last executing test programs:

1m32.18122569s ago: executing program 2 (id=1023):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4)

1m26.989829304s ago: executing program 2 (id=1023):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4)

1m20.500271494s ago: executing program 2 (id=1023):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4)

1m15.518381342s ago: executing program 2 (id=1023):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4)

1m9.83592207s ago: executing program 2 (id=1023):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4)

1m4.671297209s ago: executing program 1 (id=2218):
pipe(&(0x7f0000000480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
splice(r0, 0x0, r1, &(0x7f00000002c0), 0x6, 0x0)

1m4.670127941s ago: executing program 1 (id=2220):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000001000010400000000ffdbdf2500000084", @ANYRES32=0x0, @ANYBLOB="83200000c6010500240012800b00010067656e65766500001400028005000c000000000008000100010000001400030067656e65766531"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4000880)

1m4.570793207s ago: executing program 1 (id=2221):
r0 = socket(0xa, 0x40000000002, 0x0)
getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000240)={'filter\x00', 0x0, 0x0, 0x0, [0x2, 0x8, 0x9, 0x3, 0x37f7, 0x4b3]}, &(0x7f0000000480)=0x72)

1m4.509584944s ago: executing program 1 (id=2224):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=@newtaction={0xeb8, 0x30, 0x1, 0x0, 0x0, {}, [{0xea4, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0xfffffffe}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe54, 0x2, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x8}, [{}, {0x0, 0x4, 0x80000000, 0x0, 0x3}, {}, {0x1, 0x0, 0x0, 0x7fff, 0x0, 0xfffffffd}, {}, {0x0, 0xfffffffc, 0xfffffffd}, {}, {0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x25}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x100}, {0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xeffffffd, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x9, 0x2, 0xa46}, {}, {}, {0x6}, {}, {0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x1c69, 0x100}, {0x0, 0x0, 0x10000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x20, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x7, 0x9, 0x0, 0x0, 0x1}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x6}, {}, {0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5a9}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x80}, {}, {0x0, 0xfe}, {0x4, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x400}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff7ff}, {}, {0x0, 0x0, 0x0, 0x1, 0x8000}, {0x0, 0x3}, {0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x8001}, {0x0, 0x0, 0x0, 0xfffff800}, {}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x2400000}, {0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffe00}, {}, {0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x0, 0x8}, {0x9}, {0x9}, {}, {0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, {}, {}, {0x400}, {0x0, 0xfffffffd}, {0x0, 0xffffffff}, {0x0, 0x0, 0xabd}, {}, {0x0, 0xdd86}, {0xfffffffd}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {0x40000, 0x0, 0x0, 0x0, 0x0, 0x451d}, {}, {0x0, 0x0, 0x0, 0x0, 0x40000}, {0x4}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffe00}, {0x0, 0x80000}, {}, {}, {0x80000000, 0x3}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x212, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x4000000}], [{}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7}, {}, {0x0, 0x1}, {0x3}, {}, {}, {0x0, 0x1}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {0x2}, {0x4}, {0x3}, {0x2, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {0x5, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xe}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {}, {0x7}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb8}}, 0x0)

1m4.450519167s ago: executing program 1 (id=2226):
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[], 0x94}}, 0x0)

1m4.450260749s ago: executing program 2 (id=1023):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4)

1m2.660695027s ago: executing program 1 (id=2228):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0500"/12, @ANYRES32, @ANYBLOB="32e9e2ea96a40c15d21508205a6760df4accede349e80480934cd518721af6b4396a53fee791c327f124133cbdcab939e100afa75a27d70e0ecb151074d25fd5be4684bb42a87055fa3a2afaddc0df9e62b738d48530ec97b52257a6b643aee689a0630dc10b547dcf9f469f", @ANYRES64=0x0], 0x10)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r0}, 0xc)
r1 = socket(0x8, 0x3, 0x0)
ioctl$sock_netrom_SIOCADDRT(r1, 0x61d8, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, 0x0, &(0x7f0000000080)='syzkaller\x00'}, 0x94)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b0000000e000000cc0002000600000005000000", @ANYRES32, @ANYBLOB="000000000000f24086caf666dd41c5fcef000000001e0000000000000000000ead2f1e7aeb2c9af4d4ca30edd468e49c913ccc7ad7b918d6d387ae5b6acee6dc9afa8aadc42e1706a46b190dbe97b785a3b1255f1854421605ccd9ebc824556f87a7cbc96fe5fe0ea545d4c05defb8f1076a1b699368e785ca2a68ba8360fba6d99ec32f5248fdcfdd048dcb1afa18d18176db766d3299057ef0f33fa3178aa394a25be8cd07d785455e3bf4e2f80e0561f13712badbafa3f65318d6d6d85ce0a51d6a58d237a8b6ff6d28ee48416f4e22eba29c762fd4b98dc4c41ff3c5567a7929637c4cfb1a03e0b6a5fbbe19c45c44d0d7ef9149ae404f20cb666dbeed1f9448c60a4c07c19c891c6c3991e2c4ece8072e2bfbfe4a060e3ba9cc6b007dc63c7388c3e85834e8ab57cf4142fed0a248227c4c77430155e8e39809f72995db519c1b849cc6b4352b5dc2bd5a8adc25ec396fdce40ccb2aa80d5b65316e79bb3def2cafdfc5a970555ff3bfe2207cb78c437702f8f332ceb8777afcff7fb2cbb2f4e50f5e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)='P', &(0x7f0000000740), 0x4af, r3}, 0x38)
syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'ipvlan1\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0ffe0000000000005000128009000100766c616e0000000040000280060001000000000004000480280003800ca10100400000000600000089e6784300040000000000000c00010006000000090000000600050088a800000800", @ANYRES32=r5], 0x8c}, 0x1, 0xba01}, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000080)=""/231, &(0x7f0000000180), &(0x7f0000000240), 0x2, r3}, 0x38)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002})
writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000080)="0bc3ff", 0x3}, {&(0x7f0000000000)='G', 0x1}, {&(0x7f0000000240)="d336bd7524", 0x5}], 0x3)

47.378068959s ago: executing program 32 (id=2228):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0500"/12, @ANYRES32, @ANYBLOB="32e9e2ea96a40c15d21508205a6760df4accede349e80480934cd518721af6b4396a53fee791c327f124133cbdcab939e100afa75a27d70e0ecb151074d25fd5be4684bb42a87055fa3a2afaddc0df9e62b738d48530ec97b52257a6b643aee689a0630dc10b547dcf9f469f", @ANYRES64=0x0], 0x10)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r0}, 0xc)
r1 = socket(0x8, 0x3, 0x0)
ioctl$sock_netrom_SIOCADDRT(r1, 0x61d8, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, 0x0, &(0x7f0000000080)='syzkaller\x00'}, 0x94)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b0000000e000000cc0002000600000005000000", @ANYRES32, @ANYBLOB="000000000000f24086caf666dd41c5fcef000000001e0000000000000000000ead2f1e7aeb2c9af4d4ca30edd468e49c913ccc7ad7b918d6d387ae5b6acee6dc9afa8aadc42e1706a46b190dbe97b785a3b1255f1854421605ccd9ebc824556f87a7cbc96fe5fe0ea545d4c05defb8f1076a1b699368e785ca2a68ba8360fba6d99ec32f5248fdcfdd048dcb1afa18d18176db766d3299057ef0f33fa3178aa394a25be8cd07d785455e3bf4e2f80e0561f13712badbafa3f65318d6d6d85ce0a51d6a58d237a8b6ff6d28ee48416f4e22eba29c762fd4b98dc4c41ff3c5567a7929637c4cfb1a03e0b6a5fbbe19c45c44d0d7ef9149ae404f20cb666dbeed1f9448c60a4c07c19c891c6c3991e2c4ece8072e2bfbfe4a060e3ba9cc6b007dc63c7388c3e85834e8ab57cf4142fed0a248227c4c77430155e8e39809f72995db519c1b849cc6b4352b5dc2bd5a8adc25ec396fdce40ccb2aa80d5b65316e79bb3def2cafdfc5a970555ff3bfe2207cb78c437702f8f332ceb8777afcff7fb2cbb2f4e50f5e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)='P', &(0x7f0000000740), 0x4af, r3}, 0x38)
syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'ipvlan1\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0ffe0000000000005000128009000100766c616e0000000040000280060001000000000004000480280003800ca10100400000000600000089e6784300040000000000000c00010006000000090000000600050088a800000800", @ANYRES32=r5], 0x8c}, 0x1, 0xba01}, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000080)=""/231, &(0x7f0000000180), &(0x7f0000000240), 0x2, r3}, 0x38)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002})
writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000080)="0bc3ff", 0x3}, {&(0x7f0000000000)='G', 0x1}, {&(0x7f0000000240)="d336bd7524", 0x5}], 0x3)

210.19627ms ago: executing program 0 (id=2880):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="7c000000010405000000000000000000000000000600064000000000080005400000000005000100010000000a0002000000000000000000080003400000c0180600064000000000080004"], 0x7c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x38, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x52}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x37d}]}]}, 0x38}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newlink={0x64, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @empty}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x64}}, 0x2000000)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r3)
sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f0000000540)={0x1b0, r6, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x240440c0}, 0x4)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_int(r7, &(0x7f0000001180)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
write$cgroup_subtree(r8, &(0x7f00000000c0)=ANY=[], 0x27)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6012000800503afffe8000000000000000000000000000bbfe8000000000000000000000000000aa08029078000000006000081000001100fc01000000000000000000000000000000000000000061eb2175bdc323f600000000000000000000052f000000000000db9f49b2609ceb2ef48b2730155717d8"], 0x0)
r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
r11 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
getsockopt$X25_QBITINCL(r11, 0x106, 0x1, 0x0, 0x0)
sendmsg$NL802154_CMD_DEL_SEC_KEY(r9, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1d4, r10, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_KEY={0xac, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "b38b889807c4c392991d06caff4e87464af61337797d321fa7a467d26b72ec66"}, @NL802154_KEY_ATTR_ID={0x7c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xc}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}, @NL802154_ATTR_SEC_KEY={0x2c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffffffffffffffff}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x16}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}]}, @NL802154_ATTR_SEC_KEY={0xdc, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "911ffd6b0e997867268135d0f6f926d0c9cdad8a4e140e687a8a08bece91bd08"}, @NL802154_KEY_ATTR_ID={0x4c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5eec}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "d7b635ca64db6738485edc2e13955f07be91019d418f4c13d99c66771d669584"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "0df7fc16c06366f10c47ef0caa9bca8f"}, @NL802154_KEY_ATTR_ID={0x30, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7fff}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x1d4}}, 0x4810)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000019100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000090a010100000000000000000000000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021080003400000014108000f"], 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x8000000)
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r9, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r10, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)

141.982476ms ago: executing program 0 (id=2881):
syz_emit_ethernet(0x62, &(0x7f0000000140)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x2c, 0x3c, 0x1, @dev={0xfe, 0x80, '\x00', 0x26}, @local, {[@hopopts={0x33, 0x2, '\x00', [@calipso={0x7, 0x8}, @jumbo={0xc2, 0x4, 0x6}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)

69.87683ms ago: executing program 0 (id=2882):
syz_emit_ethernet(0xa6, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x70, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x200, 0x0, 0x7, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e44afc5538a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "ffffffffff60000000000000"}]}}}}}}, 0x0)

69.522493ms ago: executing program 0 (id=2883):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0x6d5)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1)
socket$nl_sock_diag(0x10, 0x3, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
close(0x3)

307.345µs ago: executing program 0 (id=2884):
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$int_in(r0, 0x5421, &(0x7f00000000c0)=0x7)
write$cgroup_int(r0, &(0x7f0000000140), 0xfffffdef)
write$cgroup_devices(r0, 0x0, 0x8)

0s ago: executing program 0 (id=2885):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0xcc, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x38, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}]}]}, 0xcc}}, 0x0)

kernel console output (not intermixed with test programs):

n process `syz.0.349'.
[   69.147832][ T6636] netlink: 32 bytes leftover after parsing attributes in process `syz.0.344'.
[   69.153132][ T6636] netlink: 32 bytes leftover after parsing attributes in process `syz.0.344'.
[   69.272309][ T6645] netlink: 'syz.0.352': attribute type 3 has an invalid length.
[   69.371069][ T6654] openvswitch: netlink: Missing key (keys=40, expected=200000)
[   69.464560][ T6661] netlink: 'syz.0.358': attribute type 11 has an invalid length.
[   70.045788][    C1] IPv4: Oversized IP packet from 127.0.0.1
[   70.218552][ T6712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.381'.
[   70.225141][ T6712] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[   70.228556][ T6712] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   70.279472][ T6714] netlink: 4 bytes leftover after parsing attributes in process `syz.1.382'.
[   70.522299][ T6726] xt_hashlimit: max too large, truncated to 1048576
[   71.031976][ T6775] netlink: zone id is out of range
[   71.033975][ T6775] netlink: zone id is out of range
[   71.035789][ T6775] netlink: zone id is out of range
[   71.037522][ T6775] netlink: zone id is out of range
[   71.040236][ T6775] netlink: zone id is out of range
[   71.042412][ T6775] netlink: zone id is out of range
[   71.044576][ T6775] netlink: zone id is out of range
[   71.094003][ T6780] netlink: 32 bytes leftover after parsing attributes in process `syz.0.413'.
[   71.109815][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.376446][ T6805] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[   71.796028][ T5874] IPVS: starting estimator thread 0...
[   71.880120][ T6840] IPVS: using max 48 ests per chain, 115200 per kthread
[   71.916965][ T6847] xt_TPROXY: Can be used only with -p tcp or -p udp
[   72.627298][ T6909] xt_CT: No such helper "snmp"
[   73.404871][ T6982] __nla_validate_parse: 5 callbacks suppressed
[   73.404888][ T6982] netlink: 4 bytes leftover after parsing attributes in process `syz.0.486'.
[   73.453861][ T6982] team0: Port device team_slave_0 removed
[   73.791580][ T7029] netlink: 'syz.2.492': attribute type 1 has an invalid length.
[   74.001104][ T7045] syzkaller1: entered promiscuous mode
[   74.008898][ T7045] syzkaller1: entered allmulticast mode
[   74.028532][ T7045] netlink: 830 bytes leftover after parsing attributes in process `syz.1.499'.
[   74.487513][ T7091] netlink: 'syz.1.523': attribute type 83 has an invalid length.
[   74.528596][ T7097] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.526'.
[   74.640119][ T7103] xt_CT: No such helper "snmp"
[   74.704270][ T7111] netlink: 'syz.0.532': attribute type 1 has an invalid length.
[   74.747059][ T7117] netlink: 'syz.0.534': attribute type 1 has an invalid length.
[   74.758393][ T7117] netlink: 236 bytes leftover after parsing attributes in process `syz.0.534'.
[   75.051487][ T7140] net_ratelimit: 9 callbacks suppressed
[   75.051501][ T7140] openvswitch: netlink: IPv4 tun info is not correct
[   75.236328][ T7154] netlink: 'syz.1.552': attribute type 2 has an invalid length.
[   75.370978][ T7167] netlink: 36 bytes leftover after parsing attributes in process `syz.2.558'.
[   75.425163][ T7169] netlink: 'syz.1.559': attribute type 29 has an invalid length.
[   75.435732][ T7169] netlink: 'syz.1.559': attribute type 29 has an invalid length.
[   75.442030][ T7169] netlink: 500 bytes leftover after parsing attributes in process `syz.1.559'.
[   75.883538][ T7200] geneve2: entered promiscuous mode
[   75.989119][ T7213] netlink: 'syz.1.579': attribute type 4 has an invalid length.
[   76.053130][ T7223] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   76.063601][ T7225] netlink: 28 bytes leftover after parsing attributes in process `syz.0.585'.
[   76.107190][ T7229] netlink: 44 bytes leftover after parsing attributes in process `syz.2.588'.
[   76.167324][ T7235] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.592'.
[   76.393812][ T7254] netlink: 2 bytes leftover after parsing attributes in process `syz.0.599'.
[   78.177085][ T7324] netlink: 'syz.2.632': attribute type 5 has an invalid length.
[   78.236414][ T7330] ieee802154 phy0 wpan0: encryption failed: -90
[   78.462089][ T7349] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[   78.682638][ T7363] __nla_validate_parse: 7 callbacks suppressed
[   78.682656][ T7363] netlink: 24 bytes leftover after parsing attributes in process `syz.2.650'.
[   78.726417][ T7365] netlink: 428 bytes leftover after parsing attributes in process `syz.0.651'.
[   78.848333][ T7377] netlink: 'syz.1.657': attribute type 1 has an invalid length.
[   78.889653][ T7377] 8021q: adding VLAN 0 to HW filter on device bond2
[   78.935172][ T7377] 8021q: adding VLAN 0 to HW filter on device bond2
[   78.945619][ T7377] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[   78.963562][ T7377] bond2: (slave vxcan3): Error -95 calling set_mac_address
[   79.057761][ T7387] veth3: entered promiscuous mode
[   79.062759][ T7387] bond2: (slave veth3): Enslaving as an active interface with a down link
[   79.072113][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.075418][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.154475][ T7388] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   79.341020][ T7396] bridge2: entered allmulticast mode
[   79.685440][ T7412] ip6gre1: entered allmulticast mode
[   79.756269][ T7420] netlink: 'syz.1.675': attribute type 9 has an invalid length.
[   79.814434][ T7422] netlink: 32 bytes leftover after parsing attributes in process `syz.0.674'.
[   80.092131][ T7435] netlink: 32 bytes leftover after parsing attributes in process `syz.0.680'.
[   80.181640][ T7441] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 3, id = 0
[   80.487442][ T7476] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   80.517797][ T7478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.701'.
[   80.573341][ T7486] netlink: 232 bytes leftover after parsing attributes in process `syz.1.704'.
[   80.617138][ T7488] netlink: 72 bytes leftover after parsing attributes in process `syz.0.705'.
[   80.642463][ T7490] C: renamed from team_slave_0 (while UP)
[   80.651084][ T7490] netlink: 'syz.1.706': attribute type 3 has an invalid length.
[   80.654429][ T7490] netlink: 116 bytes leftover after parsing attributes in process `syz.1.706'.
[   80.658193][ T7490] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   80.759105][ T7496] wg2: entered promiscuous mode
[   80.762586][ T7496] wg2: entered allmulticast mode
[   81.344111][  T971] cfg80211: failed to load regulatory.db
[   81.868889][ T7532] netlink: 200 bytes leftover after parsing attributes in process `syz.2.725'.
[   81.876076][ T7532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.725'.
[   81.915623][ T7533] "syz.0.726" (7533) uses obsolete ecb(arc4) skcipher
[   82.381608][ T7578] tipc: Started in network mode
[   82.383259][ T7578] tipc: Node identity 0e3007a729a8, cluster identity 4711
[   82.385688][ T7578] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   82.388943][ T7578] syzkaller0: entered promiscuous mode
[   82.391369][ T7578] syzkaller0: entered allmulticast mode
[   82.413144][ T7578] tipc: Resetting bearer <eth:syzkaller0>
[   82.416636][ T7577] tipc: Resetting bearer <eth:syzkaller0>
[   82.425930][ T7577] tipc: Disabling bearer <eth:syzkaller0>
[   82.785339][ T7611] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536
[   83.274483][ T7645] Driver unsupported XDP return value 0 on prog  (id 97) dev N/A, expect packet loss!
[   83.367607][ T7651] netlink: 'syz.1.778': attribute type 2 has an invalid length.
[   84.089425][ T7687] __nla_validate_parse: 1 callbacks suppressed
[   84.089440][ T7687] netlink: 4 bytes leftover after parsing attributes in process `syz.1.797'.
[   84.096969][ T7687] netlink: 12 bytes leftover after parsing attributes in process `syz.1.797'.
[   84.223989][ T7695] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   84.239671][ T7699] netlink: 'syz.2.804': attribute type 1 has an invalid length.
[   84.297992][ T7699] bond1: (slave gretap1): making interface the new active one
[   84.303350][ T7699] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   84.332614][ T7699] syz.2.804 (7699) used greatest stack depth: 20136 bytes left
[   84.481653][ T7717] bond0: entered promiscuous mode
[   84.483238][ T7715] netlink: 16 bytes leftover after parsing attributes in process `syz.1.806'.
[   84.483549][ T7717] bond_slave_0: entered promiscuous mode
[   84.490474][ T7717] bond_slave_1: entered promiscuous mode
[   84.501150][ T7717] bond0: left promiscuous mode
[   84.502795][ T7717] bond_slave_0: left promiscuous mode
[   84.504802][ T7717] bond_slave_1: left promiscuous mode
[   85.880316][ T7790] netlink: 16 bytes leftover after parsing attributes in process `syz.0.843'.
[   85.937424][ T7798] netlink: 20 bytes leftover after parsing attributes in process `syz.2.846'.
[   86.508885][ T7841] netlink: 8 bytes leftover after parsing attributes in process `syz.0.864'.
[   86.563793][ T7847] netlink: 4 bytes leftover after parsing attributes in process `syz.2.867'.
[   87.024916][ T7888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.886'.
[   87.177085][ T7896] block nbd0: Unsupported socket: shutdown callout must be supported.
[   87.362809][ T7906] netlink: 'syz.2.895': attribute type 10 has an invalid length.
[   87.600901][    C0] vcan0: j1939_tp_rxtimer: 0xffff888032028000: rx timeout, send abort
[   87.605205][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888032028000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   87.678941][ T7925] netlink: 4 bytes leftover after parsing attributes in process `syz.2.904'.
[   87.922764][ T7950] netlink: 'syz.1.914': attribute type 1 has an invalid length.
[   87.925395][ T7950] netlink: 224 bytes leftover after parsing attributes in process `syz.1.914'.
[   87.968034][ T7954] netlink: 'syz.1.917': attribute type 21 has an invalid length.
[   87.982227][    C0] Unknown status report in ack skb
[   88.618771][ T7996] netlink: 'syz.0.937': attribute type 10 has an invalid length.
[   89.065719][ T8022] Bluetooth: MGMT ver 1.23
[   89.237156][ T8035] sock: sock_timestamping_bind_phc: sock not bind to device
[   89.272393][ T8039] netlink: 'syz.2.950': attribute type 30 has an invalid length.
[   89.304016][ T8044] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   89.980097][ T8110] __nla_validate_parse: 6 callbacks suppressed
[   89.980111][ T8110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.977'.
[   90.020913][ T8110] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.026098][ T8110] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.150901][ T8123] netlink: 'syz.0.979': attribute type 1 has an invalid length.
[   90.218388][ T8129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.981'.
[   90.282527][ T8131] team0 (unregistering): Port device C removed
[   90.287585][ T8131] team0 (unregistering): Port device team_slave_1 removed
[   90.293665][ T8131] team0 (unregistering): Port device bridge1 removed
[   90.748783][ T8172] netlink: 28 bytes leftover after parsing attributes in process `syz.1.998'.
[   90.752089][ T8172] netlink: 28 bytes leftover after parsing attributes in process `syz.1.998'.
[   90.848274][ T8178] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1001'.
[   91.413805][ T8203] IPv6: sit1: Disabled Multicast RS
[   91.990581][ T8224] netlink: 'syz.1.1025': attribute type 1 has an invalid length.
[   91.994111][ T8224] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1025'.
[   92.138073][   T12] bridge_slave_1: left allmulticast mode
[   92.141311][ T5219] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   92.145536][ T5219] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   92.150972][ T5219] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   92.159910][   T12] bridge_slave_1: left promiscuous mode
[   92.162708][ T5219] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   92.166635][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.171747][ T5219] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   92.188131][   T12] bridge_slave_0: left allmulticast mode
[   92.192135][   T12] bridge_slave_0: left promiscuous mode
[   92.194190][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.367657][   T12] bond1 (unregistering): (slave gretap1): Releasing active interface
[   92.564543][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   92.568367][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   92.572471][   T12] bond0 (unregistering): Released all slaves
[   92.579484][   T12] bond1 (unregistering): Released all slaves
[   92.586557][   T12] bond2 (unregistering): Released all slaves
[   92.602233][ T8234] team_slave_1: entered promiscuous mode
[   92.604375][ T8234] vlan2: entered promiscuous mode
[   92.606247][ T8234] team0: entered promiscuous mode
[   93.029108][ T8264] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1040'.
[   93.133484][   T12] hsr_slave_0: left promiscuous mode
[   93.136394][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   93.151623][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   93.477252][   T12] team0 (unregistering): Port device team_slave_1 removed
[   93.498568][   T12] team0 (unregistering): Port device team_slave_0 removed
[   93.791234][ T8226] chnl_net:caif_netlink_parms(): no params data found
[   93.796617][ T8280] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1044'.
[   93.923466][ T8226] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.926264][ T8226] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.928910][ T8226] bridge_slave_0: entered allmulticast mode
[   93.937310][ T8226] bridge_slave_0: entered promiscuous mode
[   93.943513][ T8226] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.945920][ T8226] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.948533][ T8226] bridge_slave_1: entered allmulticast mode
[   93.956645][ T8226] bridge_slave_1: entered promiscuous mode
[   94.008789][ T8226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   94.018177][ T8226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   94.084051][ T8226] team0: Port device team_slave_0 added
[   94.088032][ T8226] team0: Port device team_slave_1 added
[   94.168342][ T8226] batman_adv: batadv0: Adding interface: batadv_slave_0
[   94.171136][ T8226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.184526][ T8305] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.1051'.
[   94.188475][ T8226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   94.201572][ T8226] batman_adv: batadv0: Adding interface: batadv_slave_1
[   94.206231][ T8226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.219479][ T5831] Bluetooth: hci1: command tx timeout
[   94.230212][ T8226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   94.292264][ T8226] hsr_slave_0: entered promiscuous mode
[   94.294642][ T8226] hsr_slave_1: entered promiscuous mode
[   94.379698][ T8313] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1053'.
[   95.051312][ T8226] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   95.067649][ T8226] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   95.073100][ T8226] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   95.102028][ T8226] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   95.170604][   T24] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[   95.212106][ T8226] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.243490][ T8226] 8021q: adding VLAN 0 to HW filter on device team0
[   95.252565][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.254930][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.283110][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.285452][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.312852][ T8226] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   95.438213][ T8226] 8021q: adding VLAN 0 to HW filter on device batadv0
[   95.479548][ T8226] veth0_vlan: entered promiscuous mode
[   95.485076][ T8226] veth1_vlan: entered promiscuous mode
[   95.512505][ T8226] veth0_macvtap: entered promiscuous mode
[   95.522662][ T8226] veth1_macvtap: entered promiscuous mode
[   95.540881][ T8226] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.546998][ T8226] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.552932][ T8226] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.555759][ T8226] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.558643][ T8226] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.562794][ T8226] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.623924][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.633136][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.651354][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.655263][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.668479][ T8403] netlink: 'syz.0.1074': attribute type 21 has an invalid length.
[   95.671794][ T8403] netlink: 'syz.0.1074': attribute type 22 has an invalid length.
[   95.674734][ T8403] netlink: 'syz.0.1074': attribute type 23 has an invalid length.
[   95.682677][ T8403] netlink: 'syz.0.1074': attribute type 25 has an invalid length.
[   95.686496][ T8403] netlink: 'syz.0.1074': attribute type 26 has an invalid length.
[   95.690495][ T8403] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1074'.
[   95.806115][ T8410] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1076'.
[   95.888539][ T8412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1077'.
[   96.923782][ T8452] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1095'.
[   97.033116][ T8456] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1097'.
[   97.036962][ T8456] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1097'.
[   97.041127][ T8456] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1097'.
[   97.044984][ T8456] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1097'.
[   97.732859][ T5219] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   97.736420][ T5219] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   97.742085][ T5219] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   97.746479][ T5219] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   97.750803][ T5219] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   98.061967][ T8474] chnl_net:caif_netlink_parms(): no params data found
[   98.187218][ T8474] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.192273][ T8474] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.195491][ T8474] bridge_slave_0: entered allmulticast mode
[   98.205521][ T8474] bridge_slave_0: entered promiscuous mode
[   98.214101][ T8474] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.217309][ T8474] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.221236][ T8474] bridge_slave_1: entered allmulticast mode
[   98.225216][ T8474] bridge_slave_1: entered promiscuous mode
[   98.273048][ T8474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   98.283055][ T8474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   98.330847][ T8474] team0: Port device team_slave_0 added
[   98.336435][ T8474] team0: Port device team_slave_1 added
[   98.392608][ T8474] batman_adv: batadv0: Adding interface: batadv_slave_0
[   98.395714][ T8474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   98.419522][ T8474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   98.435358][ T8474] batman_adv: batadv0: Adding interface: batadv_slave_1
[   98.443132][ T8474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   98.469056][ T8474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   98.537622][ T8474] hsr_slave_0: entered promiscuous mode
[   98.544873][ T8474] hsr_slave_1: entered promiscuous mode
[   98.551086][ T8474] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   98.554367][ T8474] Cannot create hsr debugfs directory
[   98.793973][ T8474] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.810773][ T8532] netlink: 'syz.1.1122': attribute type 1 has an invalid length.
[   98.813901][ T8532] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1122'.
[   99.017287][ T8474] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.065686][ T8474] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.138926][ T8474] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.248473][ T8474] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   99.255180][ T8474] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   99.270423][ T8474] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   99.276075][ T8474] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   99.366769][ T8474] 8021q: adding VLAN 0 to HW filter on device bond0
[   99.378691][ T8474] 8021q: adding VLAN 0 to HW filter on device team0
[   99.387696][   T69] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.390507][   T69] bridge0: port 1(bridge_slave_0) entered forwarding state
[   99.419263][   T69] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.422451][   T69] bridge0: port 2(bridge_slave_1) entered forwarding state
[   99.601258][ T8474] 8021q: adding VLAN 0 to HW filter on device batadv0
[   99.638435][ T8474] veth0_vlan: entered promiscuous mode
[   99.645799][ T8474] veth1_vlan: entered promiscuous mode
[   99.667031][ T8474] veth0_macvtap: entered promiscuous mode
[   99.672661][ T8474] veth1_macvtap: entered promiscuous mode
[   99.681480][ T8474] batman_adv: batadv0: Interface activated: batadv_slave_0
[   99.693540][ T8474] batman_adv: batadv0: Interface activated: batadv_slave_1
[   99.698557][ T8474] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.702413][ T8474] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.706164][ T8474] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.711916][ T8474] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.717696][ T8589] netlink: 201916 bytes leftover after parsing attributes in process `syz.1.1141'.
[   99.786562][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.792124][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.812018][ T8594] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[   99.817277][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.820132][ T5831] Bluetooth: hci1: command tx timeout
[   99.823124][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.913137][ T8602] netlink: 'syz.1.1147': attribute type 4 has an invalid length.
[  101.017626][ T8642] bond0: option fail_over_mac: unable to set because the bond device has slaves
[  101.063930][ T8646] __nla_validate_parse: 1 callbacks suppressed
[  101.063945][ T8646] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1165'.
[  101.224104][ T8659] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1171'.
[  101.228085][ T8659] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1171'.
[  101.922556][ T5219] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  101.926029][ T5219] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  101.929412][ T5219] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  101.934721][ T5219] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  101.937799][ T5219] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  101.955650][ T8690] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1184'.
[  102.185469][ T8687] chnl_net:caif_netlink_parms(): no params data found
[  102.278563][ T8687] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.281596][ T8687] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.283911][ T8687] bridge_slave_0: entered allmulticast mode
[  102.286734][ T8687] bridge_slave_0: entered promiscuous mode
[  102.291994][ T8687] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.294424][ T8687] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.297598][ T8687] bridge_slave_1: entered allmulticast mode
[  102.301539][ T8687] bridge_slave_1: entered promiscuous mode
[  102.343540][ T8687] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  102.357539][ T8687] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  102.389604][ T8687] team0: Port device team_slave_0 added
[  102.393480][ T8687] team0: Port device team_slave_1 added
[  102.517830][ T8687] batman_adv: batadv0: Adding interface: batadv_slave_0
[  102.522267][ T8687] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  102.532731][ T8687] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  102.549704][ T8687] batman_adv: batadv0: Adding interface: batadv_slave_1
[  102.553892][ T8687] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  102.572563][ T8687] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  102.630663][ T8687] hsr_slave_0: entered promiscuous mode
[  102.633245][ T8687] hsr_slave_1: entered promiscuous mode
[  102.635746][ T8687] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  102.638726][ T8687] Cannot create hsr debugfs directory
[  102.799864][ T8687] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.949783][ T5831] Bluetooth: hci2: command 0x0405 tx timeout
[  103.078570][ T8760] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  103.158058][ T8687] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.212154][ T8687] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.284268][ T8687] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.365221][ T8687] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  103.376638][ T8687] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  103.381719][ T8687] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  103.387504][ T8687] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  103.453678][ T8687] 8021q: adding VLAN 0 to HW filter on device bond0
[  103.473897][ T8687] 8021q: adding VLAN 0 to HW filter on device team0
[  103.483445][ T6999] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.486385][ T6999] bridge0: port 1(bridge_slave_0) entered forwarding state
[  103.494600][ T6999] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.497542][ T6999] bridge0: port 2(bridge_slave_1) entered forwarding state
[  103.662812][ T8687] 8021q: adding VLAN 0 to HW filter on device batadv0
[  103.694120][ T8687] veth0_vlan: entered promiscuous mode
[  103.700935][ T8687] veth1_vlan: entered promiscuous mode
[  103.725091][ T8687] veth0_macvtap: entered promiscuous mode
[  103.730346][ T8687] veth1_macvtap: entered promiscuous mode
[  103.741656][ T8687] batman_adv: batadv0: Interface activated: batadv_slave_0
[  103.752202][ T8687] batman_adv: batadv0: Interface activated: batadv_slave_1
[  103.761508][ T8687] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  103.764644][ T8687] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  103.772905][ T8687] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  103.777883][ T8687] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  103.874445][ T8789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1220'.
[  103.876701][ T6999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  103.877724][ T8789] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1220'.
[  103.884398][ T6999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.887469][ T8789] netlink: 'syz.1.1220': attribute type 18 has an invalid length.
[  103.923667][ T6999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  103.928182][ T6999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.979821][ T5831] Bluetooth: hci1: command tx timeout
[  104.463540][ T8816] dvmrp8: left allmulticast mode
[  104.894569][ T8851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1249'.
[  105.598097][ T8891] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  105.744403][ T8898] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1271'.
[  105.833795][ T8906] netlink: 'syz.1.1275': attribute type 1 has an invalid length.
[  105.837534][ T8906] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1275'.
[  105.871270][ T8908] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1276'.
[  106.636055][ T8929] __nla_validate_parse: 1 callbacks suppressed
[  106.636067][ T8929] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1283'.
[  106.867953][ T5219] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  106.871229][ T5219] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  106.874171][ T5219] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  106.877178][ T8941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1288'.
[  106.884245][ T5219] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  106.888602][ T5219] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  106.981499][ T8948] netlink: 'syz.1.1291': attribute type 3 has an invalid length.
[  106.984583][ T8948] netlink: 666 bytes leftover after parsing attributes in process `syz.1.1291'.
[  107.088392][ T8939] chnl_net:caif_netlink_parms(): no params data found
[  107.187816][ T8939] bridge0: port 1(bridge_slave_0) entered blocking state
[  107.197025][ T8939] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.202659][ T8939] bridge_slave_0: entered allmulticast mode
[  107.206542][ T8939] bridge_slave_0: entered promiscuous mode
[  107.211383][ T8939] bridge0: port 2(bridge_slave_1) entered blocking state
[  107.214370][ T8939] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.217473][ T8939] bridge_slave_1: entered allmulticast mode
[  107.223950][ T8939] bridge_slave_1: entered promiscuous mode
[  107.273791][ T8939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  107.282271][ T8939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  107.328616][ T8939] team0: Port device team_slave_0 added
[  107.337634][ T8939] team0: Port device team_slave_1 added
[  107.381736][ T8939] batman_adv: batadv0: Adding interface: batadv_slave_0
[  107.384695][ T8939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  107.395872][ T8939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  107.403362][ T8939] batman_adv: batadv0: Adding interface: batadv_slave_1
[  107.406451][ T8939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  107.429351][ T8939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  107.487045][ T8939] hsr_slave_0: entered promiscuous mode
[  107.490446][ T8939] hsr_slave_1: entered promiscuous mode
[  107.493234][ T8939] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  107.496353][ T8939] Cannot create hsr debugfs directory
[  107.606334][ T8972] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  107.632832][ T8939] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.707938][ T8939] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.813421][ T8939] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.912223][ T8939] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.034059][ T8996] veth0: entered promiscuous mode
[  108.048517][ T8939] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  108.054862][ T8994] veth0: left promiscuous mode
[  108.057958][ T8939] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  108.080507][ T8939] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  108.086169][ T8939] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  108.171826][ T8939] 8021q: adding VLAN 0 to HW filter on device bond0
[  108.185293][ T8939] 8021q: adding VLAN 0 to HW filter on device team0
[  108.191146][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.194102][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[  108.203591][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.205888][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[  108.376956][ T8939] 8021q: adding VLAN 0 to HW filter on device batadv0
[  108.412685][ T8939] veth0_vlan: entered promiscuous mode
[  108.417763][ T8939] veth1_vlan: entered promiscuous mode
[  108.437504][ T8939] veth0_macvtap: entered promiscuous mode
[  108.451231][ T9029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1322'.
[  108.454360][ T8939] veth1_macvtap: entered promiscuous mode
[  108.483672][ T8939] batman_adv: batadv0: Interface activated: batadv_slave_0
[  108.492793][ T8939] batman_adv: batadv0: Interface activated: batadv_slave_1
[  108.496714][ T8939] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  108.500422][ T8939] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  108.503478][ T8939] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  108.506318][ T8939] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  108.554393][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.560708][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.586505][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.595425][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.952768][ T9066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1340'.
[  108.960843][ T9066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1340'.
[  109.008820][ T9070] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1342'.
[  109.023727][ T9070] netlink: 'syz.1.1342': attribute type 7 has an invalid length.
[  109.026936][ T9070] netlink: 'syz.1.1342': attribute type 8 has an invalid length.
[  109.034283][ T9070] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1342'.
[  109.042907][ T9070] erspan0: entered promiscuous mode
[  109.045486][ T9070] gretap0: entered promiscuous mode
[  109.048885][ T9070] erspan0: left promiscuous mode
[  109.053331][ T9070] gretap0: left promiscuous mode
[  109.067234][ T9072] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1343'.
[  109.131132][ T9078] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  109.191879][ T9083] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1347'.
[  109.323080][ T9092] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  109.650757][ T9117] xt_CT: No such helper "snmp"
[  110.398743][ T9175] openvswitch: netlink: nsh attribute has 65520 unknown bytes.
[  110.403647][ T9175] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  110.436773][ T9177] netlink: 'syz.0.1390': attribute type 1 has an invalid length.
[  111.676066][ T9211] syzkaller0: entered promiscuous mode
[  111.677656][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  111.681160][ T9211] syzkaller0: entered allmulticast mode
[  111.683174][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  111.686401][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  111.690265][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  111.693633][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  111.818822][ T9211] __nla_validate_parse: 4 callbacks suppressed
[  111.818833][ T9211] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1403'.
[  111.852665][ T9218] chnl_net:caif_netlink_parms(): no params data found
[  111.912591][ T9218] bridge0: port 1(bridge_slave_0) entered blocking state
[  111.914939][ T9218] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.917252][ T9218] bridge_slave_0: entered allmulticast mode
[  111.934599][ T9218] bridge_slave_0: entered promiscuous mode
[  111.939069][ T9218] bridge0: port 2(bridge_slave_1) entered blocking state
[  111.945422][ T9218] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.948799][ T9218] bridge_slave_1: entered allmulticast mode
[  111.956354][ T9218] bridge_slave_1: entered promiscuous mode
[  111.978941][ T9218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  111.985301][ T9218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  112.905606][ T9218] team0: Port device team_slave_0 added
[  112.996783][ T9218] team0: Port device team_slave_1 added
[  113.058650][ T9218] batman_adv: batadv0: Adding interface: batadv_slave_0
[  113.065533][ T9218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  113.079485][ T9218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  113.091079][ T9218] batman_adv: batadv0: Adding interface: batadv_slave_1
[  113.093575][ T9218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  113.104017][ T9218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  113.158106][ T9218] hsr_slave_0: entered promiscuous mode
[  113.161914][ T9218] hsr_slave_1: entered promiscuous mode
[  113.164576][ T9218] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  113.167062][ T9218] Cannot create hsr debugfs directory
[  113.236960][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  113.247539][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  113.345313][ T9218] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.422245][ T9218] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.453144][ T9270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1428'.
[  113.457165][ T9270] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1428'.
[  113.473320][ T9218] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.528147][ T9218] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.676397][ T9218] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  113.691529][ T9218] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  113.701636][ T9218] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  113.707400][ T9218] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  113.739795][ T5831] Bluetooth: hci1: command tx timeout
[  113.785897][ T9218] 8021q: adding VLAN 0 to HW filter on device bond0
[  113.799858][ T9218] 8021q: adding VLAN 0 to HW filter on device team0
[  113.812339][ T7005] bridge0: port 1(bridge_slave_0) entered blocking state
[  113.814849][ T7005] bridge0: port 1(bridge_slave_0) entered forwarding state
[  113.824939][ T9301] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1439'.
[  113.840581][ T6999] bridge0: port 2(bridge_slave_1) entered blocking state
[  113.843009][ T6999] bridge0: port 2(bridge_slave_1) entered forwarding state
[  113.942363][ T9218] 8021q: adding VLAN 0 to HW filter on device batadv0
[  113.991698][ T9218] veth0_vlan: entered promiscuous mode
[  113.996359][ T9218] veth1_vlan: entered promiscuous mode
[  114.018244][ T9218] veth0_macvtap: entered promiscuous mode
[  114.024057][ T9218] veth1_macvtap: entered promiscuous mode
[  114.054615][ T9218] batman_adv: batadv0: Interface activated: batadv_slave_0
[  114.065549][ T9218] batman_adv: batadv0: Interface activated: batadv_slave_1
[  114.072172][ T9218] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  114.075412][ T9218] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  114.078368][ T9218] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  114.083465][ T9218] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  114.131877][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.135025][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.155708][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.158392][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.254528][ T9325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1448'.
[  115.125750][ T9368] netlink: 'syz.0.1469': attribute type 1 has an invalid length.
[  115.129802][ T9368] netlink: 'syz.0.1469': attribute type 2 has an invalid length.
[  115.136278][ T9368] netlink: 'syz.0.1469': attribute type 1 has an invalid length.
[  115.140355][ T9368] netlink: 'syz.0.1469': attribute type 2 has an invalid length.
[  115.282698][ T9380] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  115.304715][ T9382] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1476'.
[  115.467292][ T9398] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  115.475919][ T9398] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  115.695665][ T9421] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1496'.
[  116.000144][ T9445] block nbd1: NBD_DISCONNECT
[  116.256978][ T9470] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1514'.
[  116.280106][ T9470] unsupported nlmsg_type 40
[  117.082818][ T9492] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1519'.
[  117.175437][ T5219] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  117.187880][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  117.191562][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  117.196062][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  117.199756][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  117.200147][ T9498] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1523'.
[  117.375562][ T9499] chnl_net:caif_netlink_parms(): no params data found
[  117.474518][ T9499] bridge0: port 1(bridge_slave_0) entered blocking state
[  117.477718][ T9499] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.483295][ T9499] bridge_slave_0: entered allmulticast mode
[  117.492799][ T9499] bridge_slave_0: entered promiscuous mode
[  117.501921][ T9499] bridge0: port 2(bridge_slave_1) entered blocking state
[  117.509397][ T9499] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.512813][ T9499] bridge_slave_1: entered allmulticast mode
[  117.516763][ T9499] bridge_slave_1: entered promiscuous mode
[  117.561759][ T9499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  117.572367][ T9499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  117.618744][ T9499] team0: Port device team_slave_0 added
[  117.626043][ T9499] team0: Port device team_slave_1 added
[  117.657347][ T9499] batman_adv: batadv0: Adding interface: batadv_slave_0
[  117.660487][ T9499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  117.671066][ T9499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  117.675543][ T9499] batman_adv: batadv0: Adding interface: batadv_slave_1
[  117.678210][ T9499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  117.687263][ T9499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  117.718783][ T9499] hsr_slave_0: entered promiscuous mode
[  117.721950][ T9499] hsr_slave_1: entered promiscuous mode
[  117.727119][ T9499] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  117.732740][ T9499] Cannot create hsr debugfs directory
[  117.888416][ T9499] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.008400][ T9544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1537'.
[  118.046218][ T9499] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.106031][ T9499] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.163105][ T9499] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.285480][ T9499] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  118.295959][ T9499] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  118.304690][ T9499] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  118.314567][ T9499] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  118.363574][ T9499] bridge0: port 2(bridge_slave_1) entered blocking state
[  118.366677][ T9499] bridge0: port 2(bridge_slave_1) entered forwarding state
[  118.370035][ T9499] bridge0: port 1(bridge_slave_0) entered blocking state
[  118.373149][ T9499] bridge0: port 1(bridge_slave_0) entered forwarding state
[  118.407545][   T32] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.416679][   T32] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.518418][ T9499] 8021q: adding VLAN 0 to HW filter on device bond0
[  118.541256][ T9499] 8021q: adding VLAN 0 to HW filter on device team0
[  118.548132][ T7004] bridge0: port 1(bridge_slave_0) entered blocking state
[  118.550971][ T7004] bridge0: port 1(bridge_slave_0) entered forwarding state
[  118.560246][ T7004] bridge0: port 2(bridge_slave_1) entered blocking state
[  118.562805][ T7004] bridge0: port 2(bridge_slave_1) entered forwarding state
[  118.612215][ T9569] xt_CT: No such helper "snmp_trap"
[  118.646354][ T9576] pim6reg: entered allmulticast mode
[  118.648926][ T9576] macvlan0: entered allmulticast mode
[  118.651675][ T9576] veth1_vlan: entered allmulticast mode
[  118.654828][ T9576] veth1_vlan: left allmulticast mode
[  118.673750][ T9576] macvlan0 (unregistering): left allmulticast mode
[  118.701204][ T9499] 8021q: adding VLAN 0 to HW filter on device batadv0
[  118.731142][ T9499] veth0_vlan: entered promiscuous mode
[  118.736086][ T9499] veth1_vlan: entered promiscuous mode
[  118.759095][ T9499] veth0_macvtap: entered promiscuous mode
[  118.765417][ T9499] veth1_macvtap: entered promiscuous mode
[  118.789901][ T9499] batman_adv: batadv0: Interface activated: batadv_slave_0
[  118.802342][ T9499] batman_adv: batadv0: Interface activated: batadv_slave_1
[  118.817792][ T9499] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  118.829390][ T9499] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  118.839588][ T9499] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  118.842865][ T9499] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  118.928129][   T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.930930][   T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.952752][   T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.955777][   T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.092581][ T9604] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  119.204474][ T5831] Bluetooth: hci2: link tx timeout
[  119.207031][ T5831] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  119.318486][ T9622] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1567'.
[  119.507037][ T9633] xt_recent: Unsupported userspace flags (00000048)
[  120.952181][ T9672] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1590'.
[  121.003060][ T9674] netlink: 'syz.1.1591': attribute type 9 has an invalid length.
[  121.006361][ T9674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1591'.
[  121.023249][ T9674] hsr0: entered promiscuous mode
[  121.025988][ T9674] macvlan0: entered promiscuous mode
[  121.028459][ T9674] macvlan0: entered allmulticast mode
[  121.035357][ T9674] hsr0: entered allmulticast mode
[  121.037419][ T9674] hsr_slave_0: entered allmulticast mode
[  121.039638][ T9674] hsr_slave_1: entered allmulticast mode
[  121.083872][ T9676] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  121.270421][ T5829] Bluetooth: hci2: command 0x0405 tx timeout
[  122.108029][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  122.112693][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  122.115920][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  122.120704][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  122.124045][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  122.181678][ T9694] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input5
[  122.271898][ T9700] netlink: 'syz.0.1600': attribute type 4 has an invalid length.
[  122.286533][ T9700] netlink: 'syz.0.1600': attribute type 4 has an invalid length.
[  122.315247][ T9691] chnl_net:caif_netlink_parms(): no params data found
[  122.364731][ T9691] bridge0: port 1(bridge_slave_0) entered blocking state
[  122.367192][ T9691] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.369878][ T9691] bridge_slave_0: entered allmulticast mode
[  122.372677][ T9691] bridge_slave_0: entered promiscuous mode
[  122.375873][ T9691] bridge0: port 2(bridge_slave_1) entered blocking state
[  122.378260][ T9691] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.381568][ T9691] bridge_slave_1: entered allmulticast mode
[  122.385514][ T9691] bridge_slave_1: entered promiscuous mode
[  122.409406][ T9691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  122.414291][ T9691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  122.436761][ T9691] team0: Port device team_slave_0 added
[  122.443842][ T9691] team0: Port device team_slave_1 added
[  122.462414][ T9691] batman_adv: batadv0: Adding interface: batadv_slave_0
[  122.464902][ T9691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  122.474576][ T9691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  122.480018][ T9691] batman_adv: batadv0: Adding interface: batadv_slave_1
[  122.482436][ T9691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  122.494511][ T9691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  122.526325][ T9691] hsr_slave_0: entered promiscuous mode
[  122.529845][ T9691] hsr_slave_1: entered promiscuous mode
[  122.532295][ T9691] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  122.534835][ T9691] Cannot create hsr debugfs directory
[  122.629057][ T9691] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.685021][ T9691] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.741075][ T9691] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.802175][ T9691] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.919955][ T9691] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  122.926300][ T9691] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  122.934904][ T9691] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  122.943148][ T9691] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  123.024175][ T9691] 8021q: adding VLAN 0 to HW filter on device bond0
[  123.063327][ T9691] 8021q: adding VLAN 0 to HW filter on device team0
[  123.079778][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[  123.082746][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[  123.110188][ T9712] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1601'.
[  123.112709][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[  123.116960][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[  123.243573][ T9718] netlink: 'syz.0.1603': attribute type 1 has an invalid length.
[  123.297609][ T9718] 8021q: adding VLAN 0 to HW filter on device bond3
[  123.303107][ T9723] erspan0: entered allmulticast mode
[  123.317969][ T9723] bond3: (slave erspan0): making interface the new active one
[  123.324246][ T9723] bond3: (slave erspan0): Enslaving as an active interface with an up link
[  123.430826][ T9691] 8021q: adding VLAN 0 to HW filter on device batadv0
[  123.469036][ T9691] veth0_vlan: entered promiscuous mode
[  123.477580][ T9691] veth1_vlan: entered promiscuous mode
[  123.521979][ T9691] veth0_macvtap: entered promiscuous mode
[  123.528555][ T9691] veth1_macvtap: entered promiscuous mode
[  123.555102][ T9691] batman_adv: batadv0: Interface activated: batadv_slave_0
[  123.565961][ T9691] batman_adv: batadv0: Interface activated: batadv_slave_1
[  123.589142][ T9691] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  123.596863][ T9691] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  123.603063][ T9691] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  123.606857][ T9691] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  123.657480][ T9740] openvswitch: netlink: IP tunnel dst address not specified
[  123.758219][  T256] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.767701][  T256] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  123.800051][   T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.803383][   T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  123.805477][ T9744] netlink: 'syz.0.1613': attribute type 3 has an invalid length.
[  123.812086][ T9744] netlink: 'syz.0.1613': attribute type 4 has an invalid length.
[  123.815959][ T9744] netlink: 'syz.0.1613': attribute type 5 has an invalid length.
[  123.825871][ T9744] netlink: 'syz.0.1613': attribute type 6 has an invalid length.
[  123.829534][ T9744] netlink: 'syz.0.1613': attribute type 7 has an invalid length.
[  123.832971][ T9744] netlink: 'syz.0.1613': attribute type 7 has an invalid length.
[  123.836367][ T9744] netlink: 12902 bytes leftover after parsing attributes in process `syz.0.1613'.
[  124.898971][ T9807] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1636'.
[  125.351512][ T9815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1640'.
[  125.403457][ T9815] syzkaller0: entered promiscuous mode
[  125.405930][ T9815] syzkaller0: entered allmulticast mode
[  126.878150][ T9831] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1648'.
[  126.955926][ T9835] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1647'.
[  126.987467][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  126.993045][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  126.996712][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  127.004768][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  127.010454][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  127.089402][ T9835] bridge_slave_1: left allmulticast mode
[  127.091318][ T9835] bridge_slave_1: left promiscuous mode
[  127.093239][ T9835] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.097720][ T9835] bridge_slave_0: left allmulticast mode
[  127.100826][ T9835] bridge_slave_0: left promiscuous mode
[  127.106542][ T9835] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.428972][ T9857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1653'.
[  127.460484][ T9836] chnl_net:caif_netlink_parms(): no params data found
[  127.562983][ T9836] bridge0: port 1(bridge_slave_0) entered blocking state
[  127.566025][ T9836] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.569112][ T9836] bridge_slave_0: entered allmulticast mode
[  127.573744][ T9836] bridge_slave_0: entered promiscuous mode
[  127.580554][ T9836] bridge0: port 2(bridge_slave_1) entered blocking state
[  127.584889][ T9836] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.588102][ T9836] bridge_slave_1: entered allmulticast mode
[  127.593050][ T9836] bridge_slave_1: entered promiscuous mode
[  127.633410][ T9836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  127.640780][ T9836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  127.683137][ T9836] team0: Port device team_slave_0 added
[  127.690651][ T9836] team0: Port device team_slave_1 added
[  127.719719][ T9867] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1656'.
[  127.724204][ T9836] batman_adv: batadv0: Adding interface: batadv_slave_0
[  127.727174][ T9836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  127.748584][ T9836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  127.755245][ T9836] batman_adv: batadv0: Adding interface: batadv_slave_1
[  127.758189][ T9836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  127.776473][ T9836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  127.824521][ T9836] hsr_slave_0: entered promiscuous mode
[  127.827674][ T9836] hsr_slave_1: entered promiscuous mode
[  127.835290][ T9836] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  127.838450][ T9836] Cannot create hsr debugfs directory
[  127.996939][ T9836] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.078531][ T9836] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.151051][ T9836] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.205586][ T9836] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.278885][ T9888] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1665'.
[  128.375264][ T9836] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  128.383858][ T9836] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  128.400535][ T9836] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  128.407808][ T9836] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  128.448833][ T9836] bridge0: port 2(bridge_slave_1) entered blocking state
[  128.451876][ T9836] bridge0: port 2(bridge_slave_1) entered forwarding state
[  128.455085][ T9836] bridge0: port 1(bridge_slave_0) entered blocking state
[  128.457998][ T9836] bridge0: port 1(bridge_slave_0) entered forwarding state
[  128.494726][ T9901] syzkaller1: entered promiscuous mode
[  128.497140][ T9901] syzkaller1: entered allmulticast mode
[  128.543286][ T1090] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.547133][ T1090] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.573763][ T9836] 8021q: adding VLAN 0 to HW filter on device bond0
[  128.592846][ T9836] 8021q: adding VLAN 0 to HW filter on device team0
[  128.604491][ T7005] bridge0: port 1(bridge_slave_0) entered blocking state
[  128.607581][ T7005] bridge0: port 1(bridge_slave_0) entered forwarding state
[  128.614916][ T9903] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1668'.
[  128.622497][ T7005] bridge0: port 2(bridge_slave_1) entered blocking state
[  128.625522][ T7005] bridge0: port 2(bridge_slave_1) entered forwarding state
[  128.856232][ T9836] 8021q: adding VLAN 0 to HW filter on device batadv0
[  128.907948][ T9836] veth0_vlan: entered promiscuous mode
[  128.921841][ T9836] veth1_vlan: entered promiscuous mode
[  128.953793][ T9836] veth0_macvtap: entered promiscuous mode
[  128.963813][ T9836] veth1_macvtap: entered promiscuous mode
[  128.978859][ T9836] batman_adv: batadv0: Interface activated: batadv_slave_0
[  128.997090][ T9836] batman_adv: batadv0: Interface activated: batadv_slave_1
[  129.006483][ T9836] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  129.018186][ T9836] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  129.025465][ T9836] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  129.029152][ T9836] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  129.109997][ T5829] Bluetooth: hci1: command tx timeout
[  129.150843][ T7004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  129.154121][ T7004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  129.194993][ T7004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  129.201185][ T7004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.094489][ T9931] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1679'.
[  130.865727][ T9960] : entered promiscuous mode
[  132.222707][ T9980] vlan0: entered promiscuous mode
[  132.428481][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  132.433637][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  132.438161][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  132.445621][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  132.448371][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  132.552547][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  132.894515][T10018] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1713'.
[  132.898184][T10018] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1713'.
[  132.902202][T10018] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1713'.
[  132.906047][T10018] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1713'.
[  132.969983][ T9993] chnl_net:caif_netlink_parms(): no params data found
[  133.213551][ T9993] bridge0: port 1(bridge_slave_0) entered blocking state
[  133.216392][ T9993] bridge0: port 1(bridge_slave_0) entered disabled state
[  133.230065][ T9993] bridge_slave_0: entered allmulticast mode
[  133.233044][ T9993] bridge_slave_0: entered promiscuous mode
[  133.244904][ T9993] bridge0: port 2(bridge_slave_1) entered blocking state
[  133.247287][ T9993] bridge0: port 2(bridge_slave_1) entered disabled state
[  133.256381][ T9993] bridge_slave_1: entered allmulticast mode
[  133.267726][T10043] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  133.278954][ T9993] bridge_slave_1: entered promiscuous mode
[  133.357131][ T9993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  133.382061][ T9993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  133.449870][ T9993] team0: Port device team_slave_0 added
[  133.461360][ T9993] team0: Port device team_slave_1 added
[  133.529129][ T9993] batman_adv: batadv0: Adding interface: batadv_slave_0
[  133.540985][ T9993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  133.569586][ T9993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  133.579718][ T9993] batman_adv: batadv0: Adding interface: batadv_slave_1
[  133.582512][ T9993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  133.595892][ T9993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  133.666942][ T9993] hsr_slave_0: entered promiscuous mode
[  133.676186][ T9993] hsr_slave_1: entered promiscuous mode
[  133.679884][ T9993] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  133.683028][ T9993] Cannot create hsr debugfs directory
[  133.889175][ T9993] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.972849][ T9993] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.042164][ T9993] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.103848][ T9993] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.231449][ T9993] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  134.238522][ T9993] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  134.243508][ T9993] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  134.254805][ T9993] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  134.373064][T10105] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6
[  134.418155][ T9993] 8021q: adding VLAN 0 to HW filter on device bond0
[  134.477591][ T9993] 8021q: adding VLAN 0 to HW filter on device team0
[  134.492231][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[  134.494674][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[  134.511357][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[  134.514487][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[  134.539919][ T5831] Bluetooth: hci1: command tx timeout
[  134.688643][ T9993] 8021q: adding VLAN 0 to HW filter on device batadv0
[  134.745317][ T9993] veth0_vlan: entered promiscuous mode
[  134.753573][ T9993] veth1_vlan: entered promiscuous mode
[  134.792628][ T9993] veth0_macvtap: entered promiscuous mode
[  134.807404][ T9993] veth1_macvtap: entered promiscuous mode
[  134.832436][ T9993] batman_adv: batadv0: Interface activated: batadv_slave_0
[  134.842905][ T9993] batman_adv: batadv0: Interface activated: batadv_slave_1
[  134.850731][ T9993] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  134.854459][ T9993] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  134.858126][ T9993] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  134.868475][ T9993] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  134.945180][   T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  134.957541][   T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  134.989329][   T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  134.997302][   T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  135.113871][T10131] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1746'.
[  135.117444][T10131] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1746'.
[  135.120857][T10131] netlink: 81 bytes leftover after parsing attributes in process `syz.0.1746'.
[  135.611946][T10162] pim6reg1: entered allmulticast mode
[  135.650703][   T33] audit: type=1800 audit(1751981554.296:4): pid=10161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1760" name="memory.events" dev="tmpfs" ino=3130 res=0 errno=0
[  135.760608][T10170] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1763'.
[  135.814214][T10174] validate_nla: 1 callbacks suppressed
[  135.814229][T10174] netlink: 'syz.0.1765': attribute type 7 has an invalid length.
[  135.822447][T10174] netlink: 'syz.0.1765': attribute type 8 has an invalid length.
[  135.876297][T10178] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1767'.
[  136.288301][T10207] netlink: 'syz.0.1780': attribute type 1 has an invalid length.
[  136.291731][T10207] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1780'.
[  136.617380][T10223] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  138.107251][T10242] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1797'.
[  138.180091][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  138.184254][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  138.187719][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  138.193419][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  138.197176][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  138.230115][T10252] x_tables: duplicate underflow at hook 2
[  138.302578][T10258] netlink: 'syz.1.1803': attribute type 1 has an invalid length.
[  138.305424][T10258] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1803'.
[  138.359034][T10261] Dead loop on virtual device ip6_vti0, fix it urgently!
[  138.424023][T10263] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1804'.
[  138.427767][T10263] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1804'.
[  138.441719][T10248] chnl_net:caif_netlink_parms(): no params data found
[  138.535882][T10248] bridge0: port 1(bridge_slave_0) entered blocking state
[  138.539006][T10248] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.544530][T10248] bridge_slave_0: entered allmulticast mode
[  138.548588][T10248] bridge_slave_0: entered promiscuous mode
[  138.556863][T10248] bridge0: port 2(bridge_slave_1) entered blocking state
[  138.560073][T10248] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.563167][T10248] bridge_slave_1: entered allmulticast mode
[  138.567097][T10248] bridge_slave_1: entered promiscuous mode
[  138.609330][T10248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  138.615811][T10248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  138.653691][T10248] team0: Port device team_slave_0 added
[  138.661297][T10248] team0: Port device team_slave_1 added
[  138.702907][T10248] batman_adv: batadv0: Adding interface: batadv_slave_0
[  138.705798][T10248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  138.718050][T10248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  138.724890][T10248] batman_adv: batadv0: Adding interface: batadv_slave_1
[  138.727753][T10248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  138.738300][T10248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  138.803665][T10248] hsr_slave_0: entered promiscuous mode
[  138.809745][T10248] hsr_slave_1: entered promiscuous mode
[  138.812708][T10248] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  138.815413][T10248] Cannot create hsr debugfs directory
[  138.924556][T10248] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.981243][T10248] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.086701][T10248] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.137639][T10248] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.322585][T10248] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  139.332432][T10248] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  139.351016][T10248] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  139.362021][T10248] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  139.543836][T10248] 8021q: adding VLAN 0 to HW filter on device bond0
[  139.565126][T10248] 8021q: adding VLAN 0 to HW filter on device team0
[  139.574059][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[  139.576604][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[  139.586256][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[  139.588924][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[  139.731873][T10248] 8021q: adding VLAN 0 to HW filter on device batadv0
[  139.777037][T10248] veth0_vlan: entered promiscuous mode
[  139.790015][T10248] veth1_vlan: entered promiscuous mode
[  139.831037][T10248] veth0_macvtap: entered promiscuous mode
[  139.835823][T10248] veth1_macvtap: entered promiscuous mode
[  139.849401][T10248] batman_adv: batadv0: Interface activated: batadv_slave_0
[  139.858659][T10248] batman_adv: batadv0: Interface activated: batadv_slave_1
[  139.885790][T10248] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  139.889982][T10248] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  139.893592][T10248] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  139.897767][T10248] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  140.035771][ T7005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  140.038306][ T7005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  140.078775][ T7005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  140.087170][ T7005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  140.141877][T10334] netlink: 'syz.0.1829': attribute type 1 has an invalid length.
[  140.145062][T10334] netlink: 'syz.0.1829': attribute type 2 has an invalid length.
[  140.228705][T10340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1833'.
[  140.234067][T10340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1833'.
[  140.355583][T10348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1837'.
[  140.769529][T10373] netlink: 308 bytes leftover after parsing attributes in process `syz.0.1849'.
[  140.773151][T10373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1849'.
[  140.776776][T10373] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  140.974742][T10381] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1853'.
[  141.082884][T10385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1855'.
[  141.168067][T10389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1857'.
[  141.365235][T10401] IPVS: set_ctl: invalid protocol: 22 224.0.0.1:20000
[  141.932477][T10426] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1874'.
[  143.298531][T10438] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1878'.
[  143.554379][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  143.558816][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  143.562536][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  143.566618][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  143.567699][T10451] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551607)
[  143.570188][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  143.578284][T10451] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[  143.931486][T10448] chnl_net:caif_netlink_parms(): no params data found
[  143.956932][T10443] netlink: 'syz.1.1878': attribute type 4 has an invalid length.
[  144.046328][T10448] bridge0: port 1(bridge_slave_0) entered blocking state
[  144.048799][T10448] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.052287][T10448] bridge_slave_0: entered allmulticast mode
[  144.055738][T10448] bridge_slave_0: entered promiscuous mode
[  144.067391][T10448] bridge0: port 2(bridge_slave_1) entered blocking state
[  144.070350][T10448] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.072789][T10448] bridge_slave_1: entered allmulticast mode
[  144.075628][T10448] bridge_slave_1: entered promiscuous mode
[  144.105095][T10448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  144.111824][T10448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  144.153018][T10448] team0: Port device team_slave_0 added
[  144.156683][T10448] team0: Port device team_slave_1 added
[  144.187595][T10448] batman_adv: batadv0: Adding interface: batadv_slave_0
[  144.192367][T10448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  144.204875][T10448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  144.210720][T10448] batman_adv: batadv0: Adding interface: batadv_slave_1
[  144.213216][T10448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  144.227679][T10448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  144.255106][T10448] hsr_slave_0: entered promiscuous mode
[  144.257570][T10448] hsr_slave_1: entered promiscuous mode
[  144.259943][T10448] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  144.263037][T10448] Cannot create hsr debugfs directory
[  144.346314][T10448] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.407030][T10448] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.464255][T10448] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.546999][T10448] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.753419][T10448] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  144.768575][T10448] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  144.778113][T10448] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  144.797878][T10448] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  144.862269][T10448] bridge0: port 2(bridge_slave_1) entered blocking state
[  144.865304][T10448] bridge0: port 2(bridge_slave_1) entered forwarding state
[  144.868381][T10448] bridge0: port 1(bridge_slave_0) entered blocking state
[  144.871461][T10448] bridge0: port 1(bridge_slave_0) entered forwarding state
[  144.886554][  T256] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.894598][  T256] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.908288][T10479] openvswitch: netlink: IP tunnel TTL not specified.
[  144.990505][T10448] 8021q: adding VLAN 0 to HW filter on device bond0
[  145.008463][T10448] 8021q: adding VLAN 0 to HW filter on device team0
[  145.028843][ T7004] bridge0: port 1(bridge_slave_0) entered blocking state
[  145.031348][ T7004] bridge0: port 1(bridge_slave_0) entered forwarding state
[  145.051749][ T7004] bridge0: port 2(bridge_slave_1) entered blocking state
[  145.054142][ T7004] bridge0: port 2(bridge_slave_1) entered forwarding state
[  145.062432][T10491] netlink: 'syz.1.1894': attribute type 12 has an invalid length.
[  145.158718][T10500] netlink: 'syz.0.1898': attribute type 1 has an invalid length.
[  145.231113][T10504] xt_CT: No such helper "snmp"
[  145.274509][T10502] __nla_validate_parse: 1 callbacks suppressed
[  145.274524][T10502] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1899'.
[  145.307569][T10448] 8021q: adding VLAN 0 to HW filter on device batadv0
[  145.371045][T10448] veth0_vlan: entered promiscuous mode
[  145.379126][T10448] veth1_vlan: entered promiscuous mode
[  145.398356][T10448] veth0_macvtap: entered promiscuous mode
[  145.405586][T10448] veth1_macvtap: entered promiscuous mode
[  145.414179][T10448] batman_adv: batadv0: Interface activated: batadv_slave_0
[  145.421793][T10448] batman_adv: batadv0: Interface activated: batadv_slave_1
[  145.426788][T10448] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  145.430301][T10448] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  145.433199][T10448] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  145.436202][T10448] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  145.487739][  T256] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  145.496083][  T256] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  145.497955][T10518] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1904'.
[  145.518498][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  145.525296][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  145.679633][T10526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1908'.
[  146.323362][T10560] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1924'.
[  146.845801][T10608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1945'.
[  148.946265][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  148.953939][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  148.960156][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  148.970896][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  148.974831][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  149.022434][T10661] nbd: socks must be embedded in a SOCK_ITEM attr
[  149.025975][T10661] block nbd0: shutting down sockets
[  149.104258][T10665] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1968'.
[  149.108292][T10665] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1968'.
[  149.303871][T10657] chnl_net:caif_netlink_parms(): no params data found
[  149.630083][T10657] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.633153][T10657] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.645822][T10657] bridge_slave_0: entered allmulticast mode
[  149.659118][T10657] bridge_slave_0: entered promiscuous mode
[  149.663187][T10657] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.665895][T10657] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.668442][T10657] bridge_slave_1: entered allmulticast mode
[  149.675439][T10657] bridge_slave_1: entered promiscuous mode
[  149.720805][T10690] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1976'.
[  149.721313][T10657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  149.738657][T10657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  149.817114][T10657] team0: Port device team_slave_0 added
[  149.827738][T10657] team0: Port device team_slave_1 added
[  149.897800][T10657] batman_adv: batadv0: Adding interface: batadv_slave_0
[  149.902070][T10657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  149.912789][T10657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  149.930928][T10657] batman_adv: batadv0: Adding interface: batadv_slave_1
[  149.934158][T10657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  149.943232][T10657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  150.005112][T10657] hsr_slave_0: entered promiscuous mode
[  150.008557][T10657] hsr_slave_1: entered promiscuous mode
[  150.011755][T10657] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  150.015010][T10657] Cannot create hsr debugfs directory
[  150.231990][T10657] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.272193][T10704] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1980'.
[  150.344389][T10657] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.435930][T10657] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.507802][T10657] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.515041][T10717] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1986'.
[  150.636139][T10657] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  150.642511][T10657] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  150.656901][T10657] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  150.677448][T10657] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  150.752380][T10735] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1991'.
[  150.912654][T10657] 8021q: adding VLAN 0 to HW filter on device bond0
[  150.945035][T10657] 8021q: adding VLAN 0 to HW filter on device team0
[  150.966750][  T166] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.969990][  T166] bridge0: port 1(bridge_slave_0) entered forwarding state
[  150.988069][   T69] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.990515][   T69] bridge0: port 2(bridge_slave_1) entered forwarding state
[  151.020019][ T5829] Bluetooth: hci1: command tx timeout
[  151.043461][T10657] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  151.046952][T10657] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  151.206764][T10657] 8021q: adding VLAN 0 to HW filter on device batadv0
[  151.243647][T10657] veth0_vlan: entered promiscuous mode
[  151.255104][T10657] veth1_vlan: entered promiscuous mode
[  151.284073][T10657] veth0_macvtap: entered promiscuous mode
[  151.291513][T10657] veth1_macvtap: entered promiscuous mode
[  151.301076][T10657] batman_adv: batadv0: Interface activated: batadv_slave_0
[  151.312302][T10657] batman_adv: batadv0: Interface activated: batadv_slave_1
[  151.338019][T10657] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  151.345562][T10657] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  151.348389][T10657] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  151.352101][T10657] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  151.419014][T10779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2007'.
[  151.422402][ T7005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  151.427689][ T7005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  151.458025][  T166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  151.463920][  T166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  151.566160][T10785] netlink: 'syz.1.2010': attribute type 4 has an invalid length.
[  151.571156][T10785] netlink: 'syz.1.2010': attribute type 17 has an invalid length.
[  151.831771][T10801] netlink: 'syz.0.2018': attribute type 11 has an invalid length.
[  151.882697][T10804] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2019'.
[  151.962860][T10808] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2020'.
[  153.554408][T10834] delete_channel: no stack
[  153.571074][T10837] netlink: 380 bytes leftover after parsing attributes in process `syz.0.2031'.
[  153.713770][T10850] netlink: 45 bytes leftover after parsing attributes in process `syz.1.2038'.
[  155.164745][T10857] tipc: Cannot configure node identity twice
[  155.184923][T10858] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present
[  155.187806][T10858] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9)
[  155.268363][T10866] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2044'.
[  155.341119][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  155.346175][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  155.351548][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  155.359153][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  155.364246][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  155.532657][T10868] chnl_net:caif_netlink_parms(): no params data found
[  155.622900][T10868] bridge0: port 1(bridge_slave_0) entered blocking state
[  155.626154][T10868] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.629691][T10868] bridge_slave_0: entered allmulticast mode
[  155.633837][T10868] bridge_slave_0: entered promiscuous mode
[  155.638670][T10868] bridge0: port 2(bridge_slave_1) entered blocking state
[  155.642434][T10868] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.645631][T10868] bridge_slave_1: entered allmulticast mode
[  155.650719][T10868] bridge_slave_1: entered promiscuous mode
[  155.688162][T10868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  155.695194][T10868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  155.730644][T10868] team0: Port device team_slave_0 added
[  155.735954][T10868] team0: Port device team_slave_1 added
[  155.767559][T10868] batman_adv: batadv0: Adding interface: batadv_slave_0
[  155.771489][T10868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  155.782797][T10868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  155.793013][T10868] batman_adv: batadv0: Adding interface: batadv_slave_1
[  155.796021][T10868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  155.806806][T10868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  155.861992][T10868] hsr_slave_0: entered promiscuous mode
[  155.865431][T10868] hsr_slave_1: entered promiscuous mode
[  155.868737][T10868] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  155.872193][T10868] Cannot create hsr debugfs directory
[  156.010951][T10868] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.071630][T10868] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.212304][T10868] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.306276][T10881] netlink: 'syz.1.2047': attribute type 1 has an invalid length.
[  156.308819][T10881] netlink: 208 bytes leftover after parsing attributes in process `syz.1.2047'.
[  156.314023][T10868] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.491820][T10868] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  156.508467][T10868] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  156.523618][T10868] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  156.564614][T10868] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  156.663973][T10868] 8021q: adding VLAN 0 to HW filter on device bond0
[  156.697521][T10868] 8021q: adding VLAN 0 to HW filter on device team0
[  156.706281][  T166] bridge0: port 1(bridge_slave_0) entered blocking state
[  156.709513][  T166] bridge0: port 1(bridge_slave_0) entered forwarding state
[  156.731718][  T166] bridge0: port 2(bridge_slave_1) entered blocking state
[  156.735099][  T166] bridge0: port 2(bridge_slave_1) entered forwarding state
[  156.772066][T10868] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  156.938637][T10925] tipc: Enabled bearer <ib:ip6gre0>, priority 10
[  156.947652][T10868] 8021q: adding VLAN 0 to HW filter on device batadv0
[  156.988631][T10868] veth0_vlan: entered promiscuous mode
[  156.997152][T10868] veth1_vlan: entered promiscuous mode
[  157.019172][T10868] veth0_macvtap: entered promiscuous mode
[  157.024835][T10868] veth1_macvtap: entered promiscuous mode
[  157.068885][T10868] batman_adv: batadv0: Interface activated: batadv_slave_0
[  157.084301][T10868] batman_adv: batadv0: Interface activated: batadv_slave_1
[  157.097889][T10868] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  157.108382][T10931] netlink: 'syz.1.2060': attribute type 9 has an invalid length.
[  157.113796][T10868] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  157.122961][T10868] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  157.128483][T10868] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  157.129552][T10931] netlink: 'syz.1.2060': attribute type 6 has an invalid length.
[  157.284540][T10937] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2062'.
[  157.422799][ T5831] Bluetooth: hci1: command tx timeout
[  157.448151][ T7005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  157.451297][ T7005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  157.488470][  T166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  157.494841][  T166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  157.662495][T10942] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2064'.
[  159.749680][ T5831] Bluetooth: hci2: command 0x0405 tx timeout
[  160.619152][T10985] syzkaller0: entered promiscuous mode
[  160.622061][T10985] syzkaller0: entered allmulticast mode
[  160.636008][T10985] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  160.645873][T10984] tipc: Resetting bearer <eth:syzkaller0>
[  160.651934][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  160.656277][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  160.665052][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  160.669383][T10984] tipc: Disabling bearer <eth:syzkaller0>
[  160.670208][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  160.675302][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  160.776491][T10990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2079'.
[  160.927221][T10987] chnl_net:caif_netlink_parms(): no params data found
[  161.062442][T10987] bridge0: port 1(bridge_slave_0) entered blocking state
[  161.065017][T10987] bridge0: port 1(bridge_slave_0) entered disabled state
[  161.067524][T10987] bridge_slave_0: entered allmulticast mode
[  161.071433][T10987] bridge_slave_0: entered promiscuous mode
[  161.076235][T10987] bridge0: port 2(bridge_slave_1) entered blocking state
[  161.078804][T10987] bridge0: port 2(bridge_slave_1) entered disabled state
[  161.082486][T10987] bridge_slave_1: entered allmulticast mode
[  161.086050][T10987] bridge_slave_1: entered promiscuous mode
[  161.120188][T10987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  161.129643][T10987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  161.171703][T10987] team0: Port device team_slave_0 added
[  161.175761][T10987] team0: Port device team_slave_1 added
[  161.196454][T10987] batman_adv: batadv0: Adding interface: batadv_slave_0
[  161.199033][T10987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  161.208487][T10987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  161.216581][T10987] batman_adv: batadv0: Adding interface: batadv_slave_1
[  161.219108][T10987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  161.228339][T10987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  161.296257][T11012] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2087'.
[  161.301886][T11012] netlink: 37 bytes leftover after parsing attributes in process `syz.1.2087'.
[  161.305437][T11012] netlink: 37 bytes leftover after parsing attributes in process `syz.1.2087'.
[  161.323439][T10987] hsr_slave_0: entered promiscuous mode
[  161.328774][T10987] hsr_slave_1: entered promiscuous mode
[  161.335205][T10987] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  161.338008][T10987] Cannot create hsr debugfs directory
[  161.485289][T10987] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.539318][T11018] netlink: 'syz.1.2090': attribute type 1 has an invalid length.
[  161.542690][T11018] nbd: error processing sock list
[  161.545305][T11018] block nbd0: shutting down sockets
[  161.545919][T10987] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.605425][T10987] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.712785][T10987] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.851768][T10987] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  161.857160][T10987] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  161.862674][T10987] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  161.868417][T10987] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  161.950386][T10987] 8021q: adding VLAN 0 to HW filter on device bond0
[  161.965977][T10987] 8021q: adding VLAN 0 to HW filter on device team0
[  161.973126][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  161.975601][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  162.001630][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  162.004495][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  162.127721][T10987] 8021q: adding VLAN 0 to HW filter on device batadv0
[  162.158938][T10987] veth0_vlan: entered promiscuous mode
[  162.168121][T10987] veth1_vlan: entered promiscuous mode
[  162.193510][T10987] veth0_macvtap: entered promiscuous mode
[  162.197851][T10987] veth1_macvtap: entered promiscuous mode
[  162.207966][T10987] batman_adv: batadv0: Interface activated: batadv_slave_0
[  162.215070][T10987] batman_adv: batadv0: Interface activated: batadv_slave_1
[  162.223573][T10987] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  162.226447][T10987] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  162.229505][T10987] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  162.232364][T10987] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  162.251408][T11059] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  162.254386][T11059] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  162.257160][T11059] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  162.260167][T11059] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  162.304780][T11059] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  162.309111][T11059] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.358758][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  162.367648][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  162.414601][T11059] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  162.424595][T11059] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.463632][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  162.466710][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  162.558629][T11059] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  162.563908][T11059] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.664313][T11059] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  162.668618][T11059] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.765365][T11059] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  162.768239][T11059] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  162.790749][T11059] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  162.793789][T11059] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  162.805503][T11059] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  162.808841][T11059] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  162.821559][T11059] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  162.824784][T11059] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  164.062341][T11103] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2122'.
[  164.164560][T11111] mac80211_hwsim hwsim2 ": renamed from wlan0 (while UP)
[  164.214441][T11115] netlink: 'syz.1.2128': attribute type 6 has an invalid length.
[  164.217077][T11115] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2128'.
[  166.193165][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  166.196485][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  166.199910][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  166.203308][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  166.205872][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  166.314536][T11153] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  166.372684][T11160] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  166.525073][T11141] chnl_net:caif_netlink_parms(): no params data found
[  166.703951][T11141] bridge0: port 1(bridge_slave_0) entered blocking state
[  166.707327][T11141] bridge0: port 1(bridge_slave_0) entered disabled state
[  166.710709][T11141] bridge_slave_0: entered allmulticast mode
[  166.714710][T11141] bridge_slave_0: entered promiscuous mode
[  166.727760][T11141] bridge0: port 2(bridge_slave_1) entered blocking state
[  166.731110][T11141] bridge0: port 2(bridge_slave_1) entered disabled state
[  166.734323][T11141] bridge_slave_1: entered allmulticast mode
[  166.757492][T11141] bridge_slave_1: entered promiscuous mode
[  166.799153][T11141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  166.805492][T11141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  166.834031][T11141] team0: Port device team_slave_0 added
[  166.838077][T11141] team0: Port device team_slave_1 added
[  166.868293][T11141] batman_adv: batadv0: Adding interface: batadv_slave_0
[  166.871305][T11141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  166.880124][T11141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  166.885401][T11141] batman_adv: batadv0: Adding interface: batadv_slave_1
[  166.888063][T11141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  166.898262][T11141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  166.947363][T11141] hsr_slave_0: entered promiscuous mode
[  166.953239][T11141] hsr_slave_1: entered promiscuous mode
[  166.955570][T11141] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  166.958437][T11141] Cannot create hsr debugfs directory
[  167.198601][T11141] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.275552][T11141] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.338325][T11141] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.392676][T11141] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.543775][T11141] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  167.558785][T11141] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  167.574955][T11141] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  167.582271][T11141] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  167.648317][T11141] 8021q: adding VLAN 0 to HW filter on device bond0
[  167.667918][T11141] 8021q: adding VLAN 0 to HW filter on device team0
[  167.676400][ T6999] bridge0: port 1(bridge_slave_0) entered blocking state
[  167.678829][ T6999] bridge0: port 1(bridge_slave_0) entered forwarding state
[  167.685894][ T6999] bridge0: port 2(bridge_slave_1) entered blocking state
[  167.688293][ T6999] bridge0: port 2(bridge_slave_1) entered forwarding state
[  167.911507][T11141] 8021q: adding VLAN 0 to HW filter on device batadv0
[  167.953120][T11247] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2180'.
[  168.000909][T11141] veth0_vlan: entered promiscuous mode
[  168.011152][T11141] veth1_vlan: entered promiscuous mode
[  168.054386][T11141] veth0_macvtap: entered promiscuous mode
[  168.065845][T11141] veth1_macvtap: entered promiscuous mode
[  168.092582][T11141] batman_adv: batadv0: Interface activated: batadv_slave_0
[  168.106033][T11141] batman_adv: batadv0: Interface activated: batadv_slave_1
[  168.120408][T11141] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  168.124121][T11141] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  168.127021][T11141] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  168.132858][T11258] netlink: 'syz.0.2184': attribute type 1 has an invalid length.
[  168.136105][T11258] netlink: 'syz.0.2184': attribute type 4 has an invalid length.
[  168.143779][T11258] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2184'.
[  168.146805][T11141] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  168.156050][T11258] netlink: 'syz.0.2184': attribute type 1 has an invalid length.
[  168.165358][T11258] netlink: 'syz.0.2184': attribute type 4 has an invalid length.
[  168.183285][T11258] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2184'.
[  168.219665][ T5831] Bluetooth: hci1: command tx timeout
[  168.258116][ T7005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  168.262097][ T7005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  168.323498][   T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  168.327142][   T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  168.406304][T11270] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2189'.
[  169.288135][T11314] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[  169.338509][T11316] 8021q: adding VLAN 0 to HW filter on device bond4
[  169.560429][T11334] netlink: 'syz.0.2219': attribute type 4 has an invalid length.
[  169.570725][T11334] netlink: 'syz.0.2219': attribute type 4 has an invalid length.
[  171.339862][ T5831] Bluetooth: hci0: command tx timeout
[  171.753271][T11363] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2228'.
[  171.756977][T11363] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2228'.
[  171.769592][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  171.777155][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  171.780864][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  171.791746][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  171.795282][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  173.453340][T11407] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  173.570738][ T5861] hid-generic 0005:16BF:5505.0002: item fetching failed at offset 0/3
[  173.573830][ T5861] hid-generic 0005:16BF:5505.0002: probe with driver hid-generic failed with error -22
[  173.774656][T11426] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  173.778187][T11426] syzkaller0: entered promiscuous mode
[  173.780781][T11426] syzkaller0: entered allmulticast mode
[  173.794750][T11426] tipc: Resetting bearer <eth:syzkaller0>
[  173.798450][T11425] tipc: Resetting bearer <eth:syzkaller0>
[  173.813032][T11425] tipc: Disabling bearer <eth:syzkaller0>
[  173.819555][ T5831] Bluetooth: hci1: command tx timeout
[  174.059559][T11431] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2256'.
[  174.068763][T11431] dummy0: entered promiscuous mode
[  174.080485][T11431] dummy0: left promiscuous mode
[  174.385087][T11445] tipc: New replicast peer: 0.0.0.0
[  174.387801][T11445] tipc: Enabled bearer <udp:syz2>, priority 10
[  174.390524][T11445] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa
[  174.655692][T11463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2272'.
[  174.695501][T11465] netlink: 'syz.0.2273': attribute type 1 has an invalid length.
[  174.698798][T11465] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2273'.
[  174.711795][T11465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2273'.
[  174.886342][T11473] netlink: 'syz.0.2277': attribute type 3 has an invalid length.
[  175.899475][ T5831] Bluetooth: hci1: command tx timeout
[  175.979503][T11487] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2282'.
[  175.983400][T11487] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2282'.
[  175.986391][T11487] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2282'.
[  175.990328][T11487] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2282'.
[  177.981432][ T5831] Bluetooth: hci1: command tx timeout
[  178.074951][T11513] bridge4: entered allmulticast mode
[  178.440818][T11531] xt_TPROXY: Can be used only with -p tcp or -p udp
[  178.583380][T11541] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2307'.
[  178.586443][T11541] nbd: illegal input index -381222912
[  178.765583][T11550] SET target dimension over the limit!
[  179.075263][T11568] netlink: 'syz.0.2320': attribute type 2 has an invalid length.
[  179.220322][T11575] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2323'.
[  179.223834][T11574] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2323'.
[  179.295785][T11574] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  180.059536][ T5831] Bluetooth: hci1: command tx timeout
[  181.784585][T11622] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2343'.
[  182.992324][T11644] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2352'.
[  182.996157][T11644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2352'.
[  183.004641][T11644] netlink: 'syz.0.2352': attribute type 5 has an invalid length.
[  183.885347][T11686] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2372'.
[  183.962222][T11692] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2374'.
[  184.076525][T11700] netlink: 'syz.0.2378': attribute type 10 has an invalid length.
[  184.079867][T11700] openvswitch: netlink: Flow key attr not present in new flow.
[  184.133975][T11700] sctp: [Deprecated]: syz.0.2378 (pid 11700) Use of int in max_burst socket option deprecated.
[  184.133975][T11700] Use struct sctp_assoc_value instead
[  185.402934][T11726] bond0: Unable to set peer notification delay as MII monitoring is disabled
[  185.508265][T11732] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2392'.
[  185.597427][T11739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2395'.
[  185.645589][T11743] netlink: 'syz.0.2397': attribute type 11 has an invalid length.
[  187.028821][ T5829] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  187.040034][ T5829] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  187.044013][ T5829] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  187.048860][ T5829] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  187.056976][ T5829] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  187.117174][T11782] syzkaller1: entered promiscuous mode
[  187.119646][T11782] syzkaller1: entered allmulticast mode
[  187.324562][T11788] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.2415'.
[  188.707280][T11821] !: renamed from dummy0 (while UP)
[  189.100499][ T5829] Bluetooth: hci3: command tx timeout
[  190.217834][T11916] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2447'.
[  190.335376][T11920] netlink: 'syz.0.2449': attribute type 11 has an invalid length.
[  190.338763][T11920] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2449'.
[  190.695096][T11936] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2455'.
[  191.133086][T11953] netlink: 'syz.0.2463': attribute type 15 has an invalid length.
[  191.136485][T11953] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2463'.
[  191.148672][T11953] bond0: option resend_igmp: invalid value (196616)
[  191.151737][T11953] bond0: option resend_igmp: allowed values 0 - 255
[  191.173317][ T8394] bond0: (slave wlan1): link status definitely down, disabling slave
[  191.179581][ T5829] Bluetooth: hci3: command tx timeout
[  193.259690][ T5829] Bluetooth: hci3: command tx timeout
[  193.407954][T11979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2475'.
[  194.804517][T12001] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2486'.
[  194.833308][T12003] netlink: 'syz.0.2487': attribute type 142 has an invalid length.
[  195.218824][T12013] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  195.294851][T12017] delete_channel: no stack
[  195.339542][ T5829] Bluetooth: hci3: command tx timeout
[  196.278751][T12028] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2498'.
[  198.377653][T12049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2508'.
[  198.433458][T12051] netlink: 'syz.0.2509': attribute type 2 has an invalid length.
[  198.733926][T12065] nbd: couldn't find device at index 536870912
[  199.527805][T12098] netlink: 'syz.0.2530': attribute type 5 has an invalid length.
[  199.534833][T12098] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2530'.
[  200.993647][T12130] netlink: 'syz.0.2544': attribute type 5 has an invalid length.
[  201.199585][T12146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2552'.
[  202.242716][T12195] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2575'.
[  202.251488][T12195] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2575'.
[  202.557298][T12209] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2582'.
[  202.562102][T12209] netem: unknown loss type 13
[  202.563837][T12209] netem: change failed
[  202.656061][T12215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2585'.
[  203.165083][T12243] netlink: 'syz.0.2598': attribute type 1 has an invalid length.
[  203.168590][T12243] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2598'.
[  203.206771][T12243] xt_CT: No such helper "snmp"
[  204.034588][T12246] xt_CONNSECMARK: invalid mode: 254
[  204.074034][T12248] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2600'.
[  204.077282][T12248] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2600'.
[  204.261987][T12250] netlink: 'syz.0.2601': attribute type 11 has an invalid length.
[  204.429979][T12261] ip6t_srh: unknown srh invflags 4000
[  205.622988][T12276] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  205.634624][T12276] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2613'.
[  205.638265][T12276] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2613'.
[  207.640691][T12296] IPVS: stopping backup sync thread 7441 ...
[  210.618406][T12319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2629'.
[  210.647270][T12319] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  210.651363][T12319] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  211.484326][T12323] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2630'.
[  211.763646][T12337] syzkaller1: entered promiscuous mode
[  211.766001][T12337] syzkaller1: entered allmulticast mode
[  211.946006][T12343] smc: net device bond0 applied user defined pnetid SYZ2
[  212.013349][T12347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2642'.
[  212.881041][T12382] sit1: entered promiscuous mode
[  212.998219][T12388] netlink: 1300 bytes leftover after parsing attributes in process `syz.0.2662'.
[  213.164734][T12398] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2667'.
[  214.776505][T12434] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  214.781197][T12434] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  215.983961][T12455] syzkaller1: tun_chr_ioctl cmd 1074025677
[  215.986073][T12455] syzkaller1: linktype set to 780
[  216.264636][T12466] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2697'.
[  216.354343][T12470] netlink: 'syz.0.2699': attribute type 83 has an invalid length.
[  216.695542][T12488] netlink: 'syz.0.2707': attribute type 39 has an invalid length.
[  216.965003][T12494] netlink: 'syz.0.2710': attribute type 1 has an invalid length.
[  216.968404][T12494] netlink: 'syz.0.2710': attribute type 2 has an invalid length.
[  216.971957][T12494] netlink: 1172 bytes leftover after parsing attributes in process `syz.0.2710'.
[  218.494232][T12523] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2722'.
[  219.152906][T12559] bond0: (slave wlan1): Releasing backup interface
[  219.367548][T12565] netlink: 'syz.0.2740': attribute type 11 has an invalid length.
[  219.372075][T12565] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2740'.
[  220.653240][T12591] netlink: 'syz.0.2751': attribute type 2 has an invalid length.
[  220.656048][T12591] netlink: 'syz.0.2751': attribute type 1 has an invalid length.
[  220.658727][T12591] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2751'.
[  222.528334][T12639] SET target dimension over the limit!
[  224.058113][T12675] netlink: 'syz.0.2789': attribute type 1 has an invalid length.
[  224.062657][T12675] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2789'.
[  224.351091][T12686] xt_hashlimit: max too large, truncated to 1048576
[  224.354337][T12686] Cannot find add_set index 3 as target
[  226.541091][T12714] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2805'.
[  226.696368][T12724] sock: sock_set_timeout: `syz.0.2810' (pid 12724) tries to set negative timeout
[  227.418152][T12766] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2830'.
[  227.801366][T12786] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2839'.
[  227.955606][T12794] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2843'.
[  228.231504][T12800] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2845'.
[  228.273063][T12800] 8021q: adding VLAN 0 to HW filter on device bond4
[  228.297212][T12800] macvlan3: entered promiscuous mode
[  228.306328][T12800] macvlan3: entered allmulticast mode
[  228.310210][T12800] bond4: entered promiscuous mode
[  228.312918][T12800] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  228.318273][T12800] bond4: left promiscuous mode
[  228.427470][T12803] Unsupported ieee802154 address type: 0
[  228.474285][T12805] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  228.477867][T12805] syzkaller0: entered promiscuous mode
[  228.487793][T12805] syzkaller0: entered allmulticast mode
[  228.521878][T12805] tipc: Resetting bearer <eth:syzkaller0>
[  228.526381][T12804] tipc: Resetting bearer <eth:syzkaller0>
[  228.537928][T12804] tipc: Disabling bearer <eth:syzkaller0>
[  229.965200][T12840] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2857'.
[  233.246224][T12854] Cannot find add_set index 0 as target
[  233.385005][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  233.394769][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  233.399393][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  233.403064][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  233.408394][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  233.656747][T12875] netlink: 'syz.0.2872': attribute type 7 has an invalid length.
[  233.924842][T12889] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  233.981680][T12891] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2880'.
[  234.045383][T12891] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2880'.
[  234.209932][   T12] unregister_netdevice: waiting for batadv_slave_0 to become free. Usage count = 2
[  234.214520][   T12] ref_tracker: batadv_slave_0@ffff8880313c4610 has 1/1 users at
[  234.214520][   T12]      batadv_hard_if_event+0x122c/0x1a50
[  234.214520][   T12]      notifier_call_chain+0x1b6/0x3e0
[  234.214520][   T12]      register_netdevice+0x1608/0x1ae0
[  234.214520][   T12]      veth_newlink+0x5cc/0xa50
[  234.214520][   T12]      rtnl_newlink_create+0x310/0xb00
[  234.214520][   T12]      rtnl_newlink+0x16d6/0x1c70
[  234.214520][   T12]      rtnetlink_rcv_msg+0x7cf/0xb70
[  234.214520][   T12]      netlink_rcv_skb+0x208/0x470
[  234.214520][   T12]      netlink_unicast+0x75b/0x8d0
[  234.214520][   T12]      netlink_sendmsg+0x805/0xb30
[  234.214520][   T12]      __sock_sendmsg+0x21c/0x270
[  234.214520][   T12]      __sys_sendto+0x3bd/0x520
[  234.214520][   T12]      __x64_sys_sendto+0xde/0x100
[  234.214520][   T12]      do_syscall_64+0xfa/0x3b0
[  234.214520][   T12]      entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  234.214520][   T12] 
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)

VM DIAGNOSIS:
13:34:13  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=ffff888100aba800 RCX=ffff88801bf2d640 RDX=0000000000000000
RSI=0000000000000000 RDI=ffff888100aba820 RBP=0000000000000000 RSP=ffffc90003b7fd40
R8 =ffffffff8fa1def7 R9 =1ffffffff1f43bde R10=dffffc0000000000 R11=fffffbfff1f43bdf
R12=1ffff1102015752b R13=dffffc0000000000 R14=ffff888100aba95c R15=dffffc0000000000
RIP=ffffffff823d80a1 RFL=00000287 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055558ef1d500 ffffffff 00c00000
GS =0000 ffff8880b861d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f4038f7e2d8 CR3=0000000024b16000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=00000000ffffffff 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f4038e11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000061 RBX=0000000000000061 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900000f6f70
R8 =ffff888021830237 R9 =1ffff11004306046 R10=dffffc0000000000 R11=ffffffff85475610
R12=dffffc0000000000 R13=ffffffff99af78ee R14=ffffffff99dfc760 R15=0000000000000000
RIP=ffffffff8547568c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2fe1dff8 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff8186c9b6 ffffffff81745ed3
XMM02=00007f4038f84478 ffffffff81745ed3 XMM03=00007f4038f84488 00007f4038f84480
XMM04=00007f4039aed100 00007f4038f84440 XMM05=00007f4038f84458 00007f4038f844a0
XMM06=00007f4038f84498 00007f4038f84490 XMM07=00007f4038f84488 00007f4038f84480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f4038e11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
