last executing test programs:

20.40632694s ago: executing program 2 (id=12):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="02"], 0x10)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@cgroup=r2, 0x2, 0x0, 0x3ff, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40)

20.283667075s ago: executing program 2 (id=16):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x18}, 0x90)

19.363552037s ago: executing program 2 (id=31):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800000012000501000000000000000028001a00ac14141800000000000000000000000000000000020006097c9c0f685821e08adf739945"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x20040810)

13.303827077s ago: executing program 2 (id=31):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800000012000501000000000000000028001a00ac14141800000000000000000000000000000000020006097c9c0f685821e08adf739945"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x20040810)

7.542109479s ago: executing program 2 (id=31):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800000012000501000000000000000028001a00ac14141800000000000000000000000000000000020006097c9c0f685821e08adf739945"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x20040810)

4.262142329s ago: executing program 1 (id=266):
r0 = socket$inet(0xa, 0x801, 0x84)
listen(r0, 0x2)
r1 = socket$inet(0xa, 0x801, 0x84)
listen(r1, 0xfffffffd)
r2 = socket$inet(0xa, 0x801, 0x84)
listen(r2, 0x8)
r3 = socket$inet(0xa, 0x801, 0x84)
listen(r3, 0x8)
r4 = socket$inet6(0xa, 0x1, 0x8010000000000084)
listen(r4, 0x7)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
listen(r5, 0x100)
r6 = socket$netlink(0x10, 0x3, 0x4)
writev(r6, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6)

4.206405282s ago: executing program 1 (id=267):
mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
r0 = socket(0x8, 0x3, 0x0)
ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1c00000000000000", @ANYRES32, @ANYBLOB="ff5aa60e942f7e22ac2975d519fc3b96d7f99b5b54d0744297a39ac23d76df3129a825cc88883049a3b2ed47ba073f390acce2b9b412a70e23e50500ff25e40de8c68d129bef45e7c34214", @ANYRES32, @ANYBLOB="62c2ed2b8801727e358a2cb370a1537fd9aa60583c1c89b90e3e75b17cc58ff0a4df1af2617456a69abb091f71445a4f71697fcb278fdbfa0ba7fe299b74674257773691f6867fe6cfca8250620050261025acf46e92b7082b17e369e380f3a843dc1f0ae0df6ec0007b7b7ae874a5a04f442c3fdadecd454e9761728fa740ba504497e9de99fcbf94b759ad33c1edafe623cd2e3a12fe5b", @ANYRES64=0x0], 0x20)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYRESDEC=r1], 0x38}, 0x1, 0x0, 0x0, 0x448c1}, 0x24004050)
unshare(0x6a040000)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x30, 0x1410, 0x800, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x48}, 0x4000)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socket$kcm(0x28, 0x1, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}}, &(0x7f0000000980)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r3}, 0x10)
ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'team0\x00', @random="2b0100004ec6"})

2.255821914s ago: executing program 1 (id=271):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$inet(0x2, 0x3, 0x33)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28)

2.174680975s ago: executing program 1 (id=272):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="020000"], 0x10)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r2, 0x2, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f00000014c0), 0x0, 0x0}, 0x40)

2.055832274s ago: executing program 1 (id=274):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000080), 0x4)

1.805077425s ago: executing program 1 (id=280):
r0 = socket$kcm(0x25, 0x1, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff56}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20)

1.34493889s ago: executing program 2 (id=31):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800000012000501000000000000000028001a00ac14141800000000000000000000000000000000020006097c9c0f685821e08adf739945"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x20040810)

505.678449ms ago: executing program 0 (id=288):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="02030009060000fe"], 0x33fe0}}, 0x0)

395.088621ms ago: executing program 0 (id=289):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000090000008500000011000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f0000000300)="0000f1bcd399b81e1011f5aa5e5c", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

221.304336ms ago: executing program 0 (id=290):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000)=0x2e592894, 0x4)

124.264417ms ago: executing program 0 (id=291):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@fwd={0x8}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @typedef={0x8, 0x0, 0x0, 0xf, 0x1}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x5f]}}, 0x0, 0x46}, 0x28)

62.688461ms ago: executing program 0 (id=292):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@rand_addr=0x64010100, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0}, {@in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x0, 0x33}, @in6=@empty, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff1, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0)

0s ago: executing program 0 (id=293):
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0)
syz_emit_ethernet(0x34e, &(0x7f0000000780)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x318, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x5a, 0x1, 0x0, 0x0, [{0x3, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x2000000000000199, "000005000000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea468000000000054740a5d4901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2bce9ac946a3f0e2bc4000091394c02bcfbbb7d71138537d68e2d2c6393a9f3cc271a9ff09a48b5b303f4f0"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14ccb44d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d260600aa89c8f267d76ece1c9f6ae2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:16482' (ED25519) to the list of known hosts.
syzkaller login: [   56.421404][ T5809] cgroup: Unknown subsys name 'net'
[   56.503023][ T5809] cgroup: Unknown subsys name 'cpuset'
[   56.508309][ T5809] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.507124][ T5809] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   63.751883][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   63.755280][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   63.757928][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   63.761685][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   63.765445][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   63.820455][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   63.824484][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   63.827742][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   63.831795][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   63.835160][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   63.857894][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   63.863784][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   63.867412][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   63.873817][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   63.878706][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.152782][ T5828] chnl_net:caif_netlink_parms(): no params data found
[   64.210286][ T5832] chnl_net:caif_netlink_parms(): no params data found
[   64.335965][ T5834] chnl_net:caif_netlink_parms(): no params data found
[   64.365398][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.368291][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.372424][ T5828] bridge_slave_0: entered allmulticast mode
[   64.376289][ T5828] bridge_slave_0: entered promiscuous mode
[   64.402100][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.405765][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.409476][ T5828] bridge_slave_1: entered allmulticast mode
[   64.415373][ T5828] bridge_slave_1: entered promiscuous mode
[   64.442119][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.444911][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.447683][ T5832] bridge_slave_0: entered allmulticast mode
[   64.452676][ T5832] bridge_slave_0: entered promiscuous mode
[   64.484276][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.487106][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.490086][ T5832] bridge_slave_1: entered allmulticast mode
[   64.494106][ T5832] bridge_slave_1: entered promiscuous mode
[   64.531876][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.557233][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.563284][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.575396][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.618858][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.621954][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.624464][ T5834] bridge_slave_0: entered allmulticast mode
[   64.627121][ T5834] bridge_slave_0: entered promiscuous mode
[   64.648888][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.652006][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.654705][ T5834] bridge_slave_1: entered allmulticast mode
[   64.657858][ T5834] bridge_slave_1: entered promiscuous mode
[   64.673017][ T5828] team0: Port device team_slave_0 added
[   64.678113][ T5832] team0: Port device team_slave_0 added
[   64.695892][ T5828] team0: Port device team_slave_1 added
[   64.700915][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.705698][ T5832] team0: Port device team_slave_1 added
[   64.724191][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.766370][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.769182][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.780043][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.808245][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.814349][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.824402][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.829245][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.832967][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.842788][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.849437][ T5834] team0: Port device team_slave_0 added
[   64.860246][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.862953][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.873104][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.878652][ T5834] team0: Port device team_slave_1 added
[   64.934983][ T5828] hsr_slave_0: entered promiscuous mode
[   64.938185][ T5828] hsr_slave_1: entered promiscuous mode
[   64.955342][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.957907][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.965838][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.971219][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.973334][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.981265][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.053807][ T5832] hsr_slave_0: entered promiscuous mode
[   65.057002][ T5832] hsr_slave_1: entered promiscuous mode
[   65.060983][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   65.064133][ T5832] Cannot create hsr debugfs directory
[   65.120453][ T5834] hsr_slave_0: entered promiscuous mode
[   65.123714][ T5834] hsr_slave_1: entered promiscuous mode
[   65.126606][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   65.131519][ T5834] Cannot create hsr debugfs directory
[   65.439393][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   65.451389][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   65.458781][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   65.474574][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   65.515107][ T5834] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.524626][ T5834] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.541060][ T5834] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.556059][ T5834] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.602414][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.610288][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.623900][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.636756][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   65.716708][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.756470][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   65.785187][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.794355][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.797577][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.813241][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.815725][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.844442][ T5834] 8021q: adding VLAN 0 to HW filter on device team0
[   65.850964][   T54] Bluetooth: hci1: command tx timeout
[   65.851088][ T5830] Bluetooth: hci0: command tx timeout
[   65.871351][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.874303][ T1095] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.892904][ T1095] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.895332][ T1095] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.901690][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.929410][ T5828] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   65.930438][ T5830] Bluetooth: hci2: command tx timeout
[   65.933496][ T5828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   65.952263][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   65.971381][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.973569][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.985623][ T5834] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   66.015656][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.018467][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.142809][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.198207][ T5828] veth0_vlan: entered promiscuous mode
[   66.228735][ T5828] veth1_vlan: entered promiscuous mode
[   66.259217][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.287333][ T5828] veth0_macvtap: entered promiscuous mode
[   66.298947][ T5828] veth1_macvtap: entered promiscuous mode
[   66.307696][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.349061][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.368953][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.390273][ T5828] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.393113][ T5828] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.396012][ T5828] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.398838][ T5828] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.404049][ T5834] veth0_vlan: entered promiscuous mode
[   66.408052][ T5832] veth0_vlan: entered promiscuous mode
[   66.420441][ T5834] veth1_vlan: entered promiscuous mode
[   66.424409][ T5832] veth1_vlan: entered promiscuous mode
[   66.491541][ T5834] veth0_macvtap: entered promiscuous mode
[   66.534724][ T5834] veth1_macvtap: entered promiscuous mode
[   66.538576][ T5832] veth0_macvtap: entered promiscuous mode
[   66.541451][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.551658][ T5832] veth1_macvtap: entered promiscuous mode
[   66.554360][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.599140][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.612881][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.622605][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.625546][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.631187][ T5834] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.634601][ T5834] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.637864][ T5834] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.642105][ T5834] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.659186][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.675645][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.706946][ T5832] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.713848][ T5832] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.717385][ T5832] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.723242][ T5832] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.762344][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   66.823326][ T5893] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   66.858397][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.863494][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.920393][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.922880][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.975031][  T181] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.978123][  T181] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.010378][  T181] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.018141][  T181] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.092728][ T5903] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   67.095093][ T5903] IPv6: NLM_F_CREATE should be set when creating new route
[   67.331119][ T5919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13'.
[   67.334526][ T5919] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13'.
[   67.426630][ T5922] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14'.
[   67.774862][ T5941] Bluetooth: MGMT ver 1.23
[   67.864853][ T5948] netlink: 244 bytes leftover after parsing attributes in process `syz.1.28'.
[   67.930259][ T5830] Bluetooth: hci1: command tx timeout
[   67.932075][   T54] Bluetooth: hci0: command tx timeout
[   68.308265][ T5838] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.686956][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   68.692073][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   68.696952][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   68.704234][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   68.717478][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   68.847976][ T5968] netlink: 260 bytes leftover after parsing attributes in process `syz.1.35'.
[   69.086043][ T5960] chnl_net:caif_netlink_parms(): no params data found
[   69.263064][ T5960] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.270721][ T5960] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.274858][ T5960] bridge_slave_0: entered allmulticast mode
[   69.278832][ T5960] bridge_slave_0: entered promiscuous mode
[   69.297701][ T5960] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.306527][ T5960] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.309286][ T5960] bridge_slave_1: entered allmulticast mode
[   69.325671][ T5960] bridge_slave_1: entered promiscuous mode
[   69.382553][ T5838] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.402909][ T5960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.408419][ T5960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.476683][ T5838] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.490053][ T5960] team0: Port device team_slave_0 added
[   69.496386][ T6003] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[   69.499076][ T6003] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[   69.501288][ T6004] netlink: 'syz.0.50': attribute type 1 has an invalid length.
[   69.503776][ T6003] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[   69.504123][ T6004] netlink: 'syz.0.50': attribute type 1 has an invalid length.
[   69.506780][ T6003] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[   69.513132][ T6003] geneve2: entered promiscuous mode
[   69.517515][ T5960] team0: Port device team_slave_1 added
[   69.568824][ T5838] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.626692][ T5960] batman_adv: batadv0: Adding interface: batadv_slave_0
[   69.629310][ T5960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.648193][ T5960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   69.682797][ T5960] batman_adv: batadv0: Adding interface: batadv_slave_1
[   69.683661][ T6016] netlink: 28 bytes leftover after parsing attributes in process `syz.0.56'.
[   69.685501][ T5960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.698851][ T5960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   69.713585][ T6016] Zero length message leads to an empty skb
[   69.805296][ T5960] hsr_slave_0: entered promiscuous mode
[   69.815526][ T5960] hsr_slave_1: entered promiscuous mode
[   69.817678][ T5960] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   69.821115][ T5960] Cannot create hsr debugfs directory
[   69.839147][ T6023] netlink: 20 bytes leftover after parsing attributes in process `syz.0.59'.
[   69.985880][ T5838] bridge_slave_1: left allmulticast mode
[   69.987992][ T5838] bridge_slave_1: left promiscuous mode
[   69.992016][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.006914][ T5838] bridge_slave_0: left allmulticast mode
[   70.008937][ T5838] bridge_slave_0: left promiscuous mode
[   70.010273][ T5830] Bluetooth: hci1: command tx timeout
[   70.010966][   T54] Bluetooth: hci0: command tx timeout
[   70.016514][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.224323][ T6037] netlink: 'syz.0.64': attribute type 13 has an invalid length.
[   70.227034][ T6037] netlink: 'syz.0.64': attribute type 17 has an invalid length.
[   70.347165][ T5838] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   70.353008][ T5838] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   70.358250][ T5838] bond0 (unregistering): Released all slaves
[   70.402049][ T6042] netlink: 16 bytes leftover after parsing attributes in process `syz.0.64'.
[   70.464715][ T6043] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   70.469354][ T6037] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   70.528396][ T6034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   70.593349][ T6037] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   70.729975][   T54] Bluetooth: hci2: command tx timeout
[   70.756974][ T6054] netlink: 24 bytes leftover after parsing attributes in process `syz.1.65'.
[   70.791934][ T5838] hsr_slave_0: left promiscuous mode
[   70.805381][ T5838] hsr_slave_1: left promiscuous mode
[   70.808130][ T5838] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   70.813761][ T5838] batman_adv: batadv0: Removing interface: batadv_slave_0
[   70.818756][ T5838] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   70.824948][ T5838] batman_adv: batadv0: Removing interface: batadv_slave_1
[   70.844032][ T5838] veth1_macvtap: left promiscuous mode
[   70.846417][ T5838] veth0_macvtap: left promiscuous mode
[   70.848652][ T5838] veth1_vlan: left promiscuous mode
[   70.851332][ T5838] veth0_vlan: left promiscuous mode
[   71.257463][ T5838] team0 (unregistering): Port device team_slave_1 removed
[   71.297674][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.300681][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.315319][ T5838] team0 (unregistering): Port device team_slave_0 removed
[   71.914669][ T5960] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   71.938332][ T5960] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   71.955208][ T5960] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   72.007142][ T5960] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   72.094201][   T54] Bluetooth: hci0: command tx timeout
[   72.096702][   T54] Bluetooth: hci1: command tx timeout
[   72.188857][ T5960] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.233647][ T5891] IPVS: starting estimator thread 0...
[   72.242308][ T6108] netlink: 24 bytes leftover after parsing attributes in process `syz.1.85'.
[   72.282793][ T5960] 8021q: adding VLAN 0 to HW filter on device team0
[   72.298777][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.301328][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.320021][ T6106] IPVS: using max 62 ests per chain, 148800 per kthread
[   72.338835][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.341501][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.628784][ T5960] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.677986][ T5960] veth0_vlan: entered promiscuous mode
[   72.687505][ T5960] veth1_vlan: entered promiscuous mode
[   72.711249][ T5960] veth0_macvtap: entered promiscuous mode
[   72.718970][ T5960] veth1_macvtap: entered promiscuous mode
[   72.748569][ T5960] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.759454][ T5960] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.771942][ T5960] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.775407][ T5960] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.778726][ T5960] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.785698][ T5960] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.810152][   T54] Bluetooth: hci2: command tx timeout
[   72.882122][  T181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.884981][  T181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.891821][ T6142] xt_TPROXY: Can be used only with -p tcp or -p udp
[   72.919893][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.923251][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.002825][ T6146] netlink: 'syz.1.101': attribute type 11 has an invalid length.
[   73.114082][ T6149] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   73.168516][ T6149] netlink: 'syz.1.102': attribute type 4 has an invalid length.
[   73.180964][ T6149] netlink: 'syz.1.102': attribute type 10 has an invalid length.
[   73.195934][ T6149] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.201575][ T6149] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   73.633115][ T6163] __nla_validate_parse: 1 callbacks suppressed
[   73.633126][ T6163] netlink: 132 bytes leftover after parsing attributes in process `syz.0.108'.
[   73.651408][ T6167] netlink: 'syz.1.110': attribute type 5 has an invalid length.
[   73.741186][ T6173] netlink: 'syz.1.113': attribute type 12 has an invalid length.
[   73.743448][ T6173] netlink: 'syz.1.113': attribute type 29 has an invalid length.
[   73.745679][ T6173] netlink: 148 bytes leftover after parsing attributes in process `syz.1.113'.
[   73.750682][ T6173] netlink: 43 bytes leftover after parsing attributes in process `syz.1.113'.
[   73.755742][ T6175] netlink: 16 bytes leftover after parsing attributes in process `syz.0.114'.
[   74.148975][ T6209] syz.1.128 uses obsolete (PF_INET,SOCK_PACKET)
[   74.448427][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.625501][ T6237] validate_nla: 2 callbacks suppressed
[   74.625544][ T6237] netlink: 'syz.0.138': attribute type 1 has an invalid length.
[   74.639742][ T6237] netlink: 'syz.0.138': attribute type 2 has an invalid length.
[   74.789225][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   74.795349][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   74.799410][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   74.813315][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   74.817711][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   75.084124][ T6243] chnl_net:caif_netlink_parms(): no params data found
[   75.253411][ T6243] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.256674][ T6243] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.266299][ T6243] bridge_slave_0: entered allmulticast mode
[   75.275661][ T6243] bridge_slave_0: entered promiscuous mode
[   75.286417][ T6243] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.298057][ T6243] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.302130][ T6243] bridge_slave_1: entered allmulticast mode
[   75.305970][ T6243] bridge_slave_1: entered promiscuous mode
[   75.366095][ T6243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   75.390273][ T6243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   75.426701][ T6243] team0: Port device team_slave_0 added
[   75.432447][ T6243] team0: Port device team_slave_1 added
[   75.481680][ T6243] batman_adv: batadv0: Adding interface: batadv_slave_0
[   75.487043][ T6243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   75.510030][ T6243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   75.523943][ T6243] batman_adv: batadv0: Adding interface: batadv_slave_1
[   75.527131][ T6243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   75.550003][ T6243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   75.580733][ T6294] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[   75.643618][ T6243] hsr_slave_0: entered promiscuous mode
[   75.748514][ T6243] hsr_slave_1: entered promiscuous mode
[   75.751635][ T6243] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   75.754357][ T6243] Cannot create hsr debugfs directory
[   76.151321][ T6319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.172'.
[   76.153986][ T6319] netlink: 4 bytes leftover after parsing attributes in process `syz.0.172'.
[   76.156733][ T6319] netlink: 'syz.0.172': attribute type 7 has an invalid length.
[   76.225301][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.363984][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.427245][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.573180][   T12] bridge_slave_1: left allmulticast mode
[   76.574916][   T12] bridge_slave_1: left promiscuous mode
[   76.576651][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.596858][   T12] bridge_slave_0: left allmulticast mode
[   76.598957][   T12] bridge_slave_0: left promiscuous mode
[   76.602382][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.732164][ T6343] netlink: 4 bytes leftover after parsing attributes in process `syz.0.183'.
[   76.772250][   T33] audit: type=1800 audit(1752114365.066:2): pid=6345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.184" name="blkio.bfq.time_recursive" dev="tmpfs" ino=456 res=0 errno=0
[   76.889931][   T54] Bluetooth: hci2: command tx timeout
[   76.943667][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   76.949272][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   76.955245][   T12] bond0 (unregistering): Released all slaves
[   77.185095][ T6355] netlink: 'syz.0.187': attribute type 2 has an invalid length.
[   77.323125][ T6347] infiniband syz0: set down
[   77.331856][ T6347] infiniband syz0: added ipvlan1
[   77.391615][ T6347] RDS/IB: syz0: added
[   77.393265][ T6347] smc: adding ib device syz0 with port count 1
[   77.395274][ T6347] smc:    ib device syz0 port 1 has pnetid 
[   77.469075][ T6364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.190'.
[   77.480857][ T6364] netlink: 4 bytes leftover after parsing attributes in process `syz.0.190'.
[   77.487986][ T6364] netlink: 'syz.0.190': attribute type 1 has an invalid length.
[   77.493245][ T6364] netlink: 10 bytes leftover after parsing attributes in process `syz.0.190'.
[   77.577776][   T56] block nbd0: Receive control failed (result -107)
[   77.622072][ T6243] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   77.629972][ T6243] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   77.638783][ T6243] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   77.652460][ T6243] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   77.894518][ T6243] 8021q: adding VLAN 0 to HW filter on device bond0
[   77.943465][ T6243] 8021q: adding VLAN 0 to HW filter on device team0
[   77.954056][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.956398][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   77.984490][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.987034][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   78.257381][ T6243] 8021q: adding VLAN 0 to HW filter on device batadv0
[   78.314235][ T6243] veth0_vlan: entered promiscuous mode
[   78.323050][ T6243] veth1_vlan: entered promiscuous mode
[   78.365177][ T6243] veth0_macvtap: entered promiscuous mode
[   78.378853][ T6243] veth1_macvtap: entered promiscuous mode
[   78.418075][ T6243] batman_adv: batadv0: Interface activated: batadv_slave_0
[   78.437249][ T6243] batman_adv: batadv0: Interface activated: batadv_slave_1
[   78.454840][ T6243] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.458259][ T6243] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.466195][ T6243] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.477242][ T6243] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.626685][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.637067][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.678522][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.684868][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.919038][ T6347] syz.1.185 (6347) used greatest stack depth: 19528 bytes left
[   78.949426][ T6417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.199'.
[   79.158690][   T12] hsr_slave_0: left promiscuous mode
[   79.162796][   T12] hsr_slave_1: left promiscuous mode
[   79.165603][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   79.168433][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   79.220178][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   79.223041][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   79.260050][   T12] veth1_macvtap: left promiscuous mode
[   79.270114][   T12] veth0_macvtap: left promiscuous mode
[   79.272582][   T12] veth1_vlan: left promiscuous mode
[   79.274731][   T12] veth0_vlan: left promiscuous mode
[   79.751325][   T12] team0 (unregistering): Port device team_slave_1 removed
[   79.777119][   T12] team0 (unregistering): Port device team_slave_0 removed
[   80.408406][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.457423][ T6448] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   80.476556][ T6448] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.480992][ T6448] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.591126][ T6456] netlink: 'syz.1.210': attribute type 1 has an invalid length.
[   80.653259][ T6456] bond2: (slave gretap1): making interface the new active one
[   80.658234][ T6456] bond2: (slave gretap1): Enslaving as an active interface with an up link
[   80.685554][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   80.690692][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   80.703668][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   80.708034][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   80.712093][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   81.255449][ T6460] chnl_net:caif_netlink_parms(): no params data found
[   81.371118][ T6494] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   81.378176][ T6460] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.381969][ T6460] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.384494][ T6460] bridge_slave_0: entered allmulticast mode
[   81.387470][ T6460] bridge_slave_0: entered promiscuous mode
[   81.391662][ T6460] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.394138][ T6460] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.396658][ T6460] bridge_slave_1: entered allmulticast mode
[   81.401635][ T6460] bridge_slave_1: entered promiscuous mode
[   81.426659][ T6460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   81.436071][ T6460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   81.486300][ T6460] team0: Port device team_slave_0 added
[   81.490503][ T6460] team0: Port device team_slave_1 added
[   81.529481][ T6503] netlink: 'syz.1.228': attribute type 1 has an invalid length.
[   81.543335][ T6503] netlink: 'syz.1.228': attribute type 3 has an invalid length.
[   81.545827][ T6503] netlink: 224 bytes leftover after parsing attributes in process `syz.1.228'.
[   81.554145][ T6460] batman_adv: batadv0: Adding interface: batadv_slave_0
[   81.557034][ T6460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.595243][ T6460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   81.610897][ T6460] batman_adv: batadv0: Adding interface: batadv_slave_1
[   81.614183][ T6460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.642448][ T6460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   81.673817][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.701639][ T6512] xt_recent: Unsupported userspace flags (00000048)
[   81.741718][ T6460] hsr_slave_0: entered promiscuous mode
[   81.744771][ T6460] hsr_slave_1: entered promiscuous mode
[   81.748799][ T6460] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   81.752277][ T6460] Cannot create hsr debugfs directory
[   81.870993][ T6521] netlink: 20 bytes leftover after parsing attributes in process `syz.1.234'.
[   81.958169][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.017695][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.030562][ T6533] netlink: 32 bytes leftover after parsing attributes in process `syz.1.240'.
[   82.056099][ T6535] IPVS: persistence engine module ip_vs_pe_ not found
[   82.258140][   T12] bridge_slave_1: left allmulticast mode
[   82.263449][   T12] bridge_slave_1: left promiscuous mode
[   82.267000][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.275500][   T12] bridge_slave_0: left allmulticast mode
[   82.277776][   T12] bridge_slave_0: left promiscuous mode
[   82.281023][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.322843][ T6557] netlink: 4 bytes leftover after parsing attributes in process `syz.1.249'.
[   82.676215][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   82.680964][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   82.684933][   T12] bond0 (unregistering): Released all slaves
[   82.739925][ T5830] Bluetooth: hci2: command tx timeout
[   83.103237][ T6593] netlink: 16 bytes leftover after parsing attributes in process `syz.0.261'.
[   83.106751][ T6593] openvswitch: netlink: Missing key (keys=40, expected=80)
[   83.111342][ T6592] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   83.272311][ T6460] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   83.298037][ T6460] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   83.333614][ T6460] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   83.352130][ T6460] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   83.456714][   T12] hsr_slave_0: left promiscuous mode
[   83.472204][   T12] hsr_slave_1: left promiscuous mode
[   83.480756][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   83.483693][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   83.491109][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   83.493827][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   83.507846][   T12] veth1_macvtap: left promiscuous mode
[   83.514804][   T12] veth0_macvtap: left promiscuous mode
[   83.517112][   T12] veth1_vlan: left promiscuous mode
[   83.519113][   T12] veth0_vlan: left promiscuous mode
[   83.979466][   T12] team0 (unregistering): Port device team_slave_1 removed
[   84.013149][   T12] team0 (unregistering): Port device team_slave_0 removed
[   84.304411][ T6632] warning: `syz.0.269' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   84.389700][ T6460] 8021q: adding VLAN 0 to HW filter on device bond0
[   84.402581][ T6460] 8021q: adding VLAN 0 to HW filter on device team0
[   84.408960][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.411554][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.429257][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.432501][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   84.523439][ T6460] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   84.593459][   T47] cfg80211: failed to load regulatory.db
[   84.716691][ T6460] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.812429][ T6645] batman_adv: batadv0: Adding interface: ip6gretap1
[   84.815046][ T6645] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.820153][ T5830] Bluetooth: hci2: command tx timeout
[   84.827976][ T6645] batman_adv: batadv0: Interface activated: ip6gretap1
[   84.934014][ T6460] veth0_vlan: entered promiscuous mode
[   84.961528][ T6460] veth1_vlan: entered promiscuous mode
[   85.039818][ T6460] veth0_macvtap: entered promiscuous mode
[   85.051261][ T6460] veth1_macvtap: entered promiscuous mode
[   85.071692][ T6460] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.124550][ T6460] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.136205][ T6460] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.138896][ T6460] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.150086][ T6460] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.153538][ T6460] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.316112][ T3942] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.327272][ T3942] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.366883][ T3942] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.371534][ T3942] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.896920][ T5838] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.901317][ T5838] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[   85.967812][ T5838] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.972891][ T5838] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[   86.077183][ T5838] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.087226][ T5838] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[   86.211071][ T5838] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.215066][ T5838] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[   86.259924][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   86.263450][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   86.266714][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   86.273984][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   86.278658][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   86.400916][ T5838] bridge_slave_1: left allmulticast mode
[   86.403903][ T5838] bridge_slave_1: left promiscuous mode
[   86.406051][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.413196][ T5838] bridge_slave_0: left allmulticast mode
[   86.415244][ T5838] bridge_slave_0: left promiscuous mode
[   86.417041][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.549933][ T5838] bond2 (unregistering): (slave gretap1): Releasing active interface
[   86.694649][ T5838] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   86.698617][ T5838] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   86.703521][ T5838] bond0 (unregistering): (slave batadv0): Releasing backup interface
[   86.707892][ T5838] bond0 (unregistering): Released all slaves
[   86.716683][ T5838] bond1 (unregistering): Released all slaves
[   86.725069][ T5838] bond2 (unregistering): Released all slaves
[   87.138665][ T6672] chnl_net:caif_netlink_parms(): no params data found
[   87.263532][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   87.267368][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   87.271078][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   87.275850][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   87.283288][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   87.439889][ T6672] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.442807][ T6672] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.445811][ T6672] bridge_slave_0: entered allmulticast mode
[   87.470689][ T6672] bridge_slave_0: entered promiscuous mode
[   87.488996][ T5838] hsr_slave_0: left promiscuous mode
[   87.513133][ T5838] hsr_slave_1: left promiscuous mode
[   87.516091][ T5838] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   87.521318][ T5838] batman_adv: batadv0: Removing interface: batadv_slave_0
[   87.529441][ T5838] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   87.533282][ T5838] batman_adv: batadv0: Removing interface: batadv_slave_1
[   87.551788][ T5838] veth1_macvtap: left promiscuous mode
[   87.554342][ T5838] veth0_macvtap: left promiscuous mode
[   87.557215][ T5838] veth1_vlan: left promiscuous mode
[   87.570080][ T5838] veth0_vlan: left promiscuous mode
[   87.622254][ T6712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.292'.
[   87.684019][ T6714] IPv6: addrconf: prefix option has invalid lifetime
[   87.741234][   T40] smc: removing ib device syz0
[   87.931559][ T5838] team0 (unregistering): Port device team_slave_1 removed
[   87.960415][ T5838] team0 (unregistering): Port device team_slave_0 removed
[   88.267101][ T6672] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.270148][ T6672] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.272901][ T6672] bridge_slave_1: entered allmulticast mode
[   88.276027][ T6672] bridge_slave_1: entered promiscuous mode
[   88.307437][ T5296] ==================================================================
[   88.310041][ T5296] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x6e/0x190
[   88.312740][ T5296] Read of size 8 at addr ffff88803911c2e8 by task kworker/1:3/5296
[   88.316957][ T5296] 
[   88.317940][ T5296] CPU: 1 UID: 0 PID: 5296 Comm: kworker/1:3 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[   88.317959][ T5296] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   88.317971][ T5296] Workqueue: events smc_ib_port_event_work
[   88.317998][ T5296] Call Trace:
[   88.318007][ T5296]  <TASK>
[   88.318061][ T5296]  dump_stack_lvl+0x189/0x250
[   88.318081][ T5296]  ? __virt_addr_valid+0x1c8/0x5c0
[   88.318100][ T5296]  ? rcu_is_watching+0x15/0xb0
[   88.318118][ T5296]  ? __pfx_dump_stack_lvl+0x10/0x10
[   88.318135][ T5296]  ? rcu_is_watching+0x15/0xb0
[   88.318151][ T5296]  ? lock_release+0x4b/0x3e0
[   88.318168][ T5296]  ? __virt_addr_valid+0x1c8/0x5c0
[   88.318186][ T5296]  ? __virt_addr_valid+0x4a5/0x5c0
[   88.318205][ T5296]  print_report+0xd2/0x2b0
[   88.318220][ T5296]  ? __ethtool_get_link_ksettings+0x6e/0x190
[   88.318238][ T5296]  kasan_report+0x118/0x150
[   88.318257][ T5296]  ? __ethtool_get_link_ksettings+0x6e/0x190
[   88.318284][ T5296]  __ethtool_get_link_ksettings+0x6e/0x190
[   88.318304][ T5296]  ib_get_eth_speed+0x15e/0x7b0
[   88.318324][ T5296]  ? __pfx_ib_get_eth_speed+0x10/0x10
[   88.318345][ T5296]  ? do_raw_spin_unlock+0x4d/0x240
[   88.318366][ T5296]  rxe_query_port+0x93/0x3b0
[   88.318381][ T5296]  ib_query_port+0x170/0x830
[   88.318393][ T5296]  smc_ib_port_event_work+0x15a/0x940
[   88.318415][ T5296]  ? _raw_spin_unlock_irq+0x23/0x50
[   88.318432][ T5296]  ? process_scheduled_works+0x9ef/0x17b0
[   88.318446][ T5296]  ? process_scheduled_works+0x9ef/0x17b0
[   88.318460][ T5296]  process_scheduled_works+0xae1/0x17b0
[   88.318483][ T5296]  ? __pfx_process_scheduled_works+0x10/0x10
[   88.318502][ T5296]  worker_thread+0x8a0/0xda0
[   88.318518][ T5296]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   88.318539][ T5296]  ? __kthread_parkme+0x7b/0x200
[   88.318557][ T5296]  kthread+0x711/0x8a0
[   88.318576][ T5296]  ? __pfx_worker_thread+0x10/0x10
[   88.318590][ T5296]  ? __pfx_kthread+0x10/0x10
[   88.318607][ T5296]  ? _raw_spin_unlock_irq+0x23/0x50
[   88.318624][ T5296]  ? lockdep_hardirqs_on+0x9c/0x150
[   88.318635][ T5296]  ? __pfx_kthread+0x10/0x10
[   88.318652][ T5296]  ret_from_fork+0x3fc/0x770
[   88.318668][ T5296]  ? __pfx_ret_from_fork+0x10/0x10
[   88.318683][ T5296]  ? __switch_to_asm+0x39/0x70
[   88.318699][ T5296]  ? __switch_to_asm+0x33/0x70
[   88.318715][ T5296]  ? __pfx_kthread+0x10/0x10
[   88.318733][ T5296]  ret_from_fork_asm+0x1a/0x30
[   88.318756][ T5296]  </TASK>
[   88.318761][ T5296] 
[   88.409803][ T5296] Allocated by task 5828:
[   88.411476][ T5296]  kasan_save_track+0x3e/0x80
[   88.413291][ T5296]  __kasan_kmalloc+0x93/0xb0
[   88.415112][ T5296]  __kvmalloc_node_noprof+0x30d/0x5f0
[   88.417152][ T5296]  alloc_netdev_mqs+0xa6/0x11e0
[   88.419070][ T5296]  rtnl_create_link+0x31f/0xd10
[   88.420897][ T5296]  rtnl_newlink_create+0x25c/0xb00
[   88.422887][ T5296]  rtnl_newlink+0x16d6/0x1c70
[   88.424699][ T5296]  rtnetlink_rcv_msg+0x7cf/0xb70
[   88.426621][ T5296]  netlink_rcv_skb+0x208/0x470
[   88.428446][ T5296]  netlink_unicast+0x75b/0x8d0
[   88.430305][ T5296]  netlink_sendmsg+0x805/0xb30
[   88.432152][ T5296]  __sock_sendmsg+0x21c/0x270
[   88.433965][ T5296]  __sys_sendto+0x3bd/0x520
[   88.435702][ T5296]  __x64_sys_sendto+0xde/0x100
[   88.437551][ T5296]  do_syscall_64+0xfa/0x3b0
[   88.439325][ T5296]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   88.441638][ T5296] 
[   88.442602][ T5296] Freed by task 5838:
[   88.444164][ T5296]  kasan_save_track+0x3e/0x80
[   88.446000][ T5296]  kasan_save_free_info+0x46/0x50
[   88.447934][ T5296]  __kasan_slab_free+0x62/0x70
[   88.449759][ T5296]  kfree+0x18e/0x440
[   88.451317][ T5296]  device_release+0x9c/0x1c0
[   88.453071][ T5296]  kobject_put+0x22b/0x480
[   88.454783][ T5296]  netdev_run_todo+0xd2e/0xea0
[   88.456628][ T5296]  default_device_exit_batch+0x81e/0x890
[   88.458768][ T5296]  ops_undo_list+0x525/0x990
[   88.460539][ T5296]  cleanup_net+0x4c5/0x800
[   88.462246][ T5296]  process_scheduled_works+0xae1/0x17b0
[   88.464337][ T5296]  worker_thread+0x8a0/0xda0
[   88.466060][ T5296]  kthread+0x711/0x8a0
[   88.467602][ T5296]  ret_from_fork+0x3fc/0x770
[   88.469544][ T5296]  ret_from_fork_asm+0x1a/0x30
[   88.471422][ T5296] 
[   88.472348][ T5296] The buggy address belongs to the object at ffff88803911c000
[   88.472348][ T5296]  which belongs to the cache kmalloc-cg-4k of size 4096
[   88.477609][ T5296] The buggy address is located 744 bytes inside of
[   88.477609][ T5296]  freed 4096-byte region [ffff88803911c000, ffff88803911d000)
[   88.482671][ T5296] 
[   88.483586][ T5296] The buggy address belongs to the physical page:
[   88.485997][ T5296] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x39118
[   88.489293][ T5296] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[   88.492492][ T5296] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[   88.495375][ T5296] page_type: f5(slab)
[   88.496918][ T5296] raw: 00fff00000000040 ffff88801a44b500 dead000000000122 0000000000000000
[   88.500130][ T5296] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[   88.503354][ T5296] head: 00fff00000000040 ffff88801a44b500 dead000000000122 0000000000000000
[   88.506655][ T5296] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[   88.509896][ T5296] head: 00fff00000000003 ffffea0000e44601 00000000ffffffff 00000000ffffffff
[   88.513200][ T5296] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[   88.516403][ T5296] page dumped because: kasan: bad access detected
[   88.518806][ T5296] page_owner tracks the page as allocated
[   88.521002][ T5296] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5832, tgid 5832 (syz-executor), ts 65097662418, free_ts 0
[   88.528509][ T5296]  post_alloc_hook+0x240/0x2a0
[   88.530264][ T5296]  get_page_from_freelist+0x21e4/0x22c0
[   88.532213][ T5296]  __alloc_frozen_pages_noprof+0x181/0x370
[   88.534362][ T5296]  alloc_pages_mpol+0x232/0x4a0
[   88.536262][ T5296]  allocate_slab+0x8a/0x3b0
[   88.538020][ T5296]  ___slab_alloc+0xbfc/0x1480
[   88.539889][ T5296]  __kmalloc_node_track_caller_noprof+0x2f8/0x4e0
[   88.542305][ T5296]  kmemdup_noprof+0x2b/0x70
[   88.544043][ T5296]  __addrconf_sysctl_register+0x9c/0x530
[   88.546195][ T5296]  addrconf_sysctl_register+0x168/0x1c0
[   88.548318][ T5296]  ipv6_add_dev+0xd46/0x1370
[   88.550124][ T5296]  addrconf_notify+0x794/0x1010
[   88.552013][ T5296]  notifier_call_chain+0x1b6/0x3e0
[   88.553982][ T5296]  register_netdevice+0x1608/0x1ae0
[   88.555921][ T5296]  veth_newlink+0x5cc/0xa50
[   88.557624][ T5296]  rtnl_newlink_create+0x310/0xb00
[   88.559600][ T5296] page_owner free stack trace missing
[   88.561687][ T5296] 
[   88.562617][ T5296] Memory state around the buggy address:
[   88.564758][ T5296]  ffff88803911c180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   88.567805][ T5296]  ffff88803911c200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   88.570883][ T5296] >ffff88803911c280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   88.573950][ T5296]                                                           ^
[   88.576743][ T5296]  ffff88803911c300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   88.579784][ T5296]  ffff88803911c380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   88.582886][ T5296] ==================================================================
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   88.610195][ T5830] Bluetooth: hci0: command tx timeout
[   88.692896][ T5296] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   88.695401][ T5296] CPU: 1 UID: 0 PID: 5296 Comm: kworker/1:3 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[   88.700004][ T5296] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   88.703680][ T5296] Workqueue: events smc_ib_port_event_work
[   88.705971][ T5296] Call Trace:
[   88.707219][ T5296]  <TASK>
[   88.708311][ T5296]  dump_stack_lvl+0x99/0x250
[   88.710030][ T5296]  ? __asan_memcpy+0x40/0x70
[   88.711716][ T5296]  ? __pfx_dump_stack_lvl+0x10/0x10
[   88.713357][ T5296]  ? __pfx__printk+0x10/0x10
[   88.715040][ T5296]  panic+0x2db/0x790
[   88.716516][ T5296]  ? __pfx_panic+0x10/0x10
[   88.717947][ T5296]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[   88.719761][ T5296]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   88.722131][ T5296]  ? print_memory_metadata+0x314/0x400
[   88.723888][ T5296]  ? __ethtool_get_link_ksettings+0x6e/0x190
[   88.726165][ T5296]  check_panic_on_warn+0x89/0xb0
[   88.727720][ T5296]  ? __ethtool_get_link_ksettings+0x6e/0x190
[   88.729502][ T5296]  end_report+0x78/0x160
[   88.730805][ T5296]  kasan_report+0x129/0x150
[   88.732316][ T5296]  ? __ethtool_get_link_ksettings+0x6e/0x190
[   88.734174][ T5296]  __ethtool_get_link_ksettings+0x6e/0x190
[   88.735907][ T5296]  ib_get_eth_speed+0x15e/0x7b0
[   88.737348][ T5296]  ? __pfx_ib_get_eth_speed+0x10/0x10
[   88.738951][ T5296]  ? do_raw_spin_unlock+0x4d/0x240
[   88.740492][ T5296]  rxe_query_port+0x93/0x3b0
[   88.741873][ T5296]  ib_query_port+0x170/0x830
[   88.743355][ T5296]  smc_ib_port_event_work+0x15a/0x940
[   88.745078][ T5296]  ? _raw_spin_unlock_irq+0x23/0x50
[   88.746674][ T5296]  ? process_scheduled_works+0x9ef/0x17b0
[   88.748662][ T5296]  ? process_scheduled_works+0x9ef/0x17b0
[   88.750596][ T5296]  process_scheduled_works+0xae1/0x17b0
[   88.752484][ T5296]  ? __pfx_process_scheduled_works+0x10/0x10
[   88.754424][ T5296]  worker_thread+0x8a0/0xda0
[   88.756040][ T5296]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   88.758021][ T5296]  ? __kthread_parkme+0x7b/0x200
[   88.759863][ T5296]  kthread+0x711/0x8a0
[   88.761436][ T5296]  ? __pfx_worker_thread+0x10/0x10
[   88.763413][ T5296]  ? __pfx_kthread+0x10/0x10
[   88.765195][ T5296]  ? _raw_spin_unlock_irq+0x23/0x50
[   88.767136][ T5296]  ? lockdep_hardirqs_on+0x9c/0x150
[   88.769111][ T5296]  ? __pfx_kthread+0x10/0x10
[   88.770862][ T5296]  ret_from_fork+0x3fc/0x770
[   88.772593][ T5296]  ? __pfx_ret_from_fork+0x10/0x10
[   88.774504][ T5296]  ? __switch_to_asm+0x39/0x70
[   88.776314][ T5296]  ? __switch_to_asm+0x33/0x70
[   88.778129][ T5296]  ? __pfx_kthread+0x10/0x10
[   88.779893][ T5296]  ret_from_fork_asm+0x1a/0x30
[   88.781457][ T5296]  </TASK>
[   88.782937][ T5296] Kernel Offset: disabled
[   88.784334][ T5296] Rebooting in 86400 seconds..

VM DIAGNOSIS:
02:26:16  Registers:
info registers vcpu 0

CPU#0
RAX=00007f4fc8a9f498 RBX=00007f4fc8a9dbe0 RCX=ffffffff8a26db00 RDX=ffffffff8a26db00
RSI=ffffffff8a26db00 RDI=00007f4fc8a9f918 RBP=00007f4fc8a9d538 RSP=00007ffde330fb00
R8 =00007f4fc8a9e720 R9 =00007f4fc95a2000 R10=00007f4fc89ff008 R11=0000000000000003
R12=00007f4fc8a9d530 R13=0000000000000017 R14=00007ffde330fce8 R15=00007f4fc89ff008
RIP=00007f4fc9267d82 RFL=00000297 [--S-APC] CPL=3 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA]
SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555556064500 ffffffff 00c00000
GS =0000 0000000000000000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b30315ff8 CR3=0000000024d19000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffff8a26daa7 ffffffff8a26daa7 XMM01=ffffffff8a26daa7 ffffffff8a26daa7
XMM02=2b3ed3a960b3538a ffffffff8a26daa7 XMM03=1cce6ed767f2c889 aa0006261deb261e
XMM04=2cbcaafdc5fdb5be b36aea8af9f16932 XMM05=f0fb2ae6988280c4 4226abc6f98b3deb
XMM06=e1e26a9f1cce6ed7 67f2c889aa000626 XMM07=1deb261e2b3ed3a9 60b3538a8a863e54
XMM08=16b89ea3ba12b22d 560acd7c909923a4 XMM09=0000000000000000 00007f4fc9411c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000035 RBX=0000000000000035 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000294f090
R8 =ffff8880206a8237 R9 =1ffff110040d5046 R10=dffffc0000000000 R11=ffffffff85475610
R12=dffffc0000000000 R13=ffffffff99af7914 R14=ffffffff99dfc760 R15=0000000000000000
RIP=ffffffff8547568c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f4fca15bfc8 CR3=0000000112216000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00ff000000000000 ff00000000000000 XMM05=0000000000000079 0000000031323038
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffff00000000 XMM09=696b66722f333179 68702f3131323038
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
