last executing test programs:

42.835297815s ago: executing program 2 (id=1278):
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'bond_slave_0\x00', &(0x7f0000000000)=@ethtool_cmd={0x1f, 0x813, 0x8001, 0x5, 0x8, 0x21, 0x1, 0x9, 0x7, 0x4, 0x0, 0x3, 0x108, 0xc, 0xbd, 0x8, [0xa2ff, 0x5]}})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001a8010000580"], 0x34}}, 0x0)

36.138318082s ago: executing program 2 (id=1278):
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'bond_slave_0\x00', &(0x7f0000000000)=@ethtool_cmd={0x1f, 0x813, 0x8001, 0x5, 0x8, 0x21, 0x1, 0x9, 0x7, 0x4, 0x0, 0x3, 0x108, 0xc, 0xbd, 0x8, [0xa2ff, 0x5]}})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001a8010000580"], 0x34}}, 0x0)

29.433075467s ago: executing program 2 (id=1278):
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'bond_slave_0\x00', &(0x7f0000000000)=@ethtool_cmd={0x1f, 0x813, 0x8001, 0x5, 0x8, 0x21, 0x1, 0x9, 0x7, 0x4, 0x0, 0x3, 0x108, 0xc, 0xbd, 0x8, [0xa2ff, 0x5]}})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001a8010000580"], 0x34}}, 0x0)

21.388378659s ago: executing program 2 (id=1278):
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'bond_slave_0\x00', &(0x7f0000000000)=@ethtool_cmd={0x1f, 0x813, 0x8001, 0x5, 0x8, 0x21, 0x1, 0x9, 0x7, 0x4, 0x0, 0x3, 0x108, 0xc, 0xbd, 0x8, [0xa2ff, 0x5]}})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001a8010000580"], 0x34}}, 0x0)

14.050027218s ago: executing program 2 (id=1278):
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'bond_slave_0\x00', &(0x7f0000000000)=@ethtool_cmd={0x1f, 0x813, 0x8001, 0x5, 0x8, 0x21, 0x1, 0x9, 0x7, 0x4, 0x0, 0x3, 0x108, 0xc, 0xbd, 0x8, [0xa2ff, 0x5]}})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001a8010000580"], 0x34}}, 0x0)

5.850940615s ago: executing program 2 (id=1278):
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'bond_slave_0\x00', &(0x7f0000000000)=@ethtool_cmd={0x1f, 0x813, 0x8001, 0x5, 0x8, 0x21, 0x1, 0x9, 0x7, 0x4, 0x0, 0x3, 0x108, 0xc, 0xbd, 0x8, [0xa2ff, 0x5]}})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001a8010000580"], 0x34}}, 0x0)

442.11929ms ago: executing program 0 (id=2887):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x4d}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

343.263536ms ago: executing program 0 (id=2888):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x4, 0x8, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0xc1}, 0x10)

251.303615ms ago: executing program 0 (id=2891):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x4}]}}}]}, 0x3c}}, 0x0)

201.426733ms ago: executing program 1 (id=2892):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', <r1=>0x0})
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0xf3e, 0x4)
sendto$packet(r0, &(0x7f0000000240)='V', 0x1, 0x0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14)

201.235418ms ago: executing program 0 (id=2893):
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x0)
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000340)={r1, r1, 0x1, 0x0, 0x0, 0x31, 0x1, 0x10cf, 0x5df, 0x8b, 0x2, 0x3, 'syz0\x00'})
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000c80)={0x17, &(0x7f0000001040)})

200.950414ms ago: executing program 1 (id=2894):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0xb00, 0x0, 0x43, 0xa0, 0x0, 0x98, 0xa68, 0x178, 0x178, 0xa68, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @multicast1, 0x0, 0x0, 'wg2\x00', 'ip6erspan0\x00', {0xff}, {}, 0x9}, 0x12a, 0x198, 0x1b8, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x3, 0x0, 0x4, 0x0, 'syz0\x00'}}, @common=@unspec=@cluster={{0x30}, {0x20, 0x6, 0x8000, 0x1}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @loopback, 0xffffffff, 0x0, 'pim6reg\x00', 'syzkaller0\x00', {}, {}, 0x6c, 0x1, 0x43}, 0x0, 0x880, 0x8b0, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x202, 0xfffffffc, 0x1ff}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x3}, {0x0, 0x2}, {0x6, 0x3}, {0x8, 0x1}, {0x8001, 0x2}, {0xfffffffd, 0x3}, {0x5, 0x2}, {0x2, 0x3}, {0x3ff, 0x1}, {0x8000, 0x1}, {0x1, 0x1}], [{0x0, 0x401}, {0x1, 0x7}, {0x9, 0x2}, {0x2, 0x9}, {0x0, 0x4}, {0x1, 0x8}, {0xcf6, 0xfe5d}, {0xa30}, {0x0, 0x9}, {0x7, 0x90b2}, {0xce, 0x2}], 0x4, 0x8}, {[{}, {0x4, 0x2}, {0x4, 0x2}, {0xf, 0x2}, {0x2}, {0x7f, 0x3}, {0x4}, {0x2, 0x3}, {0x4, 0x3}, {0x8, 0x3}, {0xffffabc5, 0x2}], [{0xff, 0xffff}, {0x27d8, 0x8}, {0xa, 0x6}, {0x10001, 0x3}, {0x1ff, 0x2}, {0x1, 0x1}, {0x7, 0x87}, {0xcca, 0x1}, {0x2, 0x3}, {0x0, 0x7}, {0x4, 0x3}], 0x2, 0x5}, {[{0x6, 0x2}, {0x9, 0x3}, {0x8}, {0x8, 0x3}, {0x80, 0x1}, {0xfff, 0x1}, {0x3, 0x3}, {0x6, 0x2}, {0x3, 0x2}, {0x8}, {0x9, 0x1}], [{0x7, 0xcea}, {0x8, 0x7}, {0x9, 0x9}, {0xb}, {0x3, 0xd9cf}, {0x9, 0xcb5}, {0x1, 0x7}, {0xfffffffd, 0x62d}, {0x1a, 0x5}, {0x5, 0x7}, {0x3, 0x7fff}], 0x3, 0xb}, {[{0x20, 0x2}, {0x2, 0x3}, {0x3}, {0x7, 0x1}, {0x2, 0x1}, {0xfffffff2}, {0xc8, 0x2}, {0x2, 0x1}, {0x200, 0x2}, {0x10000}, {0x7f}], [{0x8, 0x3}, {0x81, 0x1}, {0x4, 0x5}, {0xd, 0x401}, {0x4, 0xb}, {0x101, 0x6}, {0x2, 0xd}, {0x8, 0x5}, {0x9, 0x81}, {0xffffb445, 0x10000}, {0x7, 0x1}], 0x1, 0x7}, {[{0x8001, 0x1}, {0x2, 0x2}, {0x0, 0x1}, {0xf7, 0x3}, {0x6, 0x3}, {0x0, 0x3}, {0x2}, {0x9, 0x2}, {0x80000001, 0x1}, {0x3, 0x2}, {0x7, 0x3}], [{0x1000, 0x3}, {0x5, 0x9}, {0xf, 0x20000000}, {0x4, 0x2}, {0x7, 0x744}, {0x7, 0x8}, {0x9, 0x2}, {0xe60, 0x3}, {0x85, 0x10000}, {0x4, 0x9}, {0x4, 0xfffffffa}], 0x7, 0xa}, {[{0x2, 0x1}, {0xfffffff7}, {0x7}, {0x3, 0x3}, {0x34, 0x4}, {0x0, 0x3}, {0x5c, 0x2}, {0x7, 0x3}, {0x2, 0x2}, {0x8, 0x2}, {0xffff8000}], [{0x5, 0x7}, {0x8, 0xa0d}, {0x3, 0xca}, {0xff, 0xd}, {0xff, 0x4}, {0xfffffffd, 0x100}, {0x7, 0x1496}, {0xfff, 0x6}, {0x9, 0x2fee}, {0x2c4a, 0x4}, {0xe, 0x1ff}], 0x6, 0x5}, {[{0x9, 0x2}, {0x5, 0x1}, {0xe567, 0x1}, {0xc, 0x3}, {0x9}, {0x2, 0x1}, {0x8, 0x3}, {0xffff}, {0x97}, {0x880ab95c, 0x3}, {0xf, 0x3}], [{0x7ba4, 0x3}, {0x2, 0x5}, {0x6, 0xda40}, {0x1, 0x1}, {0x7ec6, 0x84c}, {0x8, 0x6}, {0xaa, 0x2}, {0x7, 0x7}, {0x6196, 0xe}, {0x1ff, 0x1}, {0x3400, 0x10001}], 0x1, 0x9}, {[{0x6}, {0x10001}, {0x1ff, 0x2}, {0x400, 0x3}, {0x7bc99eb7, 0x1}, {0x9, 0x1}, {0x1}, {0x1ff, 0x2}, {0x1000, 0x2}, {0x3, 0x2}, {0x6, 0x3}], [{0xfffffffb, 0xb353}, {0x9}, {0xff, 0x8}, {}, {0x2900, 0xc7f}, {0x10001, 0x1}, {0xfff, 0x1}, {0x7, 0x20}, {0xffff3f40, 0x8}, {0x6, 0x2}, {0x80000001, 0x5}], 0x4, 0x4}, {[{0x2, 0x2}, {0x7, 0x3}, {0x10000, 0x1}, {0x9, 0x3}, {0x2, 0x2}, {0x4, 0x1}, {0x1, 0x2}, {0x3, 0x2}, {0x4, 0x2}, {0x2, 0x3}, {0x0, 0x3}], [{0x8, 0x6}, {0x200, 0x200}, {0x4, 0x9}, {0x80000000, 0x7}, {0x4, 0x7}, {0x7, 0x8}, {0x2be3, 0x80000000}, {0x1, 0x8}, {0xc, 0x3}, {0xfffffffb, 0x6a7}, {0x800, 0x3}], 0x3, 0xa}, {[{0x200, 0x3}, {0x2}, {0x6, 0x1}, {0x4}, {0x1, 0x2}, {0x8e5}, {0xc000000}, {0x8, 0x2}, {0x1, 0x3}, {0x97b, 0x3}, {0x3, 0x1}], [{0x3, 0x6}, {0x0, 0xeeb}, {0x3}, {0x7, 0x3e1}, {0x2, 0x5}, {0x8, 0x10}, {0x7, 0x5}, {0x1, 0xd}, {0x6, 0x6}, {0x0, 0x8}, {0xb, 0xd}], 0x3, 0xa}, {[{0x7ff}, {0x2}, {0x0, 0x2}, {0x81, 0x3}, {0x200, 0x1}, {0x80, 0x3}, {0xa647, 0x2}, {0x9, 0x2}, {0x3ff}, {0x3, 0x2}, {0x3, 0x2}], [{0x9, 0x8}, {0x5, 0x6}, {0x80000001, 0x6}, {0x0, 0x8}, {0xfffffffc, 0xffffffff}, {0x5, 0xdf}, {0xffffffff, 0xffffff9f}, {0x8001, 0x7}, {0x4, 0x7441}, {0x30, 0x8001}, {0x1000, 0x3}], 0xb, 0xb}], 0x6}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x5, 0x6}, {0x0, 0x4, 0x1}, 0xb}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xb60)

132.271765ms ago: executing program 1 (id=2895):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x38, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x38}}, 0x0)

72.367417ms ago: executing program 0 (id=2896):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x8}, @NFTA_REJECT_TYPE={0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf0}}, 0x0)

72.008793ms ago: executing program 1 (id=2897):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
syz_emit_ethernet(0x91, &(0x7f0000000780)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x83, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4, 0x2, 0x0, 0xc}, {"bb69c5a94cc7f21b88dced74b6febdbbf7ff86cca7b67e1dae04958ab3b57566d2ec395eb9fc381c16f92ed5d3ea048a5f3ff056878ff86e058fe6ba13af4aedd871efca376c000cc451b42d03fc51e51563cc98c0a8b2b657fa78"}}}}}}, 0x0)

71.55614ms ago: executing program 1 (id=2898):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0xfffffffffffffff4}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94)

309.427µs ago: executing program 0 (id=2899):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_kthread_stop_ret\x00', r0, 0x0, 0x100000}, 0x18)
r1 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r1, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=ANY=[], 0x100}, 0x0)
close(r1)

0s ago: executing program 1 (id=2900):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000002580)={0x2c, 0x0, 0x2, 0x9}, 0x8)

kernel console output (not intermixed with test programs):

ed promiscuous mode
[  115.508325][ T8924] veth1_macvtap: entered promiscuous mode
[  115.524678][ T8924] batman_adv: batadv0: Interface activated: batadv_slave_0
[  115.530343][ T8924] batman_adv: batadv0: Interface activated: batadv_slave_1
[  115.535993][ T8924] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  115.538786][ T8924] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  115.541546][ T8924] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  115.545217][ T8924] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  115.601077][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.611083][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.637006][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.640865][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.837828][ T9010] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1311'.
[  115.889883][ T9010] wireguard0: entered promiscuous mode
[  115.891702][ T9010] wireguard0: entered allmulticast mode
[  115.929295][ T9017] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1314'.
[  115.934736][ T9017] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1314'.
[  116.159339][ T9033] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  116.529403][ T9056] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1332'.
[  116.802684][ T9066] dvmrp8: entered allmulticast mode
[  116.839705][ T9064] dvmrp8: left allmulticast mode
[  117.025573][ T9073] openvswitch: netlink: Missing key (keys=44, expected=200000)
[  117.795352][ T5857] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.891670][ T6008] IPVS: starting estimator thread 0...
[  117.931089][ T9123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1362'.
[  117.992140][ T9121] IPVS: using max 62 ests per chain, 148800 per kthread
[  118.171412][ T5217] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  118.184315][ T5217] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  118.189050][ T5217] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  118.193438][ T5217] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  118.198224][ T5217] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  118.346105][ T9141] block nbd1: not configured, cannot reconfigure
[  118.348723][ T9141] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1367'.
[  118.351628][ T9141] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1367'.
[  118.366200][ T9132] chnl_net:caif_netlink_parms(): no params data found
[  118.485496][ T9132] bridge0: port 1(bridge_slave_0) entered blocking state
[  118.488965][ T9132] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.491848][ T9132] bridge_slave_0: entered allmulticast mode
[  118.495227][ T9132] bridge_slave_0: entered promiscuous mode
[  118.502007][ T9132] bridge0: port 2(bridge_slave_1) entered blocking state
[  118.504938][ T9132] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.507674][ T9132] bridge_slave_1: entered allmulticast mode
[  118.510397][ T9132] bridge_slave_1: entered promiscuous mode
[  118.537200][ T9132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  118.546641][ T9132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  118.585786][ T9132] team0: Port device team_slave_0 added
[  118.590625][ T9132] team0: Port device team_slave_1 added
[  118.624354][ T9132] batman_adv: batadv0: Adding interface: batadv_slave_0
[  118.627048][ T9132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  118.636795][ T9132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  118.642880][ T9132] batman_adv: batadv0: Adding interface: batadv_slave_1
[  118.646170][ T9132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  118.657171][ T9132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  118.710491][ T9132] hsr_slave_0: entered promiscuous mode
[  118.713791][ T9132] hsr_slave_1: entered promiscuous mode
[  118.716629][ T9132] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  118.721975][ T9132] Cannot create hsr debugfs directory
[  118.988591][ T9171] netlink: 'syz.1.1380': attribute type 4 has an invalid length.
[  118.996495][ T9171] netlink: 'syz.1.1380': attribute type 4 has an invalid length.
[  119.328001][ T9197] openvswitch: netlink: Key type 30 is not supported
[  119.433861][ T9211] netlink: 'syz.0.1396': attribute type 10 has an invalid length.
[  119.444813][ T9211] 8021q: adding VLAN 0 to HW filter on device team0
[  119.448230][ T9211] bond0: (slave team0): Enslaving as an active interface with an up link
[  119.508539][ T5857] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.955174][ T5857] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.017922][ T9237] ip6erspan0: entered allmulticast mode
[  120.038035][ T5857] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.221265][ T5857] bridge_slave_1: left allmulticast mode
[  120.223952][ T5857] bridge_slave_1: left promiscuous mode
[  120.226996][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.240546][ T9252] netlink: 'syz.1.1411': attribute type 1 has an invalid length.
[  120.247940][ T5857] bridge_slave_0: left allmulticast mode
[  120.250253][ T5857] bridge_slave_0: left promiscuous mode
[  120.253418][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.257080][ T9252] netlink: 'syz.1.1411': attribute type 4 has an invalid length.
[  120.260342][ T9252] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1411'.
[  120.272568][   T55] Bluetooth: hci2: command tx timeout
[  120.663426][ T5857] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  120.669309][ T5857] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  120.674925][ T5857] bond0 (unregistering): Released all slaves
[  120.855810][ T9281] netlink: 'syz.0.1421': attribute type 6 has an invalid length.
[  120.874885][ T9278] veth4: entered allmulticast mode
[  120.890783][ T9278] veth5: entered promiscuous mode
[  121.069410][ T5857] hsr_slave_0: left promiscuous mode
[  121.073449][ T5857] hsr_slave_1: left promiscuous mode
[  121.075730][ T5857] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  121.078184][ T5857] batman_adv: batadv0: Removing interface: batadv_slave_0
[  121.081210][ T5857] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  121.085845][ T5857] batman_adv: batadv0: Removing interface: batadv_slave_1
[  121.098347][ T5857] veth1_macvtap: left promiscuous mode
[  121.100348][ T5857] veth0_macvtap: left promiscuous mode
[  121.102629][ T5857] veth1_vlan: left promiscuous mode
[  121.104389][ T5857] veth0_vlan: left promiscuous mode
[  121.396105][ T5857] team0 (unregistering): Port device team_slave_1 removed
[  121.420141][ T5857] team0 (unregistering): Port device team_slave_0 removed
[  121.837210][ T9132] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  121.848536][ T9132] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  121.860213][ T9132] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  121.874582][ T9132] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  121.898732][ T9305] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1427'.
[  121.904483][ T9305] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1427'.
[  122.000349][ T9132] 8021q: adding VLAN 0 to HW filter on device bond0
[  122.013776][ T9132] 8021q: adding VLAN 0 to HW filter on device team0
[  122.064495][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[  122.067299][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[  122.095946][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[  122.099058][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[  122.277370][ T9327] xt_TCPMSS: Only works on TCP SYN packets
[  122.344490][   T55] Bluetooth: hci2: command tx timeout
[  122.448722][ T9132] 8021q: adding VLAN 0 to HW filter on device batadv0
[  122.501443][ T9132] veth0_vlan: entered promiscuous mode
[  122.514693][ T9132] veth1_vlan: entered promiscuous mode
[  122.541360][ T9132] veth0_macvtap: entered promiscuous mode
[  122.553979][ T9132] veth1_macvtap: entered promiscuous mode
[  122.569594][ T9132] batman_adv: batadv0: Interface activated: batadv_slave_0
[  122.578936][ T9132] batman_adv: batadv0: Interface activated: batadv_slave_1
[  122.589244][ T9132] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  122.591873][ T9132] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  122.594882][ T9132] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  122.597935][ T9132] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  122.675957][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  122.683856][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  122.721180][ T6420] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  122.725431][ T6420] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  123.274595][ T9400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1469'.
[  123.492885][ T9417] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1477'.
[  123.755512][ T9432] netdevsim netdevsim1: Direct firmware load for 2Q failed with error -2
[  123.758353][ T9432] netdevsim netdevsim1: Falling back to sysfs fallback for: 2Q
[  124.284642][ T5858] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.576210][ T5217] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  124.580208][ T5217] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  124.585139][ T5217] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  124.589141][ T5217] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  124.597634][ T5217] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  124.899376][ T9441] chnl_net:caif_netlink_parms(): no params data found
[  124.996107][ T9468] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1496'.
[  125.022776][ T9441] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.025403][ T9441] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.028149][ T9441] bridge_slave_0: entered allmulticast mode
[  125.046017][ T9441] bridge_slave_0: entered promiscuous mode
[  125.050164][ T9441] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.056222][ T9441] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.058678][ T9441] bridge_slave_1: entered allmulticast mode
[  125.064734][ T9441] bridge_slave_1: entered promiscuous mode
[  125.105966][ T9441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  125.113096][ T9441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  125.161737][ T9441] team0: Port device team_slave_0 added
[  125.168214][ T9441] team0: Port device team_slave_1 added
[  125.203095][ T9441] batman_adv: batadv0: Adding interface: batadv_slave_0
[  125.205477][ T9441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  125.214171][ T9441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  125.219295][ T9441] batman_adv: batadv0: Adding interface: batadv_slave_1
[  125.221789][ T9441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  125.234505][ T9441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  125.288372][ T9441] hsr_slave_0: entered promiscuous mode
[  125.296584][ T9441] hsr_slave_1: entered promiscuous mode
[  125.306614][ T9441] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  125.309773][ T9441] Cannot create hsr debugfs directory
[  125.596943][ T9490] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  125.806088][ T9502] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1513'.
[  125.866636][ T9510] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1516'.
[  126.662515][ T5217] Bluetooth: hci2: command tx timeout
[  126.796865][ T5858] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.874418][ T5858] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.952610][ T5858] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.080047][ T9532] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1526'.
[  127.157659][ T5858] bridge_slave_1: left allmulticast mode
[  127.159522][ T5858] bridge_slave_1: left promiscuous mode
[  127.161697][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.166652][ T5858] bridge_slave_0: left allmulticast mode
[  127.168694][ T5858] bridge_slave_0: left promiscuous mode
[  127.170702][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.439807][ T5858] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  127.445569][ T5858] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  127.449744][ T5858] bond0 (unregistering): Released all slaves
[  127.822987][ T5858] hsr_slave_0: left promiscuous mode
[  127.846533][ T5858] hsr_slave_1: left promiscuous mode
[  127.848653][ T5858] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  127.850908][ T5858] batman_adv: batadv0: Removing interface: batadv_slave_0
[  127.857227][ T5858] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  127.859525][ T5858] batman_adv: batadv0: Removing interface: batadv_slave_1
[  127.893032][ T5858] veth1_macvtap: left promiscuous mode
[  127.894784][ T5858] veth0_macvtap: left promiscuous mode
[  127.896573][ T5858] veth1_vlan: left promiscuous mode
[  127.898191][ T5858] veth0_vlan: left promiscuous mode
[  127.941222][ T9558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1531'.
[  127.992930][ T9559] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1531'.
[  128.201928][ T5858] team0 (unregistering): Port device team_slave_1 removed
[  128.226736][ T5858] team0 (unregistering): Port device team_slave_0 removed
[  128.580654][ T9441] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  128.594278][ T9441] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  128.610011][ T9441] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  128.628046][ T9441] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  128.729031][ T9441] 8021q: adding VLAN 0 to HW filter on device bond0
[  128.746270][ T5217] Bluetooth: hci2: command tx timeout
[  128.754723][ T9441] 8021q: adding VLAN 0 to HW filter on device team0
[  128.784089][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  128.786317][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  128.796136][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  128.798309][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  128.909380][ T9588] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1542'.
[  128.925179][ T9588] bridge_slave_1: left allmulticast mode
[  128.926939][ T9588] bridge_slave_1: left promiscuous mode
[  128.928755][ T9588] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.941634][ T9588] bridge_slave_0: left allmulticast mode
[  128.947822][ T9588] bridge_slave_0: left promiscuous mode
[  128.949673][ T9588] bridge0: port 1(bridge_slave_0) entered disabled state
[  129.054490][ T9441] 8021q: adding VLAN 0 to HW filter on device batadv0
[  129.112692][ T9441] veth0_vlan: entered promiscuous mode
[  129.121504][ T9441] veth1_vlan: entered promiscuous mode
[  129.150874][ T9441] veth0_macvtap: entered promiscuous mode
[  129.161366][ T9441] veth1_macvtap: entered promiscuous mode
[  129.175747][ T9441] batman_adv: batadv0: Interface activated: batadv_slave_0
[  129.187422][ T9441] batman_adv: batadv0: Interface activated: batadv_slave_1
[  129.193666][ T9441] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  129.196994][ T9441] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  129.199718][ T9441] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  129.202712][ T9441] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  129.261464][ T9607] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1547'.
[  129.322159][ T6420] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  129.324626][ T6420] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  129.363304][ T6420] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  129.366413][ T6420] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  129.490902][ T5836] hid-generic 0005:15C2:0007.0001: collection stack underflow
[  129.507563][ T5836] hid-generic 0005:15C2:0007.0001: item 0 0 0 12 parsing failed
[  129.511053][ T5836] hid-generic 0005:15C2:0007.0001: probe with driver hid-generic failed with error -22
[  129.566331][ T9623] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1555'.
[  129.755561][ T9644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1566'.
[  129.984692][ T9661] xt_hashlimit: size too large, truncated to 1048576
[  130.072003][ T9655] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1572'.
[  130.220758][ T9665] netlink: 'syz.0.1574': attribute type 11 has an invalid length.
[  130.225437][ T9655] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  130.229107][ T9655] bond_slave_0: left promiscuous mode
[  130.233260][ T9655] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  130.237323][ T9655] bond_slave_1: left promiscuous mode
[  130.240074][ T9655] bond0 (unregistering): Released all slaves
[  131.244445][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.817144][ T9739] __nla_validate_parse: 1 callbacks suppressed
[  131.817180][ T9739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1609'.
[  131.926902][ T9746] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  131.930404][ T9746] syzkaller0: entered promiscuous mode
[  131.932873][ T9746] syzkaller0: entered allmulticast mode
[  131.933396][ T9749] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1613'.
[  131.938380][ T9749] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1613'.
[  131.958106][ T9746] tipc: Resetting bearer <eth:syzkaller0>
[  131.964129][ T9744] tipc: Resetting bearer <eth:syzkaller0>
[  131.977749][ T9744] tipc: Disabling bearer <eth:syzkaller0>
[  131.984099][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  131.988022][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  131.990954][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  131.996347][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  131.999340][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  132.116213][ T9759] netlink: 'syz.0.1615': attribute type 11 has an invalid length.
[  132.118572][ T9759] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1615'.
[  132.187274][ T9750] chnl_net:caif_netlink_parms(): no params data found
[  132.298452][ T9750] bridge0: port 1(bridge_slave_0) entered blocking state
[  132.302259][ T9750] bridge0: port 1(bridge_slave_0) entered disabled state
[  132.304679][ T9750] bridge_slave_0: entered allmulticast mode
[  132.308826][ T9750] bridge_slave_0: entered promiscuous mode
[  132.318871][ T9750] bridge0: port 2(bridge_slave_1) entered blocking state
[  132.327764][ T9750] bridge0: port 2(bridge_slave_1) entered disabled state
[  132.331065][ T9750] bridge_slave_1: entered allmulticast mode
[  132.348094][ T9750] bridge_slave_1: entered promiscuous mode
[  132.383364][ T9750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  132.388301][ T9750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  132.437734][ T9750] team0: Port device team_slave_0 added
[  132.441843][ T9750] team0: Port device team_slave_1 added
[  132.466080][ T9750] batman_adv: batadv0: Adding interface: batadv_slave_0
[  132.468308][ T9750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  132.477720][ T9750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  132.481833][ T9790] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component
[  132.488046][ T9750] batman_adv: batadv0: Adding interface: batadv_slave_1
[  132.490146][ T9750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  132.500131][ T9750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  132.540423][ T9750] hsr_slave_0: entered promiscuous mode
[  132.543158][ T9750] hsr_slave_1: entered promiscuous mode
[  132.545225][ T9750] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  132.547474][ T9750] Cannot create hsr debugfs directory
[  132.559045][ T9792] ip6erspan0: entered allmulticast mode
[  132.870582][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.885917][ T9809] macsec1: entered promiscuous mode
[  132.887653][ T9809] macsec1: entered allmulticast mode
[  132.969580][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.008464][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.121018][   T12] bridge_slave_1: left allmulticast mode
[  133.124808][   T12] bridge_slave_1: left promiscuous mode
[  133.126589][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  133.131756][   T12] bridge_slave_0: left allmulticast mode
[  133.134121][   T12] bridge_slave_0: left promiscuous mode
[  133.135926][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  133.428497][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  133.433894][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  133.437948][   T12] bond0 (unregistering): Released all slaves
[  133.735184][ T9819] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1644'.
[  133.835726][ T9825] netlink: 'syz.1.1640': attribute type 6 has an invalid length.
[  133.868048][   T12] hsr_slave_0: left promiscuous mode
[  133.870573][   T12] hsr_slave_1: left promiscuous mode
[  133.872598][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  133.874871][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  133.886612][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  133.888846][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  133.913227][   T12] veth1_macvtap: left promiscuous mode
[  133.914966][   T12] veth0_macvtap: left promiscuous mode
[  133.928629][   T12] veth1_vlan: left promiscuous mode
[  133.930308][   T12] veth0_vlan: left promiscuous mode
[  133.931345][ T9834] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1643'.
[  134.023893][   T55] Bluetooth: hci2: command tx timeout
[  134.254232][   T12] team0 (unregistering): Port device team_slave_1 removed
[  134.279921][   T12] team0 (unregistering): Port device team_slave_0 removed
[  134.593747][ T9750] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  134.608538][ T9750] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  134.620872][ T9750] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  134.634192][ T9750] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  134.754155][ T9750] 8021q: adding VLAN 0 to HW filter on device bond0
[  134.787242][ T9750] 8021q: adding VLAN 0 to HW filter on device team0
[  134.825383][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  134.827584][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  134.837705][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  134.840617][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  135.100735][ T9750] 8021q: adding VLAN 0 to HW filter on device batadv0
[  135.177636][ T9750] veth0_vlan: entered promiscuous mode
[  135.188154][ T9750] veth1_vlan: entered promiscuous mode
[  135.215856][ T9750] veth0_macvtap: entered promiscuous mode
[  135.221703][ T9750] veth1_macvtap: entered promiscuous mode
[  135.264552][ T9750] batman_adv: batadv0: Interface activated: batadv_slave_0
[  135.280211][ T9750] batman_adv: batadv0: Interface activated: batadv_slave_1
[  135.286893][ T9750] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  135.289573][ T9750] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  135.292234][ T9750] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  135.294804][ T9750] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  135.351734][   T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  135.355166][   T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  135.377423][   T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  135.379917][   T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  135.388029][   T33] audit: type=1800 audit(1752509489.261:5): pid=9892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1664" name="blkio.bfq.time_recursive" dev="tmpfs" ino=3264 res=0 errno=0
[  136.437954][ T9924] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1679'.
[  136.440977][ T9924] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000
[  136.445021][ T9924] tipc: Enabled bearer <udp:syz1>, priority 10
[  136.755329][ T9963] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1697'.
[  137.048055][ T9988] veth3: entered promiscuous mode
[  137.167548][ T5858] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.816546][ T9995] netlink: 'syz.1.1713': attribute type 10 has an invalid length.
[  137.885416][T10002] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1715'.
[  138.009529][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  138.013293][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  138.016142][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  138.020390][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  138.024272][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  138.026395][T10013] batadv_slave_0: entered promiscuous mode
[  138.255537][T10010] chnl_net:caif_netlink_parms(): no params data found
[  138.343607][T10010] bridge0: port 1(bridge_slave_0) entered blocking state
[  138.346571][T10010] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.349495][T10010] bridge_slave_0: entered allmulticast mode
[  138.353578][T10010] bridge_slave_0: entered promiscuous mode
[  138.358217][T10010] bridge0: port 2(bridge_slave_1) entered blocking state
[  138.361314][T10010] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.364738][T10010] bridge_slave_1: entered allmulticast mode
[  138.368717][T10010] bridge_slave_1: entered promiscuous mode
[  138.398824][T10010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  138.408455][T10010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  138.452394][T10028] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1721'.
[  138.460353][T10010] team0: Port device team_slave_0 added
[  138.475759][T10010] team0: Port device team_slave_1 added
[  138.507283][T10010] batman_adv: batadv0: Adding interface: batadv_slave_0
[  138.509635][T10010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  138.519254][T10010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  138.527374][T10010] batman_adv: batadv0: Adding interface: batadv_slave_1
[  138.530009][T10010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  138.538402][T10010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  138.578353][T10010] hsr_slave_0: entered promiscuous mode
[  138.583580][T10010] hsr_slave_1: entered promiscuous mode
[  138.585682][T10010] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  138.588127][T10010] Cannot create hsr debugfs directory
[  138.796024][T10052] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1734'.
[  138.834243][ T5858] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.848119][T10052] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1734'.
[  138.848732][T10056] dummy0: entered allmulticast mode
[  138.903325][ T5830] Bluetooth: hci1: command 0x0405 tx timeout
[  138.928243][ T5858] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.935547][T10055] dummy0: left allmulticast mode
[  139.018307][ T5858] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.063665][T10058] syzkaller0: entered promiscuous mode
[  139.068753][T10058] syzkaller0: entered allmulticast mode
[  139.218910][ T5858] bridge_slave_1: left allmulticast mode
[  139.221129][ T5858] bridge_slave_1: left promiscuous mode
[  139.232308][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state
[  139.237854][ T5858] bridge_slave_0: left allmulticast mode
[  139.240366][ T5858] bridge_slave_0: left promiscuous mode
[  139.247820][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state
[  139.404492][T10075] netlink: 'syz.1.1745': attribute type 11 has an invalid length.
[  139.610144][ T5858] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  139.614453][ T5858] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  139.618676][ T5858] bond0 (unregistering): Released all slaves
[  140.112587][ T5830] Bluetooth: hci2: command tx timeout
[  140.995618][ T5858] hsr_slave_0: left promiscuous mode
[  140.998111][ T5858] hsr_slave_1: left promiscuous mode
[  141.004112][ T5858] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  141.006355][ T5858] batman_adv: batadv0: Removing interface: batadv_slave_0
[  141.010529][ T5858] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  141.017109][ T5858] batman_adv: batadv0: Removing interface: batadv_slave_1
[  141.031174][ T5858] veth1_macvtap: left promiscuous mode
[  141.034607][ T5858] veth0_macvtap: left promiscuous mode
[  141.036483][ T5858] veth1_vlan: left promiscuous mode
[  141.038137][ T5858] veth0_vlan: left promiscuous mode
[  141.348262][ T5858] team0 (unregistering): Port device team_slave_1 removed
[  141.374056][ T5858] team0 (unregistering): Port device team_slave_0 removed
[  141.650488][T10094] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  141.658727][T10094] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  141.913250][T10010] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  141.945413][T10010] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  141.958046][T10010] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  141.983714][T10010] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  142.029696][T10120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1759'.
[  142.087723][T10130] pim6reg1: entered promiscuous mode
[  142.089330][T10130] pim6reg1: entered allmulticast mode
[  142.164568][T10010] 8021q: adding VLAN 0 to HW filter on device bond0
[  142.178450][T10010] 8021q: adding VLAN 0 to HW filter on device team0
[  142.182464][ T5830] Bluetooth: hci2: command tx timeout
[  142.185717][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  142.187810][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  142.201857][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  142.204217][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  142.339802][T10010] 8021q: adding VLAN 0 to HW filter on device batadv0
[  142.380640][T10010] veth0_vlan: entered promiscuous mode
[  142.386980][T10010] veth1_vlan: entered promiscuous mode
[  142.417108][T10010] veth0_macvtap: entered promiscuous mode
[  142.424737][T10010] veth1_macvtap: entered promiscuous mode
[  142.437224][T10010] batman_adv: batadv0: Interface activated: batadv_slave_0
[  142.443358][T10010] batman_adv: batadv0: Interface activated: batadv_slave_1
[  142.448937][T10010] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  142.452456][T10010] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  142.455601][T10010] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  142.458166][T10010] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  142.534864][T10162] netlink: 'syz.0.1777': attribute type 1 has an invalid length.
[  142.551497][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  142.556903][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  142.586316][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  142.589999][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  142.726690][T10176] vxcan1: entered allmulticast mode
[  142.728473][T10176] vxcan1: left allmulticast mode
[  142.824765][T10184] netlink: 'syz.1.1788': attribute type 4 has an invalid length.
[  142.885906][T10190] bridge0: entered promiscuous mode
[  142.887565][T10190] bridge0: entered allmulticast mode
[  142.898656][T10190] team0: Port device bridge0 added
[  142.909657][T10190] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1791'.
[  142.989741][T10190] bond0: (slave team0): Releasing backup interface
[  142.997579][T10190] team0 (unregistering): Port device team_slave_0 removed
[  143.002969][T10190] team0 (unregistering): Port device team_slave_1 removed
[  143.010569][T10190] team0 (unregistering): Port device bridge0 removed
[  143.125379][T10202] xt_hashlimit: size too large, truncated to 1048576
[  143.281325][T10212] netlink: 'syz.1.1800': attribute type 1 has an invalid length.
[  143.301729][T10212] 8021q: adding VLAN 0 to HW filter on device bond0
[  143.323336][T10212] bond0: (slave ip6gretap1): making interface the new active one
[  143.333383][T10212] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link
[  143.444139][T10218] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  143.454747][T10219] syzkaller1: entered promiscuous mode
[  143.457019][T10219] syzkaller1: entered allmulticast mode
[  143.485840][T10221] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1804'.
[  144.055946][T10269] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1827'.
[  144.517900][ T5858] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.553833][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  145.558608][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  145.561405][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  145.568810][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  145.578966][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  145.738388][T10338] nbd: must specify an index to disconnect
[  145.779832][T10321] chnl_net:caif_netlink_parms(): no params data found
[  145.838112][T10349] netlink: 212924 bytes leftover after parsing attributes in process `syz.0.1858'.
[  145.886057][T10321] bridge0: port 1(bridge_slave_0) entered blocking state
[  145.888274][T10321] bridge0: port 1(bridge_slave_0) entered disabled state
[  145.890512][T10321] bridge_slave_0: entered allmulticast mode
[  145.901377][T10321] bridge_slave_0: entered promiscuous mode
[  145.912672][T10321] bridge0: port 2(bridge_slave_1) entered blocking state
[  145.914856][T10321] bridge0: port 2(bridge_slave_1) entered disabled state
[  145.917331][T10321] bridge_slave_1: entered allmulticast mode
[  145.920078][T10321] bridge_slave_1: entered promiscuous mode
[  145.944800][T10321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  145.949344][T10321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  145.976573][T10362] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.1865'.
[  145.984794][T10321] team0: Port device team_slave_0 added
[  145.990593][T10321] team0: Port device team_slave_1 added
[  146.006639][T10364] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1866'.
[  146.020780][T10321] batman_adv: batadv0: Adding interface: batadv_slave_0
[  146.023877][T10321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  146.033650][T10321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  146.039625][T10321] batman_adv: batadv0: Adding interface: batadv_slave_1
[  146.042353][T10321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  146.051240][T10321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  146.064038][T10366] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  146.098351][T10321] hsr_slave_0: entered promiscuous mode
[  146.100591][T10321] hsr_slave_1: entered promiscuous mode
[  146.104879][T10321] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  146.112186][T10321] Cannot create hsr debugfs directory
[  146.114088][T10370] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1869'.
[  146.232931][T10380] netlink: 'syz.0.1874': attribute type 178 has an invalid length.
[  146.368355][ T5858] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.382657][T10390] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1879'.
[  146.451219][ T5858] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.526610][ T5858] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.547591][T10406] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1887'.
[  146.581650][T10406] netlink: 'syz.1.1887': attribute type 1 has an invalid length.
[  146.593099][T10406] netlink: 'syz.1.1887': attribute type 1 has an invalid length.
[  146.765894][ T5858] bridge_slave_1: left allmulticast mode
[  146.768231][ T5858] bridge_slave_1: left promiscuous mode
[  146.770545][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.795213][ T5858] bridge_slave_0: left allmulticast mode
[  146.797541][ T5858] bridge_slave_0: left promiscuous mode
[  146.799987][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state
[  146.945881][T10424] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1893'.
[  147.157442][T10438] unsupported nlmsg_type 40
[  147.288689][ T5858] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  147.295076][ T5858] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  147.299301][ T5858] bond0 (unregistering): Released all slaves
[  147.622842][   T55] Bluetooth: hci2: command tx timeout
[  147.766301][ T5858] hsr_slave_0: left promiscuous mode
[  147.768532][ T5858] hsr_slave_1: left promiscuous mode
[  147.773370][ T5858] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  147.775708][ T5858] batman_adv: batadv0: Removing interface: batadv_slave_0
[  147.779296][ T5858] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  147.788415][ T5858] batman_adv: batadv0: Removing interface: batadv_slave_1
[  147.807182][ T5858] veth1_macvtap: left promiscuous mode
[  147.809199][ T5858] veth0_macvtap: left promiscuous mode
[  147.811230][ T5858] veth1_vlan: left promiscuous mode
[  147.820213][ T5858] veth0_vlan: left promiscuous mode
[  147.897465][   T12] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xea
[  148.199524][ T5858] team0 (unregistering): Port device team_slave_1 removed
[  148.226114][ T5858] team0 (unregistering): Port device team_slave_0 removed
[  148.606496][T10321] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  148.616604][T10321] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  148.624299][T10321] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  148.644107][T10321] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  148.845593][T10321] 8021q: adding VLAN 0 to HW filter on device bond0
[  148.874728][T10321] 8021q: adding VLAN 0 to HW filter on device team0
[  148.896924][   T29] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.899178][   T29] bridge0: port 1(bridge_slave_0) entered forwarding state
[  148.912374][   T29] bridge0: port 2(bridge_slave_1) entered blocking state
[  148.914666][   T29] bridge0: port 2(bridge_slave_1) entered forwarding state
[  148.964540][T10321] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  149.077424][T10528] __nla_validate_parse: 1 callbacks suppressed
[  149.077436][T10528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1930'.
[  149.111431][T10533] netlink: 'syz.0.1933': attribute type 1 has an invalid length.
[  149.118465][T10533] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1933'.
[  149.121124][T10533] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1933'.
[  149.184088][T10321] 8021q: adding VLAN 0 to HW filter on device batadv0
[  149.236675][T10321] veth0_vlan: entered promiscuous mode
[  149.241764][T10321] veth1_vlan: entered promiscuous mode
[  149.305407][T10321] veth0_macvtap: entered promiscuous mode
[  149.321794][T10321] veth1_macvtap: entered promiscuous mode
[  149.338657][T10321] batman_adv: batadv0: Interface activated: batadv_slave_0
[  149.347636][T10321] batman_adv: batadv0: Interface activated: batadv_slave_1
[  149.368210][T10321] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  149.370983][T10321] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  149.376239][T10321] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  149.379400][T10321] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  149.703238][   T55] Bluetooth: hci2: command tx timeout
[  150.614072][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  150.621377][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  150.659764][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  150.669296][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  151.393762][T10609] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  151.590896][ T5858] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.695436][ T5858] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.474944][T10620] netlink: 'syz.0.1967': attribute type 2 has an invalid length.
[  152.708590][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  152.711787][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  152.714872][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  152.717988][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  152.720949][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  152.825234][T10644] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1977'.
[  152.831636][T10644] pim6reg: entered allmulticast mode
[  152.845858][T10644] pim6reg: left allmulticast mode
[  152.863439][T10640] chnl_net:caif_netlink_parms(): no params data found
[  152.893442][ T5858] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.959710][T10640] bridge0: port 1(bridge_slave_0) entered blocking state
[  152.965918][T10640] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.968384][T10640] bridge_slave_0: entered allmulticast mode
[  152.971219][T10640] bridge_slave_0: entered promiscuous mode
[  152.984936][ T5858] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.997817][T10640] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.000460][T10640] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.010430][T10640] bridge_slave_1: entered allmulticast mode
[  153.015189][T10640] bridge_slave_1: entered promiscuous mode
[  153.065839][T10640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  153.093799][T10640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  153.158966][ T5858] bridge_slave_1: left allmulticast mode
[  153.161371][ T5858] bridge_slave_1: left promiscuous mode
[  153.170160][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.177567][ T5858] bridge_slave_0: left allmulticast mode
[  153.179829][ T5858] bridge_slave_0: left promiscuous mode
[  153.182775][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.194125][T10672] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1988'.
[  153.600050][ T5858] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  153.607314][ T5858] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  153.613404][ T5858] bond0 (unregistering): Released all slaves
[  153.630681][T10640] team0: Port device team_slave_0 added
[  153.660675][T10640] team0: Port device team_slave_1 added
[  153.699191][T10687] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1995'.
[  153.756055][T10640] batman_adv: batadv0: Adding interface: batadv_slave_0
[  153.760901][T10640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  153.771466][T10640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  153.800516][T10640] batman_adv: batadv0: Adding interface: batadv_slave_1
[  153.811110][T10640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  153.826018][T10640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  153.921897][T10640] hsr_slave_0: entered promiscuous mode
[  153.925194][T10640] hsr_slave_1: entered promiscuous mode
[  153.928917][T10640] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  153.941583][T10640] Cannot create hsr debugfs directory
[  153.974586][ T5858] hsr_slave_0: left promiscuous mode
[  153.977826][ T5858] hsr_slave_1: left promiscuous mode
[  153.980551][ T5858] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  153.984156][ T5858] batman_adv: batadv0: Removing interface: batadv_slave_0
[  153.995322][ T5858] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  153.998393][ T5858] batman_adv: batadv0: Removing interface: batadv_slave_1
[  154.024305][ T5858] veth1_macvtap: left promiscuous mode
[  154.027252][ T5858] veth0_macvtap: left promiscuous mode
[  154.029207][ T5858] veth1_vlan: left promiscuous mode
[  154.030812][ T5858] veth0_vlan: left promiscuous mode
[  154.324197][ T5858] team0 (unregistering): Port device team_slave_1 removed
[  154.349055][ T5858] team0 (unregistering): Port device team_slave_0 removed
[  154.746815][ T5830] Bluetooth: hci2: command tx timeout
[  154.964918][T10731] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2008'.
[  155.197884][T10745] netlink: 'syz.1.2014': attribute type 1 has an invalid length.
[  155.200413][T10745] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2014'.
[  155.399484][T10640] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  155.405064][T10755] netlink: 'syz.1.2018': attribute type 2 has an invalid length.
[  155.415732][T10640] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  155.427067][T10640] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  155.436363][T10640] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  155.523177][T10640] 8021q: adding VLAN 0 to HW filter on device bond0
[  155.547182][T10640] 8021q: adding VLAN 0 to HW filter on device team0
[  155.565121][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  155.567487][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  155.589462][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  155.592384][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  155.801224][T10640] 8021q: adding VLAN 0 to HW filter on device batadv0
[  155.848107][T10640] veth0_vlan: entered promiscuous mode
[  155.857437][T10640] veth1_vlan: entered promiscuous mode
[  155.887811][T10640] veth0_macvtap: entered promiscuous mode
[  155.896626][T10640] veth1_macvtap: entered promiscuous mode
[  155.918136][T10640] batman_adv: batadv0: Interface activated: batadv_slave_0
[  155.928470][T10640] batman_adv: batadv0: Interface activated: batadv_slave_1
[  155.933948][T10640] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  155.936572][T10640] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  155.939195][T10640] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  155.942943][T10640] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  156.030519][ T6420] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  156.033494][ T6420] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  156.059683][T10800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2031'.
[  156.063722][T10798] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  156.064486][T10800] openvswitch: netlink: Missing key (keys=40, expected=100)
[  156.068372][ T6420] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  156.074567][ T6420] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  156.505727][T10842] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2051'.
[  156.670705][T10859] xt_hashlimit: size too large, truncated to 1048576
[  156.722854][T10863] : renamed from vxcan1
[  157.025489][   T33] audit: type=1800 audit(1752509510.901:6): pid=10861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2059" name="cgroup.controllers" dev="tmpfs" ino=3922 res=0 errno=0
[  157.411692][T10880] smc: net device bond0 applied user defined pnetid SYZ2
[  157.450334][T10882] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  157.453243][T10882] syzkaller0: entered promiscuous mode
[  157.455068][T10882] syzkaller0: entered allmulticast mode
[  157.475713][T10882] tipc: Resetting bearer <eth:syzkaller0>
[  157.478950][T10881] tipc: Resetting bearer <eth:syzkaller0>
[  157.489347][T10881] tipc: Disabling bearer <eth:syzkaller0>
[  157.787429][T10897] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  157.802507][T10895] tipc: Resetting bearer <eth:syzkaller0>
[  158.820505][T10895] tipc: Disabling bearer <eth:syzkaller0>
[  158.850716][ T5857] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.007079][T10923] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2087'.
[  159.041959][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  159.049081][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  159.052365][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  159.055952][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  159.059408][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  159.204373][T10925] chnl_net:caif_netlink_parms(): no params data found
[  159.258966][ T5857] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.326310][ T5857] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.347795][T10925] bridge0: port 1(bridge_slave_0) entered blocking state
[  159.350040][T10925] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.355306][T10925] bridge_slave_0: entered allmulticast mode
[  159.358151][T10925] bridge_slave_0: entered promiscuous mode
[  159.361370][T10925] bridge0: port 2(bridge_slave_1) entered blocking state
[  159.364243][T10925] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.366586][T10925] bridge_slave_1: entered allmulticast mode
[  159.369728][T10925] bridge_slave_1: entered promiscuous mode
[  159.390025][ T5857] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.418959][T10925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  159.426171][T10925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  159.458204][T10925] team0: Port device team_slave_0 added
[  159.463389][T10925] team0: Port device team_slave_1 added
[  159.545693][T10925] batman_adv: batadv0: Adding interface: batadv_slave_0
[  159.548051][T10925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  159.558041][T10925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  159.564894][T10925] batman_adv: batadv0: Adding interface: batadv_slave_1
[  159.567213][T10925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  159.579237][T10925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  159.597569][ T5857] bridge_slave_1: left allmulticast mode
[  159.599661][ T5857] bridge_slave_1: left promiscuous mode
[  159.603327][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.607655][ T5857] bridge_slave_0: left allmulticast mode
[  159.609511][ T5857] bridge_slave_0: left promiscuous mode
[  159.612321][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.914674][ T5857] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  159.920279][ T5857] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  159.925807][ T5857] bond0 (unregistering): Released all slaves
[  159.997792][T10925] hsr_slave_0: entered promiscuous mode
[  160.000566][T10925] hsr_slave_1: entered promiscuous mode
[  160.004095][T10925] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  160.007004][T10925] Cannot create hsr debugfs directory
[  160.283898][ T5857] hsr_slave_0: left promiscuous mode
[  160.288071][ T5857] hsr_slave_1: left promiscuous mode
[  160.290509][ T5857] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  160.300644][ T5857] batman_adv: batadv0: Removing interface: batadv_slave_0
[  160.316510][ T5857] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  160.319188][ T5857] batman_adv: batadv0: Removing interface: batadv_slave_1
[  160.361932][ T5857] veth1_macvtap: left promiscuous mode
[  160.371280][ T5857] veth0_macvtap: left promiscuous mode
[  160.374868][ T5857] veth1_vlan: left promiscuous mode
[  160.377167][ T5857] veth0_vlan: left promiscuous mode
[  160.786190][ T5857] team0 (unregistering): Port device team_slave_1 removed
[  160.816387][ T5857] team0 (unregistering): Port device team_slave_0 removed
[  161.130586][T10977] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2104'.
[  161.142895][ T5830] Bluetooth: hci2: command tx timeout
[  161.794845][T10925] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  161.807746][T10925] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  161.838114][T10925] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  161.846782][T10925] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  161.871442][T11028] xt_CT: You must specify a L4 protocol and not use inversions on it
[  161.958778][T11040] netlink: 'syz.0.2126': attribute type 1 has an invalid length.
[  161.969534][T11040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2126'.
[  161.974542][T11044] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2128'.
[  161.994173][T10925] 8021q: adding VLAN 0 to HW filter on device bond0
[  162.022010][T10925] 8021q: adding VLAN 0 to HW filter on device team0
[  162.034967][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[  162.037279][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[  162.064146][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[  162.066344][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[  162.167402][T11058] bond0: Unable to set down delay as MII monitoring is disabled
[  162.194822][T11059] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2132'.
[  162.219825][T11062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2134'.
[  162.229054][T10925] 8021q: adding VLAN 0 to HW filter on device batadv0
[  162.260292][T10925] veth0_vlan: entered promiscuous mode
[  162.269377][T10925] veth1_vlan: entered promiscuous mode
[  162.289932][T10925] veth0_macvtap: entered promiscuous mode
[  162.295292][T10925] veth1_macvtap: entered promiscuous mode
[  162.307195][T10925] batman_adv: batadv0: Interface activated: batadv_slave_0
[  162.318394][T10925] batman_adv: batadv0: Interface activated: batadv_slave_1
[  162.327983][T10925] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  162.330677][T10925] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  162.334141][T10925] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  162.336794][T10925] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  162.410457][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  162.422845][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  162.448084][   T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  162.450535][   T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  163.157678][T11106] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2154'.
[  163.872589][T11139] netlink: 'syz.1.2169': attribute type 21 has an invalid length.
[  163.880773][T11139] netlink: 'syz.1.2169': attribute type 22 has an invalid length.
[  163.885969][T11139] netlink: 'syz.1.2169': attribute type 23 has an invalid length.
[  163.888979][T11139] netlink: 'syz.1.2169': attribute type 25 has an invalid length.
[  163.891959][T11139] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2169'.
[  164.339697][ T5858] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.575418][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  165.582802][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  165.586417][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  165.590819][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  165.594076][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  165.717316][T11213] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2198'.
[  165.720124][T11213] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2198'.
[  165.849019][T11202] chnl_net:caif_netlink_parms(): no params data found
[  165.856872][T11219] netlink: 'syz.1.2201': attribute type 9 has an invalid length.
[  165.939911][ T5858] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.979835][T11202] bridge0: port 1(bridge_slave_0) entered blocking state
[  165.985550][T11202] bridge0: port 1(bridge_slave_0) entered disabled state
[  165.990540][T11202] bridge_slave_0: entered allmulticast mode
[  166.006363][T11202] bridge_slave_0: entered promiscuous mode
[  166.010930][T11202] bridge0: port 2(bridge_slave_1) entered blocking state
[  166.013808][T11202] bridge0: port 2(bridge_slave_1) entered disabled state
[  166.016592][T11202] bridge_slave_1: entered allmulticast mode
[  166.020327][T11202] bridge_slave_1: entered promiscuous mode
[  166.059073][T11202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  166.066429][T11202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  166.096697][ T5858] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.118864][T11202] team0: Port device team_slave_0 added
[  166.124685][T11202] team0: Port device team_slave_1 added
[  166.157413][ T5858] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.166923][T11202] batman_adv: batadv0: Adding interface: batadv_slave_0
[  166.170290][T11202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  166.181428][T11202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  166.194800][T11202] batman_adv: batadv0: Adding interface: batadv_slave_1
[  166.197445][T11202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  166.207306][T11202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  166.273622][T11247] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  166.290382][T11202] hsr_slave_0: entered promiscuous mode
[  166.301042][T11202] hsr_slave_1: entered promiscuous mode
[  166.303601][T11202] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  166.305977][T11202] Cannot create hsr debugfs directory
[  166.385859][ T5858] bridge_slave_1: left allmulticast mode
[  166.387988][ T5858] bridge_slave_1: left promiscuous mode
[  166.389934][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state
[  166.396525][ T5858] bridge_slave_0: left allmulticast mode
[  166.398243][ T5858] bridge_slave_0: left promiscuous mode
[  166.400023][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state
[  166.654265][ T5858] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  166.658984][ T5858] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  166.662813][ T5858] bond0 (unregistering): Released all slaves
[  167.025393][ T5858] hsr_slave_0: left promiscuous mode
[  167.033577][ T5858] hsr_slave_1: left promiscuous mode
[  167.044775][ T5858] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  167.047721][ T5858] batman_adv: batadv0: Removing interface: batadv_slave_0
[  167.063424][ T5858] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  167.066954][ T5858] batman_adv: batadv0: Removing interface: batadv_slave_1
[  167.090626][ T5858] veth1_macvtap: left promiscuous mode
[  167.094722][ T5858] veth0_macvtap: left promiscuous mode
[  167.103300][ T5858] veth1_vlan: left promiscuous mode
[  167.105584][ T5858] veth0_vlan: left promiscuous mode
[  167.438248][ T5858] team0 (unregistering): Port device team_slave_1 removed
[  167.464169][ T5858] team0 (unregistering): Port device team_slave_0 removed
[  167.635252][ T5830] Bluetooth: hci2: command tx timeout
[  167.870083][T11287] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2230'.
[  167.883974][T11290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2229'.
[  167.989632][T11202] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  167.997576][T11202] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  168.008964][T11202] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  168.014844][T11202] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  168.176651][T11202] 8021q: adding VLAN 0 to HW filter on device bond0
[  168.198207][T11202] 8021q: adding VLAN 0 to HW filter on device team0
[  168.214455][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[  168.216621][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[  168.229934][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[  168.232233][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[  168.271030][T11321] netlink: 'syz.1.2238': attribute type 1 has an invalid length.
[  168.421966][T11202] 8021q: adding VLAN 0 to HW filter on device batadv0
[  168.441474][T11339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2242'.
[  168.448447][T11339] netlink: 34 bytes leftover after parsing attributes in process `syz.1.2242'.
[  168.482990][T11202] veth0_vlan: entered promiscuous mode
[  168.490253][T11202] veth1_vlan: entered promiscuous mode
[  168.515422][T11202] veth0_macvtap: entered promiscuous mode
[  168.519244][T11202] veth1_macvtap: entered promiscuous mode
[  168.528163][T11202] batman_adv: batadv0: Interface activated: batadv_slave_0
[  168.537017][T11202] batman_adv: batadv0: Interface activated: batadv_slave_1
[  168.541982][T11202] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  168.544835][T11202] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  168.547424][T11202] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  168.550076][T11202] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  168.608812][ T6420] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  168.611319][ T6420] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  168.654178][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  168.662704][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  170.305210][T11437] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2269'.
[  170.561840][T11459] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  170.728324][T11471] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  170.787154][T11475] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2283'.
[  170.994667][ T5858] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.340436][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  172.343937][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  172.347386][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  172.350871][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  172.355840][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  172.393741][ T5858] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.413865][T11508] syzkaller1: entered promiscuous mode
[  172.426190][T11508] syzkaller1: entered allmulticast mode
[  172.444976][ T5858] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.472427][T11511] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2299'.
[  172.490859][ T5858] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.503271][T11518] netlink: 'syz.0.2300': attribute type 58 has an invalid length.
[  172.689284][T11533] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2304'.
[  172.757441][ T5858] bridge_slave_1: left allmulticast mode
[  172.759257][ T5858] bridge_slave_1: left promiscuous mode
[  172.771342][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state
[  172.776514][ T5858] bridge_slave_0: left allmulticast mode
[  172.778727][ T5858] bridge_slave_0: left promiscuous mode
[  172.780876][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.008269][ T5858] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  173.013941][ T5858] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  173.017531][ T5858] bond0 (unregistering): Released all slaves
[  173.077683][T11505] chnl_net:caif_netlink_parms(): no params data found
[  173.207350][T11544] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  173.226182][T11544] syzkaller0: entered promiscuous mode
[  173.228195][T11544] syzkaller0: entered allmulticast mode
[  173.277288][ T5858] hsr_slave_0: left promiscuous mode
[  173.279450][ T5858] hsr_slave_1: left promiscuous mode
[  173.281464][ T5858] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  173.285522][ T5858] batman_adv: batadv0: Removing interface: batadv_slave_0
[  173.288310][ T5858] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  173.290611][ T5858] batman_adv: batadv0: Removing interface: batadv_slave_1
[  173.304792][ T5858] veth1_macvtap: left promiscuous mode
[  173.306668][ T5858] veth0_macvtap: left promiscuous mode
[  173.308431][ T5858] veth1_vlan: left promiscuous mode
[  173.310312][ T5858] veth0_vlan: left promiscuous mode
[  173.624640][ T5858] team0 (unregistering): Port device team_slave_1 removed
[  173.650522][ T5858] team0 (unregistering): Port device team_slave_0 removed
[  173.951327][T11505] bridge0: port 1(bridge_slave_0) entered blocking state
[  173.962675][T11505] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.965056][T11505] bridge_slave_0: entered allmulticast mode
[  173.967848][T11505] bridge_slave_0: entered promiscuous mode
[  173.976400][T11554] tipc: Resetting bearer <eth:syzkaller0>
[  173.987478][T11543] tipc: Resetting bearer <eth:syzkaller0>
[  174.005653][T11543] tipc: Disabling bearer <eth:syzkaller0>
[  174.012265][T11505] bridge0: port 2(bridge_slave_1) entered blocking state
[  174.014656][T11505] bridge0: port 2(bridge_slave_1) entered disabled state
[  174.017392][T11505] bridge_slave_1: entered allmulticast mode
[  174.020603][T11505] bridge_slave_1: entered promiscuous mode
[  174.095960][T11505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  174.115138][T11505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  174.176907][T11505] team0: Port device team_slave_0 added
[  174.180504][T11505] team0: Port device team_slave_1 added
[  174.210531][T11505] batman_adv: batadv0: Adding interface: batadv_slave_0
[  174.213569][T11505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  174.223195][T11505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  174.227772][T11505] batman_adv: batadv0: Adding interface: batadv_slave_1
[  174.229895][T11505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  174.241842][T11505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  174.284008][T11505] hsr_slave_0: entered promiscuous mode
[  174.293302][T11505] hsr_slave_1: entered promiscuous mode
[  174.295473][T11505] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  174.297835][T11505] Cannot create hsr debugfs directory
[  174.424048][   T55] Bluetooth: hci2: command tx timeout
[  174.825861][T11505] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  174.830402][T11505] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  174.836950][T11505] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  174.841437][T11505] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  174.910707][T11505] 8021q: adding VLAN 0 to HW filter on device bond0
[  174.921359][T11505] 8021q: adding VLAN 0 to HW filter on device team0
[  174.961683][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[  174.963942][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[  174.977337][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[  174.979571][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[  175.065370][T11588] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[  175.169875][T11505] 8021q: adding VLAN 0 to HW filter on device batadv0
[  175.219264][T11505] veth0_vlan: entered promiscuous mode
[  175.247474][T11505] veth1_vlan: entered promiscuous mode
[  175.280634][T11505] veth0_macvtap: entered promiscuous mode
[  175.291389][T11505] veth1_macvtap: entered promiscuous mode
[  175.319317][T11505] batman_adv: batadv0: Interface activated: batadv_slave_0
[  175.336982][T11505] batman_adv: batadv0: Interface activated: batadv_slave_1
[  175.341005][T11505] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  175.354152][T11505] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  175.356780][T11505] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  175.359294][T11505] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  175.399083][T11622] bridge5: entered allmulticast mode
[  175.462683][   T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  175.466179][   T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  175.497192][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  175.501621][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  176.041831][T11672] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2345'.
[  176.053153][T11672] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2345'.
[  176.216872][T11685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2351'.
[  176.220379][T11685] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2351'.
[  176.416275][T11707] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  176.733327][T11738] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2376'.
[  177.628253][ T5857] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.002444][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  179.008532][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  179.013286][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  179.017362][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  179.019927][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  179.171773][T11808] chnl_net:caif_netlink_parms(): no params data found
[  179.231375][T11808] bridge0: port 1(bridge_slave_0) entered blocking state
[  179.235917][T11808] bridge0: port 1(bridge_slave_0) entered disabled state
[  179.238124][T11808] bridge_slave_0: entered allmulticast mode
[  179.240750][T11808] bridge_slave_0: entered promiscuous mode
[  179.244991][T11808] bridge0: port 2(bridge_slave_1) entered blocking state
[  179.247190][T11808] bridge0: port 2(bridge_slave_1) entered disabled state
[  179.249350][T11808] bridge_slave_1: entered allmulticast mode
[  179.254523][T11808] bridge_slave_1: entered promiscuous mode
[  179.298100][T11808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  179.309729][T11808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  179.318495][T11840] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2419'.
[  179.341221][ T5857] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.367306][T11808] team0: Port device team_slave_0 added
[  179.371755][T11808] team0: Port device team_slave_1 added
[  179.396597][ T5857] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.421861][T11808] batman_adv: batadv0: Adding interface: batadv_slave_0
[  179.424498][T11808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  179.434198][T11808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  179.443936][T11808] batman_adv: batadv0: Adding interface: batadv_slave_1
[  179.448025][T11808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  179.468337][T11808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  179.482589][ T5857] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.559867][T11808] hsr_slave_0: entered promiscuous mode
[  179.564265][T11808] hsr_slave_1: entered promiscuous mode
[  179.567447][T11808] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  179.569935][T11808] Cannot create hsr debugfs directory
[  179.669021][ T5857] bridge_slave_1: left allmulticast mode
[  179.670863][ T5857] bridge_slave_1: left promiscuous mode
[  179.674638][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state
[  179.678712][ T5857] bridge_slave_0: left allmulticast mode
[  179.680500][ T5857] bridge_slave_0: left promiscuous mode
[  179.685240][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state
[  179.783741][T11871] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2433'.
[  179.977965][ T5857] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  179.982316][ T5857] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  179.990605][ T5857] bond0 (unregistering): Released all slaves
[  180.173684][T11887] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2438'.
[  180.346458][ T5857] hsr_slave_0: left promiscuous mode
[  180.348624][ T5857] hsr_slave_1: left promiscuous mode
[  180.351101][ T5857] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  180.355091][ T5857] batman_adv: batadv0: Removing interface: batadv_slave_0
[  180.368338][ T5857] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  180.371528][ T5857] batman_adv: batadv0: Removing interface: batadv_slave_1
[  180.409174][ T5857] veth1_macvtap: left promiscuous mode
[  180.410893][ T5857] veth0_macvtap: left promiscuous mode
[  180.416064][ T5857] veth1_vlan: left promiscuous mode
[  180.417728][ T5857] veth0_vlan: left promiscuous mode
[  181.062305][ T5830] Bluetooth: hci2: command tx timeout
[  181.366601][ T5857] team0 (unregistering): Port device team_slave_1 removed
[  181.396286][ T5857] team0 (unregistering): Port device team_slave_0 removed
[  182.226411][T11808] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  182.231909][T11808] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  182.245653][T11808] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  182.253846][T11808] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  182.390617][T11808] 8021q: adding VLAN 0 to HW filter on device bond0
[  182.424315][T11808] 8021q: adding VLAN 0 to HW filter on device team0
[  182.451201][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[  182.453633][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[  182.466159][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[  182.468376][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[  182.625286][T11973] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2461'.
[  182.701117][T11808] 8021q: adding VLAN 0 to HW filter on device batadv0
[  182.810679][T11808] veth0_vlan: entered promiscuous mode
[  182.823880][T11808] veth1_vlan: entered promiscuous mode
[  182.860860][T11808] veth0_macvtap: entered promiscuous mode
[  182.869303][T11808] veth1_macvtap: entered promiscuous mode
[  182.908458][T11808] batman_adv: batadv0: Interface activated: batadv_slave_0
[  182.919827][T11808] batman_adv: batadv0: Interface activated: batadv_slave_1
[  182.936323][T11808] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  182.939034][T11808] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  182.941611][T11808] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  182.949426][T11808] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  183.077601][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  183.080066][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  183.143153][ T5830] Bluetooth: hci2: command tx timeout
[  183.180391][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  183.186111][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  183.376767][T12018] xt_ecn: cannot match TCP bits for non-tcp packets
[  183.454832][T12025] netlink: 'syz.0.2474': attribute type 13 has an invalid length.
[  183.457220][T12025] netlink: 'syz.0.2474': attribute type 17 has an invalid length.
[  183.511118][T12025] 8021q: adding VLAN 0 to HW filter on device bond0
[  183.523058][T12025] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  183.602970][T12025] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  183.659230][T12025] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  183.716203][T12028] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  184.377538][T10958] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.509901][T10958] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.809823][T12037] infiniband syz!: set down
[  185.811364][T12037] infiniband syz!: added team_slave_0
[  185.853498][T12037] RDS/IB: syz!: added
[  185.855048][T12037] smc: adding ib device syz! with port count 1
[  185.857056][T12037] smc:    ib device syz! port 1 has pnetid 
[  186.085731][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  186.090149][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  186.093824][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  186.098554][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  186.103082][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  186.145799][T12050] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2485'.
[  186.160624][T12050] dummy0: entered promiscuous mode
[  186.170421][T12050] macsec1: entered allmulticast mode
[  186.172602][T12050] dummy0: entered allmulticast mode
[  186.177126][T12050] dummy0: left allmulticast mode
[  186.179254][T12050] dummy0: left promiscuous mode
[  186.210349][T10958] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.281623][T10958] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.429313][T10958] bridge_slave_1: left allmulticast mode
[  186.431356][T10958] bridge_slave_1: left promiscuous mode
[  186.442474][T10958] bridge0: port 2(bridge_slave_1) entered disabled state
[  186.449347][T10958] bridge_slave_0: left allmulticast mode
[  186.456212][T10958] bridge_slave_0: left promiscuous mode
[  186.459624][T10958] bridge0: port 1(bridge_slave_0) entered disabled state
[  186.805719][T10958] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  186.809898][T10958] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  186.813452][T10958] bond0 (unregistering): Released all slaves
[  187.310515][T12048] chnl_net:caif_netlink_parms(): no params data found
[  187.481715][T12048] bridge0: port 1(bridge_slave_0) entered blocking state
[  187.485049][T12048] bridge0: port 1(bridge_slave_0) entered disabled state
[  187.487780][T12048] bridge_slave_0: entered allmulticast mode
[  187.492848][T12048] bridge_slave_0: entered promiscuous mode
[  187.497305][T12048] bridge0: port 2(bridge_slave_1) entered blocking state
[  187.499898][T12048] bridge0: port 2(bridge_slave_1) entered disabled state
[  187.502482][T12048] bridge_slave_1: entered allmulticast mode
[  187.506157][T12048] bridge_slave_1: entered promiscuous mode
[  187.532717][T12048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  187.537904][T12048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  187.568150][T12048] team0: Port device team_slave_0 added
[  187.572499][T12048] team0: Port device team_slave_1 added
[  187.599997][T12048] batman_adv: batadv0: Adding interface: batadv_slave_0
[  187.603412][T12048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  187.614524][T12048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  187.620821][T12048] batman_adv: batadv0: Adding interface: batadv_slave_1
[  187.624596][T12048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  187.635040][T12048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  187.852757][T12048] hsr_slave_0: entered promiscuous mode
[  187.855280][T12048] hsr_slave_1: entered promiscuous mode
[  187.857415][T12048] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  187.872303][T12048] Cannot create hsr debugfs directory
[  187.879056][T10958] hsr_slave_0: left promiscuous mode
[  187.882272][T10958] hsr_slave_1: left promiscuous mode
[  187.885257][T10958] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  187.888232][T10958] batman_adv: batadv0: Removing interface: batadv_slave_0
[  187.891860][T10958] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  187.898687][T10958] batman_adv: batadv0: Removing interface: batadv_slave_1
[  187.928014][T10958] veth1_macvtap: left promiscuous mode
[  187.931087][T10958] veth0_macvtap: left promiscuous mode
[  187.933878][T10958] veth1_vlan: left promiscuous mode
[  187.937357][T10958] veth0_vlan: left promiscuous mode
[  188.182335][   T55] Bluetooth: hci2: command tx timeout
[  188.297790][T10958] team0 (unregistering): Port device team_slave_1 removed
[  188.321707][T10958] team0 (unregistering): Port device team_slave_0 removed
[  189.369963][T12113] netlink: 'syz.1.2497': attribute type 39 has an invalid length.
[  189.855745][T12048] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  189.880207][T12048] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  189.903064][T12048] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  189.925473][T12048] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  190.179423][T12048] 8021q: adding VLAN 0 to HW filter on device bond0
[  190.203336][T12048] 8021q: adding VLAN 0 to HW filter on device team0
[  190.216143][ T6420] bridge0: port 1(bridge_slave_0) entered blocking state
[  190.218312][ T6420] bridge0: port 1(bridge_slave_0) entered forwarding state
[  190.222578][T12141] netlink: 'syz.0.2504': attribute type 1 has an invalid length.
[  190.225222][T12141] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2504'.
[  190.239878][ T6420] bridge0: port 2(bridge_slave_1) entered blocking state
[  190.242125][ T6420] bridge0: port 2(bridge_slave_1) entered forwarding state
[  190.262435][   T55] Bluetooth: hci2: command tx timeout
[  190.406845][T12157] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2508'.
[  190.415167][T12157] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  190.437911][T12157] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  190.449640][T12048] 8021q: adding VLAN 0 to HW filter on device batadv0
[  190.518919][T12048] veth0_vlan: entered promiscuous mode
[  190.538991][T12048] veth1_vlan: entered promiscuous mode
[  190.580114][T12172] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  190.600543][T12048] veth0_macvtap: entered promiscuous mode
[  190.605231][T12048] veth1_macvtap: entered promiscuous mode
[  190.626124][T12048] batman_adv: batadv0: Interface activated: batadv_slave_0
[  190.636296][T12048] batman_adv: batadv0: Interface activated: batadv_slave_1
[  190.646717][T12048] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  190.649610][T12048] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  190.660225][T12048] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  190.671278][T12048] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  190.936331][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  190.938948][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  190.943954][T12190] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2517'.
[  190.969856][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  190.974133][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  191.235189][T12211] 8021q: adding VLAN 0 to HW filter on device bond1
[  191.237839][T12211] bridge0: port 4(bond1) entered blocking state
[  191.243418][T12211] bridge0: port 4(bond1) entered disabled state
[  191.245543][T12211] bond1: entered allmulticast mode
[  191.248253][T12211] bond1: entered promiscuous mode
[  191.270467][T12211] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2520'.
[  191.274326][T12211] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2520'.
[  191.377987][T12218] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2521'.
[  191.531330][T12226] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  191.658936][T12236] netlink: 'syz.0.2530': attribute type 1 has an invalid length.
[  191.758261][T12249] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2537'.
[  192.048981][T12272] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2548'.
[  192.115261][T12276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2550'.
[  192.168390][T12280] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2552'.
[  192.367549][T12292] macvlan0: entered allmulticast mode
[  192.369824][T12292] netlink: 'syz.1.2557': attribute type 1 has an invalid length.
[  192.382203][T12292] netlink: 'syz.1.2557': attribute type 2 has an invalid length.
[  192.449272][ T5857] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.946372][ T5857] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.018587][T12305] syzkaller1: entered promiscuous mode
[  194.020804][T12305] syzkaller1: entered allmulticast mode
[  194.136764][T12309] netlink: 'syz.0.2565': attribute type 1 has an invalid length.
[  194.175922][ T5857] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.212555][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  194.215767][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  194.218480][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  194.221944][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  194.225721][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  194.303893][ T5857] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.508955][ T5857] bridge_slave_1: left allmulticast mode
[  194.514038][ T5857] bridge_slave_1: left promiscuous mode
[  194.516355][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.539897][ T5857] bridge_slave_0: left allmulticast mode
[  194.541822][ T5857] bridge_slave_0: left promiscuous mode
[  194.556302][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state
[  194.905029][ T5857] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  194.909015][ T5857] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  194.912608][ T5857] bond0 (unregistering): Released all slaves
[  194.929904][T12339] dvmrp0: entered allmulticast mode
[  195.066320][T12349] Cannot find del_set index 2 as target
[  195.129839][T12312] chnl_net:caif_netlink_parms(): no params data found
[  195.323633][T12312] bridge0: port 1(bridge_slave_0) entered blocking state
[  195.325954][T12312] bridge0: port 1(bridge_slave_0) entered disabled state
[  195.328156][T12312] bridge_slave_0: entered allmulticast mode
[  195.330791][T12312] bridge_slave_0: entered promiscuous mode
[  195.343320][T12312] bridge0: port 2(bridge_slave_1) entered blocking state
[  195.345489][T12312] bridge0: port 2(bridge_slave_1) entered disabled state
[  195.347690][T12312] bridge_slave_1: entered allmulticast mode
[  195.350433][T12312] bridge_slave_1: entered promiscuous mode
[  195.490565][T12312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  195.495705][T12382] lo speed is unknown, defaulting to 1000
[  195.497536][T12382] lo speed is unknown, defaulting to 1000
[  195.513809][T12312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  195.520835][T12382] lo speed is unknown, defaulting to 1000
[  195.558930][T12382] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  195.575655][T12382] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  195.617729][T12312] team0: Port device team_slave_0 added
[  195.635673][ T5857] hsr_slave_0: left promiscuous mode
[  195.640348][ T5857] hsr_slave_1: left promiscuous mode
[  195.644155][ T5857] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  195.646427][ T5857] batman_adv: batadv0: Removing interface: batadv_slave_0
[  195.649087][ T5857] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  195.651361][ T5857] batman_adv: batadv0: Removing interface: batadv_slave_1
[  195.666403][ T5857] veth1_macvtap: left promiscuous mode
[  195.668269][ T5857] veth0_macvtap: left promiscuous mode
[  195.669977][ T5857] veth1_vlan: left promiscuous mode
[  195.671611][ T5857] veth0_vlan: left promiscuous mode
[  196.018123][ T5857] team0 (unregistering): Port device team_slave_1 removed
[  196.045831][ T5857] team0 (unregistering): Port device team_slave_0 removed
[  196.273072][ T5830] Bluetooth: hci2: command tx timeout
[  196.323800][T12382] lo speed is unknown, defaulting to 1000
[  196.326650][T12312] team0: Port device team_slave_1 added
[  196.375586][T12382] lo speed is unknown, defaulting to 1000
[  196.388565][T12382] lo speed is unknown, defaulting to 1000
[  196.391227][T12382] lo speed is unknown, defaulting to 1000
[  196.393327][T12312] batman_adv: batadv0: Adding interface: batadv_slave_0
[  196.399277][T12312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  196.428590][T12312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  196.434599][T12312] batman_adv: batadv0: Adding interface: batadv_slave_1
[  196.437202][T12312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  196.446693][T12312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  196.543410][T12312] hsr_slave_0: entered promiscuous mode
[  196.555910][T12312] hsr_slave_1: entered promiscuous mode
[  196.558416][T12312] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  196.560954][T12312] Cannot create hsr debugfs directory
[  196.714326][T12418] netlink: 'syz.1.2603': attribute type 11 has an invalid length.
[  196.721594][T12418] __nla_validate_parse: 4 callbacks suppressed
[  196.721608][T12418] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2603'.
[  196.767969][T12420] bridge3: entered allmulticast mode
[  197.196965][T12451] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2616'.
[  197.355905][T12312] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  197.374566][T12312] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  197.381355][T12312] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  197.407054][T12312] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  197.493148][T12483] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2624'.
[  197.556008][T12312] 8021q: adding VLAN 0 to HW filter on device bond0
[  197.592822][T12312] 8021q: adding VLAN 0 to HW filter on device team0
[  197.608721][ T6420] bridge0: port 1(bridge_slave_0) entered blocking state
[  197.611576][ T6420] bridge0: port 1(bridge_slave_0) entered forwarding state
[  197.631207][ T6420] bridge0: port 2(bridge_slave_1) entered blocking state
[  197.634169][ T6420] bridge0: port 2(bridge_slave_1) entered forwarding state
[  197.888279][T12312] 8021q: adding VLAN 0 to HW filter on device batadv0
[  197.953846][T12312] veth0_vlan: entered promiscuous mode
[  197.959356][T12312] veth1_vlan: entered promiscuous mode
[  197.964817][T12518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2635'.
[  197.980686][T12518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2635'.
[  198.008440][T12312] veth0_macvtap: entered promiscuous mode
[  198.021740][T12312] veth1_macvtap: entered promiscuous mode
[  198.052974][T12522] pim6reg1: entered promiscuous mode
[  198.055172][T12522] pim6reg1: entered allmulticast mode
[  198.067296][T12312] batman_adv: batadv0: Interface activated: batadv_slave_0
[  198.096397][T12312] batman_adv: batadv0: Interface activated: batadv_slave_1
[  198.104621][T12312] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  198.107228][T12312] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  198.109867][T12312] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  198.113800][T12312] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  198.207174][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  198.210153][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  198.243286][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  198.245701][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  198.300258][T12535] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2639'.
[  198.544759][T12556] netlink: 'syz.1.2645': attribute type 3 has an invalid length.
[  198.547438][T12556] netlink: 'syz.1.2645': attribute type 1 has an invalid length.
[  198.549866][T12556] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.2645'.
[  199.123267][T12597] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2661'.
[  199.606687][T12624] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2672'.
[  199.750072][ T5858] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.941507][ T5858] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.238509][ T5858] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.286840][ T5858] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.336512][T12636] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  201.462646][   T55] Bluetooth: hci1: command 0x0405 tx timeout
[  201.480472][T12643] netlink: 'syz.1.2680': attribute type 1 has an invalid length.
[  201.536508][T12643] 8021q: adding VLAN 0 to HW filter on device bond2
[  201.587402][T12649] 8021q: adding VLAN 0 to HW filter on device bond2
[  201.598300][T12649] bond2: (slave vxcan4): The slave device specified does not support setting the MAC address
[  201.602571][T12649] bond2: (slave vxcan4): Error -95 calling set_mac_address
[  201.618909][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  201.631716][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  201.637684][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  201.641095][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  201.644009][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  201.651183][T12643] veth9: entered promiscuous mode
[  201.658766][T12643] bond2: (slave veth9): Enslaving as an active interface with a down link
[  201.675944][ T5858] bridge_slave_1: left allmulticast mode
[  201.677701][ T5858] bridge_slave_1: left promiscuous mode
[  201.679486][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state
[  201.685746][ T5858] bridge_slave_0: left allmulticast mode
[  201.687486][ T5858] bridge_slave_0: left promiscuous mode
[  201.689191][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state
[  202.118905][ T5858] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  202.123932][ T5858] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  202.128263][ T5858] bond0 (unregistering): Released all slaves
[  202.151396][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  202.162555][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  202.325379][T12681] netlink: 'syz.0.2688': attribute type 1 has an invalid length.
[  202.327772][T12681] netlink: 'syz.0.2688': attribute type 4 has an invalid length.
[  202.330106][T12681] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2688'.
[  202.447920][T12653] lo speed is unknown, defaulting to 1000
[  202.495434][T12687] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2690'.
[  202.499220][T12687] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  202.768425][ T5858] hsr_slave_0: left promiscuous mode
[  202.770838][ T5858] hsr_slave_1: left promiscuous mode
[  202.774342][ T5858] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  202.776807][ T5858] batman_adv: batadv0: Removing interface: batadv_slave_0
[  202.786291][ T5858] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  202.788719][ T5858] batman_adv: batadv0: Removing interface: batadv_slave_1
[  202.814152][ T5858] veth1_macvtap: left promiscuous mode
[  202.815959][ T5858] veth0_macvtap: left promiscuous mode
[  202.817736][ T5858] veth1_vlan: left promiscuous mode
[  202.819473][ T5858] veth0_vlan: left promiscuous mode
[  203.136768][ T5858] team0 (unregistering): Port device team_slave_1 removed
[  203.167940][ T5858] team0 (unregistering): Port device team_slave_0 removed
[  203.571333][T12653] chnl_net:caif_netlink_parms(): no params data found
[  203.591733][T12724] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  203.595126][T12724] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  203.598109][T12724] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  203.606030][T12724] geneve2: entered promiscuous mode
[  203.624280][T12724] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2699'.
[  203.702434][   T55] Bluetooth: hci2: command tx timeout
[  203.716894][ T5879] page_pool_release_retry() stalled pool shutdown: id 49, 1 inflight 60 sec
[  203.852827][T12653] bridge0: port 1(bridge_slave_0) entered blocking state
[  203.857633][T12653] bridge0: port 1(bridge_slave_0) entered disabled state
[  203.859910][T12653] bridge_slave_0: entered allmulticast mode
[  203.875371][T12653] bridge_slave_0: entered promiscuous mode
[  203.889839][T12742] syz_tun: entered promiscuous mode
[  203.893344][T12742] syz_tun: entered allmulticast mode
[  203.898875][T12653] bridge0: port 2(bridge_slave_1) entered blocking state
[  203.901093][T12653] bridge0: port 2(bridge_slave_1) entered disabled state
[  203.907947][T12653] bridge_slave_1: entered allmulticast mode
[  203.910716][T12653] bridge_slave_1: entered promiscuous mode
[  203.993436][T12653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  203.997889][T12653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  204.084254][T12653] team0: Port device team_slave_0 added
[  204.094983][T12653] team0: Port device team_slave_1 added
[  204.155341][T12764] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (183)
[  204.160122][T12653] batman_adv: batadv0: Adding interface: batadv_slave_0
[  204.168448][T12653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  204.191051][T12653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  204.201872][T12653] batman_adv: batadv0: Adding interface: batadv_slave_1
[  204.207148][T12653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  204.215223][T12653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  204.358364][T12653] hsr_slave_0: entered promiscuous mode
[  204.361403][T12653] hsr_slave_1: entered promiscuous mode
[  204.365169][T12653] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  204.368072][T12653] Cannot create hsr debugfs directory
[  204.515347][T12782] bond0: (slave bond_slave_0): Releasing backup interface
[  204.519108][T12782] batman_adv: batadv0: Removing interface: batadv_slave_0
[  204.522938][T12782] batman_adv: batadv0: Removing interface: batadv_slave_1
[  204.526446][T12782] bond0: (slave wlan1): Releasing backup interface
[  204.746283][T12782] vlan0: entered promiscuous mode
[  204.957721][T12823] netlink: 'syz.0.2732': attribute type 1 has an invalid length.
[  204.960020][T12823] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2732'.
[  205.207041][T12653] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  205.214229][T12653] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  205.218940][T12653] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  205.227028][T12653] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  205.317694][T12653] 8021q: adding VLAN 0 to HW filter on device bond0
[  205.345296][T12653] 8021q: adding VLAN 0 to HW filter on device team0
[  205.385522][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  205.387708][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  205.390887][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  205.393235][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  205.615464][T12653] 8021q: adding VLAN 0 to HW filter on device batadv0
[  205.670364][T12653] veth0_vlan: entered promiscuous mode
[  205.685011][T12653] veth1_vlan: entered promiscuous mode
[  205.716692][T12653] veth0_macvtap: entered promiscuous mode
[  205.734205][T12653] veth1_macvtap: entered promiscuous mode
[  205.753970][T12653] batman_adv: batadv0: Interface activated: batadv_slave_0
[  205.764299][T12653] batman_adv: batadv0: Interface activated: batadv_slave_1
[  205.777736][T12653] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  205.785038][   T55] Bluetooth: hci2: command tx timeout
[  205.786986][T12653] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  205.789625][T12653] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  205.801182][T12653] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  205.915736][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  205.918126][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  205.954254][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  205.962888][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  206.368100][T12961] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2775'.
[  206.486320][T12976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2782'.
[  206.703433][T12998] syz.0.2791: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  206.708267][T12998] CPU: 1 UID: 0 PID: 12998 Comm: syz.0.2791 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  206.708282][T12998] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  206.708289][T12998] Call Trace:
[  206.708294][T12998]  <TASK>
[  206.708299][T12998]  dump_stack_lvl+0x189/0x250
[  206.708318][T12998]  ? __pfx_dump_stack_lvl+0x10/0x10
[  206.708331][T12998]  ? __pfx__printk+0x10/0x10
[  206.708344][T12998]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  206.708359][T12998]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  206.708371][T12998]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  206.708383][T12998]  warn_alloc+0x214/0x310
[  206.708397][T12998]  ? stack_depot_save_flags+0x40/0x900
[  206.708414][T12998]  ? __pfx_warn_alloc+0x10/0x10
[  206.708426][T12998]  ? kasan_save_track+0x4f/0x80
[  206.708437][T12998]  ? xskq_create+0x56/0x170
[  206.708454][T12998]  ? xsk_init_queue+0xb0/0x110
[  206.708469][T12998]  ? xsk_setsockopt+0x43f/0x710
[  206.708485][T12998]  ? do_sock_setsockopt+0x25a/0x3e0
[  206.708504][T12998]  ? __x64_sys_setsockopt+0x18b/0x220
[  206.708521][T12998]  ? do_syscall_64+0xfa/0x3b0
[  206.708535][T12998]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  206.708554][T12998]  __vmalloc_node_range_noprof+0x125/0x12f0
[  206.708583][T12998]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  206.708596][T12998]  ? xskq_create+0x56/0x170
[  206.708609][T12998]  ? __kasan_kmalloc+0x93/0xb0
[  206.708622][T12998]  vmalloc_user_noprof+0xad/0xf0
[  206.708635][T12998]  ? xskq_create+0xbf/0x170
[  206.708648][T12998]  xskq_create+0xbf/0x170
[  206.708661][T12998]  xsk_init_queue+0xb0/0x110
[  206.708674][T12998]  xsk_setsockopt+0x43f/0x710
[  206.708687][T12998]  ? __pfx_xsk_setsockopt+0x10/0x10
[  206.708704][T12998]  ? __lock_acquire+0xab9/0xd20
[  206.708721][T12998]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  206.708736][T12998]  ? __pfx_xsk_setsockopt+0x10/0x10
[  206.708750][T12998]  do_sock_setsockopt+0x25a/0x3e0
[  206.708761][T12998]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  206.708776][T12998]  ? __fget_files+0x2a/0x420
[  206.708792][T12998]  __x64_sys_setsockopt+0x18b/0x220
[  206.708805][T12998]  do_syscall_64+0xfa/0x3b0
[  206.708812][T12998]  ? lockdep_hardirqs_on+0x9c/0x150
[  206.708825][T12998]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  206.708833][T12998]  ? exc_page_fault+0x9f/0xf0
[  206.708846][T12998]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  206.708854][T12998] RIP: 0033:0x7f70c6b8e929
[  206.708863][T12998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  206.708871][T12998] RSP: 002b:00007f70c7a02038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  206.708882][T12998] RAX: ffffffffffffffda RBX: 00007f70c6db6080 RCX: 00007f70c6b8e929
[  206.708889][T12998] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008
[  206.708894][T12998] RBP: 00007f70c6c10b39 R08: 0000000000000004 R09: 0000000000000000
[  206.708900][T12998] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  206.708906][T12998] R13: 0000000000000000 R14: 00007f70c6db6080 R15: 00007ffd5fc4c0c8
[  206.708921][T12998]  </TASK>
[  206.708924][T12998] Mem-Info:
[  206.832754][T12998] active_anon:6090 inactive_anon:0 isolated_anon:0
[  206.832754][T12998]  active_file:944 inactive_file:38288 isolated_file:0
[  206.832754][T12998]  unevictable:1768 dirty:223 writeback:0
[  206.832754][T12998]  slab_reclaimable:9556 slab_unreclaimable:73588
[  206.832754][T12998]  mapped:18069 shmem:2457 pagetables:1138
[  206.832754][T12998]  sec_pagetables:0 bounce:0
[  206.832754][T12998]  kernel_misc_reclaimable:0
[  206.832754][T12998]  free:280220 free_pcp:19099 free_cma:0
[  206.850955][T12998] Node 0 active_anon:17816kB inactive_anon:0kB active_file:3452kB inactive_file:26364kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:41848kB dirty:756kB writeback:0kB shmem:4840kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4824kB pagetables:2836kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  206.863824][T12998] Node 1 active_anon:6544kB inactive_anon:0kB active_file:324kB inactive_file:126788kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:30428kB dirty:136kB writeback:0kB shmem:4988kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7184kB pagetables:1580kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  206.876550][T12998] Node 0 DMA free:14984kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:356kB local_pcp:0kB free_cma:0kB
[  206.887884][T12998] lowmem_reserve[]: 0 812 812 812 812
[  206.890340][T12998] Node 0 DMA32 free:384116kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17884kB inactive_anon:0kB active_file:3452kB inactive_file:26364kB unevictable:3536kB writepending:756kB present:1556484kB managed:831872kB mlocked:0kB bounce:0kB free_pcp:36260kB local_pcp:18844kB free_cma:0kB
[  206.906296][T12998] lowmem_reserve[]: 0 0 0 0 0
[  206.908526][T12998] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  206.923534][T12998] lowmem_reserve[]: 0 0 854 854 854
[  206.925829][T12998] Node 1 Normal free:263164kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:6544kB inactive_anon:0kB active_file:324kB inactive_file:126788kB unevictable:3536kB writepending:136kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:39948kB local_pcp:17248kB free_cma:0kB
[  206.942511][T12998] lowmem_reserve[]: 0 0 0 0 0
[  206.945160][T12998] Node 0 DMA: 6*4kB (UM) 6*8kB (U) 6*16kB (U) 5*32kB (U) 5*64kB (U) 8*128kB (UM) 6*256kB (UM) 5*512kB (UM) 7*1024kB (UM) 1*2048kB (U) 0*4096kB = 14984kB
[  206.951882][T12998] Node 0 DMA32: 3*4kB (UME) 11*8kB (UE) 587*16kB (UME) 689*32kB (UE) 212*64kB (UME) 232*128kB (UME) 196*256kB (UME) 166*512kB (UME) 142*1024kB (UE) 6*2048kB (UME) 4*4096kB (M) = 384052kB
[  206.960250][T12998] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  206.972269][T12998] Node 1 Normal: 261*4kB (UME) 79*8kB (M) 59*16kB (UM) 152*32kB (UME) 313*64kB (UME) 147*128kB (UME) 111*256kB (UME) 82*512kB (UM) 61*1024kB (UM) 5*2048kB (UM) 18*4096kB (M) = 263164kB
[  206.978485][T12998] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  206.981435][T12998] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  206.984863][T12998] 41689 total pagecache pages
[  206.989417][T12998] 0 pages in swap cache
[  206.990935][T12998] Free swap  = 124996kB
[  206.992706][T12998] Total swap = 124996kB
[  206.994129][T12998] 786301 pages RAM
[  206.995507][T12998] 0 pages HighMem/MovableOnly
[  206.997099][T12998] 241085 pages reserved
[  206.998567][T12998] 0 pages cma reserved
[  207.019380][T13006] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  207.023665][T13006] syzkaller0: entered promiscuous mode
[  207.025496][T13006] syzkaller0: entered allmulticast mode
[  207.034161][T13006] tipc: Resetting bearer <eth:syzkaller0>
[  207.048395][T13006] tipc: Resetting bearer <eth:syzkaller0>
[  207.059165][T13006] tipc: Disabling bearer <eth:syzkaller0>
[  207.426570][T13028] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  207.430135][T13028] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  207.434227][T13028] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  207.440176][T13028] tipc: Resetting bearer <eth:syzkaller0>
[  207.730080][T13043] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  208.000214][ T5858] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.810825][ T5858] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.873844][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  209.883764][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  209.889145][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  209.890300][ T5858] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.897508][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  209.901552][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  209.963818][ T5858] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.156384][ T5858] bridge_slave_1: left allmulticast mode
[  210.158427][ T5858] bridge_slave_1: left promiscuous mode
[  210.160647][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state
[  210.194679][ T5858] bridge_slave_0: left allmulticast mode
[  210.196912][ T5858] bridge_slave_0: left promiscuous mode
[  210.198801][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state
[  210.313654][T13094] xt_cgroup: path and classid specified
[  210.358087][T13098] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2837'.
[  210.578873][ T5858] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  210.585991][ T5858] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  210.592277][ T5858] bond0 (unregistering): Released all slaves
[  210.604394][T13062] lo speed is unknown, defaulting to 1000
[  210.778408][T13115] netlink: 'syz.1.2841': attribute type 9 has an invalid length.
[  210.896047][T13062] chnl_net:caif_netlink_parms(): no params data found
[  211.170587][T13062] bridge0: port 1(bridge_slave_0) entered blocking state
[  211.183839][T13062] bridge0: port 1(bridge_slave_0) entered disabled state
[  211.186134][T13062] bridge_slave_0: entered allmulticast mode
[  211.209563][T13062] bridge_slave_0: entered promiscuous mode
[  211.218240][ T5858] hsr_slave_0: left promiscuous mode
[  211.220401][ T5858] hsr_slave_1: left promiscuous mode
[  211.222583][ T5858] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  211.225010][ T5858] batman_adv: batadv0: Removing interface: batadv_slave_0
[  211.235069][ T5858] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  211.237453][ T5858] batman_adv: batadv0: Removing interface: batadv_slave_1
[  211.267510][ T5858] veth1_macvtap: left promiscuous mode
[  211.269307][ T5858] veth0_macvtap: left promiscuous mode
[  211.271131][ T5858] veth1_vlan: left promiscuous mode
[  211.273089][ T5858] veth0_vlan: left promiscuous mode
[  211.614408][ T5858] team0 (unregistering): Port device team_slave_1 removed
[  211.645527][ T5858] team0 (unregistering): Port device team_slave_0 removed
[  211.955373][   T55] Bluetooth: hci2: command tx timeout
[  211.961713][T13062] bridge0: port 2(bridge_slave_1) entered blocking state
[  211.964208][T13062] bridge0: port 2(bridge_slave_1) entered disabled state
[  211.966479][T13062] bridge_slave_1: entered allmulticast mode
[  211.969298][T13062] bridge_slave_1: entered promiscuous mode
[  212.015085][T13062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  212.019501][T13062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  212.061732][T13062] team0: Port device team_slave_0 added
[  212.068649][T13062] team0: Port device team_slave_1 added
[  212.128973][T13062] batman_adv: batadv0: Adding interface: batadv_slave_0
[  212.131717][T13062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  212.151912][T13062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  212.161379][T13062] batman_adv: batadv0: Adding interface: batadv_slave_1
[  212.163809][T13062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  212.173709][T13062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  212.274727][T13062] hsr_slave_0: entered promiscuous mode
[  212.277320][T13062] hsr_slave_1: entered promiscuous mode
[  212.289519][T13062] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  212.295230][T13062] Cannot create hsr debugfs directory
[  212.994458][T13062] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  213.006296][T13062] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  213.014623][T13062] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  213.025387][T13062] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  213.228736][T13062] 8021q: adding VLAN 0 to HW filter on device bond0
[  213.258116][T13062] 8021q: adding VLAN 0 to HW filter on device team0
[  213.276160][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  213.279056][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  213.299259][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  213.302187][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  213.457132][T13062] 8021q: adding VLAN 0 to HW filter on device batadv0
[  213.489838][T13062] veth0_vlan: entered promiscuous mode
[  213.502351][T13062] veth1_vlan: entered promiscuous mode
[  213.532879][T13062] veth0_macvtap: entered promiscuous mode
[  213.537165][T13062] veth1_macvtap: entered promiscuous mode
[  213.550129][T13062] batman_adv: batadv0: Interface activated: batadv_slave_0
[  213.558556][T13062] batman_adv: batadv0: Interface activated: batadv_slave_1
[  213.564307][T13062] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  213.566985][T13062] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  213.569566][T13062] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  213.578021][T13274] xt_cluster: you have exceeded the maximum number of cluster nodes (514 > 32)
[  213.579056][T13062] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  213.593540][T13275] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  213.664934][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  213.667298][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  213.698229][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  213.706230][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  213.815446][T13278] ==================================================================
[  213.818247][T13278] BUG: KASAN: slab-use-after-free in __mutex_lock+0x738/0xe80
[  213.820638][T13278] Read of size 8 at addr ffff8881091b80a0 by task khidpd_10cf05df/13278
[  213.823542][T13278] 
[  213.825125][T13278] CPU: 1 UID: 0 PID: 13278 Comm: khidpd_10cf05df Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  213.825146][T13278] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  213.825156][T13278] Call Trace:
[  213.825162][T13278]  <TASK>
[  213.825175][T13278]  dump_stack_lvl+0x189/0x250
[  213.825194][T13278]  ? __virt_addr_valid+0x1c8/0x5c0
[  213.825213][T13278]  ? rcu_is_watching+0x15/0xb0
[  213.825230][T13278]  ? __kasan_check_byte+0x12/0x40
[  213.825247][T13278]  ? __pfx_dump_stack_lvl+0x10/0x10
[  213.825262][T13278]  ? rcu_is_watching+0x15/0xb0
[  213.825277][T13278]  ? lock_release+0x4b/0x3e0
[  213.825291][T13278]  ? __virt_addr_valid+0x1c8/0x5c0
[  213.825304][T13278]  ? __virt_addr_valid+0x4a5/0x5c0
[  213.825314][T13278]  print_report+0xd2/0x2b0
[  213.825322][T13278]  ? __mutex_lock+0x738/0xe80
[  213.825329][T13278]  kasan_report+0x118/0x150
[  213.825339][T13278]  ? __mutex_lock+0x738/0xe80
[  213.825349][T13278]  __mutex_lock+0x738/0xe80
[  213.825357][T13278]  ? __mutex_lock+0x51b/0xe80
[  213.825364][T13278]  ? l2cap_unregister_user+0x6a/0x1b0
[  213.825378][T13278]  ? __pfx___mutex_lock+0x10/0x10
[  213.825387][T13278]  ? __pfx___timer_delete_sync+0x10/0x10
[  213.825427][T13278]  l2cap_unregister_user+0x6a/0x1b0
[  213.825441][T13278]  hidp_session_thread+0x3c9/0x410
[  213.825451][T13278]  ? __pfx_hidp_session_thread+0x10/0x10
[  213.825457][T13278]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  213.825469][T13278]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  213.825479][T13278]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  213.825486][T13278]  ? __kthread_parkme+0x7b/0x200
[  213.825497][T13278]  ? __kthread_parkme+0x1a1/0x200
[  213.825509][T13278]  kthread+0x711/0x8a0
[  213.825527][T13278]  ? __pfx_hidp_session_thread+0x10/0x10
[  213.825539][T13278]  ? __pfx_kthread+0x10/0x10
[  213.825555][T13278]  ? _raw_spin_unlock_irq+0x23/0x50
[  213.825573][T13278]  ? lockdep_hardirqs_on+0x9c/0x150
[  213.825592][T13278]  ? __pfx_kthread+0x10/0x10
[  213.825610][T13278]  ret_from_fork+0x3fc/0x770
[  213.825627][T13278]  ? __pfx_ret_from_fork+0x10/0x10
[  213.825642][T13278]  ? __switch_to_asm+0x39/0x70
[  213.825659][T13278]  ? __switch_to_asm+0x33/0x70
[  213.825672][T13278]  ? __pfx_kthread+0x10/0x10
[  213.825688][T13278]  ret_from_fork_asm+0x1a/0x30
[  213.825709][T13278]  </TASK>
[  213.825714][T13278] 
[  213.902841][T13278] Allocated by task 13062:
[  213.904347][T13278]  kasan_save_track+0x3e/0x80
[  213.906022][T13278]  __kasan_kmalloc+0x93/0xb0
[  213.907715][T13278]  __kmalloc_noprof+0x27a/0x4f0
[  213.909299][T13278]  hci_alloc_dev_priv+0x28/0x2040
[  213.911012][T13278]  vhci_create_device+0x120/0x6e0
[  213.912749][T13278]  vhci_write+0x3ce/0x4a0
[  213.914255][T13278]  vfs_write+0x54b/0xa90
[  213.915733][T13278]  ksys_write+0x145/0x250
[  213.917456][T13278]  do_syscall_64+0xfa/0x3b0
[  213.919031][T13278]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.921014][T13278] 
[  213.921841][T13278] Freed by task 13062:
[  213.923162][T13278]  kasan_save_track+0x3e/0x80
[  213.924703][T13278]  kasan_save_free_info+0x46/0x50
[  213.926421][T13278]  __kasan_slab_free+0x62/0x70
[  213.928026][T13278]  kfree+0x18e/0x440
[  213.929675][T13278]  bt_host_release+0x82/0x90
[  213.931138][T13278]  device_release+0x9c/0x1c0
[  213.932688][T13278]  kobject_put+0x22b/0x480
[  213.934200][T13278]  vhci_release+0x88/0xd0
[  213.935652][T13278]  __fput+0x44c/0xa70
[  213.937238][T13278]  task_work_run+0x1d4/0x260
[  213.938909][T13278]  do_exit+0x6b5/0x22e0
[  213.940335][T13278]  do_group_exit+0x21c/0x2d0
[  213.941884][T13278]  __x64_sys_exit_group+0x3f/0x40
[  213.943539][T13278]  x64_sys_call+0x21ba/0x21c0
[  213.945161][T13278]  do_syscall_64+0xfa/0x3b0
[  213.946817][T13278]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.948795][T13278] 
[  213.949581][T13278] Last potentially related work creation:
[  213.951370][T13278]  kasan_save_stack+0x3e/0x60
[  213.952971][T13278]  kasan_record_aux_stack+0xbd/0xd0
[  213.954625][T13278]  insert_work+0x3d/0x330
[  213.956051][T13278]  __queue_work+0xbd9/0xfe0
[  213.957771][T13278]  queue_work_on+0x181/0x270
[  213.959593][T13278]  process_scheduled_works+0xae1/0x17b0
[  213.961286][T13278]  worker_thread+0x8a0/0xda0
[  213.962699][T13278]  kthread+0x711/0x8a0
[  213.963977][T13278]  ret_from_fork+0x3fc/0x770
[  213.965533][T13278]  ret_from_fork_asm+0x1a/0x30
[  213.967127][T13278] 
[  213.967915][T13278] Second to last potentially related work creation:
[  213.969997][T13278]  kasan_save_stack+0x3e/0x60
[  213.971632][T13278]  kasan_record_aux_stack+0xbd/0xd0
[  213.973350][T13278]  insert_work+0x3d/0x330
[  213.974829][T13278]  __queue_work+0xcfc/0xfe0
[  213.976538][T13278]  call_timer_fn+0x17e/0x5f0
[  213.978344][T13278]  __run_timer_base+0x646/0x860
[  213.980275][T13278]  run_timer_softirq+0xb7/0x180
[  213.981998][T13278]  handle_softirqs+0x286/0x870
[  213.983676][T13278]  __irq_exit_rcu+0xca/0x1f0
[  213.985148][T13278]  irq_exit_rcu+0x9/0x30
[  213.986611][T13278]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  213.988414][T13278]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  213.990355][T13278] 
[  213.991164][T13278] The buggy address belongs to the object at ffff8881091b8000
[  213.991164][T13278]  which belongs to the cache kmalloc-8k of size 8192
[  213.995713][T13278] The buggy address is located 160 bytes inside of
[  213.995713][T13278]  freed 8192-byte region [ffff8881091b8000, ffff8881091ba000)
[  214.000404][T13278] 
[  214.001170][T13278] The buggy address belongs to the physical page:
[  214.003176][T13278] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1091b8
[  214.006050][T13278] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  214.008765][T13278] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  214.011244][T13278] page_type: f5(slab)
[  214.012621][T13278] raw: 057ff00000000040 ffff88801a442280 dead000000000100 dead000000000122
[  214.015418][T13278] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  214.018590][T13278] head: 057ff00000000040 ffff88801a442280 dead000000000100 dead000000000122
[  214.021378][T13278] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  214.024127][T13278] head: 057ff00000000003 ffffea0004246e01 00000000ffffffff 00000000ffffffff
[  214.026900][T13278] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  214.029545][T13278] page dumped because: kasan: bad access detected
[  214.031537][T13278] page_owner tracks the page as allocated
[  214.033304][T13278] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5573, tgid 5573 (dhcpcd), ts 204322281184, free_ts 204302513294
[  214.040130][T13278]  post_alloc_hook+0x240/0x2a0
[  214.041750][T13278]  get_page_from_freelist+0x21e4/0x22c0
[  214.043504][T13278]  __alloc_frozen_pages_noprof+0x181/0x370
[  214.045462][T13278]  alloc_pages_mpol+0x232/0x4a0
[  214.047077][T13278]  allocate_slab+0x8a/0x3b0
[  214.048675][T13278]  ___slab_alloc+0xbfc/0x1480
[  214.050228][T13278]  __kmalloc_node_track_caller_noprof+0x2f8/0x4e0
[  214.052233][T13278]  kmalloc_reserve+0x136/0x290
[  214.053810][T13278]  __alloc_skb+0x142/0x2d0
[  214.055177][T13278]  netlink_dump+0x169/0xe90
[  214.056855][T13278]  netlink_recvmsg+0x676/0xa30
[  214.058705][T13278]  sock_recvmsg+0x22c/0x270
[  214.060324][T13278]  ____sys_recvmsg+0x1c9/0x460
[  214.061853][T13278]  ___sys_recvmsg+0x1b5/0x510
[  214.063442][T13278]  __x64_sys_recvmsg+0x198/0x260
[  214.064981][T13278]  do_syscall_64+0xfa/0x3b0
[  214.066577][T13278] page last free pid 12768 tgid 12768 stack trace:
[  214.068665][T13278]  __free_frozen_pages+0xc71/0xe70
[  214.070311][T13278]  __put_partials+0x161/0x1c0
[  214.071847][T13278]  put_cpu_partial+0x17c/0x250
[  214.073475][T13278]  __slab_free+0x2f7/0x400
[  214.074897][T13278]  qlist_free_all+0x97/0x140
[  214.076495][T13278]  kasan_quarantine_reduce+0x148/0x160
[  214.078530][T13278]  __kasan_slab_alloc+0x22/0x80
[  214.080136][T13278]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  214.081874][T13278]  taskstats_exit+0x14a/0xa30
[  214.083407][T13278]  do_exit+0x630/0x22e0
[  214.084762][T13278]  do_group_exit+0x21c/0x2d0
[  214.086412][T13278]  __x64_sys_exit_group+0x3f/0x40
[  214.088117][T13278]  x64_sys_call+0x21ba/0x21c0
[  214.089677][T13278]  do_syscall_64+0xfa/0x3b0
[  214.091065][T13278]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  214.092946][T13278] 
[  214.093742][T13278] Memory state around the buggy address:
[  214.095578][T13278]  ffff8881091b7f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  214.098456][T13278]  ffff8881091b8000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  214.101104][T13278] >ffff8881091b8080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  214.103680][T13278]                                ^
[  214.105436][T13278]  ffff8881091b8100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  214.108175][T13278]  ffff8881091b8180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  214.110893][T13278] ==================================================================
[  214.114234][T13278] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  214.116800][T13278] CPU: 1 UID: 0 PID: 13278 Comm: khidpd_10cf05df Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  214.121197][T13278] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  214.124601][T13278] Call Trace:
[  214.125779][T13278]  <TASK>
[  214.126893][T13278]  dump_stack_lvl+0x99/0x250
[  214.128451][T13278]  ? __asan_memcpy+0x40/0x70
[  214.130041][T13278]  ? __pfx_dump_stack_lvl+0x10/0x10
[  214.131854][T13278]  ? __pfx__printk+0x10/0x10
[  214.133457][T13278]  panic+0x2db/0x790
[  214.134883][T13278]  ? __pfx_panic+0x10/0x10
[  214.136563][T13278]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  214.138914][T13278]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  214.141101][T13278]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  214.143195][T13278]  ? print_memory_metadata+0x314/0x400
[  214.145034][T13278]  ? __mutex_lock+0x738/0xe80
[  214.146593][T13278]  check_panic_on_warn+0x89/0xb0
[  214.148170][T13278]  ? __mutex_lock+0x738/0xe80
[  214.149734][T13278]  end_report+0x78/0x160
[  214.151175][T13278]  kasan_report+0x129/0x150
[  214.152677][T13278]  ? __mutex_lock+0x738/0xe80
[  214.154213][T13278]  __mutex_lock+0x738/0xe80
[  214.155831][T13278]  ? __mutex_lock+0x51b/0xe80
[  214.157715][T13278]  ? l2cap_unregister_user+0x6a/0x1b0
[  214.159504][T13278]  ? __pfx___mutex_lock+0x10/0x10
[  214.161186][T13278]  ? __pfx___timer_delete_sync+0x10/0x10
[  214.163096][T13278]  l2cap_unregister_user+0x6a/0x1b0
[  214.164794][T13278]  hidp_session_thread+0x3c9/0x410
[  214.166646][T13278]  ? __pfx_hidp_session_thread+0x10/0x10
[  214.168477][T13278]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  214.170472][T13278]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  214.172637][T13278]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  214.174662][T13278]  ? __kthread_parkme+0x7b/0x200
[  214.176547][T13278]  ? __kthread_parkme+0x1a1/0x200
[  214.178522][T13278]  kthread+0x711/0x8a0
[  214.179841][T13278]  ? __pfx_hidp_session_thread+0x10/0x10
[  214.181650][T13278]  ? __pfx_kthread+0x10/0x10
[  214.183158][T13278]  ? _raw_spin_unlock_irq+0x23/0x50
[  214.184824][T13278]  ? lockdep_hardirqs_on+0x9c/0x150
[  214.186496][T13278]  ? __pfx_kthread+0x10/0x10
[  214.187973][T13278]  ret_from_fork+0x3fc/0x770
[  214.189616][T13278]  ? __pfx_ret_from_fork+0x10/0x10
[  214.191236][T13278]  ? __switch_to_asm+0x39/0x70
[  214.192867][T13278]  ? __switch_to_asm+0x33/0x70
[  214.194494][T13278]  ? __pfx_kthread+0x10/0x10
[  214.196109][T13278]  ret_from_fork_asm+0x1a/0x30
[  214.197971][T13278]  </TASK>
[  214.199847][T13278] Kernel Offset: disabled
[  214.201238][T13278] Rebooting in 86400 seconds..

VM DIAGNOSIS:
16:12:47  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff822ef435 RBX=1ffff110060b3df3 RCX=ffff888036a20000 RDX=0000000080000001
RSI=000000000011f7c9 RDI=0000000400000000 RBP=ffffc90003557890 RSP=ffffc90003557550
R8 =ffffea00047df247 R9 =1ffffd40008fbe48 R10=dffffc0000000000 R11=fffff940008fbe49
R12=dffffc0000000000 R13=1ffffd40008fbe4b R14=000000000011f7c9 R15=800000011f7c9007
RIP=ffffffff81c03b68 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055556574e500 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055556574e808 CR3=0000000022cc6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=326963682f68746f 6f7465756c622f6c XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffff000000000000 ffff00ff00000000 XMM05=0000000000000031 0000000000326963
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffffff000000 XMM09=706e692f3030323a 326963682f326963
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000000a RBX=000000000000000a RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90002cef370
R8 =ffff888106ab8237 R9 =1ffff11020d57046 R10=dffffc0000000000 R11=ffffffff85478780
R12=dffffc0000000000 R13=ffffffff99af9898 R14=ffffffff99dfe6e0 R15=0000000000000000
RIP=ffffffff854787fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b3021dff8 CR3=000000011f42e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffffff ffff00ff00000000 XMM05=000000000000000f 00002d0004366c6c
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffff00ff00000000 XMM09=0000000000000081 00302d0034366c6c
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
