last executing test programs:

9.207101466s ago: executing program 1 (id=1665):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r0, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000a40)=""/14, 0xe}, {0x0}, {&(0x7f0000000b00)=""/243, 0xf3}], 0x3}, 0x4}], 0x1, 0x0, 0x0)

9.084349491s ago: executing program 1 (id=1668):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x2, 0xe, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_address={0x3, 0x6}, @sadb_lifetime={0x4, 0x4}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast2, @in=@empty}}, @sadb_lifetime={0x4, 0x3}]}, 0xc0}}, 0x0)

9.084065054s ago: executing program 1 (id=1670):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2}, 0x10)
socket$l2tp6(0xa, 0x2, 0x73)

9.083118082s ago: executing program 1 (id=1672):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002140)=@delchain={0x1f0, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xd}, {0x0, 0xffea}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_route={{0xa}, {0x98, 0x2, [@TCA_ROUTE4_ACT={0x94, 0x6, [@m_vlan={0x90, 0x6, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x1b6}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}]}, {0x51, 0x6, "657c8f856bb2bb5d377d3e798375b1d28aa9ff79c5750c001846426a94e358dab26224b357e0bd9c9b84cfee21ec99f48cf585ab10ae01a9ffc67e6ad19b4103524e4f4a3bf49582d994e907b0"}, {0xc}, {0xc}}}]}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x118, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0x10c, 0x1, [@m_simple={0x30, 0x1f, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_nat={0xd8, 0xa, 0x0, 0x0, {{0x8}, {0x4}, {0xaf, 0x6, "455c01c35a2bca70225b757b65e5e4a3d41b6fb981e9f5ab2f14ad001cda09785441b436361246e3000e13fa20bea090aab2bdd9895404add20f4fcf1a162cef77fa510e284971b2c20e689c84c729801c399b2e8e9d7612504fa384dfa0fff7632779c87cbc4514e6104d9c559f50b25734ad06a5ddf0fb7c97e85209e4d13a9bbed8be1bc47fef2d1001f0ec1073cc1f8efb57e77a5e5f3f0cd2a93034ee179196b1c81d720ced402952"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x80}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

8.807567761s ago: executing program 1 (id=1677):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x4, 0x4)

3.855166639s ago: executing program 1 (id=1677):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x4, 0x4)

1.126730617s ago: executing program 2 (id=1778):
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socket$inet(0x2, 0x2, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0))
socket$packet(0x11, 0x3, 0x300)
socket$netlink(0x10, 0x3, 0x10)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0)

1.025133779s ago: executing program 2 (id=1779):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='b *:* m'], 0x47)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r4 = openat$cgroup_devices(r3, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0)
splice(r0, 0x0, r4, 0x0, 0x47, 0x0)

288.414161ms ago: executing program 0 (id=1785):
unshare(0x26020480)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
pwrite64(r0, &(0x7f00000002c0)="8c", 0x1, 0x7fffffffffffffff)

288.156183ms ago: executing program 0 (id=1786):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20)
sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="0f02", 0x2}], 0x1}, 0x3)

228.617981ms ago: executing program 0 (id=1787):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="62a02a3a3409777277"], 0xa)

228.436264ms ago: executing program 0 (id=1788):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x8, 0x1, &(0x7f0000000fc0)="c0", 0x9, 0x52, 0x4f3, 0x8002, 0x9, 0x0, 0xd, 'syz1\x00'})

168.268477ms ago: executing program 2 (id=1789):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="7a0a00ff000000007110bd0000000000957c61"], &(0x7f0000000480)='syzkaller\x00'}, 0x94)

168.054336ms ago: executing program 0 (id=1790):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_proto_private(r0, 0x8992, &(0x7f0000000340)="f5bb3a")

167.797197ms ago: executing program 2 (id=1791):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r1, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x8}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x8090}, 0x20048800)
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}}, 0x28}}, 0x0)

45.631558ms ago: executing program 2 (id=1792):
syz_init_net_socket$ax25(0x3, 0x5, 0xcd)

180.634µs ago: executing program 2 (id=1793):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x32, 0x1}, 0x9c)
shutdown(r0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000900)=[@in={0x2, 0x0, @loopback}], 0x10)

0s ago: executing program 0 (id=1794):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(0x3)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(r2, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48)
listen(r2, 0x80)
accept$netrom(r2, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[], 0xb8}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:8907' (ED25519) to the list of known hosts.
syzkaller login: [   41.995448][ T5803] cgroup: Unknown subsys name 'net'
[   42.094870][ T5803] cgroup: Unknown subsys name 'cpuset'
[   42.099645][ T5803] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   43.415914][ T5803] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   46.775719][ T5219] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   46.778526][ T5219] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   46.780952][ T5219] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   46.783640][ T5219] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   46.786058][ T5219] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   46.837265][ T5219] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   46.840469][ T5219] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   46.843585][ T5219] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   46.846474][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   46.849829][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   46.852358][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   46.875965][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   46.879231][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   46.883253][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   46.887583][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   47.047051][ T5825] chnl_net:caif_netlink_parms(): no params data found
[   47.073333][ T5831] chnl_net:caif_netlink_parms(): no params data found
[   47.208499][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.211452][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.215751][ T5825] bridge_slave_0: entered allmulticast mode
[   47.219431][ T5825] bridge_slave_0: entered promiscuous mode
[   47.224276][ T5832] chnl_net:caif_netlink_parms(): no params data found
[   47.228760][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.231499][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.234604][ T5825] bridge_slave_1: entered allmulticast mode
[   47.237997][ T5825] bridge_slave_1: entered promiscuous mode
[   47.277904][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.280727][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.284088][ T5831] bridge_slave_0: entered allmulticast mode
[   47.287568][ T5831] bridge_slave_0: entered promiscuous mode
[   47.291608][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.295873][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.298618][ T5831] bridge_slave_1: entered allmulticast mode
[   47.302121][ T5831] bridge_slave_1: entered promiscuous mode
[   47.330260][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.347174][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.360051][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.366396][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.416984][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.419899][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.422895][ T5832] bridge_slave_0: entered allmulticast mode
[   47.426358][ T5832] bridge_slave_0: entered promiscuous mode
[   47.444420][ T5825] team0: Port device team_slave_0 added
[   47.447121][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.450123][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.454044][ T5832] bridge_slave_1: entered allmulticast mode
[   47.457436][ T5832] bridge_slave_1: entered promiscuous mode
[   47.461559][ T5831] team0: Port device team_slave_0 added
[   47.465466][ T5825] team0: Port device team_slave_1 added
[   47.468362][ T5831] team0: Port device team_slave_1 added
[   47.520119][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.522348][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.529953][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.535949][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.538047][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.545874][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.549540][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.551645][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.559741][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.564746][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.567998][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.570108][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.577993][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.587227][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.625634][ T5832] team0: Port device team_slave_0 added
[   47.644224][ T5832] team0: Port device team_slave_1 added
[   47.649409][ T5831] hsr_slave_0: entered promiscuous mode
[   47.651685][ T5831] hsr_slave_1: entered promiscuous mode
[   47.687108][ T5825] hsr_slave_0: entered promiscuous mode
[   47.689366][ T5825] hsr_slave_1: entered promiscuous mode
[   47.691410][ T5825] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   47.693989][ T5825] Cannot create hsr debugfs directory
[   47.706699][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.709441][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.719701][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.742607][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.745335][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.756251][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.850954][ T5832] hsr_slave_0: entered promiscuous mode
[   47.854263][ T5832] hsr_slave_1: entered promiscuous mode
[   47.856886][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   47.859814][ T5832] Cannot create hsr debugfs directory
[   48.003460][ T5831] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   48.021666][ T5831] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   48.046313][ T5831] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   48.052731][ T5831] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   48.078879][ T5825] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   48.086895][ T5825] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   48.091583][ T5825] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   48.106230][ T5825] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   48.137425][ T5832] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   48.144826][ T5832] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   48.150518][ T5832] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   48.157330][ T5832] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   48.219801][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.237403][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   48.251528][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.254570][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.265050][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.267829][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.317380][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.339541][ T5825] 8021q: adding VLAN 0 to HW filter on device team0
[   48.354513][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.363285][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.365903][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.385242][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.387575][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.415841][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   48.426696][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.431692][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.433999][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.453424][ T3588] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.456071][ T3588] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.504954][ T5831] veth0_vlan: entered promiscuous mode
[   48.524556][ T5831] veth1_vlan: entered promiscuous mode
[   48.565853][ T5831] veth0_macvtap: entered promiscuous mode
[   48.574856][ T5831] veth1_macvtap: entered promiscuous mode
[   48.597724][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.615170][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.625781][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.631169][ T5831] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.634898][ T5831] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.638175][ T5831] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.643595][ T5831] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.679704][ T5825] veth0_vlan: entered promiscuous mode
[   48.704647][ T5825] veth1_vlan: entered promiscuous mode
[   48.714098][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.744658][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.749286][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.768704][ T5825] veth0_macvtap: entered promiscuous mode
[   48.777474][ T5825] veth1_macvtap: entered promiscuous mode
[   48.788150][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.791650][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.794215][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.814862][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.819617][ T5832] veth0_vlan: entered promiscuous mode
[   48.822457][ T5828] Bluetooth: hci0: command tx timeout
[   48.829107][ T5825] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.831895][ T5825] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.836085][ T5825] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.838872][ T5825] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.847277][ T5832] veth1_vlan: entered promiscuous mode
[   48.860288][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   48.892896][ T5828] Bluetooth: hci2: command tx timeout
[   48.900344][ T5832] veth0_macvtap: entered promiscuous mode
[   48.902981][ T5828] Bluetooth: hci1: command tx timeout
[   48.908458][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.910943][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.911394][ T5832] veth1_macvtap: entered promiscuous mode
[   48.951042][ T4163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.954249][ T4163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.956911][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.976133][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.988301][ T5832] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.994821][ T5894] netlink: 'syz.2.3': attribute type 2 has an invalid length.
[   48.996838][ T5832] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.016447][ T5832] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.019717][ T5832] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.117667][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.120161][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.142915][ T5903] sch_tbf: peakrate 12 is lower than or equals to rate 6561010854487373889 !
[   49.154200][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.156675][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.435894][ T5928] tipc: Started in network mode
[   49.437801][ T5928] tipc: Node identity 4, cluster identity 4711
[   49.462081][ T5928] tipc: Node number set to 4
[   49.590717][ T5941] veth1_to_batadv: mtu greater than device maximum
[   49.595427][ T5940] netlink: 40 bytes leftover after parsing attributes in process `syz.1.17'.
[   49.601007][ T5943] bond0: Unable to set up delay as MII monitoring is disabled
[   49.894192][ T5974] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   50.006691][ T5986] netem: incorrect gi model size
[   50.008373][ T5986] netem: change failed
[   50.067819][ T5962] Zero length message leads to an empty skb
[   50.126446][ T6000] netlink: 1300 bytes leftover after parsing attributes in process `syz.0.44'.
[   50.214937][ T6010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.49'.
[   50.226756][ T6012] syz.0.50 uses obsolete (PF_INET,SOCK_PACKET)
[   50.345164][ T6017] netlink: 'syz.0.52': attribute type 3 has an invalid length.
[   50.347602][ T6017] netlink: 'syz.0.52': attribute type 1 has an invalid length.
[   50.350064][ T6017] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.52'.
[   50.774869][ T6042] netlink: 60 bytes leftover after parsing attributes in process `syz.1.64'.
[   50.803937][ T6045] warning: `syz.1.65' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   50.892619][ T5828] Bluetooth: hci0: command tx timeout
[   50.972990][ T5835] Bluetooth: hci2: command tx timeout
[   50.975240][ T5828] Bluetooth: hci1: command tx timeout
[   51.042554][ T6063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.74'.
[   51.075496][ T6065] pim6reg1: entered allmulticast mode
[   51.188386][ T6073] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   51.254231][ T6079] netlink: 4 bytes leftover after parsing attributes in process `syz.2.82'.
[   51.257266][ T6079] vlan1: entered promiscuous mode
[   51.259040][ T6079] vlan1: entered allmulticast mode
[   51.260819][ T6079] veth0_vlan: entered allmulticast mode
[   51.269118][ T6079] netlink: 28 bytes leftover after parsing attributes in process `syz.2.82'.
[   51.277043][ T6079] netlink: 52 bytes leftover after parsing attributes in process `syz.2.82'.
[   51.325620][ T6083] Cannot find add_set index 0 as target
[   51.389760][ T6091] netlink: 'syz.1.88': attribute type 4 has an invalid length.
[   51.486589][ T6101] netlink: 'syz.2.94': attribute type 1 has an invalid length.
[   51.489548][ T6101] netlink: 24 bytes leftover after parsing attributes in process `syz.2.94'.
[   51.768637][ T6138] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[   52.097090][ T6176] tipc: Started in network mode
[   52.098737][ T6176] tipc: Node identity 726935d0d86d, cluster identity 4711
[   52.101237][ T6176] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   52.104808][ T6176] syzkaller0: entered promiscuous mode
[   52.106605][ T6176] syzkaller0: entered allmulticast mode
[   52.137623][ T6176] tipc: Resetting bearer <eth:syzkaller0>
[   52.143453][ T6175] tipc: Resetting bearer <eth:syzkaller0>
[   52.169926][ T6175] tipc: Disabling bearer <eth:syzkaller0>
[   52.273744][ T6195] sctp: [Deprecated]: syz.2.138 (pid 6195) Use of int in maxseg socket option.
[   52.273744][ T6195] Use struct sctp_assoc_value instead
[   52.541720][ T6231] @: renamed from vlan0 (while UP)
[   52.780262][ T6265] netlink: 'syz.2.173': attribute type 1 has an invalid length.
[   52.972267][ T5828] Bluetooth: hci0: command tx timeout
[   53.057879][ T6296] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[   53.061067][ T5828] Bluetooth: hci1: command tx timeout
[   53.062983][ T5828] Bluetooth: hci2: command tx timeout
[   53.139082][ T6304] dummy0: entered promiscuous mode
[   53.142901][ T6304] batadv0: entered promiscuous mode
[   53.155207][ T6304] dummy0: left promiscuous mode
[   53.157256][ T6304] batadv0: left promiscuous mode
[   53.345568][ T6329] ipvlan2: entered promiscuous mode
[   53.546015][ T6357] netlink: 'syz.2.215': attribute type 1 has an invalid length.
[   53.755307][ T6383] netlink: 'syz.2.227': attribute type 21 has an invalid length.
[   53.768517][ T6383] IPv6: NLM_F_CREATE should be specified when creating new route
[   54.219104][ T6449] netlink: 'syz.0.253': attribute type 1 has an invalid length.
[   54.461784][ T6483] netlink: 'syz.1.271': attribute type 11 has an invalid length.
[   54.467896][ T6485] netlink: 'syz.0.270': attribute type 1 has an invalid length.
[   54.470083][ T6484] netlink: 'syz.2.269': attribute type 5 has an invalid length.
[   54.477527][ T6484] ip6erspan0: entered promiscuous mode
[   54.746178][ T6516] __nla_validate_parse: 24 callbacks suppressed
[   54.746188][ T6516] netlink: 28 bytes leftover after parsing attributes in process `syz.2.282'.
[   54.852616][ T5857] syzkaller0: tun_net_xmit 76
[   54.854394][ T5857] syzkaller0: tun_net_xmit 48
[   54.868895][ T6523] syzkaller0: create flow: hash 402180831 index 1
[   54.882609][   T24] syzkaller0: tun_net_xmit 76
[   54.949339][ T6522] syzkaller0: delete flow: hash 402180831 index 1
[   55.042270][ T6543] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   55.052832][ T5835] Bluetooth: hci0: command tx timeout
[   55.132286][ T5835] Bluetooth: hci2: command tx timeout
[   55.132345][ T5828] Bluetooth: hci1: command tx timeout
[   55.425571][ T6564] netlink: 20 bytes leftover after parsing attributes in process `syz.0.301'.
[   55.636204][ T6570] netlink: 'syz.2.302': attribute type 4 has an invalid length.
[   55.868159][ T6595] sctp: [Deprecated]: syz.0.311 (pid 6595) Use of int in max_burst socket option deprecated.
[   55.868159][ T6595] Use struct sctp_assoc_value instead
[   55.931373][ T6600] openvswitch: netlink: Actions may not be safe on all matching packets
[   55.983742][ T6604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.317'.
[   55.994754][ T6604] netlink: 44 bytes leftover after parsing attributes in process `syz.2.317'.
[   56.276022][ T6622] sctp: [Deprecated]: syz.2.326 (pid 6622) Use of int in maxseg socket option.
[   56.276022][ T6622] Use struct sctp_assoc_value instead
[   56.895576][ T6671] vcan0: tx drop: invalid sa for name 0x0000000000000003
[   57.055174][ T6686] netlink: 24 bytes leftover after parsing attributes in process `syz.2.357'.
[   57.089922][ T6686] netlink: 24 bytes leftover after parsing attributes in process `syz.2.357'.
[   57.096369][ T6690] bond0: entered promiscuous mode
[   57.098112][ T6690] bond_slave_0: entered promiscuous mode
[   57.100066][ T6690] bond_slave_1: entered promiscuous mode
[   57.103615][ T6690] macvlan1: entered promiscuous mode
[   57.106090][ T6690] hsr1: entered promiscuous mode
[   58.209332][ T6727] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[   58.216856][ T6727] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[   58.220860][ T6727] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[   58.474129][ T6762] netlink: 8 bytes leftover after parsing attributes in process `syz.1.391'.
[   58.539864][ T6769] xt_bpf: check failed: parse error
[   58.727736][ T6789] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[   58.730777][ T6789] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[   58.766388][ T6792] netlink: 8 bytes leftover after parsing attributes in process `syz.0.405'.
[   58.774865][ T6793] netlink: 56 bytes leftover after parsing attributes in process `syz.1.406'.
[   58.964170][ T6808] netlink: 'syz.1.413': attribute type 2 has an invalid length.
[   58.966763][ T6808] netlink: 224 bytes leftover after parsing attributes in process `syz.1.413'.
[   59.249483][ T6831] netlink: 'syz.2.423': attribute type 15 has an invalid length.
[   59.324195][ T6837] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   59.345638][ T6837] syzkaller0: entered promiscuous mode
[   59.347537][ T6837] syzkaller0: entered allmulticast mode
[   59.349714][ T6837] tipc: Resetting bearer <eth:syzkaller0>
[   59.354051][ T6836] tipc: Resetting bearer <eth:syzkaller0>
[   59.935343][ T6836] tipc: Disabling bearer <eth:syzkaller0>
[   59.941865][ T6851] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[   59.945887][ T6851] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[   60.099936][ T6872] __nla_validate_parse: 2 callbacks suppressed
[   60.099946][ T6872] netlink: 32 bytes leftover after parsing attributes in process `syz.1.440'.
[   60.106115][ T6872] netlink: 32 bytes leftover after parsing attributes in process `syz.1.440'.
[   60.407884][ T6914] Bluetooth: MGMT ver 1.23
[   60.433410][ T6910] netlink: 8 bytes leftover after parsing attributes in process `syz.2.458'.
[   60.436326][ T6910] netlink: 4 bytes leftover after parsing attributes in process `syz.2.458'.
[   60.439140][ T6910] netlink: 'syz.2.458': attribute type 1 has an invalid length.
[   60.445201][ T6910] netlink: 10 bytes leftover after parsing attributes in process `syz.2.458'.
[   60.485488][   T56] block nbd0: Receive control failed (result -107)
[   60.648007][ T6929] infiniband syz!: set active
[   60.649756][ T6929] infiniband syz!: added team_slave_0
[   60.693096][ T6929] RDS/IB: syz!: added
[   60.695329][ T6929] smc: adding ib device syz! with port count 1
[   60.698282][ T6929] smc:    ib device syz! port 1 has pnetid 
[   60.756017][ T6959] netlink: 224 bytes leftover after parsing attributes in process `syz.1.481'.
[   60.807459][ T6963] syz.2.483 (6963) used greatest stack depth: 19728 bytes left
[   60.920182][ T6971] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   61.062449][ T6985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.494'.
[   61.133973][ T5835] Bluetooth: hci2: command 0x0405 tx timeout
[   61.398811][ T7028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.510'.
[   61.521830][ T7044] ip6gre1: entered promiscuous mode
[   61.691297][ T7065] trusted_key: syz.2.527 sent an empty control message without MSG_MORE.
[   62.013627][ T7090] veth0: entered promiscuous mode
[   62.204974][ T7089] veth0: left promiscuous mode
[   62.445659][ T7134] netlink: 92 bytes leftover after parsing attributes in process `syz.0.552'.
[   62.448501][ T7134] netlink: 92 bytes leftover after parsing attributes in process `syz.0.552'.
[   62.496597][ T7140] netem: incorrect ge model size
[   62.498802][ T7140] netem: change failed
[   62.633175][ T7158] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[   62.815449][ T7176] wireguard0: entered promiscuous mode
[   62.817909][ T7176] wireguard0: entered allmulticast mode
[   65.129692][ T7296] __nla_validate_parse: 6 callbacks suppressed
[   65.129701][ T7296] netlink: 32 bytes leftover after parsing attributes in process `syz.2.626'.
[   65.250156][ T7309] xt_CT: No such helper "snmp"
[   65.259493][ T7309] netlink: 'syz.0.632': attribute type 5 has an invalid length.
[   65.266063][ T7318] vlan1: left promiscuous mode
[   65.510677][ T7343] netlink: 76 bytes leftover after parsing attributes in process `syz.0.647'.
[   65.597101][ T7352] netlink: 'syz.2.650': attribute type 13 has an invalid length.
[   65.698238][ T7352] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.701201][ T7352] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.720008][ T7364] netlink: zone id is out of range
[   65.721762][ T7364] netlink: zone id is out of range
[   65.726279][ T7364] netlink: zone id is out of range
[   65.728058][ T7364] netlink: zone id is out of range
[   65.730533][ T7364] netlink: zone id is out of range
[   65.732344][ T7364] netlink: zone id is out of range
[   65.734248][ T7364] netlink: zone id is out of range
[   65.736033][ T7364] netlink: zone id is out of range
[   65.737786][ T7364] netlink: zone id is out of range
[   65.817066][ T7369] sctp: [Deprecated]: syz.0.658 (pid 7369) Use of int in max_burst socket option.
[   65.817066][ T7369] Use struct sctp_assoc_value instead
[   65.817354][ T7352] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   65.836631][ T7352] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   65.921919][ T7352] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   65.926186][ T7352] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   65.929143][ T7352] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   65.932443][ T7352] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.030565][ T7380] netlink: 56 bytes leftover after parsing attributes in process `syz.2.663'.
[   66.058091][ T7384] Illegal XDP return value 7384 on prog  (id 83) dev N/A, expect packet loss!
[   67.316654][ T7429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.686'.
[   67.405904][ T7435] netlink: 24 bytes leftover after parsing attributes in process `syz.1.689'.
[   67.408712][ T7435] netlink: 24 bytes leftover after parsing attributes in process `syz.1.689'.
[   67.439123][ T7437] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744072284733443)
[   67.449294][ T7437] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647
[   67.540344][ T7443] netlink: 'syz.1.693': attribute type 3 has an invalid length.
[   67.543098][ T7443] netlink: 'syz.1.693': attribute type 3 has an invalid length.
[   67.546271][ T7443] netlink: 16 bytes leftover after parsing attributes in process `syz.1.693'.
[   67.578849][ T7445] netlink: 'syz.1.694': attribute type 21 has an invalid length.
[   67.581590][ T7445] netlink: 132 bytes leftover after parsing attributes in process `syz.1.694'.
[   67.704358][ T7451] netlink: 'syz.0.697': attribute type 2 has an invalid length.
[   67.713130][ T7451] netlink: 'syz.0.697': attribute type 2 has an invalid length.
[   68.040568][ T7464] netlink: 'syz.2.703': attribute type 4 has an invalid length.
[   68.130812][ T7473] sctp: [Deprecated]: syz.0.704 (pid 7473) Use of struct sctp_assoc_value in delayed_ack socket option.
[   68.130812][ T7473] Use struct sctp_sack_info instead
[   69.174736][ T7516] netlink: 'syz.0.727': attribute type 1 has an invalid length.
[   69.182102][ T7516] netlink: 172 bytes leftover after parsing attributes in process `syz.0.727'.
[   69.329105][ T7532] bridge: RTM_NEWNEIGH with invalid ether address
[   69.390751][ T7543] nbd: nbd0 already in use
[   69.394429][ T7543] block nbd0: NBD_DISCONNECT
[   69.396512][ T7543] block nbd0: Send disconnect failed -107
[   69.398414][ T7543] block nbd0: shutting down sockets
[   70.296101][   T10] cfg80211: failed to load regulatory.db
[   70.824883][ T1359] ieee802154 phy0 wpan0: encryption failed: -22
[   70.828117][ T1359] ieee802154 phy1 wpan1: encryption failed: -22
[   71.070756][ T7644] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   71.074071][ T7644] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   71.077066][ T7644] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   71.079803][ T7644] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   71.441762][ T7689] netlink: 40 bytes leftover after parsing attributes in process `syz.2.804'.
[   71.481980][ T7693] tun0: tun_chr_ioctl cmd 35108
[   72.082857][ T7763] netlink: 'syz.2.840': attribute type 3 has an invalid length.
[   72.085397][ T7763] netlink: 'syz.2.840': attribute type 1 has an invalid length.
[   72.087931][ T7763] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.840'.
[   72.130516][ T7766] bridge1: entered allmulticast mode
[   72.221284][ T7776] netem: incorrect gi model size
[   72.226885][ T7776] netem: change failed
[   72.229021][ T7778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.848'.
[   72.414188][ T7796] netlink: 1300 bytes leftover after parsing attributes in process `syz.1.856'.
[   72.591914][ T7811] net_ratelimit: 194 callbacks suppressed
[   72.591924][ T7811] openvswitch: netlink: IP tunnel dst address not specified
[   72.666251][ T7819] netlink: 48 bytes leftover after parsing attributes in process `syz.1.867'.
[   73.236644][ T7831] netlink: 60 bytes leftover after parsing attributes in process `syz.2.871'.
[   73.320751][ T7845] netlink: 16 bytes leftover after parsing attributes in process `syz.1.879'.
[   73.386662][ T7855] netlink: 'syz.1.887': attribute type 1 has an invalid length.
[   73.492681][ T7871] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6
[   73.505297][ T7873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.893'.
[   73.613088][   T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   73.615850][   T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   73.652188][ T6561] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   73.788027][ T7900] pim6reg1: entered allmulticast mode
[   73.812146][ T6561] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   74.272482][ T6561] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   74.491190][ T7909] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   74.591122][ T7924] netlink: 4 bytes leftover after parsing attributes in process `syz.1.916'.
[   74.618256][ T7924] erspan0: entered promiscuous mode
[   74.620195][ T7924] macvtap1: entered promiscuous mode
[   74.621927][ T7924] macvtap1: entered allmulticast mode
[   74.625314][ T7924] erspan0: entered allmulticast mode
[   74.648101][ T7924] netlink: 28 bytes leftover after parsing attributes in process `syz.1.916'.
[   74.703743][ T7937] delete_channel: no stack
[   74.776727][ T7949] netlink: 'syz.2.929': attribute type 4 has an invalid length.
[   74.939859][ T7979] netlink: 'syz.0.944': attribute type 1 has an invalid length.
[   74.970267][ T7983] netlink: 'syz.1.948': attribute type 1 has an invalid length.
[   74.979887][ T7983] netlink: 'syz.1.948': attribute type 3 has an invalid length.
[   76.174232][ T8060] netpci0: tun_chr_ioctl cmd 1074025681
[   76.565381][ T8101] __nla_validate_parse: 9 callbacks suppressed
[   76.565390][ T8101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1002'.
[   76.821896][ T8107] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1004'.
[   76.827135][ T8107] smc: removing ib device syz!
[   76.941795][ T8111] netlink: 'syz.0.1004': attribute type 12 has an invalid length.
[   77.544535][ T8140] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1019'.
[   77.580782][ T8142] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1020'.
[   77.586248][ T8142] netlink: 'syz.1.1020': attribute type 4 has an invalid length.
[   77.649963][ T8146] xt_CT: You must specify a L4 protocol and not use inversions on it
[   77.702995][ T8153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1023'.
[   77.706024][ T8153] netlink: 'syz.2.1023': attribute type 5 has an invalid length.
[   77.708532][ T8153] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1023'.
[   77.714340][ T8153] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0
[   77.717588][ T8153] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0
[   77.720835][ T8153] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0
[   77.728724][ T8153] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0
[   77.731519][ T8153] geneve2: entered promiscuous mode
[   77.734512][ T8153] geneve2: entered allmulticast mode
[   77.772151][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   77.808648][ T8165] netdevsim netdevsim2 : renamed from netdevsim0
[   77.874715][ T8173] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1029'.
[   78.060210][ T8180] x_tables: ip_tables: udp match: only valid for protocol 17
[   78.225155][ T8186] netlink: 312 bytes leftover after parsing attributes in process `syz.1.1036'.
[   78.409292][ T8202] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1042'.
[   78.845002][ T8264] @: renamed from vlan0 (while UP)
[   78.975076][ T8286] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1082'.
[   78.986279][ T8286] hsr_slave_0: left promiscuous mode
[   78.988515][ T8286] hsr_slave_1: left promiscuous mode
[   79.053635][  T789] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[   79.197523][ T8310] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   79.207046][ T8310] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.209974][ T8310] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.327650][ T8325] bond0: (slave bond_slave_1): Releasing backup interface
[   79.343466][ T8329] bridge0: entered allmulticast mode
[   79.442119][ T8343] netlink: 'syz.2.1108': attribute type 1 has an invalid length.
[   79.800459][   T47] IPVS: starting estimator thread 0...
[   79.859586][ T8382] dummy0: entered promiscuous mode
[   79.861891][ T8382] batadv0: entered promiscuous mode
[   79.864493][ T8382] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[   79.867441][ T8382] Cannot create hsr debugfs directory
[   79.869917][ T8382] dummy0: left promiscuous mode
[   79.871850][ T8382] batadv0: left promiscuous mode
[   79.893839][ T8376] IPVS: using max 81 ests per chain, 194400 per kthread
[   79.993253][ T8384] netlink: 'syz.1.1129': attribute type 29 has an invalid length.
[   80.019606][ T8386] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[   80.024401][ T8388] openvswitch: netlink: Key type 30 is not supported
[   80.087003][ T8394] netlink: 'syz.1.1133': attribute type 3 has an invalid length.
[   80.554309][ T8449] xt_hashlimit: size too large, truncated to 1048576
[   80.556573][ T8449] xt_hashlimit: overflow, try lower: 3/0
[   81.038080][ T8485] netlink: 'syz.0.1173': attribute type 1 has an invalid length.
[   81.175812][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.178728][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.326414][ T8513] netlink: 'syz.0.1188': attribute type 21 has an invalid length.
[   81.328985][ T8513] IPv6: NLM_F_CREATE should be specified when creating new route
[   81.371866][ T8517] bond1: entered promiscuous mode
[   81.375439][ T8517] 8021q: adding VLAN 0 to HW filter on device bond1
[   81.431619][ T8528] 8021q: adding VLAN 0 to HW filter on device bond2
[   81.454492][ T8528] 8021q: adding VLAN 0 to HW filter on device bond2
[   81.457229][ T8528] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[   81.461760][ T8528] bond2: (slave vxcan3): Error -95 calling set_mac_address
[   81.493093][ T8536] macvlan2: entered promiscuous mode
[   81.494822][ T8536] macvlan2: entered allmulticast mode
[   81.496613][ T8536] bond2: (slave macvlan2): Error -98 calling set_mac_address
[   81.606132][ T8552] x_tables: duplicate underflow at hook 4
[   81.690600][ T8569] netlink: 'syz.2.1211': attribute type 15 has an invalid length.
[   81.777214][ T8580] __nla_validate_parse: 16 callbacks suppressed
[   81.777223][ T8580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1216'.
[   82.109790][ T8621] netlink: 'syz.0.1230': attribute type 9 has an invalid length.
[   82.280148][ T8637] netlink: 'syz.2.1235': attribute type 1 has an invalid length.
[   82.294624][ T8637] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1235'.
[   82.651304][ T8661] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1245'.
[   82.805520][ T8679] validate_nla: 1 callbacks suppressed
[   82.805529][ T8679] netlink: 'syz.0.1254': attribute type 1 has an invalid length.
[   82.897890][ T8691] netlink: 'syz.0.1259': attribute type 11 has an invalid length.
[   82.900363][ T8691] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1259'.
[   83.042807][ T8709] netlink: 'syz.0.1269': attribute type 5 has an invalid length.
[   83.048738][ T8711] netlink: 'syz.1.1270': attribute type 1 has an invalid length.
[   83.051296][ T8711] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1270'.
[   83.067892][ T8713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1271'.
[   83.070867][ T8713] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1271'.
[   83.318856][ T8734] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1286'.
[   83.566700][ T8764] netlink: 'syz.1.1294': attribute type 4 has an invalid length.
[   83.595352][ T8762] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1297'.
[   83.619227][ T8766] syzkaller0: create flow: hash 402180831 index 1
[   83.621618][   T13] syzkaller0: tun_net_xmit 76
[   83.623634][   T13] syzkaller0: tun_net_xmit 48
[   83.640596][ T8765] syzkaller0: delete flow: hash 402180831 index 1
[   83.689455][ T8774] openvswitch: netlink: Actions may not be safe on all matching packets
[   84.501307][ T8814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1320'.
[   84.779540][ T8854] netlink: 'syz.0.1340': attribute type 6 has an invalid length.
[   84.782430][ T8854] netlink: 'syz.0.1340': attribute type 7 has an invalid length.
[   84.785006][ T8854] netlink: 'syz.0.1340': attribute type 8 has an invalid length.
[   84.874141][ T8871] netlink: 'syz.1.1349': attribute type 1 has an invalid length.
[   85.089367][ T8910] netlink: 'syz.1.1365': attribute type 11 has an invalid length.
[   85.237978][ T8932] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   85.241047][ T8932] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[   86.172128][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   86.889701][ T9022] __nla_validate_parse: 4 callbacks suppressed
[   86.889710][ T9022] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1414'.
[   86.896309][ T9022] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1414'.
[   87.403617][ T9075] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1440'.
[   87.409933][ T9075] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1440'.
[   87.416286][ T9075] netlink: 'syz.0.1440': attribute type 1 has an invalid length.
[   87.421443][ T9075] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1440'.
[   87.448469][ T9083] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[   87.451922][ T9083] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[   87.463203][   T56] block nbd0: Receive control failed (result -107)
[   87.620472][ T9104] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1457'.
[   87.664489][ T9110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1460'.
[   88.012910][ T9162] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1484'.
[   88.112747][ T9174] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1489'.
[   88.213848][ T9194] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1498'.
[   88.291352][ T9198] xt_CT: No such helper "snmp"
[   88.304292][ T9198] netlink: 'syz.1.1500': attribute type 5 has an invalid length.
[   88.319478][ T9209] erspan0: entered promiscuous mode
[   88.324936][ T9209] macvtap1: entered promiscuous mode
[   88.326751][ T9209] macvtap1: entered allmulticast mode
[   88.328514][ T9209] erspan0: entered allmulticast mode
[   88.415694][ T9219] sctp: [Deprecated]: syz.1.1510 (pid 9219) Use of int in max_burst socket option.
[   88.415694][ T9219] Use struct sctp_assoc_value instead
[   88.569644][ T9236] netlink: 'syz.1.1517': attribute type 2 has an invalid length.
[   88.586688][ T9236] netlink: 'syz.1.1517': attribute type 2 has an invalid length.
[   88.610034][ T9240] netlink: 'syz.0.1520': attribute type 4 has an invalid length.
[   89.745545][ T9284] netdevsim netdevsim1 : renamed from netdevsim0 (while UP)
[   89.777506][ T9289] netlink: 'syz.0.1546': attribute type 5 has an invalid length.
[   89.781602][ T9290] xt_CT: You must specify a L4 protocol and not use inversions on it
[   89.784236][ T9289] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[   89.784274][ T9289] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[   89.784287][ T9289] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[   89.784298][ T9289] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[   89.784403][ T9289] geneve2: entered promiscuous mode
[   89.799548][ T9289] geneve2: entered allmulticast mode
[   89.952876][ T9310] netlink: 'syz.1.1558': attribute type 4 has an invalid length.
[   90.043260][ T9325] sctp: [Deprecated]: syz.1.1559 (pid 9325) Use of struct sctp_assoc_value in delayed_ack socket option.
[   90.043260][ T9325] Use struct sctp_sack_info instead
[   90.091737][ T9331] netlink: 'syz.0.1565': attribute type 4 has an invalid length.
[   91.004488][ T9361] netlink: 'syz.2.1576': attribute type 1 has an invalid length.
[   91.340801][ T9417] netlink: 'syz.1.1604': attribute type 1 has an invalid length.
[   91.421012][ T9426] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   91.426358][ T9426] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.428944][ T9426] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.494265][ T9432] bridge0: entered allmulticast mode
[   91.507817][ T9434] openvswitch: netlink: Key type 30 is not supported
[   92.239985][ T9478] __nla_validate_parse: 13 callbacks suppressed
[   92.239995][ T9478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1638'.
[   92.499752][ T9513] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1649'.
[   92.515570][ T9513] 8021q: adding VLAN 0 to HW filter on device bond1
[   92.534643][ T9513] 8021q: adding VLAN 0 to HW filter on device bond1
[   92.545970][ T9513] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[   92.549950][ T9513] bond1: (slave vxcan3): Error -95 calling set_mac_address
[   92.580153][ T9519] macvlan2: entered promiscuous mode
[   92.581919][ T9519] macvlan2: entered allmulticast mode
[   92.585391][ T9519] bond1: (slave macvlan2): Error -98 calling set_mac_address
[   92.739007][ T9527] xt_hashlimit: size too large, truncated to 1048576
[   92.741171][ T9527] xt_hashlimit: overflow, try lower: 3/0
[   92.783372][ T9533] netlink: 'syz.0.1653': attribute type 15 has an invalid length.
[   92.891302][ T9522] netlink: 312 bytes leftover after parsing attributes in process `syz.2.1651'.
[   92.918985][ T9539] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1657'.
[   94.018974][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.093870][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.153853][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.219398][   T13] netdevsim netdevsim1  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.273703][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   94.276765][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   94.279491][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   94.284197][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   94.287255][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   94.346574][   T13] bridge_slave_1: left allmulticast mode
[   94.348536][   T13] bridge_slave_1: left promiscuous mode
[   94.350978][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.358134][   T13] bridge_slave_0: left allmulticast mode
[   94.360044][   T13] bridge_slave_0: left promiscuous mode
[   94.368288][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.428123][ T9607] ipt_ECN: cannot use operation on non-tcp rule
[   94.480719][   T13] erspan0 (unregistering): left allmulticast mode
[   94.552432][   T13] bridge0 (unregistering): left allmulticast mode
[   94.746306][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   94.750108][   T13] bond0 (unregistering): Released all slaves
[   94.796007][   T13] bond1 (unregistering): Released all slaves
[   94.841797][   T13] bond2 (unregistering): Released all slaves
[   94.912054][   T13] tipc: Left network mode
[   95.066546][ T9627] netlink: 'syz.0.1697': attribute type 1 has an invalid length.
[   95.069043][ T9627] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1697'.
[   95.110092][ T9630] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[   95.115012][ T9630] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[   95.134637][ T9634] netlink: 'syz.0.1692': attribute type 15 has an invalid length.
[   95.136391][ T9594] chnl_net:caif_netlink_parms(): no params data found
[   95.137188][ T9634] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1692'.
[   95.165667][   T13] hsr_slave_0: left promiscuous mode
[   95.167728][   T13] hsr_slave_1: left promiscuous mode
[   95.169763][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   95.174121][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   95.177119][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   95.182098][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   95.198310][   T13] veth1_macvtap: left promiscuous mode
[   95.200272][   T13] veth0_macvtap: left promiscuous mode
[   95.203011][   T13] veth1_vlan: left promiscuous mode
[   95.204987][   T13] veth0_vlan: left promiscuous mode
[   95.426671][   T13] team0 (unregistering): Port device team_slave_1 removed
[   95.444091][   T13] team0 (unregistering): Port device team_slave_0 removed
[   95.703657][ T9649] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1696'.
[   95.728236][ T9594] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.728281][ T9649] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1696'.
[   95.732851][ T9594] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.736123][ T9594] bridge_slave_0: entered allmulticast mode
[   95.738934][ T9594] bridge_slave_0: entered promiscuous mode
[   95.746189][ T9594] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.748573][ T9594] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.750892][ T9594] bridge_slave_1: entered allmulticast mode
[   95.764142][ T9594] bridge_slave_1: entered promiscuous mode
[   95.814282][ T9594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   95.820889][ T9594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   95.894800][ T9594] team0: Port device team_slave_0 added
[   95.905970][ T9660] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   95.909223][ T9660] batman_adv: batadv0: Removing interface: batadv_slave_0
[   95.913998][ T9660] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   95.916366][ T9660] batman_adv: batadv0: Removing interface: batadv_slave_1
[   95.923140][ T9656] xt_hashlimit: size too large, truncated to 1048576
[   95.930777][ T9656] xt_hashlimit: overflow, try lower: 3/0
[   95.977927][ T9594] team0: Port device team_slave_1 added
[   95.998485][ T9594] batman_adv: batadv0: Adding interface: batadv_slave_0
[   96.000854][ T9594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   96.010579][ T9594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   96.021364][   T13] IPVS: stop unused estimator thread 0...
[   96.026339][ T9594] batman_adv: batadv0: Adding interface: batadv_slave_1
[   96.028680][ T9594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   96.037320][ T9594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   96.106515][ T9594] hsr_slave_0: entered promiscuous mode
[   96.108843][ T9594] hsr_slave_1: entered promiscuous mode
[   96.110919][ T9594] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   96.113954][ T9594] Cannot create hsr debugfs directory
[   96.335396][ T5835] Bluetooth: hci2: command tx timeout
[   96.483337][ T9594] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   96.487262][ T9594] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   96.491272][ T9594] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   96.502299][ T9594] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   96.544234][ T9594] 8021q: adding VLAN 0 to HW filter on device bond0
[   96.555444][ T9594] 8021q: adding VLAN 0 to HW filter on device team0
[   96.560152][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.562560][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   96.573026][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.575314][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   96.666403][ T9594] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.706560][ T9701] netlink: 'syz.2.1699': attribute type 6 has an invalid length.
[   96.710240][ T9701] netlink: 'syz.2.1699': attribute type 7 has an invalid length.
[   96.713936][ T9701] netlink: 'syz.2.1699': attribute type 8 has an invalid length.
[   96.751644][ T9708] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1700'.
[   96.759934][ T9594] veth0_vlan: entered promiscuous mode
[   96.789261][ T9594] veth1_vlan: entered promiscuous mode
[   96.837566][ T9594] veth0_macvtap: entered promiscuous mode
[   96.841302][ T9594] veth1_macvtap: entered promiscuous mode
[   96.850376][ T9594] batman_adv: batadv0: Interface activated: batadv_slave_0
[   96.868082][ T9594] batman_adv: batadv0: Interface activated: batadv_slave_1
[   96.878154][ T9594] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.884827][ T9594] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.887660][ T9594] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.890458][ T9594] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.960980][ T3588] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.967835][ T3588] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.997159][ T4163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.002994][ T4163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.223552][ T9760] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1718'.
[   97.291199][ T9768] delete_channel: no stack
[   97.875085][ T9787] infiniband syz!: set down
[   97.876611][ T9787] infiniband syz!: added team_slave_0
[   97.897781][ T9787] RDS/IB: syz!: added
[   97.899130][ T9787] smc: adding ib device syz! with port count 1
[   97.901046][ T9787] smc:    ib device syz! port 1 has pnetid 
[   98.641269][ T9799] netlink: 'syz.2.1729': attribute type 1 has an invalid length.
[   98.644466][ T9799] __nla_validate_parse: 5 callbacks suppressed
[   98.644472][ T9799] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1729'.
[   99.042166][ T5839] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.211638][ T5828] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   99.215784][ T5828] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   99.218825][ T5828] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   99.221903][ T5828] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   99.225288][ T5828] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   99.389973][ T9829] chnl_net:caif_netlink_parms(): no params data found
[   99.431814][ T9829] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.434576][ T9829] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.437019][ T9829] bridge_slave_0: entered allmulticast mode
[   99.440190][ T9829] bridge_slave_0: entered promiscuous mode
[   99.443851][ T9829] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.446194][ T9829] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.448512][ T9829] bridge_slave_1: entered allmulticast mode
[   99.451201][ T9829] bridge_slave_1: entered promiscuous mode
[   99.469566][ T9829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   99.474164][ T9829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   99.493468][ T9829] team0: Port device team_slave_0 added
[   99.496886][ T9829] team0: Port device team_slave_1 added
[   99.513051][ T9829] batman_adv: batadv0: Adding interface: batadv_slave_0
[   99.515307][ T9829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   99.524270][ T9829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   99.529168][ T9829] batman_adv: batadv0: Adding interface: batadv_slave_1
[   99.531584][ T9829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   99.541793][ T9829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   99.575411][ T9829] hsr_slave_0: entered promiscuous mode
[   99.582487][ T9829] hsr_slave_1: entered promiscuous mode
[   99.584581][ T9829] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   99.587009][ T9829] Cannot create hsr debugfs directory
[   99.844393][ T9862] tipc: Invalid UDP bearer configuration
[   99.844421][ T9862] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  101.110887][ T5839] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.151728][ T5839] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.190681][ T5839] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.262456][ T5839] bridge_slave_1: left allmulticast mode
[  101.265174][ T5839] bridge_slave_1: left promiscuous mode
[  101.267215][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.271336][ T5839] bridge_slave_0: left allmulticast mode
[  101.274887][ T5839] bridge_slave_0: left promiscuous mode
[  101.276956][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.292124][ T5835] Bluetooth: hci2: command tx timeout
[  101.480741][ T5839] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  101.485879][ T5839] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  101.489851][ T5839] bond0 (unregistering): Released all slaves
[  101.909627][ T5839] hsr_slave_0: left promiscuous mode
[  101.911944][ T5839] hsr_slave_1: left promiscuous mode
[  101.914160][ T5839] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  101.916516][ T5839] batman_adv: batadv0: Removing interface: batadv_slave_0
[  101.919394][ T5839] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  101.921789][ T5839] batman_adv: batadv0: Removing interface: batadv_slave_1
[  101.940592][ T5839] veth1_macvtap: left promiscuous mode
[  101.943650][ T5839] veth0_macvtap: left promiscuous mode
[  101.945471][ T5839] veth1_vlan: left promiscuous mode
[  101.947154][ T5839] veth0_vlan: left promiscuous mode
[  102.163883][ T5839] team0 (unregistering): Port device team_slave_1 removed
[  102.184569][ T5839] team0 (unregistering): Port device team_slave_0 removed
[  102.397582][ T9829] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  102.413053][ T9829] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  102.419058][ T9829] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  102.434176][ T9829] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  102.491151][ T9829] 8021q: adding VLAN 0 to HW filter on device bond0
[  102.511934][ T9829] 8021q: adding VLAN 0 to HW filter on device team0
[  102.518196][ T4163] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.520529][ T4163] bridge0: port 1(bridge_slave_0) entered forwarding state
[  102.529757][ T4163] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.532263][ T4163] bridge0: port 2(bridge_slave_1) entered forwarding state
[  102.645421][ T9829] 8021q: adding VLAN 0 to HW filter on device batadv0
[  102.677258][ T9829] veth0_vlan: entered promiscuous mode
[  102.683687][ T9829] veth1_vlan: entered promiscuous mode
[  102.685908][   T47] hid-generic 0005:04F3:8002.0002: collection stack underflow
[  102.694999][   T47] hid-generic 0005:04F3:8002.0002: item 0 0 0 12 parsing failed
[  102.698180][   T47] hid-generic 0005:04F3:8002.0002: probe with driver hid-generic failed with error -22
[  102.714272][ T9829] veth0_macvtap: entered promiscuous mode
[  102.719073][ T9829] veth1_macvtap: entered promiscuous mode
[  102.748249][ T9829] batman_adv: batadv0: Interface activated: batadv_slave_0
[  102.753993][ T9963] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1791'.
[  102.770279][ T9829] batman_adv: batadv0: Interface activated: batadv_slave_1
[  102.783382][ T9829] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  102.792136][ T9829] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  102.797149][ T9829] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  102.800212][ T9829] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  102.857566][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.860189][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.889232][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.891834][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.929834][ T9959] ==================================================================
[  102.932405][ T9959] BUG: KASAN: slab-use-after-free in __mutex_lock+0x738/0xe80
[  102.934759][ T9959] Read of size 8 at addr ffff88803837c0a0 by task khidpd_04f38002/9959
[  102.938359][ T9959] 
[  102.939179][ T9959] CPU: 1 UID: 0 PID: 9959 Comm: khidpd_04f38002 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  102.939189][ T9959] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  102.939194][ T9959] Call Trace:
[  102.939198][ T9959]  <TASK>
[  102.939201][ T9959]  dump_stack_lvl+0x189/0x250
[  102.939211][ T9959]  ? __virt_addr_valid+0x1c8/0x5c0
[  102.939221][ T9959]  ? rcu_is_watching+0x15/0xb0
[  102.939229][ T9959]  ? __kasan_check_byte+0x12/0x40
[  102.939238][ T9959]  ? __pfx_dump_stack_lvl+0x10/0x10
[  102.939246][ T9959]  ? rcu_is_watching+0x15/0xb0
[  102.939254][ T9959]  ? lock_release+0x4b/0x3e0
[  102.939262][ T9959]  ? __virt_addr_valid+0x1c8/0x5c0
[  102.939270][ T9959]  ? __virt_addr_valid+0x4a5/0x5c0
[  102.939279][ T9959]  print_report+0xd2/0x2b0
[  102.939286][ T9959]  ? __mutex_lock+0x738/0xe80
[  102.939294][ T9959]  kasan_report+0x118/0x150
[  102.939303][ T9959]  ? __mutex_lock+0x738/0xe80
[  102.939311][ T9959]  __mutex_lock+0x738/0xe80
[  102.939317][ T9959]  ? __mutex_lock+0x51b/0xe80
[  102.939325][ T9959]  ? l2cap_unregister_user+0x6a/0x1b0
[  102.939332][ T9959]  ? __pfx___mutex_lock+0x10/0x10
[  102.939341][ T9959]  ? __pfx___timer_delete_sync+0x10/0x10
[  102.939353][ T9959]  l2cap_unregister_user+0x6a/0x1b0
[  102.939360][ T9959]  hidp_session_thread+0x3c9/0x410
[  102.939368][ T9959]  ? __pfx_hidp_session_thread+0x10/0x10
[  102.939375][ T9959]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  102.939384][ T9959]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  102.939392][ T9959]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  102.939399][ T9959]  ? __kthread_parkme+0x7b/0x200
[  102.939407][ T9959]  ? __kthread_parkme+0x1a1/0x200
[  102.939416][ T9959]  kthread+0x711/0x8a0
[  102.939426][ T9959]  ? __pfx_hidp_session_thread+0x10/0x10
[  102.939433][ T9959]  ? __pfx_kthread+0x10/0x10
[  102.939442][ T9959]  ? _raw_spin_unlock_irq+0x23/0x50
[  102.939451][ T9959]  ? lockdep_hardirqs_on+0x9c/0x150
[  102.939457][ T9959]  ? __pfx_kthread+0x10/0x10
[  102.939467][ T9959]  ret_from_fork+0x3fc/0x770
[  102.939474][ T9959]  ? __pfx_ret_from_fork+0x10/0x10
[  102.939482][ T9959]  ? __switch_to_asm+0x39/0x70
[  102.939491][ T9959]  ? __switch_to_asm+0x33/0x70
[  102.939499][ T9959]  ? __pfx_kthread+0x10/0x10
[  102.939508][ T9959]  ret_from_fork_asm+0x1a/0x30
[  102.939519][ T9959]  </TASK>
[  102.939522][ T9959] 
[  103.013066][ T9959] Allocated by task 9829:
[  103.014747][ T9959]  kasan_save_track+0x3e/0x80
[  103.016312][ T9959]  __kasan_kmalloc+0x93/0xb0
[  103.017839][ T9959]  __kmalloc_noprof+0x27a/0x4f0
[  103.019467][ T9959]  hci_alloc_dev_priv+0x28/0x2040
[  103.021191][ T9959]  vhci_create_device+0x120/0x6e0
[  103.022832][ T9959]  vhci_write+0x3ce/0x4a0
[  103.024205][ T9959]  vfs_write+0x54b/0xa90
[  103.025543][ T9959]  ksys_write+0x145/0x250
[  103.026985][ T9959]  do_syscall_64+0xfa/0x3b0
[  103.028489][ T9959]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.030451][ T9959] 
[  103.031238][ T9959] Freed by task 9829:
[  103.032521][ T9959]  kasan_save_track+0x3e/0x80
[  103.034028][ T9959]  kasan_save_free_info+0x46/0x50
[  103.035665][ T9959]  __kasan_slab_free+0x62/0x70
[  103.037224][ T9959]  kfree+0x18e/0x440
[  103.038475][ T9959]  bt_host_release+0x82/0x90
[  103.039968][ T9959]  device_release+0x9c/0x1c0
[  103.041501][ T9959]  kobject_put+0x22b/0x480
[  103.042995][ T9959]  vhci_release+0x88/0xd0
[  103.044400][ T9959]  __fput+0x44c/0xa70
[  103.045663][ T9959]  task_work_run+0x1d4/0x260
[  103.047192][ T9959]  do_exit+0x6b5/0x22e0
[  103.048558][ T9959]  do_group_exit+0x21c/0x2d0
[  103.050089][ T9959]  __x64_sys_exit_group+0x3f/0x40
[  103.051715][ T9959]  x64_sys_call+0x21ba/0x21c0
[  103.053282][ T9959]  do_syscall_64+0xfa/0x3b0
[  103.054845][ T9959]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.056823][ T9959] 
[  103.057635][ T9959] Last potentially related work creation:
[  103.059496][ T9959]  kasan_save_stack+0x3e/0x60
[  103.061061][ T9959]  kasan_record_aux_stack+0xbd/0xd0
[  103.062764][ T9959]  insert_work+0x3d/0x330
[  103.064198][ T9959]  __queue_work+0xbd9/0xfe0
[  103.065692][ T9959]  queue_work_on+0x181/0x270
[  103.067240][ T9959]  process_scheduled_works+0xae1/0x17b0
[  103.069112][ T9959]  worker_thread+0x8a0/0xda0
[  103.070635][ T9959]  kthread+0x711/0x8a0
[  103.072043][ T9959]  ret_from_fork+0x3fc/0x770
[  103.073675][ T9959]  ret_from_fork_asm+0x1a/0x30
[  103.075473][ T9959] 
[  103.076300][ T9959] Second to last potentially related work creation:
[  103.078560][ T9959]  kasan_save_stack+0x3e/0x60
[  103.080161][ T9959]  kasan_record_aux_stack+0xbd/0xd0
[  103.081855][ T9959]  insert_work+0x3d/0x330
[  103.083298][ T9959]  __queue_work+0xcfc/0xfe0
[  103.084811][ T9959]  call_timer_fn+0x17e/0x5f0
[  103.086362][ T9959]  __run_timer_base+0x646/0x860
[  103.087988][ T9959]  run_timer_softirq+0xb7/0x180
[  103.089591][ T9959]  handle_softirqs+0x286/0x870
[  103.091193][ T9959]  __irq_exit_rcu+0xca/0x1f0
[  103.092726][ T9959]  irq_exit_rcu+0x9/0x30
[  103.094146][ T9959]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  103.095987][ T9959]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  103.097963][ T9959] 
[  103.098764][ T9959] The buggy address belongs to the object at ffff88803837c000
[  103.098764][ T9959]  which belongs to the cache kmalloc-8k of size 8192
[  103.103292][ T9959] The buggy address is located 160 bytes inside of
[  103.103292][ T9959]  freed 8192-byte region [ffff88803837c000, ffff88803837e000)
[  103.108052][ T9959] 
[  103.109018][ T9959] The buggy address belongs to the physical page:
[  103.111204][ T9959] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x38378
[  103.114351][ T9959] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  103.117387][ T9959] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  103.120126][ T9959] page_type: f5(slab)
[  103.121452][ T9959] raw: 00fff00000000040 ffff88801a442280 ffffea0000e0da00 0000000000000005
[  103.124339][ T9959] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  103.127347][ T9959] head: 00fff00000000040 ffff88801a442280 ffffea0000e0da00 0000000000000005
[  103.130610][ T9959] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  103.133819][ T9959] head: 00fff00000000003 ffffea0000e0de01 00000000ffffffff 00000000ffffffff
[  103.136777][ T9959] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  103.139519][ T9959] page dumped because: kasan: bad access detected
[  103.141560][ T9959] page_owner tracks the page as allocated
[  103.143427][ T9959] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5574, tgid 5574 (dhcpcd), ts 96427994402, free_ts 88402823761
[  103.150063][ T9959]  post_alloc_hook+0x240/0x2a0
[  103.151649][ T9959]  get_page_from_freelist+0x21e4/0x22c0
[  103.153486][ T9959]  __alloc_frozen_pages_noprof+0x181/0x370
[  103.155420][ T9959]  alloc_pages_mpol+0x232/0x4a0
[  103.157066][ T9959]  allocate_slab+0x8a/0x3b0
[  103.158574][ T9959]  ___slab_alloc+0xbfc/0x1480
[  103.160148][ T9959]  __kmalloc_node_track_caller_noprof+0x2f8/0x4e0
[  103.162258][ T9959]  kmalloc_reserve+0x136/0x290
[  103.163835][ T9959]  __alloc_skb+0x142/0x2d0
[  103.165331][ T9959]  netlink_dump+0x169/0xe90
[  103.166876][ T9959]  netlink_recvmsg+0x676/0xa30
[  103.168504][ T9959]  sock_recvmsg+0x22c/0x270
[  103.169988][ T9959]  ____sys_recvmsg+0x1c9/0x460
[  103.171513][ T9959]  ___sys_recvmsg+0x1b5/0x510
[  103.173038][ T9959]  __x64_sys_recvmsg+0x198/0x260
[  103.174576][ T9959]  do_syscall_64+0xfa/0x3b0
[  103.176008][ T9959] page last free pid 9213 tgid 9212 stack trace:
[  103.177967][ T9959]  __free_frozen_pages+0xc71/0xe70
[  103.179596][ T9959]  __folio_put+0x21b/0x2c0
[  103.181084][ T9959]  skb_release_data+0x49a/0x7c0
[  103.182688][ T9959]  kfree_skb_list_reason+0x25d/0x460
[  103.184437][ T9959]  skb_release_data+0x61e/0x7c0
[  103.186064][ T9959]  sk_skb_reason_drop+0x127/0x170
[  103.187727][ T9959]  kcm_sendmsg+0x389/0x2a70
[  103.189243][ T9959]  __sock_sendmsg+0x21c/0x270
[  103.190798][ T9959]  ____sys_sendmsg+0x505/0x830
[  103.192316][ T9959]  ___sys_sendmsg+0x21f/0x2a0
[  103.193791][ T9959]  __x64_sys_sendmsg+0x19b/0x260
[  103.195368][ T9959]  do_syscall_64+0xfa/0x3b0
[  103.196778][ T9959]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.198720][ T9959] 
[  103.199540][ T9959] Memory state around the buggy address:
[  103.201389][ T9959]  ffff88803837bf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  103.203920][ T9959]  ffff88803837c000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  103.206534][ T9959] >ffff88803837c080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  103.209307][ T9959]                                ^
[  103.211009][ T9959]  ffff88803837c100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  103.213560][ T9959]  ffff88803837c180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  103.216132][ T9959] ==================================================================
[  103.219311][ T9959] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  103.221612][ T9959] CPU: 1 UID: 0 PID: 9959 Comm: khidpd_04f38002 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  103.225600][ T9959] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  103.228685][ T9959] Call Trace:
[  103.229764][ T9959]  <TASK>
[  103.230744][ T9959]  dump_stack_lvl+0x99/0x250
[  103.232283][ T9959]  ? __asan_memcpy+0x40/0x70
[  103.233803][ T9959]  ? __pfx_dump_stack_lvl+0x10/0x10
[  103.235651][ T9959]  ? __pfx__printk+0x10/0x10
[  103.237207][ T9959]  panic+0x2db/0x790
[  103.238511][ T9959]  ? __pfx_panic+0x10/0x10
[  103.240008][ T9959]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  103.242031][ T9959]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  103.243976][ T9959]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  103.246053][ T9959]  ? print_memory_metadata+0x314/0x400
[  103.247836][ T9959]  ? __mutex_lock+0x738/0xe80
[  103.249400][ T9959]  check_panic_on_warn+0x89/0xb0
[  103.251031][ T9959]  ? __mutex_lock+0x738/0xe80
[  103.252592][ T9959]  end_report+0x78/0x160
[  103.254006][ T9959]  kasan_report+0x129/0x150
[  103.255509][ T9959]  ? __mutex_lock+0x738/0xe80
[  103.257087][ T9959]  __mutex_lock+0x738/0xe80
[  103.258608][ T9959]  ? __mutex_lock+0x51b/0xe80
[  103.260303][ T9959]  ? l2cap_unregister_user+0x6a/0x1b0
[  103.262087][ T9959]  ? __pfx___mutex_lock+0x10/0x10
[  103.263747][ T9959]  ? __pfx___timer_delete_sync+0x10/0x10
[  103.265669][ T9959]  l2cap_unregister_user+0x6a/0x1b0
[  103.267371][ T9959]  hidp_session_thread+0x3c9/0x410
[  103.269051][ T9959]  ? __pfx_hidp_session_thread+0x10/0x10
[  103.270840][ T9959]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  103.272719][ T9959]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  103.274754][ T9959]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  103.276814][ T9959]  ? __kthread_parkme+0x7b/0x200
[  103.278460][ T9959]  ? __kthread_parkme+0x1a1/0x200
[  103.280138][ T9959]  kthread+0x711/0x8a0
[  103.281493][ T9959]  ? __pfx_hidp_session_thread+0x10/0x10
[  103.283348][ T9959]  ? __pfx_kthread+0x10/0x10
[  103.284900][ T9959]  ? _raw_spin_unlock_irq+0x23/0x50
[  103.286631][ T9959]  ? lockdep_hardirqs_on+0x9c/0x150
[  103.288365][ T9959]  ? __pfx_kthread+0x10/0x10
[  103.289893][ T9959]  ret_from_fork+0x3fc/0x770
[  103.291368][ T9959]  ? __pfx_ret_from_fork+0x10/0x10
[  103.292989][ T9959]  ? __switch_to_asm+0x39/0x70
[  103.294526][ T9959]  ? __switch_to_asm+0x33/0x70
[  103.296130][ T9959]  ? __pfx_kthread+0x10/0x10
[  103.297662][ T9959]  ret_from_fork_asm+0x1a/0x30
[  103.299268][ T9959]  </TASK>
[  103.300917][ T9959] Kernel Offset: disabled
[  103.302272][ T9959] Rebooting in 86400 seconds..

VM DIAGNOSIS:
03:21:08  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff93490b08 RBX=0000000000000020 RCX=ffffffff96361800 RDX=0000000000000008
RSI=ffff8880212844c0 RDI=ffffffff9634a1f0 RBP=ffffffff819ea310 RSP=ffffc90006e86ae0
R8 =ffffc90006e86b80 R9 =0000000000000020 R10=ffffc90006e86ee0 R11=ffffffff819ea310
R12=ffffffff963d32b0 R13=ffffffff96361800 R14=0000000000000000 R15=ffffffff934d7b18
RIP=ffffffff819e5fce RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f871d9186c0 ffffffff 00c00000
GS =0000 ffff8880b861d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f1ddca65fc8 CR3=0000000038b5c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f871cc11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000061 RBX=0000000000000061 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90001d4f370
R8 =ffff888108aa0237 R9 =1ffff11021154046 R10=dffffc0000000000 R11=ffffffff85475610
R12=dffffc0000000000 R13=ffffffff99af78fd R14=ffffffff99dfc760 R15=0000000000000000
RIP=ffffffff8547568c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffd6151fde8 CR3=0000000036960000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f1ddbd84478 00007f1ddbd84450 XMM03=00007f1ddbd84488 00007f1ddbd84480
XMM04=00007f1ddc8ed100 00007f1ddbd84440 XMM05=00007f1ddbd84458 00007f1ddbd844a0
XMM06=00007f1ddbd84498 00007f1ddbd84490 XMM07=00007f1ddbd84488 00007f1ddbd84480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f1ddbc11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
