when creating new route
[  155.801157][T10199] IPv6: NLM_F_CREATE should be set when creating new route
[  155.803632][T10199] IPv6: NLM_F_CREATE should be set when creating new route
[  155.858080][T10205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1448'.
[  155.860984][T10205] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1448'.
[  155.864098][T10205] netlink: 'syz.2.1448': attribute type 15 has an invalid length.
[  155.867112][T10205] netlink: 'syz.2.1448': attribute type 18 has an invalid length.
[  155.922861][T10214] netlink: 'syz.2.1451': attribute type 2 has an invalid length.
[  155.928253][T10214] netlink: 'syz.2.1451': attribute type 1 has an invalid length.
[  155.931379][T10214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1451'.
[  155.988670][T10219] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1451'.
[  156.084167][ T5852] hsr_slave_0: left promiscuous mode
[  156.087187][ T5852] hsr_slave_1: left promiscuous mode
[  156.089212][ T5852] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  156.091569][ T5852] batman_adv: batadv0: Removing interface: batadv_slave_0
[  156.096071][ T5852] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  156.098435][ T5852] batman_adv: batadv0: Removing interface: batadv_slave_1
[  156.104114][    T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  156.116247][ T5852] veth1_macvtap: left promiscuous mode
[  156.118039][ T5852] veth0_macvtap: left promiscuous mode
[  156.119838][ T5852] veth1_vlan: left promiscuous mode
[  156.121545][ T5852] veth0_vlan: left promiscuous mode
[  156.380199][ T5852] team0 (unregistering): Port device team_slave_1 removed
[  156.400764][ T5852] team0 (unregistering): Port device team_slave_0 removed
[  156.503532][ T5827] Bluetooth: hci0: command tx timeout
[  156.708883][T10133] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  156.719884][T10133] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  156.729000][T10133] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  156.744450][T10133] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  156.768747][T10238] bridge_slave_1: default FDB implementation only supports local addresses
[  156.833932][T10133] 8021q: adding VLAN 0 to HW filter on device bond0
[  156.843709][T10133] 8021q: adding VLAN 0 to HW filter on device team0
[  156.848852][ T6808] bridge0: port 1(bridge_slave_0) entered blocking state
[  156.851581][ T6808] bridge0: port 1(bridge_slave_0) entered forwarding state
[  156.898640][T10133] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  156.902865][T10133] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  156.919024][ T6808] bridge0: port 2(bridge_slave_1) entered blocking state
[  156.921625][ T6808] bridge0: port 2(bridge_slave_1) entered forwarding state
[  157.034706][T10133] 8021q: adding VLAN 0 to HW filter on device batadv0
[  157.049183][T10271] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  157.051979][T10271] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  157.058307][T10271] tipc: Resetting bearer <eth:syzkaller0>
[  157.095314][T10275] Bluetooth: MGMT ver 1.23
[  157.096476][T10133] veth0_vlan: entered promiscuous mode
[  157.101648][T10133] veth1_vlan: entered promiscuous mode
[  157.143256][T10277] netlink: 'syz.0.1467': attribute type 3 has an invalid length.
[  157.143982][ T5927] ==================================================================
[  157.148286][ T5927] BUG: KASAN: slab-use-after-free in __mutex_lock+0x738/0xe80
[  157.150622][ T5927] Read of size 8 at addr ffff8881126980a0 by task khidpd_04585505/5927
[  157.154106][ T5927] 
[  157.154978][ T5927] CPU: 0 UID: 0 PID: 5927 Comm: khidpd_04585505 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  157.154989][ T5927] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  157.154993][ T5927] Call Trace:
[  157.154997][ T5927]  <TASK>
[  157.155001][ T5927]  dump_stack_lvl+0x189/0x250
[  157.155014][ T5927]  ? __virt_addr_valid+0x1c8/0x5c0
[  157.155022][ T5927]  ? rcu_is_watching+0x15/0xb0
[  157.155032][ T5927]  ? __kasan_check_byte+0x12/0x40
[  157.155040][ T5927]  ? __pfx_dump_stack_lvl+0x10/0x10
[  157.155050][ T5927]  ? rcu_is_watching+0x15/0xb0
[  157.155059][ T5927]  ? lock_release+0x4b/0x3e0
[  157.155070][ T5927]  ? __virt_addr_valid+0x1c8/0x5c0
[  157.155076][ T5927]  ? __virt_addr_valid+0x4a5/0x5c0
[  157.155083][ T5927]  print_report+0xd2/0x2b0
[  157.155093][ T5927]  ? __mutex_lock+0x738/0xe80
[  157.155103][ T5927]  kasan_report+0x118/0x150
[  157.155110][ T5927]  ? __mutex_lock+0x738/0xe80
[  157.155122][ T5927]  __mutex_lock+0x738/0xe80
[  157.155131][ T5927]  ? __mutex_lock+0x51b/0xe80
[  157.155142][ T5927]  ? l2cap_unregister_user+0x6a/0x1b0
[  157.155153][ T5927]  ? __pfx___mutex_lock+0x10/0x10
[  157.155163][ T5927]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  157.155174][ T5927]  l2cap_unregister_user+0x6a/0x1b0
[  157.155185][ T5927]  hidp_session_thread+0x3c9/0x410
[  157.155197][ T5927]  ? __pfx_hidp_session_thread+0x10/0x10
[  157.155207][ T5927]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  157.155215][ T5927]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  157.155226][ T5927]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  157.155236][ T5927]  ? __kthread_parkme+0x7b/0x200
[  157.155243][ T5927]  ? __kthread_parkme+0x1a1/0x200
[  157.155250][ T5927]  kthread+0x711/0x8a0
[  157.155263][ T5927]  ? __pfx_hidp_session_thread+0x10/0x10
[  157.155273][ T5927]  ? __pfx_kthread+0x10/0x10
[  157.155281][ T5927]  ? _raw_spin_unlock_irq+0x23/0x50
[  157.155289][ T5927]  ? lockdep_hardirqs_on+0x9c/0x150
[  157.155299][ T5927]  ? __pfx_kthread+0x10/0x10
[  157.155306][ T5927]  ret_from_fork+0x3fc/0x770
[  157.155317][ T5927]  ? __pfx_ret_from_fork+0x10/0x10
[  157.155327][ T5927]  ? __switch_to_asm+0x39/0x70
[  157.155334][ T5927]  ? __switch_to_asm+0x33/0x70
[  157.155340][ T5927]  ? __pfx_kthread+0x10/0x10
[  157.155347][ T5927]  ret_from_fork_asm+0x1a/0x30
[  157.155357][ T5927]  </TASK>
[  157.155359][ T5927] 
[  157.227232][ T5927] Allocated by task 5828:
[  157.228618][ T5927]  kasan_save_track+0x3e/0x80
[  157.230123][ T5927]  __kasan_kmalloc+0x93/0xb0
[  157.231582][ T5927]  __kmalloc_noprof+0x27a/0x4f0
[  157.233132][ T5927]  hci_alloc_dev_priv+0x28/0x2040
[  157.234730][ T5927]  vhci_create_device+0x120/0x6e0
[  157.236354][ T5927]  vhci_write+0x3ce/0x4a0
[  157.237730][ T5927]  vfs_write+0x54b/0xa90
[  157.239066][ T5927]  ksys_write+0x145/0x250
[  157.240413][ T5927]  do_syscall_64+0xfa/0x3b0
[  157.241885][ T5927]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  157.243716][ T5927] 
[  157.244500][ T5927] Freed by task 5828:
[  157.245757][ T5927]  kasan_save_track+0x3e/0x80
[  157.247255][ T5927]  kasan_save_free_info+0x46/0x50
[  157.248841][ T5927]  __kasan_slab_free+0x62/0x70
[  157.250378][ T5927]  kfree+0x18e/0x440
[  157.251629][ T5927]  bt_host_release+0x82/0x90
[  157.253094][ T5927]  device_release+0x9c/0x1c0
[  157.254573][ T5927]  kobject_put+0x22b/0x480
[  157.256027][ T5927]  vhci_release+0x88/0xd0
[  157.257393][ T5927]  __fput+0x44c/0xa70
[  157.258663][ T5927]  task_work_run+0x1d4/0x260
[  157.260109][ T5927]  do_exit+0x6b5/0x22e0
[  157.261442][ T5927]  do_group_exit+0x21c/0x2d0
[  157.262884][ T5927]  __x64_sys_exit_group+0x3f/0x40
[  157.264456][ T5927]  x64_sys_call+0x21ba/0x21c0
[  157.265911][ T5927]  do_syscall_64+0xfa/0x3b0
[  157.267347][ T5927]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  157.269167][ T5927] 
[  157.269944][ T5927] Last potentially related work creation:
[  157.271889][ T5927]  kasan_save_stack+0x3e/0x60
[  157.273414][ T5927]  kasan_record_aux_stack+0xbd/0xd0
[  157.275075][ T5927]  insert_work+0x3d/0x330
[  157.276427][ T5927]  __queue_work+0xbd9/0xfe0
[  157.277850][ T5927]  queue_work_on+0x181/0x270
[  157.279290][ T5927]  process_scheduled_works+0xae1/0x17b0
[  157.281018][ T5927]  worker_thread+0x8a0/0xda0
[  157.282513][ T5927]  kthread+0x711/0x8a0
[  157.283824][ T5927]  ret_from_fork+0x3fc/0x770
[  157.285294][ T5927]  ret_from_fork_asm+0x1a/0x30
[  157.286799][ T5927] 
[  157.287567][ T5927] Second to last potentially related work creation:
[  157.289612][ T5927]  kasan_save_stack+0x3e/0x60
[  157.291119][ T5927]  kasan_record_aux_stack+0xbd/0xd0
[  157.292744][ T5927]  insert_work+0x3d/0x330
[  157.294156][ T5927]  __queue_work+0xcfc/0xfe0
[  157.295656][ T5927]  call_timer_fn+0x17e/0x5f0
[  157.297136][ T5927]  __run_timer_base+0x646/0x860
[  157.298670][ T5927]  run_timer_softirq+0xb7/0x180
[  157.300212][ T5927]  handle_softirqs+0x286/0x870
[  157.301743][ T5927]  __irq_exit_rcu+0xca/0x1f0
[  157.303213][ T5927]  irq_exit_rcu+0x9/0x30
[  157.304537][ T5927]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  157.306254][ T5927]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  157.308102][ T5927] 
[  157.308863][ T5927] The buggy address belongs to the object at ffff888112698000
[  157.308863][ T5927]  which belongs to the cache kmalloc-8k of size 8192
[  157.313128][ T5927] The buggy address is located 160 bytes inside of
[  157.313128][ T5927]  freed 8192-byte region [ffff888112698000, ffff88811269a000)
[  157.317358][ T5927] 
[  157.318157][ T5927] The buggy address belongs to the physical page:
[  157.320174][ T5927] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x112698
[  157.322978][ T5927] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  157.325608][ T5927] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  157.328016][ T5927] page_type: f5(slab)
[  157.329286][ T5927] raw: 057ff00000000040 ffff88801a442280 ffffea000480a000 dead000000000002
[  157.331972][ T5927] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  157.334613][ T5927] head: 057ff00000000040 ffff88801a442280 ffffea000480a000 dead000000000002
[  157.337305][ T5927] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  157.339972][ T5927] head: 057ff00000000003 ffffea000449a601 00000000ffffffff 00000000ffffffff
[  157.342703][ T5927] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  157.345399][ T5927] page dumped because: kasan: bad access detected
[  157.347390][ T5927] page_owner tracks the page as allocated
[  157.349158][ T5927] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5828, tgid 5828 (syz-executor), ts 62721403867, free_ts 62682717444
[  157.355613][ T5927]  post_alloc_hook+0x240/0x2a0
[  157.357119][ T5927]  get_page_from_freelist+0x21e4/0x22c0
[  157.358832][ T5927]  __alloc_frozen_pages_noprof+0x181/0x370
[  157.360677][ T5927]  alloc_pages_mpol+0x232/0x4a0
[  157.362255][ T5927]  allocate_slab+0x8a/0x3b0
[  157.363653][ T5927]  ___slab_alloc+0xbfc/0x1480
[  157.365166][ T5927]  __kmalloc_noprof+0x305/0x4f0
[  157.366673][ T5927]  hci_alloc_dev_priv+0x28/0x2040
[  157.368297][ T5927]  vhci_create_device+0x120/0x6e0
[  157.369882][ T5927]  vhci_write+0x3ce/0x4a0
[  157.371262][ T5927]  vfs_write+0x54b/0xa90
[  157.372613][ T5927]  ksys_write+0x145/0x250
[  157.373962][ T5927]  do_syscall_64+0xfa/0x3b0
[  157.375414][ T5927]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  157.377265][ T5927] page last free pid 5817 tgid 5817 stack trace:
[  157.379209][ T5927]  __free_frozen_pages+0xc71/0xe70
[  157.380798][ T5927]  __folio_put+0x21b/0x2c0
[  157.382218][ T5927]  skb_release_data+0x49a/0x7c0
[  157.383744][ T5927]  napi_consume_skb+0x158/0x1e0
[  157.385284][ T5927]  net_rx_action+0x51b/0xe30
[  157.386740][ T5927]  handle_softirqs+0x286/0x870
[  157.388287][ T5927]  __irq_exit_rcu+0xca/0x1f0
[  157.389736][ T5927]  irq_exit_rcu+0x9/0x30
[  157.391077][ T5927]  common_interrupt+0xbb/0xe0
[  157.392543][ T5927]  asm_common_interrupt+0x26/0x40
[  157.394122][ T5927] 
[  157.394900][ T5927] Memory state around the buggy address:
[  157.396625][ T5927]  ffff888112697f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  157.399096][ T5927]  ffff888112698000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  157.401606][ T5927] >ffff888112698080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  157.404052][ T5927]                                ^
[  157.405638][ T5927]  ffff888112698100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  157.408142][ T5927]  ffff888112698180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  157.410593][ T5927] ==================================================================
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  157.413769][ T5927] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  157.416046][ T5927] CPU: 0 UID: 0 PID: 5927 Comm: khidpd_04585505 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  157.420001][ T5927] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  157.423098][ T5927] Call Trace:
[  157.424162][ T5927]  <TASK>
[  157.425102][ T5927]  dump_stack_lvl+0x99/0x250
[  157.426547][ T5927]  ? __asan_memcpy+0x40/0x70
[  157.427995][ T5927]  ? __pfx_dump_stack_lvl+0x10/0x10
[  157.429640][ T5927]  ? __pfx__printk+0x10/0x10
[  157.431124][ T5927]  panic+0x2db/0x790
[  157.432411][ T5927]  ? __pfx_panic+0x10/0x10
[  157.433810][ T5927]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  157.435681][ T5927]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  157.437636][ T5927]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  157.439605][ T5927]  ? print_memory_metadata+0x314/0x400
[  157.441346][ T5927]  ? __mutex_lock+0x738/0xe80
[  157.442817][ T5927]  check_panic_on_warn+0x89/0xb0
[  157.444381][ T5927]  ? __mutex_lock+0x738/0xe80
[  157.445860][ T5927]  end_report+0x78/0x160
[  157.447219][ T5927]  kasan_report+0x129/0x150
[  157.448660][ T5927]  ? __mutex_lock+0x738/0xe80
[  157.450165][ T5927]  __mutex_lock+0x738/0xe80
[  157.451577][ T5927]  ? __mutex_lock+0x51b/0xe80
[  157.453071][ T5927]  ? l2cap_unregister_user+0x6a/0x1b0
[  157.454769][ T5927]  ? __pfx___mutex_lock+0x10/0x10
[  157.456351][ T5927]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  157.458188][ T5927]  l2cap_unregister_user+0x6a/0x1b0
[  157.459809][ T5927]  hidp_session_thread+0x3c9/0x410
[  157.461548][ T5927]  ? __pfx_hidp_session_thread+0x10/0x10
[  157.463337][ T5927]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  157.465243][ T5927]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  157.467211][ T5927]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  157.469171][ T5927]  ? __kthread_parkme+0x7b/0x200
[  157.470737][ T5927]  ? __kthread_parkme+0x1a1/0x200
[  157.472314][ T5927]  kthread+0x711/0x8a0
[  157.473694][ T5927]  ? __pfx_hidp_session_thread+0x10/0x10
[  157.475948][ T5927]  ? __pfx_kthread+0x10/0x10
[  157.477858][ T5927]  ? _raw_spin_unlock_irq+0x23/0x50
[  157.479993][ T5927]  ? lockdep_hardirqs_on+0x9c/0x150
[  157.482113][ T5927]  ? __pfx_kthread+0x10/0x10
[  157.483999][ T5927]  ret_from_fork+0x3fc/0x770
[  157.485905][ T5927]  ? __pfx_ret_from_fork+0x10/0x10
[  157.488010][ T5927]  ? __switch_to_asm+0x39/0x70
[  157.489975][ T5927]  ? __switch_to_asm+0x33/0x70
[  157.491901][ T5927]  ? __pfx_kthread+0x10/0x10
[  157.493809][ T5927]  ret_from_fork_asm+0x1a/0x30
[  157.495806][ T5927]  </TASK>
[  157.497800][ T5927] Kernel Offset: disabled
[  157.499678][ T5927] Rebooting in 86400 seconds..

VM DIAGNOSIS:
11:14:02  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000038 RBX=0000000000000038 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000446f370
R8 =ffff888021048237 R9 =1ffff11004209046 R10=dffffc0000000000 R11=ffffffff85474610
R12=dffffc0000000000 R13=ffffffff99ac48fb R14=ffffffff99dc9760 R15=0000000000000000
RIP=ffffffff8547468c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8650000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f8d4eae7d60 CR3=0000000028068000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00ff000000000000 ff00000000000000 XMM05=0000000000000121 00000000352e0000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffff0000 ffffffff0000ffff XMM09=0000000000000121 0000000035320000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=70623f6687b7ad00 RBX=0000000000000000 RCX=70623f6687b7ad00 RDX=0000000000000000
RSI=ffffffff8db6efe6 RDI=ffffffff8be28d40 RBP=ffffffff822f099a RSP=ffffc9000175f4b8
R8 =0000000000000000 R9 =ffffffff822f099a R10=dffffc0000000000 R11=fffff940008b9db9
R12=0000000000000002 R13=ffffffff8e13ef20 R14=0000000000000000 R15=0000000000000246
RIP=ffffffff819e22e5 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c50000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c387e5d CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=43d2ccb215008001 0219cf916f56f5e4
XMM02=eb2e3f7cbcba3407 bd91ade094ed95f2 XMM03=1f410f883b0c15df 83e5176bd13dd400
XMM04=014f0aada158e687 5571d5b467b5a646 XMM05=0000000000000000 0000878ad3b83fe6
XMM06=750100d39f42330e 27acde4805083fc0 XMM07=998ad4f041000b35 b0051d73014f0aad
XMM08=a158e6875571d5b4 67b5a6461f410f88 XMM09=0000000000000000 00007f40a1a11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
