last executing test programs:

21.337641808s ago: executing program 0 (id=879):
r0 = socket$netlink(0x10, 0x3, 0x4)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="02"], 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)

21.19735789s ago: executing program 0 (id=882):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8}]}}}]}]}], {0x14}}, 0x94}}, 0x0)

20.948630519s ago: executing program 0 (id=886):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010020bd7000fbdbdf2526000000180001801400020064756d6d7930"], 0x2c}}, 0x20000000)

15.010462316s ago: executing program 0 (id=886):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010020bd7000fbdbdf2526000000180001801400020064756d6d7930"], 0x2c}}, 0x20000000)

8.508930946s ago: executing program 0 (id=886):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010020bd7000fbdbdf2526000000180001801400020064756d6d7930"], 0x2c}}, 0x20000000)

1.849289492s ago: executing program 0 (id=886):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010020bd7000fbdbdf2526000000180001801400020064756d6d7930"], 0x2c}}, 0x20000000)

1.207659877s ago: executing program 2 (id=1199):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x800448d4, &(0x7f0000000400))

1.207289112s ago: executing program 2 (id=1200):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000240001030000"], 0x18}, 0x1, 0x0, 0x0, 0x8085}, 0x24004000)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000080)={<r2=>r1, 0x9, 0x8000000000000000, 0x7fffffff})
ioctl$TUNSETIFF(r2, 0x400454ca, 0x0)
recvmmsg(r1, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x40, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$alg(0x26, 0x5, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x2000)
socket$nl_generic(0x10, 0x3, 0x10)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0xf00)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'sed\x00', 0xa43531a02e0465ec, 0x56dc, 0x6f}, 0x2c)

1.129217068s ago: executing program 2 (id=1202):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0xfffffffb}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x8b5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x4)

1.055367769s ago: executing program 2 (id=1204):
r0 = socket$tipc(0x1e, 0x5, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0xa0002000})

939.828527ms ago: executing program 2 (id=1206):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x1d, 0x2, 0x6)
socket$nl_netfilter(0x10, 0x3, 0xc)
epoll_create(0x1)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
r1 = socket$caif_stream(0x25, 0x1, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x1, 0x1, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x1, 0x7fffffff}, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000fe08010000000000000000000000000a6c000000060a090400000000000000000200000040000480100001800c0001006e6f747261636b002c0001800e000100696d6d656469617465000000180002800c00028005000100c402000008000140000000080900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0)
close(r1)

799.582151ms ago: executing program 2 (id=1210):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r1, 0x21eae}}, 0x20}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
close(r4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"})
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r6=>0xffffffffffffffff})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r8=>0x0})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_STATION(r9, &(0x7f0000007380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x44, r7, 0xe096044a3fc9e6f1, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0xfa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050)
sendmsg$kcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r10 = socket$unix(0x1, 0x2, 0x0)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010028b6296be141526b7e00000008000300", @ANYRES32=r12, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006000000"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884)

624.077909ms ago: executing program 1 (id=1213):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = epoll_create1(0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, &(0x7f0000000000)=0x100)

549.955199ms ago: executing program 1 (id=1214):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, 0x0, 0x0)

549.64991ms ago: executing program 1 (id=1215):
r0 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x2}, 0x10)
bind$tipc(r0, 0x0, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r1, &(0x7f0000001b40)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10, 0x0}, 0x0)

448.253872ms ago: executing program 1 (id=1216):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000300)=0x2, 0x4)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x68, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xc, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x8, @loopback, @loopback}}}}}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

109.985179ms ago: executing program 1 (id=1217):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x8927, &(0x7f0000000140)={0x23a, 0xfffffffe, 0x0, 0x0, 0x3, [0x0, 0xffffffff, 0x4000097]})

0s ago: executing program 1 (id=1218):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x198, 0x4, 0x9, 0x2, 0x68}, 0xb, 0x1, 0x5, 0x1, 0x5, 0x16, 0x15, 0x1d, 0x6, 0x4, {0x5, 0xb, 0x41, 0x0, 0x16, 0x3ff}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x44080)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0x4000)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:45534' (ED25519) to the list of known hosts.
syzkaller login: [   51.308522][ T5758] cgroup: Unknown subsys name 'net'
[   51.416658][ T5758] cgroup: Unknown subsys name 'cpuset'
[   51.425208][ T5758] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   53.827646][ T5758] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   59.663422][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   59.666177][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   59.671104][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   59.671359][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   59.678232][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   59.681365][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   59.693709][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   59.694003][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   59.700570][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   59.701062][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   59.707007][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   59.707796][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   59.712586][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   59.717011][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   59.738695][ T5223] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   60.107407][ T5831] chnl_net:caif_netlink_parms(): no params data found
[   60.127855][ T5830] chnl_net:caif_netlink_parms(): no params data found
[   60.213162][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   60.306394][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.309214][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.312313][ T5830] bridge_slave_0: entered allmulticast mode
[   60.319088][ T5830] bridge_slave_0: entered promiscuous mode
[   60.325083][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.327690][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.330050][ T5831] bridge_slave_0: entered allmulticast mode
[   60.333877][ T5831] bridge_slave_0: entered promiscuous mode
[   60.350075][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.354998][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.357744][ T5830] bridge_slave_1: entered allmulticast mode
[   60.361386][ T5830] bridge_slave_1: entered promiscuous mode
[   60.365401][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.367988][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.370608][ T5831] bridge_slave_1: entered allmulticast mode
[   60.374111][ T5831] bridge_slave_1: entered promiscuous mode
[   60.458954][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.465046][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.468939][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.474073][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.476756][ T5833] bridge_slave_0: entered allmulticast mode
[   60.480603][ T5833] bridge_slave_0: entered promiscuous mode
[   60.487869][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.507294][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.524034][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.526276][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.529075][ T5833] bridge_slave_1: entered allmulticast mode
[   60.532133][ T5833] bridge_slave_1: entered promiscuous mode
[   60.558302][ T5831] team0: Port device team_slave_0 added
[   60.583154][ T5831] team0: Port device team_slave_1 added
[   60.588210][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.595492][ T5830] team0: Port device team_slave_0 added
[   60.600860][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.620425][ T5830] team0: Port device team_slave_1 added
[   60.670739][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.677253][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.686915][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.711615][ T5833] team0: Port device team_slave_0 added
[   60.715749][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.718332][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.729255][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.750951][ T5833] team0: Port device team_slave_1 added
[   60.760990][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.764810][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.776400][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.810948][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.814107][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.825786][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.838704][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.841814][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.854411][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.898435][ T5831] hsr_slave_0: entered promiscuous mode
[   60.901707][ T5831] hsr_slave_1: entered promiscuous mode
[   60.906959][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.909206][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.919094][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.980478][ T5830] hsr_slave_0: entered promiscuous mode
[   60.982883][ T5830] hsr_slave_1: entered promiscuous mode
[   60.985425][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   60.988234][ T5830] Cannot create hsr debugfs directory
[   60.996535][ T5833] hsr_slave_0: entered promiscuous mode
[   60.999578][ T5833] hsr_slave_1: entered promiscuous mode
[   61.001967][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   61.005404][ T5833] Cannot create hsr debugfs directory
[   61.323828][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   61.345934][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   61.356580][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   61.375595][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   61.424994][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   61.435949][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   61.455150][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   61.464987][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   61.522386][ T5833] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   61.531452][ T5833] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   61.544913][ T5833] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   61.556023][ T5833] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   61.600789][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.631560][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   61.654983][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.657829][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.679896][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.682394][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.734409][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.765699][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.774896][ T5830] 8021q: adding VLAN 0 to HW filter on device team0
[   61.783374][ T5836] Bluetooth: hci2: command tx timeout
[   61.794387][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.796649][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.799333][ T5223] Bluetooth: hci1: command tx timeout
[   61.802712][ T5836] Bluetooth: hci0: command tx timeout
[   61.823691][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   61.827909][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.830202][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.844707][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.847065][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.851351][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.853911][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.941743][ T5833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   62.070101][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.134051][ T5831] veth0_vlan: entered promiscuous mode
[   62.155897][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.168398][ T5831] veth1_vlan: entered promiscuous mode
[   62.180873][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.247853][ T5833] veth0_vlan: entered promiscuous mode
[   62.256112][ T5831] veth0_macvtap: entered promiscuous mode
[   62.261266][ T5830] veth0_vlan: entered promiscuous mode
[   62.269673][ T5833] veth1_vlan: entered promiscuous mode
[   62.280558][ T5831] veth1_macvtap: entered promiscuous mode
[   62.286537][ T5830] veth1_vlan: entered promiscuous mode
[   62.328169][ T5833] veth0_macvtap: entered promiscuous mode
[   62.338362][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.347422][ T5830] veth0_macvtap: entered promiscuous mode
[   62.351112][ T5833] veth1_macvtap: entered promiscuous mode
[   62.361932][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.367993][ T5830] veth1_macvtap: entered promiscuous mode
[   62.381530][ T5831] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.385332][ T5831] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.388738][ T5831] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.392075][ T5831] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.433965][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.437686][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.456005][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.460324][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.476115][ T5830] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.478818][ T5830] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.481890][ T5830] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.493345][ T5830] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.499131][ T5833] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.508310][ T5833] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.512285][ T5833] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.518697][ T5833] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.586046][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.594177][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.658140][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.665873][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.763515][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.766589][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.803296][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   62.820245][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.831707][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.836672][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.839750][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.899811][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.908955][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.020804][ T5904] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   63.098099][ T5910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5'.
[   63.212004][ T5913] gretap1: entered allmulticast mode
[   63.432876][   T33] audit: type=1800 audit(1752238524.231:2): pid=5912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3" name="cgroup.controllers" dev="tmpfs" ino=18 res=0 errno=0
[   63.474962][ T5924] delete_channel: no stack
[   63.681686][ T5935] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   63.691626][ T5935] SET target dimension over the limit!
[   63.812389][ T5947] netlink: 12 bytes leftover after parsing attributes in process `syz.0.23'.
[   63.864902][ T5836] Bluetooth: hci0: command tx timeout
[   63.867241][ T5223] Bluetooth: hci1: command tx timeout
[   63.868107][ T5840] Bluetooth: hci2: command tx timeout
[   64.124931][ T5966] Bluetooth: MGMT ver 1.23
[   64.466822][ T5984] bridge0: entered promiscuous mode
[   64.469243][ T5984] macsec1: entered promiscuous mode
[   64.475484][ T5984] bridge0: port 3(macsec1) entered blocking state
[   64.481622][ T5984] bridge0: port 3(macsec1) entered disabled state
[   64.485361][ T5984] macsec1: entered allmulticast mode
[   64.487531][ T5984] bridge0: entered allmulticast mode
[   64.501322][ T5984] macsec1: left allmulticast mode
[   64.508244][ T5984] bridge0: left allmulticast mode
[   64.513130][ T5984] bridge0: left promiscuous mode
[   64.796408][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.799174][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.417824][ T6038] xt_hashlimit: max too large, truncated to 1048576
[   65.420739][ T6038] xt_hashlimit: overflow, rate too high: 0
[   65.500616][ T6044] block nbd0: Unsupported socket: shutdown callout must be supported.
[   65.604580][ T6046] netlink: 830 bytes leftover after parsing attributes in process `syz.1.70'.
[   65.688297][ T6051] Cannot find add_set index 0 as target
[   65.792028][ T6058] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[   65.937587][ T6068] netlink: 134788 bytes leftover after parsing attributes in process `syz.0.81'.
[   65.948386][ T5840] Bluetooth: hci0: command tx timeout
[   65.948474][ T5836] Bluetooth: hci1: command tx timeout
[   65.951391][ T5840] Bluetooth: hci2: command tx timeout
[   65.986199][ T6071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.82'.
[   65.989147][ T6071] netlink: 'syz.0.82': attribute type 20 has an invalid length.
[   65.992093][ T6071] netlink: 'syz.0.82': attribute type 21 has an invalid length.
[   66.004737][ T6071] Zero length message leads to an empty skb
[   66.200974][ T6080] netlink: 44 bytes leftover after parsing attributes in process `syz.1.86'.
[   66.430708][ T6092] netlink: 20 bytes leftover after parsing attributes in process `syz.0.92'.
[   66.451716][ T6092] netlink: 20 bytes leftover after parsing attributes in process `syz.0.92'.
[   66.912978][ T6115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.103'.
[   67.229185][ T6132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.111'.
[   67.700193][ T6156] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.866196][ T6165] openvswitch: netlink: IP tunnel TTL not specified.
[   67.992883][   T47] IPVS: starting estimator thread 0...
[   67.995395][ T6169] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[   68.023596][ T5840] Bluetooth: hci2: command tx timeout
[   68.032681][ T5840] Bluetooth: hci1: command tx timeout
[   68.033272][ T5836] Bluetooth: hci0: command tx timeout
[   68.124151][ T6176] IPVS: using max 41 ests per chain, 98400 per kthread
[   68.175010][ T6185] netlink: 32 bytes leftover after parsing attributes in process `syz.1.134'.
[   68.503987][ T6207] netlink: 60 bytes leftover after parsing attributes in process `syz.2.137'.
[   68.506906][ T6207] netlink: 16 bytes leftover after parsing attributes in process `syz.2.137'.
[   68.510414][ T6207] netlink: 60 bytes leftover after parsing attributes in process `syz.2.137'.
[   69.098025][   T10] hid-generic 0005:0C45:1012.0001: item fetching failed at offset 0/1
[   69.101165][   T10] hid-generic 0005:0C45:1012.0001: probe with driver hid-generic failed with error -22
[   69.409963][ T6296] netlink: 20 bytes leftover after parsing attributes in process `syz.0.153'.
[   69.415240][ T6297] xt_ecn: cannot match TCP bits for non-tcp packets
[   69.474845][ T6299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.154'.
[   69.480669][ T6299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.154'.
[   69.987672][ T6339] netlink: 12 bytes leftover after parsing attributes in process `syz.0.172'.
[   70.079308][ T6343] syz.0.174 uses obsolete (PF_INET,SOCK_PACKET)
[   70.705835][ T6371] netlink: 128 bytes leftover after parsing attributes in process `syz.1.187'.
[   70.883470][ T6386] netlink: 180 bytes leftover after parsing attributes in process `syz.2.194'.
[   70.997316][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.000094][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.429843][ T6418] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   71.593629][ T6428] netlink: 'syz.0.214': attribute type 1 has an invalid length.
[   71.609475][ T6428] netlink: 'syz.0.214': attribute type 1 has an invalid length.
[   72.095134][ T6466] IPv6: addrconf: prefix option has invalid lifetime
[   72.129484][ T6470] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   72.355508][ T6484] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[   72.625865][ T6497] macvlan2: entered allmulticast mode
[   72.628087][ T6497] veth1_vlan: entered allmulticast mode
[   72.631955][ T6497] veth1_vlan: left allmulticast mode
[   73.120390][ T6532] ipt_rpfilter: unknown options
[   74.004790][ T6585] xt_limit: Overflow, try lower: 0/0
[   74.049197][ T6588] syzkaller1: entered promiscuous mode
[   74.051552][ T6588] syzkaller1: entered allmulticast mode
[   74.544742][ T6618] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   74.548054][ T6618] batman_adv: batadv0: Removing interface: batadv_slave_0
[   74.560634][ T6618] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   74.564605][ T6618] batman_adv: batadv0: Removing interface: batadv_slave_1
[   74.603359][ T6620] bridge: RTM_NEWNEIGH with invalid ether address
[   74.666633][ T6622] __nla_validate_parse: 2 callbacks suppressed
[   74.666652][ T6622] netlink: 28 bytes leftover after parsing attributes in process `syz.0.298'.
[   74.675595][ T6622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.298'.
[   74.689350][ T6622] netlink: 128 bytes leftover after parsing attributes in process `syz.0.298'.
[   74.715250][ T6622] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[   74.950061][ T6637] netlink: 12 bytes leftover after parsing attributes in process `syz.1.305'.
[   74.955935][ T6637] netlink: 16 bytes leftover after parsing attributes in process `syz.1.305'.
[   75.267419][ T6665] openvswitch: netlink: EtherType 10 is less than min 600
[   75.615328][ T6691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.326'.
[   75.740516][ T6701] warning: `syz.0.330' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   75.945604][ T6713] netlink: 12 bytes leftover after parsing attributes in process `syz.0.336'.
[   75.989359][ T6715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.337'.
[   75.997040][ T6715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.337'.
[   76.446084][ T6743] tipc: Failed to remove unknown binding: 66,1,1/0:3964072775/3964072777
[   76.448919][ T6743] tipc: Failed to remove unknown binding: 66,1,1/0:3964072775/3964072777
[   76.494404][ T6747] netlink: 12 bytes leftover after parsing attributes in process `syz.0.353'.
[   76.821080][ T6781] netlink: 'syz.0.368': attribute type 12 has an invalid length.
[   76.867652][ T6787] ip6gre1: entered promiscuous mode
[   77.323470][ T6825] netlink: 'syz.0.388': attribute type 5 has an invalid length.
[   77.466178][ T6829] openvswitch: netlink: Missing key (keys=40, expected=200000)
[   77.757520][ T6837] syzkaller0: entered promiscuous mode
[   77.759268][ T6837] syzkaller0: entered allmulticast mode
[   79.033919][ T6877] openvswitch: netlink: IP tunnel dst address not specified
[   79.037940][ T6873] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[   79.050998][ T6873] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   79.060946][ T6875] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   79.071276][ T6875] batadv_slave_1: entered promiscuous mode
[   79.116234][ T6881] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   79.272217][ T6901] netlink: 'syz.1.420': attribute type 21 has an invalid length.
[   79.544006][ T6929] tap0: tun_chr_ioctl cmd 1074025677
[   79.547037][ T6929] tap0: linktype set to 0
[   79.588816][ T6931] Cannot find add_set index 0 as target
[   79.736990][ T6941] Driver unsupported XDP return value 0 on prog  (id 71) dev N/A, expect packet loss!
[   79.775105][ T6945] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[   79.868846][ T6957] __nla_validate_parse: 7 callbacks suppressed
[   79.868862][ T6957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.445'.
[   79.947551][ T6959] netlink: 4 bytes leftover after parsing attributes in process `syz.0.446'.
[   79.998910][ T6965] sctp: [Deprecated]: syz.0.450 (pid 6965) Use of struct sctp_assoc_value in delayed_ack socket option.
[   79.998910][ T6965] Use struct sctp_sack_info instead
[   80.128820][ T6975] netlink: 'syz.0.454': attribute type 9 has an invalid length.
[   80.131997][ T6975] netlink: 212260 bytes leftover after parsing attributes in process `syz.0.454'.
[   80.327078][ T6989] netlink: 100 bytes leftover after parsing attributes in process `syz.1.461'.
[   80.435097][ T6997] netlink: 'syz.2.464': attribute type 5 has an invalid length.
[   80.562669][ T7003] macvlan0: entered allmulticast mode
[   80.568824][ T7003] netlink: 'syz.1.467': attribute type 1 has an invalid length.
[   80.575531][ T7003] netlink: 'syz.1.467': attribute type 2 has an invalid length.
[   80.879661][ T7013] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   80.880704][ T7019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.474'.
[   80.883831][ T7013] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   80.890554][ T7019] netlink: 312 bytes leftover after parsing attributes in process `syz.1.474'.
[   80.890584][ T7019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.474'.
[   80.894738][ T7013] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   80.903356][ T7013] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   81.076886][ T7013] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   81.081007][ T7013] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.198036][ T7013] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   81.201975][ T7013] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.367479][ T7013] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   81.388617][ T7013] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.447819][ T7032] netlink: 28 bytes leftover after parsing attributes in process `syz.1.480'.
[   81.451196][ T7032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.480'.
[   81.473112][ T7013] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   81.477321][ T7013] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.488716][ T7032] netlink: 'syz.1.480': attribute type 10 has an invalid length.
[   81.491492][ T7032] bridge0: port 3(team0) entered blocking state
[   81.494157][ T7032] bridge0: port 3(team0) entered disabled state
[   81.496251][ T7032] team0: entered allmulticast mode
[   81.497933][ T7032] team_slave_0: entered allmulticast mode
[   81.500821][ T7032] team_slave_1: entered allmulticast mode
[   81.506022][ T7032] team0: entered promiscuous mode
[   81.507830][ T7032] team_slave_0: entered promiscuous mode
[   81.509812][ T7032] team_slave_1: entered promiscuous mode
[   81.514510][ T7032] bridge0: port 3(team0) entered blocking state
[   81.517039][ T7032] bridge0: port 3(team0) entered forwarding state
[   81.587632][ T7013] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   81.590982][ T7013] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.617755][ T7013] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   81.620988][ T7013] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.648283][ T7013] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   81.655747][ T7013] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.671624][ T7013] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   81.674618][ T7013] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.801989][ T7056] netlink: 16 bytes leftover after parsing attributes in process `syz.1.491'.
[   81.903070][ T7063] tipc: Started in network mode
[   81.905091][ T7063] tipc: Node identity ac14140f, cluster identity 4711
[   81.908188][ T7063] tipc: New replicast peer: 255.255.255.255
[   81.911417][ T7063] tipc: Enabled bearer <udp:syz2>, priority 10
[   81.953533][ T7063] tipc: Disabling bearer <udp:syz2>
[   83.626233][ T7133] geneve2: entered promiscuous mode
[   83.797885][ T7148] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   83.808282][ T7148] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.033402][ T7173] netlink: 'syz.0.543': attribute type 13 has an invalid length.
[   84.037938][ T7173] netlink: 'syz.0.543': attribute type 17 has an invalid length.
[   84.137638][ T7173] 8021q: adding VLAN 0 to HW filter on device bond0
[   84.145878][ T7173] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   84.249320][ T7173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   84.317125][ T7163] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   84.379485][ T7173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   84.499421][ T7202] netlink: 'syz.1.556': attribute type 1 has an invalid length.
[   84.900432][ T7163] syz.0.543 (7163) used greatest stack depth: 20168 bytes left
[   85.115164][ T7247] __nla_validate_parse: 10 callbacks suppressed
[   85.115179][ T7247] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.568'.
[   85.680845][ T7282] vxcan3: entered allmulticast mode
[   85.971765][ T7309] netlink: 'syz.2.597': attribute type 26 has an invalid length.
[   86.206173][ T7332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.607'.
[   86.356656][   T24] cfg80211: failed to load regulatory.db
[   86.424450][   T53] wlan1: Trigger new scan to find an IBSS to join
[   87.356456][ T7384] netlink: 'syz.1.631': attribute type 1 has an invalid length.
[   87.359535][ T7384] netlink: 228 bytes leftover after parsing attributes in process `syz.1.631'.
[   87.468223][ T7391] netlink: 'syz.2.635': attribute type 10 has an invalid length.
[   87.472151][ T7391] macvlan0: entered promiscuous mode
[   87.477372][ T7391] macvlan0: entered allmulticast mode
[   87.486113][ T7391] veth1_vlan: entered allmulticast mode
[   87.492226][ T7391] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[   88.563316][ T7481] netlink: 'syz.1.674': attribute type 1 has an invalid length.
[   88.566248][ T7481] netlink: 224 bytes leftover after parsing attributes in process `syz.1.674'.
[   88.819680][ T7503] batadv0: entered allmulticast mode
[   88.838805][ T7499] syz.1.683: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   88.843309][ T7503] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.847370][ T7499] CPU: 0 UID: 0 PID: 7499 Comm: syz.1.683 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[   88.847392][ T7499] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   88.847402][ T7499] Call Trace:
[   88.847409][ T7499]  <TASK>
[   88.847463][ T7499]  dump_stack_lvl+0x189/0x250
[   88.847500][ T7499]  ? __pfx_dump_stack_lvl+0x10/0x10
[   88.847519][ T7499]  ? __pfx__printk+0x10/0x10
[   88.847544][ T7499]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   88.847565][ T7499]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   88.847585][ T7499]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   88.847608][ T7499]  warn_alloc+0x214/0x310
[   88.847631][ T7499]  ? stack_depot_save_flags+0x40/0x900
[   88.847655][ T7499]  ? __pfx_warn_alloc+0x10/0x10
[   88.847675][ T7499]  ? kasan_save_track+0x4f/0x80
[   88.847693][ T7499]  ? xskq_create+0x56/0x170
[   88.847705][ T7499]  ? xsk_init_queue+0xb0/0x110
[   88.847724][ T7499]  ? xsk_setsockopt+0x43f/0x710
[   88.847739][ T7499]  ? do_sock_setsockopt+0x25a/0x3e0
[   88.847756][ T7499]  ? __x64_sys_setsockopt+0x18b/0x220
[   88.847771][ T7499]  ? do_syscall_64+0xfa/0x3b0
[   88.847785][ T7499]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   88.847805][ T7499]  __vmalloc_node_range_noprof+0x125/0x12f0
[   88.847879][ T7499]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   88.847903][ T7499]  ? __kasan_kmalloc+0x93/0xb0
[   88.847923][ T7499]  vmalloc_user_noprof+0xad/0xf0
[   88.847945][ T7499]  ? xskq_create+0xbf/0x170
[   88.847960][ T7499]  xskq_create+0xbf/0x170
[   88.847977][ T7499]  xsk_init_queue+0xb0/0x110
[   88.848001][ T7499]  xsk_setsockopt+0x43f/0x710
[   88.848024][ T7499]  ? __pfx_xsk_setsockopt+0x10/0x10
[   88.848061][ T7499]  ? __lock_acquire+0xab9/0xd20
[   88.848086][ T7499]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   88.848101][ T7499]  ? __pfx_xsk_setsockopt+0x10/0x10
[   88.848123][ T7499]  do_sock_setsockopt+0x25a/0x3e0
[   88.848145][ T7499]  ? __pfx_do_sock_setsockopt+0x10/0x10
[   88.848168][ T7499]  ? __fget_files+0x2a/0x420
[   88.848194][ T7499]  __x64_sys_setsockopt+0x18b/0x220
[   88.848217][ T7499]  do_syscall_64+0xfa/0x3b0
[   88.848229][ T7499]  ? lockdep_hardirqs_on+0x9c/0x150
[   88.848244][ T7499]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   88.848259][ T7499]  ? exc_page_fault+0x9f/0xf0
[   88.848283][ T7499]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   88.848298][ T7499] RIP: 0033:0x7f25f838e929
[   88.848314][ T7499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   88.848328][ T7499] RSP: 002b:00007f25f927c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   88.848347][ T7499] RAX: ffffffffffffffda RBX: 00007f25f85b5fa0 RCX: 00007f25f838e929
[   88.848358][ T7499] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009
[   88.848369][ T7499] RBP: 00007f25f8410b39 R08: 0000000000000004 R09: 0000000000000000
[   88.848379][ T7499] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[   88.848390][ T7499] R13: 0000000000000000 R14: 00007f25f85b5fa0 R15: 00007fffc48917e8
[   88.848415][ T7499]  </TASK>
[   88.848491][ T7499] Mem-Info:
[   88.867220][ T7503] netlink: 8 bytes leftover after parsing attributes in process `syz.2.685'.
[   88.868762][ T7499] active_anon:4401 inactive_anon:0 isolated_anon:0
[   88.868762][ T7499]  active_file:936 inactive_file:38213 isolated_file:0
[   88.868762][ T7499]  unevictable:1768 dirty:211 writeback:0
[   88.868762][ T7499]  slab_reclaimable:9269 slab_unreclaimable:65977
[   88.868762][ T7499]  mapped:17976 shmem:2440 pagetables:892
[   88.868762][ T7499]  sec_pagetables:0 bounce:0
[   88.868762][ T7499]  kernel_misc_reclaimable:0
[   88.868762][ T7499]  free:288306 free_pcp:14038 free_cma:0
[   88.966919][ T7499] Node 0 active_anon:6580kB inactive_anon:0kB active_file:1912kB inactive_file:147592kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:38236kB dirty:220kB writeback:0kB shmem:4856kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4980kB pagetables:1996kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   88.976787][ T7499] Node 1 active_anon:11024kB inactive_anon:0kB active_file:1832kB inactive_file:5260kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:33668kB dirty:624kB writeback:0kB shmem:4904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6856kB pagetables:1572kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   88.987256][ T7499] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   88.996520][ T7499] lowmem_reserve[]: 0 812 812 812 812
[   88.998167][ T7499] Node 0 DMA32 free:292112kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:6580kB inactive_anon:0kB active_file:1912kB inactive_file:147592kB unevictable:3536kB writepending:220kB present:1556484kB managed:831900kB mlocked:0kB bounce:0kB free_pcp:16680kB local_pcp:1884kB free_cma:0kB
[   89.007890][ T7499] lowmem_reserve[]: 0 0 0 0 0
[   89.009388][ T7499] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[   89.018517][ T7499] lowmem_reserve[]: 0 0 854 854 854
[   89.020414][ T7499] Node 1 Normal free:387036kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11024kB inactive_anon:0kB active_file:1832kB inactive_file:5260kB unevictable:3536kB writepending:624kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:39276kB local_pcp:18700kB free_cma:0kB
[   89.030093][ T7499] lowmem_reserve[]: 0 0 0 0 0
[   89.031912][ T7499] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   89.036679][ T7499] Node 0 DMA32: 3*4kB (ME) 253*8kB (UME) 186*16kB (UME) 311*32kB (UME) 164*64kB (UME) 59*128kB (UM) 28*256kB (UM) 18*512kB (UM) 11*1024kB (UM) 7*2048kB (UME) 53*4096kB (M) = 292084kB
[   89.042620][ T7499] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[   89.048741][ T7499] Node 1 Normal: 1093*4kB (UME) 375*8kB (UME) 177*16kB (UME) 93*32kB (UM) 153*64kB (UM) 54*128kB (UM) 12*256kB (UM) 7*512kB (ME) 4*1024kB (M) 1*2048kB (U) 84*4096kB (M) = 386748kB
[   89.055030][ T7499] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   89.058429][ T7499] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   89.061389][ T7499] 41589 total pagecache pages
[   89.063191][ T7499] 0 pages in swap cache
[   89.064588][ T7499] Free swap  = 124996kB
[   89.066035][ T7499] Total swap = 124996kB
[   89.067421][ T7499] 786301 pages RAM
[   89.072409][ T7499] 0 pages HighMem/MovableOnly
[   89.075623][ T7499] 241078 pages reserved
[   89.076975][ T7499] 0 pages cma reserved
[   89.227739][ T7504] Bluetooth: hci0: Opcode 0x0c03 failed: -112
[   89.329213][ T7530] netlink: 12 bytes leftover after parsing attributes in process `syz.0.696'.
[   89.354610][ T7530] 8021q: adding VLAN 0 to HW filter on device bond1
[   89.402146][ T7530] 8021q: adding VLAN 0 to HW filter on device bond1
[   89.405421][ T7530] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[   89.409732][ T7530] bond1: (slave vxcan3): Error -95 calling set_mac_address
[   89.422133][ T7535] netlink: 'syz.2.698': attribute type 13 has an invalid length.
[   89.439208][ T7538] macvlan2: entered promiscuous mode
[   89.440912][ T7538] macvlan2: entered allmulticast mode
[   89.461576][ T7538] bond1: (slave macvlan2): Error -98 calling set_mac_address
[   89.463488][ T6248] wlan1: Trigger new scan to find an IBSS to join
[   89.599914][ T7548] netlink: 'syz.2.704': attribute type 12 has an invalid length.
[   89.603499][ T7548] netlink: 'syz.2.704': attribute type 29 has an invalid length.
[   89.608473][ T7548] netlink: 148 bytes leftover after parsing attributes in process `syz.2.704'.
[   89.657222][ T7554] netlink: 60 bytes leftover after parsing attributes in process `syz.0.707'.
[   89.671123][ T7557] sctp: [Deprecated]: syz.2.708 (pid 7557) Use of int in maxseg socket option.
[   89.671123][ T7557] Use struct sctp_assoc_value instead
[   90.129921][ T7596] pim6reg1: entered promiscuous mode
[   90.132118][ T7596] pim6reg1: entered allmulticast mode
[   90.440099][ T7621] netlink: 17 bytes leftover after parsing attributes in process `syz.1.740'.
[   90.443994][ T7621] netlink: zone id is out of range
[   90.446015][ T7621] netlink: zone id is out of range
[   90.448085][ T7621] netlink: zone id is out of range
[   90.450036][ T7621] netlink: zone id is out of range
[   90.454069][ T7621] netlink: zone id is out of range
[   90.455874][ T7621] netlink: zone id is out of range
[   90.457645][ T7621] netlink: zone id is out of range
[   90.459654][ T7621] netlink: zone id is out of range
[   90.461628][ T7621] netlink: zone id is out of range
[   90.463891][ T7621] netlink: zone id is out of range
[   90.683209][ T7639] pimreg: entered allmulticast mode
[   90.714323][ T7639] pimreg: left allmulticast mode
[   90.732925][ T7642] netlink: 32 bytes leftover after parsing attributes in process `syz.0.748'.
[   90.884869][ T7656] xt_addrtype: ipv6 BLACKHOLE matching not supported
[   91.101443][ T7671] netlink: 'syz.2.761': attribute type 1 has an invalid length.
[   91.106039][ T7671] netlink: 'syz.2.761': attribute type 3 has an invalid length.
[   91.109372][ T7671] netlink: 224 bytes leftover after parsing attributes in process `syz.2.761'.
[   91.197875][ T7680] ieee802154 phy0 wpan0: encryption failed: -90
[   91.316020][ T5836] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   91.318225][ T7689] ieee802154 phy0 wpan0: encryption failed: -22
[   91.594516][ T7711] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[   91.680823][ T7720] netlink: 8 bytes leftover after parsing attributes in process `syz.0.784'.
[   91.684364][ T7720] netlink: 8 bytes leftover after parsing attributes in process `syz.0.784'.
[   91.687321][ T7720] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744071844200453)
[   91.690524][ T7720] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647
[   91.883046][ T7733] netlink: 12 bytes leftover after parsing attributes in process `syz.2.790'.
[   91.988960][ T7739] netlink: 16 bytes leftover after parsing attributes in process `syz.2.793'.
[   92.433208][   T40] wlan1: Creating new IBSS network, BSSID 00:00:00:8d:00:00
[   92.571566][ T7752] 8021q: adding VLAN 0 to HW filter on device bond1
[   92.646332][ T7757] netlink: 'syz.2.801': attribute type 5 has an invalid length.
[   93.059768][ T7791] syzkaller1: entered promiscuous mode
[   93.061563][ T7791] syzkaller1: entered allmulticast mode
[   93.218735][ T7802] netlink: 24 bytes leftover after parsing attributes in process `syz.2.822'.
[   93.750033][ T7838] netlink: 36 bytes leftover after parsing attributes in process `syz.2.836'.
[   93.855206][ T7842] xt_CT: No such helper "snmp"
[   94.009900][ T7860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.846'.
[   94.430999][ T7899] x_tables: ip_tables: udp match: only valid for protocol 17
[   95.181318][ T5864] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.253644][ T5864] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.307873][ T5864] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.390790][ T5864] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.545116][ T7953] net_ratelimit: 73 callbacks suppressed
[   95.545130][ T7953] netlink: zone id is out of range
[   95.548468][ T7953] netlink: zone id is out of range
[   95.550209][ T7953] netlink: del zone limit has 8 unknown bytes
[   95.554218][ T5864] bridge_slave_1: left allmulticast mode
[   95.556193][ T5864] bridge_slave_1: left promiscuous mode
[   95.559177][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.567346][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   95.571505][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   95.576595][ T5864] bridge_slave_0: left allmulticast mode
[   95.578759][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   95.587724][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   95.592075][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   95.592659][ T5864] bridge_slave_0: left promiscuous mode
[   95.597202][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.654894][ T7957] __nla_validate_parse: 6 callbacks suppressed
[   95.654907][ T7957] netlink: 20 bytes leftover after parsing attributes in process `syz.1.890'.
[   95.773180][ T7959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.891'.
[   95.777515][ T7959] openvswitch: netlink: push_nsh: missing base or metadata attributes
[   95.780893][ T7959] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   95.962679][ T5864] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   95.969752][ T5864] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   95.975679][ T5864] bond0 (unregistering): Released all slaves
[   96.051920][ T5864] bond1 (unregistering): Released all slaves
[   96.139918][ T5864] tipc: Left network mode
[   96.431206][ T7981] bridge0: port 3(erspan0) entered blocking state
[   96.435100][ T7981] bridge0: port 3(erspan0) entered disabled state
[   96.438421][ T7981] erspan0: entered allmulticast mode
[   96.441540][ T7981] erspan0: entered promiscuous mode
[   96.481896][ T7981] erspan0: left allmulticast mode
[   96.492741][ T7981] erspan0: left promiscuous mode
[   96.496541][ T7981] bridge0: port 3(erspan0) entered disabled state
[   96.522399][ T7954] chnl_net:caif_netlink_parms(): no params data found
[   96.539974][ T5864] hsr_slave_0: left promiscuous mode
[   96.543713][ T5864] hsr_slave_1: left promiscuous mode
[   96.556269][ T5864] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   96.559161][ T5864] batman_adv: batadv0: Removing interface: batadv_slave_0
[   96.572371][ T5864] batman_adv: batadv0: Removing interface: batadv_slave_1
[   96.598312][ T5864] veth1_macvtap: left promiscuous mode
[   96.602042][ T5864] veth0_macvtap: left promiscuous mode
[   96.605272][ T5864] veth1_vlan: left promiscuous mode
[   96.613886][ T5864] veth0_vlan: left promiscuous mode
[   96.639629][ T7989] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[   97.101806][ T5864] team0 (unregistering): Port device team_slave_1 removed
[   97.131361][ T5864] team0 (unregistering): Port device team_slave_0 removed
[   97.468332][ T8003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.911'.
[   97.616407][ T7954] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.619254][ T7954] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.622097][ T7954] bridge_slave_0: entered allmulticast mode
[   97.624530][ T5840] Bluetooth: hci1: command tx timeout
[   97.633421][ T7954] bridge_slave_0: entered promiscuous mode
[   97.644097][ T7954] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.646965][ T7954] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.649435][ T7954] bridge_slave_1: entered allmulticast mode
[   97.662640][ T7954] bridge_slave_1: entered promiscuous mode
[   97.705643][ T7954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   97.715560][ T7954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   97.795373][ T7954] team0: Port device team_slave_0 added
[   97.801319][ T7954] team0: Port device team_slave_1 added
[   97.854737][ T7954] batman_adv: batadv0: Adding interface: batadv_slave_0
[   97.857565][ T7954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   97.877513][ T7954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   97.891175][ T7954] batman_adv: batadv0: Adding interface: batadv_slave_1
[   97.901328][ T7954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   97.922652][ T7954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   98.019504][ T7954] hsr_slave_0: entered promiscuous mode
[   98.035102][ T7954] hsr_slave_1: entered promiscuous mode
[   98.038115][ T7954] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   98.040879][ T7954] Cannot create hsr debugfs directory
[   98.083952][ T8033] netlink: 1 bytes leftover after parsing attributes in process `syz.1.924'.
[   98.268499][ T8045] netlink: 80 bytes leftover after parsing attributes in process `syz.2.930'.
[   98.559683][ T8063] ip6t_srh: unknown srh invflags 4000
[   98.630108][ T7954] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   98.645192][ T7954] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   98.659489][ T7954] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   98.673797][ T7954] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   98.680926][ T8070] Cannot find add_set index 2 as target
[   98.777029][ T7954] 8021q: adding VLAN 0 to HW filter on device bond0
[   98.795500][ T7954] 8021q: adding VLAN 0 to HW filter on device team0
[   98.806491][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.808937][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   98.828607][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.831474][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   98.837054][ T8084] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[   98.880742][ T8086] netlink: 28 bytes leftover after parsing attributes in process `syz.2.947'.
[   98.890430][ T8086] netlink: 'syz.2.947': attribute type 7 has an invalid length.
[   98.900127][ T8086] netlink: 'syz.2.947': attribute type 8 has an invalid length.
[   98.907027][ T8086] netlink: 4 bytes leftover after parsing attributes in process `syz.2.947'.
[   98.940943][ T8091] xt_l2tp: missing protocol rule (udp|l2tpip)
[   99.039907][ T7954] 8021q: adding VLAN 0 to HW filter on device batadv0
[   99.103885][ T7954] veth0_vlan: entered promiscuous mode
[   99.114308][ T7954] veth1_vlan: entered promiscuous mode
[   99.159370][ T7954] veth0_macvtap: entered promiscuous mode
[   99.169499][ T7954] veth1_macvtap: entered promiscuous mode
[   99.190879][ T7954] batman_adv: batadv0: Interface activated: batadv_slave_0
[   99.202405][ T7954] batman_adv: batadv0: Interface activated: batadv_slave_1
[   99.212326][ T7954] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.216406][ T7954] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.219256][ T7954] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.221843][ T7954] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.318895][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.321498][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.359415][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.362004][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.005784][ T8172] raw_sendmsg: syz.1.983 forgot to set AF_INET. Fix it!
[  101.125074][ T5846] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.315702][ T8183] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.988'.
[  101.407095][ T8189] netlink: 4 bytes leftover after parsing attributes in process `syz.1.991'.
[  101.570451][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  101.575218][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  101.579977][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  101.586888][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  101.591156][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  101.815822][ T8197] veth1_vlan: left allmulticast mode
[  101.855627][ T8197] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.858902][ T8197] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.862113][ T8197] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.868681][ T8197] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.888827][ T8197] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  101.890272][ T8220] netlink: 'syz.1.1002': attribute type 1 has an invalid length.
[  101.893061][ T8197] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  101.896800][ T8220] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1002'.
[  101.898907][ T8197] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  101.901019][ T8220] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1002'.
[  101.904292][ T8197] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  101.954496][ T8222] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1003'.
[  102.059385][ T8228] syzkaller1: entered promiscuous mode
[  102.061675][ T8228] syzkaller1: entered allmulticast mode
[  102.085775][ T8198] chnl_net:caif_netlink_parms(): no params data found
[  102.152305][ T8198] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.154679][ T8198] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.156931][ T8198] bridge_slave_0: entered allmulticast mode
[  102.159692][ T8198] bridge_slave_0: entered promiscuous mode
[  102.164475][ T8198] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.166717][ T8198] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.169003][ T8198] bridge_slave_1: entered allmulticast mode
[  102.172053][ T8198] bridge_slave_1: entered promiscuous mode
[  102.207819][ T8198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  102.215134][ T8198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  102.249502][ T8198] team0: Port device team_slave_0 added
[  102.254586][ T8198] team0: Port device team_slave_1 added
[  102.292879][ T8198] batman_adv: batadv0: Adding interface: batadv_slave_0
[  102.295608][ T8198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  102.309679][ T8198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  102.315795][ T8198] batman_adv: batadv0: Adding interface: batadv_slave_1
[  102.319545][ T8198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  102.332843][ T8198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  102.409928][ T8198] hsr_slave_0: entered promiscuous mode
[  102.412400][ T8198] hsr_slave_1: entered promiscuous mode
[  102.418276][ T8198] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  102.421570][ T8198] Cannot create hsr debugfs directory
[  102.443522][ T8247] netlink: 'syz.2.1012': attribute type 4 has an invalid length.
[  102.462124][ T8247] netlink: 'syz.2.1012': attribute type 4 has an invalid length.
[  102.626928][   T47] hid-generic 0005:16BF:5505.0002: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  102.646163][ T5846] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.710997][ T5846] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.795689][ T5846] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.944756][ T5846] bridge_slave_1: left allmulticast mode
[  102.947066][ T5846] bridge_slave_1: left promiscuous mode
[  102.949647][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.971011][ T5846] bridge_slave_0: left allmulticast mode
[  102.974232][ T5846] bridge_slave_0: left promiscuous mode
[  102.977309][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.090872][ T8291] netlink: 'syz.2.1031': attribute type 1 has an invalid length.
[  103.349124][ T5846] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  103.354115][ T5846] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  103.359282][ T5846] bond0 (unregistering): Released all slaves
[  103.449210][ T8294] bond1: (slave ip6gretap2): Enslaving as a backup interface with an up link
[  103.455491][ T8297] 8021q: adding VLAN 0 to HW filter on device bond1
[  103.459932][ T5863] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  103.504629][ T8298] veth5: entered promiscuous mode
[  103.508276][ T8298] bond1: (slave veth5): Enslaving as a backup interface with a down link
[  103.573819][ T5863] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  103.623575][ T5836] Bluetooth: hci1: command tx timeout
[  103.738769][ T5846] hsr_slave_0: left promiscuous mode
[  103.741376][ T8305] xt_policy: neither incoming nor outgoing policy selected
[  103.757236][ T5846] hsr_slave_1: left promiscuous mode
[  103.761665][ T5846] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  103.773163][ T5846] batman_adv: batadv0: Removing interface: batadv_slave_0
[  103.777464][ T5846] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  103.780046][ T5846] batman_adv: batadv0: Removing interface: batadv_slave_1
[  103.797382][ T5846] veth1_macvtap: left promiscuous mode
[  103.799170][ T5846] veth0_macvtap: left promiscuous mode
[  103.800944][ T5846] veth1_vlan: left promiscuous mode
[  103.804122][ T5846] veth0_vlan: left promiscuous mode
[  104.274725][ T5846] team0 (unregistering): Port device team_slave_1 removed
[  104.308462][ T5846] team0 (unregistering): Port device team_slave_0 removed
[  104.832366][ T8318] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1039'.
[  104.845129][ T8198] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  104.878377][ T8198] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  104.884932][ T8198] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  104.907309][ T8198] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  104.920710][ T8323] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1040'.
[  105.031397][ T8198] 8021q: adding VLAN 0 to HW filter on device bond0
[  105.067469][ T8198] 8021q: adding VLAN 0 to HW filter on device team0
[  105.095050][ T6261] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.097946][ T6261] bridge0: port 1(bridge_slave_0) entered forwarding state
[  105.147473][ T6261] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.150291][ T6261] bridge0: port 2(bridge_slave_1) entered forwarding state
[  105.456478][ T8198] 8021q: adding VLAN 0 to HW filter on device batadv0
[  105.519313][ T8198] veth0_vlan: entered promiscuous mode
[  105.527885][ T8198] veth1_vlan: entered promiscuous mode
[  105.566640][ T8198] veth0_macvtap: entered promiscuous mode
[  105.570909][ T8198] veth1_macvtap: entered promiscuous mode
[  105.610300][ T8198] batman_adv: batadv0: Interface activated: batadv_slave_0
[  105.618270][ T8198] batman_adv: batadv0: Interface activated: batadv_slave_1
[  105.626169][ T8198] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  105.629142][ T8198] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  105.631907][ T8198] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  105.634820][ T8365] IPv6: Can't replace route, no match found
[  105.639068][ T8198] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  105.702708][ T5836] Bluetooth: hci1: command tx timeout
[  105.726631][ T8367] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1055'.
[  105.731548][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  105.736329][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  105.774525][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  105.777630][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.148980][ T8394] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615)
[  107.154858][ T8394] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  107.160060][ T8395] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1067'.
[  107.219343][ T8399] pim6reg1: entered promiscuous mode
[  107.221201][ T8399] pim6reg1: entered allmulticast mode
[  107.350230][ T8399] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1070'.
[  107.383319][ T8399] 8021q: adding VLAN 0 to HW filter on device bond2
[  107.387245][ T8399] bond2: entered promiscuous mode
[  107.388919][ T8399] bond2: entered allmulticast mode
[  107.392300][ T8399] team0: Port device bond2 added
[  107.440921][ T8413] netlink: 'syz.2.1076': attribute type 2 has an invalid length.
[  107.451610][ T8413] : entered promiscuous mode
[  107.587937][ T5846] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.818344][ T8431] netlink: 'syz.2.1084': attribute type 3 has an invalid length.
[  107.923327][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  107.930062][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  107.934678][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  107.938123][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  107.940742][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  108.129786][ T8439] chnl_net:caif_netlink_parms(): no params data found
[  108.224927][ T8439] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.228073][ T8439] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.231184][ T8439] bridge_slave_0: entered allmulticast mode
[  108.235499][ T8439] bridge_slave_0: entered promiscuous mode
[  108.240201][ T8439] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.242903][ T8439] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.245387][ T8439] bridge_slave_1: entered allmulticast mode
[  108.248289][ T8439] bridge_slave_1: entered promiscuous mode
[  108.271916][ T8439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  108.283455][ T8439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  108.323857][ T8439] team0: Port device team_slave_0 added
[  108.328994][ T8439] team0: Port device team_slave_1 added
[  108.356769][ T8439] batman_adv: batadv0: Adding interface: batadv_slave_0
[  108.358964][ T8439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  108.367043][ T8439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  108.377604][ T8439] batman_adv: batadv0: Adding interface: batadv_slave_1
[  108.379802][ T8439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  108.388349][ T8439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  108.424827][ T8439] hsr_slave_0: entered promiscuous mode
[  108.428094][ T8439] hsr_slave_1: entered promiscuous mode
[  108.432862][ T8439] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  108.437230][ T8439] Cannot create hsr debugfs directory
[  108.640307][ T8479] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.1104'.
[  109.278250][ T8529] batadv_slave_0: entered promiscuous mode
[  109.281134][ T8531] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  109.384031][ T5846] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.450270][ T5846] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.456247][ T8545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1137'.
[  109.472679][ T8543] netlink: zone id is out of range
[  109.475334][ T8543] netlink: zone id is out of range
[  109.477390][ T8543] netlink: zone id is out of range
[  109.504230][ T8543] netlink: zone id is out of range
[  109.506866][ T8543] netlink: zone id is out of range
[  109.509313][ T8543] netlink: zone id is out of range
[  109.513248][ T8543] netlink: zone id is out of range
[  109.515815][ T8543] netlink: zone id is out of range
[  109.518062][ T8543] netlink: zone id is out of range
[  109.520710][ T8543] netlink: zone id is out of range
[  109.560420][ T5846] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.683042][ T8554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1141'.
[  109.709300][ T5846] bridge_slave_1: left allmulticast mode
[  109.711117][ T5846] bridge_slave_1: left promiscuous mode
[  109.715760][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.728362][ T5846] bridge_slave_0: left allmulticast mode
[  109.730255][ T5846] bridge_slave_0: left promiscuous mode
[  109.732160][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.025251][ T5840] Bluetooth: hci1: command tx timeout
[  110.163634][ T5846] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  110.169043][ T5846] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  110.172806][ T5846] bond0 (unregistering): Released all slaves
[  110.411799][ T5846] hsr_slave_0: left promiscuous mode
[  110.417754][ T5846] hsr_slave_1: left promiscuous mode
[  110.420779][ T5846] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  110.423943][ T5846] batman_adv: batadv0: Removing interface: batadv_slave_0
[  110.427829][ T5846] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  110.430770][ T5846] batman_adv: batadv0: Removing interface: batadv_slave_1
[  110.454981][ T5846] veth1_macvtap: left promiscuous mode
[  110.457516][ T5846] veth0_macvtap: left promiscuous mode
[  110.460002][ T5846] veth1_vlan: left promiscuous mode
[  110.462300][ T5846] veth0_vlan: left promiscuous mode
[  111.091389][ T5846] team0 (unregistering): Port device team_slave_1 removed
[  111.135097][ T5846] team0 (unregistering): Port device team_slave_0 removed
[  111.279642][ T8591] netlink: 'syz.2.1152': attribute type 10 has an invalid length.
[  111.283567][ T8591] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1152'.
[  111.612944][ T8591] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  111.622778][ T8591] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  111.630670][ T8591] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  111.643534][ T8591] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  111.664562][ T8591] team0: Port device geneve0 added
[  111.842699][ T8439] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  111.849496][ T8439] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  111.860523][ T8439] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  111.876134][ T8439] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  111.978384][ T8439] 8021q: adding VLAN 0 to HW filter on device bond0
[  112.009150][ T8439] 8021q: adding VLAN 0 to HW filter on device team0
[  112.021411][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[  112.024303][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[  112.045824][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[  112.048794][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[  112.102573][ T5840] Bluetooth: hci1: command tx timeout
[  112.200369][ T8623] netlink: 'syz.2.1163': attribute type 1 has an invalid length.
[  112.249178][ T8626] netlink: 'syz.2.1164': attribute type 1 has an invalid length.
[  112.252287][ T8626] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1164'.
[  112.262064][ T8439] 8021q: adding VLAN 0 to HW filter on device batadv0
[  112.319630][ T8439] veth0_vlan: entered promiscuous mode
[  112.331544][ T8439] veth1_vlan: entered promiscuous mode
[  112.368516][ T8439] veth0_macvtap: entered promiscuous mode
[  112.377843][ T8439] veth1_macvtap: entered promiscuous mode
[  112.395100][ T8439] batman_adv: batadv0: Interface activated: batadv_slave_0
[  112.409081][ T8439] batman_adv: batadv0: Interface activated: batadv_slave_1
[  112.417717][ T8439] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  112.421255][ T8439] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  112.432821][ T8439] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  112.436900][ T8439] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  112.540110][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  112.546355][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  112.590451][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  112.595171][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  113.939678][ T8676] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1188'.
[  114.021424][ T8682] veth2: entered allmulticast mode
[  114.335948][ T5846] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.919092][ T8702] net_ratelimit: 6 callbacks suppressed
[  114.919109][ T8702] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  115.097700][ T8712] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1205'.
[  115.103588][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  115.108667][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  115.112211][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  115.117662][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  115.121227][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  115.325407][ T8729] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  115.332248][ T8713] chnl_net:caif_netlink_parms(): no params data found
[  115.382985][ T8729] bridge_slave_0: left allmulticast mode
[  115.385218][ T8729] bridge_slave_0: left promiscuous mode
[  115.387142][ T8729] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.397879][ T8729] bridge_slave_1: left allmulticast mode
[  115.399689][ T8729] bridge_slave_1: left promiscuous mode
[  115.401819][ T8729] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.413947][ T8729] bond0: (slave bond_slave_0): Releasing backup interface
[  115.419158][ T8729] bond0: (slave bond_slave_1): Releasing backup interface
[  115.425734][ T8729] team0: Port device team_slave_0 removed
[  115.444919][ T8729] team0: Port device team_slave_1 removed
[  115.448907][ T8729] bond0: (slave macvlan0): Releasing backup interface
[  115.458294][ T8729] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  115.461579][ T8729] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  115.470239][ T8738] netlink: 'syz.2.1210': attribute type 10 has an invalid length.
[  115.476714][ T8729] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  115.480048][ T8729] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  115.493373][ T8729] team0: Port device geneve0 removed
[  115.501622][ T8729] bond1: (slave ip6gretap2): Removing an active aggregator
[  115.514356][ T5863] bond1: Warning: Found an uninitialized port
[  115.519751][ T8729] bond1: (slave ip6gretap2): Releasing backup interface
[  115.523381][ T8729] bond1: (slave ip6gretap2): the permanent HWaddr of slave - 6e:cd:dd:8d:c4:14 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  115.553795][ T8729] bond1: (slave veth5): Releasing backup interface
[  115.576645][ T8738] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  115.588484][ T8738] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  115.640136][ T8741] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  115.654026][ T8741] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  115.896380][ T8713] bridge0: port 1(bridge_slave_0) entered blocking state
[  115.902762][ T8713] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.907742][ T8713] bridge_slave_0: entered allmulticast mode
[  115.911692][ T8713] bridge_slave_0: entered promiscuous mode
[  115.921385][ T8713] bridge0: port 2(bridge_slave_1) entered blocking state
[  115.924799][ T8713] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.928380][ T8713] bridge_slave_1: entered allmulticast mode
[  115.932229][ T8713] bridge_slave_1: entered promiscuous mode
[  115.970563][ T5846] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.998189][ T8713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  116.005609][ T8713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  116.056424][ T5846] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.069281][ T8713] team0: Port device team_slave_0 added
[  116.075338][ T8713] team0: Port device team_slave_1 added
[  116.101965][ T8753] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000035: 0000 [#1] SMP KASAN PTI
[  116.106485][ T8753] KASAN: null-ptr-deref in range [0x00000000000001a8-0x00000000000001af]
[  116.110549][ T8753] CPU: 0 UID: 0 PID: 8753 Comm: syz.1.1218 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  116.115735][ T8753] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  116.119738][ T8753] RIP: 0010:htb_qlen_notify+0x31/0xc0
[  116.121852][ T8753] Code: 41 56 41 55 41 54 53 49 89 f6 49 89 ff 49 bc 00 00 00 00 00 fc ff df e8 7d a6 3e f8 49 8d 9e a8 01 00 00 49 89 dd 49 c1 ed 03 <43> 0f b6 44 25 00 84 c0 75 4d 8b 2b 31 ff 89 ee e8 9a aa 3e f8 85
[  116.129044][ T8753] RSP: 0018:ffffc90002f5efb0 EFLAGS: 00010206
[  116.131538][ T8753] RAX: ffffffff8981b7f3 RBX: 00000000000001a8 RCX: 0000000000080000
[  116.134497][ T8753] RDX: ffffc900038c2000 RSI: 0000000000000bc0 RDI: 0000000000000bc1
[  116.137364][ T8753] RBP: dffffc0000000000 R08: ffff88810a54d640 R09: 0000000000000002
[  116.139957][ T8753] R10: 00000000ffffffff R11: ffffffff8981b7d0 R12: dffffc0000000000
[  116.142484][ T8753] R13: 0000000000000035 R14: 0000000000000000 R15: ffff88811b3e2000
[  116.144900][ T8753] FS:  00007f25f927c6c0(0000) GS:ffff8880b861d000(0000) knlGS:0000000000000000
[  116.147559][ T8753] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  116.149563][ T8753] CR2: 0000001b3061cff8 CR3: 00000000285f2000 CR4: 00000000000006f0
[  116.152036][ T8753] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  116.154485][ T8753] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  116.156804][ T8753] Call Trace:
[  116.157811][ T8753]  <TASK>
[  116.158684][ T8753]  qdisc_tree_reduce_backlog+0x29c/0x480
[  116.160359][ T8753]  ? qdisc_tree_reduce_backlog+0x3c/0x480
[  116.162030][ T8753]  fq_change+0x1519/0x1f50
[  116.163409][ T8753]  ? __pfx_fq_change+0x10/0x10
[  116.164876][ T8753]  ? __hrtimer_setup+0x187/0x210
[  116.166365][ T8753]  fq_init+0x699/0x960
[  116.167574][ T8753]  ? __pfx_fq_init+0x10/0x10
[  116.168926][ T8753]  ? lockdep_rtnl_is_held+0x26/0x40
[  116.170538][ T8753]  ? qdisc_lookup+0x36d/0x6d0
[  116.172266][ T8753]  ? __pfx_fq_init+0x10/0x10
[  116.173686][ T8753]  qdisc_create+0x7ac/0xea0
[  116.175085][ T8753]  tc_modify_qdisc+0x1426/0x2010
[  116.176587][ T8753]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  116.178145][ T8753]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  116.179708][ T8753]  rtnetlink_rcv_msg+0x77c/0xb70
[  116.181455][ T8753]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  116.183676][ T8753]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  116.185839][ T8753]  ? ref_tracker_free+0x63a/0x7d0
[  116.187965][ T8753]  ? __copy_skb_header+0xa7/0x550
[  116.190013][ T8753]  ? __pfx_ref_tracker_free+0x10/0x10
[  116.192112][ T8753]  netlink_rcv_skb+0x208/0x470
[  116.193709][ T8753]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  116.195379][ T8753]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  116.196885][ T8753]  ? netlink_deliver_tap+0x2e/0x1b0
[  116.198443][ T8753]  ? netlink_deliver_tap+0x2e/0x1b0
[  116.199979][ T8753]  netlink_unicast+0x75b/0x8d0
[  116.201547][ T8753]  netlink_sendmsg+0x805/0xb30
[  116.203213][ T8753]  ? __pfx_netlink_sendmsg+0x10/0x10
[  116.205338][ T8753]  ? aa_sock_msg_perm+0x94/0x160
[  116.207178][ T8753]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  116.209056][ T8753]  ? __pfx_netlink_sendmsg+0x10/0x10
[  116.210901][ T8753]  __sock_sendmsg+0x21c/0x270
[  116.212520][ T8753]  ____sys_sendmsg+0x505/0x830
[  116.214088][ T8753]  ? __pfx_____sys_sendmsg+0x10/0x10
[  116.215673][ T8753]  ? import_iovec+0x74/0xa0
[  116.217346][ T8753]  ___sys_sendmsg+0x21f/0x2a0
[  116.218989][ T8753]  ? __pfx____sys_sendmsg+0x10/0x10
[  116.220678][ T8753]  ? __fget_files+0x2a/0x420
[  116.222285][ T8753]  ? __fget_files+0x3a0/0x420
[  116.223850][ T8753]  __x64_sys_sendmsg+0x19b/0x260
[  116.225548][ T8753]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  116.227237][ T8753]  ? rcu_is_watching+0x15/0xb0
[  116.228710][ T8753]  ? do_syscall_64+0xbe/0x3b0
[  116.230147][ T8753]  do_syscall_64+0xfa/0x3b0
[  116.231704][ T8753]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.234098][ T8753]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  116.236498][ T8753]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.238599][ T8753] RIP: 0033:0x7f25f838e929
[  116.240213][ T8753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  116.246652][ T8753] RSP: 002b:00007f25f927c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  116.249533][ T8753] RAX: ffffffffffffffda RBX: 00007f25f85b5fa0 RCX: 00007f25f838e929
[  116.252704][ T8753] RDX: 0000000000004000 RSI: 0000200000000280 RDI: 0000000000000003
[  116.255681][ T8753] RBP: 00007f25f8410b39 R08: 0000000000000000 R09: 0000000000000000
[  116.258294][ T8753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  116.261320][ T8753] R13: 0000000000000000 R14: 00007f25f85b5fa0 R15: 00007fffc48917e8
[  116.264366][ T8753]  </TASK>
[  116.265575][ T8753] Modules linked in:
[  116.267323][ T8753] ---[ end trace 0000000000000000 ]---
[  116.269386][ T8753] RIP: 0010:htb_qlen_notify+0x31/0xc0
[  116.271471][ T8753] Code: 41 56 41 55 41 54 53 49 89 f6 49 89 ff 49 bc 00 00 00 00 00 fc ff df e8 7d a6 3e f8 49 8d 9e a8 01 00 00 49 89 dd 49 c1 ed 03 <43> 0f b6 44 25 00 84 c0 75 4d 8b 2b 31 ff 89 ee e8 9a aa 3e f8 85
[  116.279443][ T8753] RSP: 0018:ffffc90002f5efb0 EFLAGS: 00010206
[  116.281920][ T8753] RAX: ffffffff8981b7f3 RBX: 00000000000001a8 RCX: 0000000000080000
[  116.285097][ T8753] RDX: ffffc900038c2000 RSI: 0000000000000bc0 RDI: 0000000000000bc1
[  116.288101][ T8753] RBP: dffffc0000000000 R08: ffff88810a54d640 R09: 0000000000000002
[  116.291458][ T8753] R10: 00000000ffffffff R11: ffffffff8981b7d0 R12: dffffc0000000000
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  116.294757][ T8753] R13: 0000000000000035 R14: 0000000000000000 R15: ffff88811b3e2000
[  116.297828][ T8753] FS:  00007f25f927c6c0(0000) GS:ffff8880b861d000(0000) knlGS:0000000000000000
[  116.300854][ T8753] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  116.303678][ T8753] CR2: 0000001b3061cff8 CR3: 00000000285f2000 CR4: 00000000000006f0
[  116.306195][ T8753] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  116.308793][ T8753] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  116.312035][ T8753] Kernel panic - not syncing: Fatal exception in interrupt
[  116.314902][ T8753] Kernel Offset: disabled
[  116.316315][ T8753] Rebooting in 86400 seconds..

VM DIAGNOSIS:
12:56:17  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000018b7 RDI=00000000000018b8 RBP=00000000000003f8 RSP=ffffc90002f5e7f0
R8 =ffff8881088d0237 R9 =1ffff1102111a046 R10=dffffc0000000000 R11=ffffffff85475610
R12=dffffc0000000000 R13=ffffffff99af790e R14=ffffffff99dfc760 R15=0000000000000000
RIP=ffffffff8547568c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f25f927c6c0 ffffffff 00c00000
GS =0000 ffff8880b861d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b3061cff8 CR3=00000000285f2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f25f8411c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=4905c00456821700 RBX=ffffffff81975d58 RCX=4905c00456821700 RDX=0000000000000001
RSI=ffffffff8be28fa0 RDI=ffffffff81975d58 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f5b R9 =1ffff11026cc65eb R10=dffffc0000000000 R11=ffffed1026cc65ec
R12=ffffffff8fa1def0 R13=0000000000000001 R14=0000000000000001 R15=1ffff1102001f000
RIP=ffffffff8b6ee4a3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c30e740 CR3=00000001205f8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0030766461746162
XMM02=00000000000003ff 00007ffdbe7ec450 XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffffff ff00000000000000 XMM05=0000000000000000 00007f1ce2811b1f
XMM06=0000000000000000 00007f1ce2811b19 XMM07=0000000000000000 00007f1ce2811b2d
XMM08=0000000000000000 00007f1ce2811bb3 XMM09=0000000000000000 00007f1ce2811c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
