last executing test programs:

39.351038969s ago: executing program 2 (id=903):
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000010000000000000000000000711214000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)

32.408791794s ago: executing program 2 (id=903):
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000010000000000000000000000711214000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)

26.12896716s ago: executing program 2 (id=903):
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000010000000000000000000000711214000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)

19.019515234s ago: executing program 2 (id=903):
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000010000000000000000000000711214000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)

12.300342437s ago: executing program 2 (id=903):
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000010000000000000000000000711214000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)

5.674750189s ago: executing program 2 (id=903):
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000010000000000000000000000711214000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)

657.764351ms ago: executing program 0 (id=1642):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x85ffffff}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000040)='GPL\x00', 0x2}, 0x94)

608.566657ms ago: executing program 0 (id=1644):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8)

549.339638ms ago: executing program 0 (id=1646):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000000))

489.455423ms ago: executing program 1 (id=1647):
r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000003c0)='syz0\x00', 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$kcm(0x10, 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000280)={'batadv0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xfff3, 0x10}, {0xfff3, 0xa}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4c041}, 0x40)
sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x9, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e80)={0x2, 0x13, &(0x7f0000000700)=ANY=[@ANYBLOB="180800000004000104000ac0600000000000f007000385100053b552431b723ec99ca765a940ad63f2a44141a141ec0700d4b35b7bd3b0837c511753ac3dcc0b70d2887b3f8c64b45b657300000000ffffffffb7414ff122c0a2e8991e0ac3b44d183dd0d15b4174985a791c718297cf1f00000000"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r7 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000009c0)=@raw={'raw\x00', 0x8, 0x3, 0x458, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x388, 0xffffffff, 0xffffffff, 0x388, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [0xff, 0x0, 0x0, 0xffffffff], [0x0, 0xff, 0xffffff00, 0xff000000], 'wg1\x00', 'gre0\x00'}, 0x0, 0x290, 0x2b8, 0x0, {}, [@common=@srh1={{0x90}, {0x68, 0x6, 0xfd, 0x5, 0x882e, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @loopback, [0xff000000, 0xffffffff], [0x0, 0xffffff00, 0xffffff00, 0xffffff00], [0x0, 0x0, 0xffffff], 0x1000, 0x1889}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x15, 0xffffff7f, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CLASSIFY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4b8)
socket$kcm(0x10, 0x400000002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000002040)={0x2, 0x4, &(0x7f0000000780)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xa5, &(0x7f0000000240)=""/165, 0x40f00, 0x8f}, 0x94)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind$802154_raw(r8, &(0x7f0000000480)={0x24, @short={0x2, 0x0, 0xfffe}}, 0x14)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000400)={&(0x7f0000000e80)="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", &(0x7f0000002a00)=""/4096, &(0x7f0000000540)="afab46a272fbcdfe840b58d2a02af01facaa33f33d824c167285c68748276813a37665ea53df4bee0d40522e305c5470bf3ecec9bf9df7a2a131126eeea8dd6c327e120a51de7cbb098f0c9dbd01d2e28898e596e62d0fdb48bd63ed21f55ddb084eb4ef462635c44cd636e8af96a18834a4a3d1975f05f60ba08b190fc2b1eeb4d0db3b5604cafe7c62a384a45c6cf888bafe4c2d078d0eec47cc6585e9213176c4522d43410cc4e487bf6faa05cfb5fbb9c4206e6680d1cbb9f4c63b790250dc0bf512893b45053636d2841152c52a2f7cee08ee434ab1cac4c4cd953ef206", &(0x7f0000000680)="2d2f8c9dd44b533716ed242bfbd984da179ab32617ec79d24e3f19ab884f3b1a64001c323f360c13f36a85a829dc6418613bc6876506d1b5d14632e50844ceeecc67", 0x7fff, 0xffffffffffffffff, 0x4}, 0x38)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r9, 0x0)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$tun(r10, &(0x7f0000003a00)=ANY=[@ANYBLOB="0800080006000600000014000000450a0fc0006600000b899078ac1e0001ffffffff3297e3ba0fa8a2e71bd9fe1a399b5110420b70460c0dad392d66248a43540df968e7fcaab34569c0e36170578c0d3c546a98b26295e2592f360905866eb4720fed03a977a3df4224895629fd6ccec64f13a999f18f518e3ee28798381975e862f1db9dccdb2f1c1fb60f5ffc7a339d40a8bd1f24cede8a32f186f142e194d4fb48224759faf813ea80e6a853e79b4fe27fe3e1aec5897b314a7f0d515b07b1835986b4885e9826d902c40f16cd77c58b6433ab039955ce9db11f36f459e7114ace6c9989eecea80a81fd39f339356c7c3391af83da2486503a7973f6db4806cf3e5ca94cf7e1f79fd00decd76100c18251a59d1474caabf4d3ca6a9a9885df710e68c5b0dc11832dbb5eecb5c88c2f8f02bdbd88569ad4a740359cbca8c378118220d73bdd1e661c3a74f77aa931b11cd38119b0f084bb96e84803fca6566c33ee1e4e34ab0253fbf24f9f5974af5e1fc2a43a4ec9dd9928a8f38a128ea27c429300ae5a6bd7740471f973d8224b2b07879f4fbe7dcbed776a72ebdc713bcf1d7aa45b01c32a1003e6670d58510bd79ba2fde5cb2b82cef2cc315648f4e9d96d848ba327949b8926253cbdef6888a8982108b6ac7a1108533dd3fe125002e2e286362d1055082a9d73ec5ac3080f2a501ff27250b62c8965f371cf9205000000000000001eb08a2f8fe50049e102c69ce703d116d0834208cc957d0f1376457a90245816d7642412897fdd2f982fdfbc3af65aa0446b00c767b79aec40e460887ea02188e3a0960eea39b144859467b881978378c9fd593259e0f63148179fe2c2f6d40987b63a6e384e63027f03d8039d707522942d5dc88fd842524d006290b6a65e9cc86cc5b401a60ec4aedfb3bf4d0447bb681810a16b9684b72c2f4593ef834a0203e78cd1d9dbc978e9ae8f3ab62c07f1e41d59470decee7b0cc41ac49e4b7589ab6da65849f62ec217bb39ed161e7d337822d96badbd74d66451ea9a74bed591dc9631bf639dcf7846ee428a9fa55bfceedf3b1c23642f3b58dd0a7273664c6c49c9160a4b9cc5b72d0210e305b94e2cb09ae1d4af9d365b5093851f229c8c30aef75d45ccdbab4b86d801a9ad3b27f26ba601d531c0743717aa7aae29d37f496fec7682c5a1abd321ad61941a2d23fcac6af1d1875e308c8d8c64a5152be47b59c09d293f46b857310a99f1885f0a49d432aa0d39a3e8fc885e75e66b63215133175a19267c8d0adf7d8f644e742ed5369d1405e99e63b78727f135e0243f24d9ce354a1562102ee8de4c191508343b86bf7e7519ddd770ce55e17e590561b2f437194c97ad46622a6ae3dd68d9993e6744954f4cd308bd6594fdccedc578e80aed274a65219697229059723ac37d535cca0e9c314e7941b4160bbd2ffba71f26ffe3228431bc81463078ad70583277ef18bce23ca2e5b9a00670956ea8e0e2c739c00e106c8c9ee3f92ba728d8490742b74a9a18cbedfc4e69bb87e0da4c7dfb964374c28c837d4641fb99a19b233675f8526af395335e0185cf3934805442ac379980b687a7128e53284ba9e741b5fe9bc969bfbd55cbce76842915e076e2adf844338d16d3802c681bafdcc60465bd34dfc2d1c069ceee40060e0570fc1275ccabfe3f9be3e84ceedf72cd649c082232008e2b0c94594588c00e0fe911bbf1c12eb6c37ce05674a7597feecf27f5e051ffa824d9ff93638dfa9a84c77562aa2cf897f55a97b79c18544ad03480e1011b8f93e0ead9c2c6672448f585c5803ae99be777fbc662ef4450c1e936ed8b3c8047f00e72adc84561f417f8e5e1dde4967005d96a64fc75d9f486b3ebdb5904a0a56ec48542f0efce939f66fd69259e7376ad37e84434ea90f35b2d3bd63b5c36b267d8f2c7dc5a50b46e00ed086dff8b039e07b84c60611269d4f282ad04dc8e0b481eece2f8a614734be73617f0ad5be195446b09dca4cf1f32653dd3e188aece76f3014deb2ba61744835c0f735234b6a4637c948a7b4fd4203b286ca87d669e325d70277075b094f59eb1dff6c9c05c40d5e464c563df79486e1a32e6ed9bcf675aac7968b4e98dc4e210215b0d3b6a2525b2e3df11f3f1490eb39cabffbe32e23659121fde8e4e346e0f595aaf3666a5f6f118c1a1128039502ac04c40b85eb4c54e6c95b8d1c2aac74ae9e1c355ccde9d54d5d833293f5df09224482179e5bcd8e227c99172a6e14c2cd4e6462ceb0a905a1d64804840ce62e350c6efac10a7fcb029f84af64e2256d45afd3b3f59379895740e0cd2fd24c63264f785bb6e3f40ec72cd67d1a7d87dd264743d9c951cb5aa8bc6f1d1bc9b23303d5aa7f8f6f961326757456057000cb2bacf78cc229002777e932c2640b8dfa793846ca49fa93996db95104a8808a1906b19df17e754b90582b6c49efb3ddce067dd9292291cfd2bb0323ce8098f29e4fce0de31cf5c7e2e2da5d0d0996a8be776de8fecfd3ce68e80d21f1701f6b90ac51278abbd727d19415e0ebe001b990b177b8db0c592b18a4b5e4a6221902362e5b20e6e6f2131a5a5e03c1150b179ef40c933c2fef1b79de738652ec4c32565f5cf751a11db177099c4e2e5bd7616cd0dd501d5bfccf5691de3cca590365328648baf8a9487a3c212193c9bb837594460967e823067a9465eba7001eaf609a810488ef5c147aaa5e9e8c75b585ac3582b6915e20b5aa2f79b7a94857122988c56dbce1ea52de1a56652e839bb853be3ee16052b33fb83ca54d8e4e19440a5e81492107043a66286f63ca87a1f7b8a4e9547a7eb6005419cfd28cb37e9e374f4d0143973286e87070754025c1a6fccfdc6858eaca8c35ecb19584ce7141cc79a5bc813469161b87a19fc21f3373d1f25b3427916dd1be2a589b70ea3b39fcc7801e13beaf19b76164faf3dc4ab8faa5648d24eddd6caceaa0d5ac9cad633c19a4a4d059ee823a49b7cf82c5777d376c111f58ea8fd473429907852301a2c856f27bd0c687ab5be0e2bbef64ddee1601375a4440e3f59d60f57caebfe457f82432523ec4a61cdbb7f1e91e4b05fda892df131c274b19929d26f7a5a6d3ca487983f729601ed9bb4bf5c1cc3d453d406e9534688dec6a2dd0b9db149365c125a95e129565e62cc91f7d960abe1055b730ae0994e7eb08392d5745d0e4f529c4defc3d3e43d0815b0cc63effa88d20c13b14e780c2f6c89a1ee5e4db45a5c272186cc3e51b13dab3add5f467e8ca0f4c45a1fc76db2f0cbf794102946aafcd8cd8a3e935a606b9721645c4d550ae04753d474a73626041d3a54f8fb50de2a6335611a3779da3a02daceb2257a6076879f36534bb3379debb46ed1fa2c40096c752017dd024345c58313b43070ff7bef94dc3cafbe6ec20d59e5ea3c196ba3b783bfa87384407efc664cd350c80ac397516018e35371956e414755cde304d2a228c1540ba6fd6a7402d11c666964f024da4c016eb556ba2c5fab86c60c12efb1496295d80f0383526e8e0fc55a287bbd3cb966a916f57958d8b6ef97aa0c4b47f7746bab6b99698c1c96b25c4e2e084147866fe0970b109dd26984adc0758eb6442712cc46dcd8ed3038b0595252eed1b8a46525862662d1e67eba66ac341f8d27853eed54854f488f079bd48df6ce7a4be8b1b61fd23a2dc4d3ade0992011539cc63f80fcfc75008c20cb639348cb218f8f476a6d56917f4ca07e67fc20ea2e9642eaf2182b397e279f5f6c70438fb8aa39cba788588c181461ea7efe1a0dd5b95eb26f7158b91012f7ce0ee1b4e79ce4da377bea4551738a0f491a84f19b3be9827b4469c299527aa9c20b8bf12f919976a0356bba720fb91010763c79bcbb10d89280f0f97cdd19aa0d54828b308195fac170613cf4b515e340a9ef2c97f618a9f50b30ae34ebeed9a38b4c6969680accc740b154ecb014fb5d543a59ccb9eb7de2823a2dec39f331cb503eb74fef61262c6d4050bc723caee834eb28c64ce007f6027375e936b62387cf1778970e88b0574a0106d4c855be7425767c551b2fa644d9d8a59f787e7610581b768057d229673344571c3d6e3f10975b2859f568398b1f38f89524d9ad0c1588617c3883a1227b714c81cdf28da54f33968c1c50f28da01c308eb31d319b3e77f96bec001c9300000000000000009cc0062283ac112868592619db14d629c47bfb793a723dcd2f7b07ae4ec14c17564b955ea5b2b153a279b080f6236d418075b86850974c8850efb306d5c304e726bf2643b4403e6d46b0e0395b02e93308b4b2c3e957308d497dc51c753344a7878f1f0c91295fd76e3d1cc9ef813161c6b92b7ea6068ceb97d8f45a4ce57af7d7632d699951f7fe3c71c3a32b014c74425c67e5030546b10cf7edcec2eca5ba31dc62c08f83f35bc2e36b93f15f071bc2537ebe9ca19f86dce4e84272e10323d0ceaa2cc47fe4f6ad101d454c761f9863e94af91199ce5f12469bca7ba39314b84aa7efa4bdc18f7700c19511d48d6132450111d70401a8ac73565d5386ca12345e884d08b23f9c901000a95eb4167865e58c28b112f47c96beeaa6657c923e25e56529107c5c30e65bb485d5ed21b91332db4e09df7e59dcfa05c994570deb3f9b838e22ae4abbf9a9a8c319cc9112c8dba7c2278f78b9578b0254c46a4c04b8fa4fedad6bd275f70b1618971ef6503379bfb0a508c9944328af2c820091a89e3f75e68e7f980ddc9154d273f7f2ce7a6294aefe93136860786679b80e41f6636ff45efeacfb52e2ba2bd9bd9c9030079a46caca5c4b340c17d01ba8ecbc5c561b2038481a8321c009d12136a3ad5461881d998eeaac5236fdcd8f81fb5e53848bb096d9198fd0d38830d1809f2a632b31e2b67754140c907ed58aead048b2d8af9a1c407e48db815212cfdcca97222dabdfe01f311a73e1e82c3e189ec5add48d3f8190eb9e14b58e540f7f1388a7c687629eadb19fd8a133dc8177629270ecaabff79efb6c1f750d89b9e6c5f34c6238066f8e3e425e46a27b3c0d2e9e2ed3cffe2a6f39b8e0137ea5de689b94107fb4748a5feb3902f0feba64dae4c2e69bc8d86463575c6b0ef4a8a64fef41121e57a8c67eda07e9fc8f98299677de198ea0a649ef3c00591940b2c27ba1414aaa1633deb52e3a44cfa8d7a00d014317c026a7d7f42a34b97128e1bf9cda4d8315819ac73ed5061bf9b5631d07b09b85b78ff1b6eb86e9e8c4faa0f991cd6fa0b0eb71b39c35ca9bc7c156f3bd255a5b408df172396bafd7f0fb11c6eaf1eb0a06576d37bee00424bf699584b1dfed68f0d8d8a35f0427c783fe2d79b4373628971e87501a5e4bb05b5058d0b2132741f26e76065b6f4017d963c8ee5605c4c5b6eebb96fca0a41893cb6add3fb0d728abeb860f22cedbd36e464bdaf124a7041460f7af3d64b54e9ffd240b5afad9baf6e5dd8406bc1b205da5848f51fc9dd5197716e144e1b0386614bd3cfd5ddb80ada1e5ca74c8960093a553b1f6288aa7f53663cdd867f658e51b95772dc7a6fa45fa03e14988a33250e6c16fbf0351769080d64ddfbdbf77e1215563bf2e82ecc38a682846d7e2e2ac4e87d715f97f15e84c3df04affee49612a735907d3c4d310a54a6f609873ad56f29a138f4d5661f6865e030487429a8da93c5e2a14f727ce675818f213f5d94bad592be56f2ddd3f7aafbf860387d3201c87bacd678df856718af204ba38f9b475d6731c11a1cb8a1484287bfb692ea7cd1a873a38702624d32417f1e9f8c577997bb23e1a87eebc9a417d87f18b40f093b1efc87f0fdb91e6598b2aaf12d59ea5f06cc8f67e152cdfab97313e61054c261cb8d2ca2498f757ba4411d0a9ff16e44b6d845b10d0f1b8e692ed79c7dc62ab784a7c355e6dbdac736784990000000000000000000000000025aab00ce519b19f612e5511c93d3130c76d4b87a47e2da3d83b2682d13f3b56b0b705766a1c21949cda1a458ebe52daffb4ef1476e6738655fcb59ea59df0c37e505c104ac324b691af21ad31230d29e86f4674ecf1a09e536b7c"], 0xfce)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x402, 0x0)
close(r11)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))

461.064717ms ago: executing program 0 (id=1648):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61154c00000000006113300000000000bfa00000000000001503000008004e002d35010000000000950000bc000000006916000000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4501000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r0 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r0, 0x8b0b, &(0x7f0000000200)={'virt_wifi0\x00', @random="9ffff7070600"})

338.049214ms ago: executing program 0 (id=1649):
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000005140)={0x60, r3, 0x1, 0x80000000, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x40, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x5, 0x1, r1}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4081}, 0x0)

278.776432ms ago: executing program 1 (id=1650):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000090a030000000000000000000000000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000002108000340000000c408000f400000000a0c000b"], 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

197.858774ms ago: executing program 1 (id=1651):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711069000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xc}, 0x94)

197.604905ms ago: executing program 1 (id=1652):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, 0x0, 0x0)

105.855096ms ago: executing program 0 (id=1653):
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xfffffffffffffdad, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000000000500010007000000080009400000000114000880100007800a001100aaaaaaaa"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0x84}}, 0x0)

105.538553ms ago: executing program 1 (id=1654):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f00000008c0)=';', 0x1)

0s ago: executing program 1 (id=1655):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:64600' (ED25519) to the list of known hosts.
syzkaller login: [   56.585013][ T5812] cgroup: Unknown subsys name 'net'
[   56.701714][ T5812] cgroup: Unknown subsys name 'cpuset'
[   56.709531][ T5812] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.632973][ T5812] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   63.865951][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   63.870941][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   63.877147][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   63.887211][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   63.898591][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   63.902743][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   63.933305][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   63.942034][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   63.942328][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   63.951325][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   63.954867][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   63.958002][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   63.962322][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   63.987117][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   63.991223][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.342057][ T5831] chnl_net:caif_netlink_parms(): no params data found
[   64.350516][ T5826] chnl_net:caif_netlink_parms(): no params data found
[   64.381480][ T5835] chnl_net:caif_netlink_parms(): no params data found
[   64.551557][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.554085][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.557284][ T5826] bridge_slave_0: entered allmulticast mode
[   64.560122][ T5826] bridge_slave_0: entered promiscuous mode
[   64.564044][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.566419][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.569161][ T5826] bridge_slave_1: entered allmulticast mode
[   64.571803][ T5826] bridge_slave_1: entered promiscuous mode
[   64.574752][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.577756][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.580053][ T5831] bridge_slave_0: entered allmulticast mode
[   64.583372][ T5831] bridge_slave_0: entered promiscuous mode
[   64.620406][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.622814][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.625205][ T5831] bridge_slave_1: entered allmulticast mode
[   64.629555][ T5831] bridge_slave_1: entered promiscuous mode
[   64.667562][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.688799][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.691820][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.694752][ T5835] bridge_slave_0: entered allmulticast mode
[   64.699872][ T5835] bridge_slave_0: entered promiscuous mode
[   64.705907][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.720724][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.723960][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.727473][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.730456][ T5835] bridge_slave_1: entered allmulticast mode
[   64.734375][ T5835] bridge_slave_1: entered promiscuous mode
[   64.750649][ T5826] team0: Port device team_slave_0 added
[   64.754335][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.794240][ T5826] team0: Port device team_slave_1 added
[   64.829425][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.850199][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.852395][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.860212][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.868891][ T5831] team0: Port device team_slave_0 added
[   64.873614][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.879231][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.881448][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.890069][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.895489][ T5831] team0: Port device team_slave_1 added
[   64.956244][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.959270][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.970658][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.996023][ T5835] team0: Port device team_slave_0 added
[   64.999774][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.002396][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.011612][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.019210][ T5826] hsr_slave_0: entered promiscuous mode
[   65.021693][ T5826] hsr_slave_1: entered promiscuous mode
[   65.027019][ T5835] team0: Port device team_slave_1 added
[   65.098373][ T5831] hsr_slave_0: entered promiscuous mode
[   65.101633][ T5831] hsr_slave_1: entered promiscuous mode
[   65.104593][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   65.108457][ T5831] Cannot create hsr debugfs directory
[   65.111740][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.114329][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.123770][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.153269][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.156072][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.165356][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.309850][ T5835] hsr_slave_0: entered promiscuous mode
[   65.312418][ T5835] hsr_slave_1: entered promiscuous mode
[   65.315058][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   65.318897][ T5835] Cannot create hsr debugfs directory
[   65.461202][ T5826] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.494003][ T5826] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.502195][ T5826] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.542745][ T5826] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   65.617055][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   65.628059][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   65.659826][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   65.664771][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   65.715347][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.722833][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.739485][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.753887][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.852477][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.893180][ T5826] 8021q: adding VLAN 0 to HW filter on device team0
[   65.919356][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.922572][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.930558][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.933632][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.954469][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.979330][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.992057][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   66.015463][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   66.027902][ T5834] Bluetooth: hci0: command tx timeout
[   66.028306][ T5830] Bluetooth: hci1: command tx timeout
[   66.030327][   T55] Bluetooth: hci2: command tx timeout
[   66.038176][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.040958][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.057558][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.060419][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.065818][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.068795][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.095415][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.098383][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.310204][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.356058][ T5835] veth0_vlan: entered promiscuous mode
[   66.366177][ T5835] veth1_vlan: entered promiscuous mode
[   66.372410][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.410458][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.425812][ T5835] veth0_macvtap: entered promiscuous mode
[   66.432233][ T5835] veth1_macvtap: entered promiscuous mode
[   66.465349][ T5826] veth0_vlan: entered promiscuous mode
[   66.472010][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.481388][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.494746][ T5826] veth1_vlan: entered promiscuous mode
[   66.500578][ T5835] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.504103][ T5835] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.508739][ T5835] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.511720][ T5835] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.537816][ T5831] veth0_vlan: entered promiscuous mode
[   66.554558][ T5831] veth1_vlan: entered promiscuous mode
[   66.591893][ T5826] veth0_macvtap: entered promiscuous mode
[   66.614546][ T5831] veth0_macvtap: entered promiscuous mode
[   66.615437][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.619001][ T5826] veth1_macvtap: entered promiscuous mode
[   66.624803][ T5831] veth1_macvtap: entered promiscuous mode
[   66.628999][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.659856][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.670127][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.674185][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.677465][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.679073][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.689574][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.695339][ T5831] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.703343][ T5831] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.711555][ T5831] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.716060][ T5831] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.724149][ T5826] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.728933][ T5826] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.732243][ T5826] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.735784][ T5826] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.749304][ T5835] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   66.874539][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.882131][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.897272][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.911602][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.943941][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.948119][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.980240][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.988830][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.191748][ T5913] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1'.
[   67.197641][ T5911] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1'.
[   67.229389][ T5911] IPVS: set_ctl: invalid protocol: 8345 172.30.1.1:20003
[   67.260460][ T5911] Cannot find add_set index 3 as target
[   67.320503][ T5913] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   67.982348][ T5946] netlink: 'syz.2.21': attribute type 2 has an invalid length.
[   67.985631][ T5946] netlink: 1 bytes leftover after parsing attributes in process `syz.2.21'.
[   68.107303][   T55] Bluetooth: hci1: command tx timeout
[   68.107555][ T5830] Bluetooth: hci2: command tx timeout
[   68.682891][ T5981] netlink: 'syz.2.37': attribute type 7 has an invalid length.
[   69.001658][ T6003] warning: `syz.1.47' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   69.112876][ T6009] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   69.175117][ T6013] syz.1.52 uses obsolete (PF_INET,SOCK_PACKET)
[   69.838922][ T6037] netlink: 4 bytes leftover after parsing attributes in process `syz.0.62'.
[   70.130894][ T6057] netlink: 4 bytes leftover after parsing attributes in process `syz.1.71'.
[   70.187130][ T5830] Bluetooth: hci2: command tx timeout
[   70.187295][   T55] Bluetooth: hci1: command tx timeout
[   70.549838][ T6075] netlink: 'syz.1.77': attribute type 5 has an invalid length.
[   70.632611][ T6081] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   70.755838][ T6088] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0
[   71.194573][ T6117] netlink: 'syz.0.98': attribute type 1 has an invalid length.
[   71.314372][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.317497][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.343233][ T6121] tipc: Started in network mode
[   71.344893][ T6121] tipc: Node identity 86340217a003, cluster identity 4711
[   71.347651][ T6121] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   71.350262][ T6121] syzkaller0: entered promiscuous mode
[   71.352015][ T6121] syzkaller0: entered allmulticast mode
[   71.367005][ T6121] tipc: Resetting bearer <eth:syzkaller0>
[   71.371481][ T6120] tipc: Resetting bearer <eth:syzkaller0>
[   71.382395][ T6120] tipc: Disabling bearer <eth:syzkaller0>
[   71.502363][ T6131] netlink: 12 bytes leftover after parsing attributes in process `syz.0.105'.
[   72.045859][ T6154] netlink: 'syz.0.115': attribute type 11 has an invalid length.
[   72.050918][ T6154] netlink: 'syz.0.115': attribute type 4 has an invalid length.
[   72.053963][ T6154] netlink: 224 bytes leftover after parsing attributes in process `syz.0.115'.
[   72.244854][ T6168] netlink: 28 bytes leftover after parsing attributes in process `syz.0.121'.
[   72.252694][ T6168] Zero length message leads to an empty skb
[   72.267493][   T55] Bluetooth: hci1: command tx timeout
[   72.268268][ T5830] Bluetooth: hci2: command tx timeout
[   72.399585][ T6178] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0xf
[   72.600820][ T6192] netlink: 'syz.2.130': attribute type 1 has an invalid length.
[   72.603704][ T6192] netlink: 172 bytes leftover after parsing attributes in process `syz.2.130'.
[   72.733298][ T6200] netlink: 32 bytes leftover after parsing attributes in process `syz.0.134'.
[   72.736133][ T6200] netlink: 'syz.0.134': attribute type 32 has an invalid length.
[   72.741583][ T6200] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[   72.935384][ T6211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.139'.
[   72.941003][ T6213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.140'.
[   72.967307][ T6211] IPVS: Error joining to the multicast group
[   73.013279][ T6215] netlink: 28 bytes leftover after parsing attributes in process `syz.2.141'.
[   73.155943][    T9] IPVS: starting estimator thread 0...
[   73.248379][ T6220] IPVS: using max 40 ests per chain, 96000 per kthread
[   73.679548][ T6246] netlink: 'syz.0.156': attribute type 13 has an invalid length.
[   73.682600][ T6246] netlink: 'syz.0.156': attribute type 17 has an invalid length.
[   73.755829][ T6246] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   73.841922][ T6258] netlink: 16 bytes leftover after parsing attributes in process `syz.1.159'.
[   73.954939][ T6261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   74.023743][ T6265] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.026971][ T6265] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.037886][ T6246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   74.095133][ T6246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   74.194588][ T6265] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   74.229434][ T6265] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   74.343464][ T6265] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   74.347046][ T6265] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   74.349783][ T6265] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   74.352681][ T6265] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   74.356674][ T5830] Bluetooth: hci2: command 0x0405 tx timeout
[   74.665280][ T6292] bridge0: entered promiscuous mode
[   75.135956][ T6313] netlink: 'syz.0.179': attribute type 1 has an invalid length.
[   75.159095][ T6313] netlink: 'syz.0.179': attribute type 2 has an invalid length.
[   75.163808][ T6313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.179'.
[   75.183367][ T6315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.180'.
[   75.211419][ T6315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.180'.
[   75.233892][ T6317] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   75.250581][ T6317] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   75.767985][ T6340] x_tables: duplicate entry at hook 1
[   76.275743][ T6374] lo: entered allmulticast mode
[   76.278369][ T6374] lo: left allmulticast mode
[   76.630019][ T6400] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   76.632999][ T6400] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   76.635662][ T6400] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   76.638749][ T6400] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   76.895983][ T6426] netlink: 'syz.2.230': attribute type 1 has an invalid length.
[   77.302988][ T6462] __nla_validate_parse: 1 callbacks suppressed
[   77.302999][ T6462] netlink: 8 bytes leftover after parsing attributes in process `syz.1.247'.
[   77.455518][ T6464] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.458896][ T6464] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.465044][ T6464] bridge0: left promiscuous mode
[   77.610439][ T6464] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   77.631093][ T6464] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   77.776624][ T6464] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.780295][ T6464] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.783840][ T6464] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.788931][ T6464] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.062993][ T6480] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   78.203373][ T6488] trusted_key: syz.0.259 sent an empty control message without MSG_MORE.
[   78.446824][ T6497] netlink: 12 bytes leftover after parsing attributes in process `syz.0.263'.
[   78.450571][ T6497] netlink: 12 bytes leftover after parsing attributes in process `syz.0.263'.
[   78.544094][ T6505] netlink: 64 bytes leftover after parsing attributes in process `syz.2.267'.
[   78.662542][ T6510] team0 (unregistering): Port device team_slave_0 removed
[   78.665946][ T6510] team0 (unregistering): Port device team_slave_1 removed
[   79.080784][ T6525] netlink: 'syz.2.276': attribute type 39 has an invalid length.
[   79.403892][ T6546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.285'.
[   79.868260][ T6577] netlink: 24 bytes leftover after parsing attributes in process `syz.2.298'.
[   79.899795][ T6577] netlink: 4 bytes leftover after parsing attributes in process `syz.2.298'.
[   80.171454][ T6586] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   80.440488][ T6609] netlink: 256 bytes leftover after parsing attributes in process `syz.2.314'.
[   80.488731][ T6613] syzkaller1: entered promiscuous mode
[   80.490909][ T6613] syzkaller1: entered allmulticast mode
[   80.849935][ T6631] netlink: 'syz.0.324': attribute type 1 has an invalid length.
[   80.873240][ T6631] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   81.123644][ T6641] netlink: 176 bytes leftover after parsing attributes in process `syz.2.329'.
[   81.161224][ T6646] netlink: 8 bytes leftover after parsing attributes in process `syz.0.331'.
[   81.241629][ T6649] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   81.551127][  T790] cfg80211: failed to load regulatory.db
[   81.638005][ T6674] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.649309][ T6668] tipc: Resetting bearer <eth:syzkaller0>
[   82.627691][ T5899] tipc: Node number set to 641139223
[   82.692039][ T6668] tipc: Disabling bearer <eth:syzkaller0>
[   82.825218][ T6694] netlink: 12 bytes leftover after parsing attributes in process `syz.1.352'.
[   82.850487][ T6694] Bluetooth: MGMT ver 1.23
[   82.916794][ T6706] netlink: 'syz.2.358': attribute type 4 has an invalid length.
[   82.931650][ T6708] netlink: 44 bytes leftover after parsing attributes in process `syz.1.360'.
[   83.082378][ T6723] netlink: 'syz.2.365': attribute type 1 has an invalid length.
[   83.084960][ T6723] netlink: 'syz.2.365': attribute type 2 has an invalid length.
[   83.133197][ T6725] syzkaller0: entered promiscuous mode
[   83.134891][ T6725] syzkaller0: entered allmulticast mode
[   83.277504][ T6725] netlink: 12 bytes leftover after parsing attributes in process `syz.2.367'.
[   83.991015][ T6772] netlink: 'syz.1.388': attribute type 9 has an invalid length.
[   83.993909][ T6772] netlink: 212260 bytes leftover after parsing attributes in process `syz.1.388'.
[   84.071940][ T6776] netlink: 'syz.1.390': attribute type 23 has an invalid length.
[   84.464397][ T6779] syzkaller1: entered promiscuous mode
[   84.466840][ T6779] syzkaller1: entered allmulticast mode
[   84.673895][ T6802] netlink: 'syz.0.400': attribute type 10 has an invalid length.
[   84.719699][ T6804] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[   84.822925][ T6805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.402'.
[   84.826405][ T6805] netlink: 28 bytes leftover after parsing attributes in process `syz.0.402'.
[   84.891133][ T6811] netlink: 28 bytes leftover after parsing attributes in process `syz.0.402'.
[   85.052352][ T6826] netlink: 'syz.2.410': attribute type 15 has an invalid length.
[   85.329629][ T6836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.414'.
[   85.480650][   T33] audit: type=1800 audit(1752346006.655:2): pid=6835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.414" name="cgroup.controllers" dev="tmpfs" ino=576 res=0 errno=0
[   85.601603][ T6846] netlink: 'syz.2.418': attribute type 1 has an invalid length.
[   85.613343][ T6846] netlink: 'syz.2.418': attribute type 1 has an invalid length.
[   85.771856][ T6855] Illegal XDP return value 4294967282 on prog  (id 65) dev N/A, expect packet loss!
[   87.658131][ T6958] pim6reg1: entered promiscuous mode
[   87.659765][ T6958] pim6reg1: entered allmulticast mode
[   87.682308][ T6963] netlink: 'syz.0.455': attribute type 1 has an invalid length.
[   87.700565][ T6963] 8021q: adding VLAN 0 to HW filter on device bond1
[   87.718365][ T6963] veth3: entered promiscuous mode
[   87.723445][ T6963] bond1: (slave veth3): Enslaving as an active interface with a down link
[   87.733037][ T6963] erspan0: entered allmulticast mode
[   87.740842][ T6963] bond1: (slave erspan0): making interface the new active one
[   87.744440][ T6963] erspan0: entered promiscuous mode
[   87.747515][ T6963] bond1: (slave erspan0): Enslaving as an active interface with an up link
[   87.817945][ T6970] netlink: 'syz.0.456': attribute type 2 has an invalid length.
[   87.869011][ T6978] netlink: 'syz.2.462': attribute type 5 has an invalid length.
[   88.032315][ T6997] netlink: 256 bytes leftover after parsing attributes in process `syz.0.470'.
[   88.035294][ T6997] unsupported nlmsg_type 40
[   88.109654][ T7006] netlink: 12 bytes leftover after parsing attributes in process `syz.1.475'.
[   88.138343][ T7006] netlink: 'syz.1.475': attribute type 1 has an invalid length.
[   88.143751][ T7006] netlink: 'syz.1.475': attribute type 1 has an invalid length.
[   88.515345][ T7051] netlink: 72 bytes leftover after parsing attributes in process `syz.2.496'.
[   88.519696][ T7051] netlink: 12 bytes leftover after parsing attributes in process `syz.2.496'.
[   88.523209][ T7051] netlink: 16 bytes leftover after parsing attributes in process `syz.2.496'.
[   88.714701][ T7069] netlink: 104 bytes leftover after parsing attributes in process `syz.2.505'.
[   89.030324][ T7093] 8021q: VLANs not supported on lo
[   89.280639][ T7106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.523'.
[   89.832533][ T7127] bond1: (slave erspan0): Releasing active interface
[   89.835391][ T7127] erspan0: left promiscuous mode
[   89.854624][ T7127] bridge_slave_0: left allmulticast mode
[   89.859432][ T7127] bridge_slave_0: left promiscuous mode
[   89.862079][ T7127] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.869899][ T7127] bridge_slave_1: left allmulticast mode
[   89.872318][ T7127] bridge_slave_1: left promiscuous mode
[   89.874757][ T7127] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.885924][ T7132] netlink: 'syz.0.533': attribute type 10 has an invalid length.
[   89.900155][ T7127] bond0: (slave bond_slave_0): Releasing backup interface
[   89.911566][ T7127] bond0: (slave bond_slave_1): Releasing backup interface
[   89.928038][ T7134] netlink: 5 bytes leftover after parsing attributes in process `syz.1.536'.
[   89.944119][ T7127] team0: Port device team_slave_0 removed
[   89.954834][ T7127] team0: Port device team_slave_1 removed
[   89.961372][ T7127] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   89.964531][ T7127] batman_adv: batadv0: Removing interface: batadv_slave_0
[   89.975517][ T7127] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   89.981245][ T7127] batman_adv: batadv0: Removing interface: batadv_slave_1
[   89.993503][ T7127] bond1: (slave veth3): Releasing active interface
[   90.025815][ T7132] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   90.030646][  T790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   90.612616][ T7186] netlink: 332 bytes leftover after parsing attributes in process `syz.2.558'.
[   90.615639][ T7186] netlink: 104 bytes leftover after parsing attributes in process `syz.2.558'.
[   90.619284][ T7186] netlink: 'syz.2.558': attribute type 1 has an invalid length.
[   90.643814][ T7188] netlink: 'syz.0.559': attribute type 16 has an invalid length.
[   90.646918][ T7188] netlink: 'syz.0.559': attribute type 3 has an invalid length.
[   90.757889][  T790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   91.027333][ T7226] tipc: Started in network mode
[   91.028982][ T7226] tipc: Node identity 080211000001, cluster identity 4711
[   91.031280][ T7226] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   91.042827][ T7226] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[   91.056778][ T7226] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[   91.067638][ T7226] tipc: Resetting bearer <eth:syzkaller0>
[   91.145859][ T7228] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   91.433737][ T7245] tipc: Started in network mode
[   91.435669][ T7245] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[   91.440179][ T7245] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   91.599321][ T7258] xt_recent: hitcount (262143) is larger than allowed maximum (65535)
[   91.725308][ T7268] netlink: 'syz.1.598': attribute type 21 has an invalid length.
[   92.076943][ T7304] netlink: 'syz.2.610': attribute type 10 has an invalid length.
[   92.087534][  T790] tipc: Node number set to 134418688
[   92.216611][ T7317] netlink: 'syz.2.617': attribute type 29 has an invalid length.
[   92.219474][ T7317] netlink: 'syz.2.617': attribute type 29 has an invalid length.
[   92.607343][ T7348] netlink: 'syz.1.631': attribute type 5 has an invalid length.
[   93.226252][ T7403] team0: Port device vxlan1 added
[   93.350697][ T7419] __nla_validate_parse: 13 callbacks suppressed
[   93.350707][ T7419] netlink: 8 bytes leftover after parsing attributes in process `syz.1.665'.
[   93.355363][ T7419] bridge: RTM_NEWNEIGH with invalid ether address
[   93.590310][ T7441] netlink: 'syz.0.676': attribute type 21 has an invalid length.
[   93.593303][ T7441] IPv6: NLM_F_CREATE should be specified when creating new route
[   93.793968][ T7445] netlink: 48 bytes leftover after parsing attributes in process `syz.0.678'.
[   94.011763][ T7464] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   94.016248][ T7464] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   94.021776][ T7464] bond0 (unregistering): Released all slaves
[   94.354184][ T7491] SET target dimension over the limit!
[   94.451080][ T7497] netlink: 16 bytes leftover after parsing attributes in process `syz.2.701'.
[   94.603374][ T7507] netlink: 76 bytes leftover after parsing attributes in process `syz.2.706'.
[   94.801158][ T7523] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   94.987304][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   95.285380][ T7549] netlink: 104 bytes leftover after parsing attributes in process `syz.0.727'.
[   95.356128][ T7551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.728'.
[   95.771564][ T7571] netlink: 'syz.2.735': attribute type 10 has an invalid length.
[   95.774867][ T7571] netlink: 40 bytes leftover after parsing attributes in process `syz.2.735'.
[   95.780266][ T7571] batadv0: entered promiscuous mode
[   95.783337][ T7571] batadv0: entered allmulticast mode
[   95.791235][ T7571] 8021q: adding VLAN 0 to HW filter on device batadv0
[   95.793994][ T7571] bridge0: port 3(batadv0) entered blocking state
[   95.797139][ T7571] bridge0: port 3(batadv0) entered disabled state
[   95.844955][ T7571] syz.2.735 (7571) used greatest stack depth: 19888 bytes left
[   95.884229][ T7574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.736'.
[   95.892156][ T7574] netlink: 20 bytes leftover after parsing attributes in process `syz.2.736'.
[   95.895579][ T7576] xt_hashlimit: max too large, truncated to 1048576
[   95.898327][ T7574] netlink: 32 bytes leftover after parsing attributes in process `syz.2.736'.
[   95.917871][ T7574] netlink: 'syz.2.736': attribute type 1 has an invalid length.
[   96.108436][ T5845] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[   96.112209][ T5845] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[   96.360300][ T7596] netlink: 'syz.0.747': attribute type 1 has an invalid length.
[   96.443897][ T7601] sctp: [Deprecated]: syz.2.750 (pid 7601) Use of struct sctp_assoc_value in delayed_ack socket option.
[   96.443897][ T7601] Use struct sctp_sack_info instead
[   97.235568][ T7664] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   97.365452][ T7670] sit1: entered promiscuous mode
[   97.648435][ T7683] netlink: 'syz.0.790': attribute type 1 has an invalid length.
[   97.651016][ T7683] netlink: 'syz.0.790': attribute type 2 has an invalid length.
[   98.193958][ T7721] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[   98.671389][ T7755] xt_CT: No such helper "syz0"
[   98.695911][ T7760] netlink: 'syz.0.823': attribute type 2 has an invalid length.
[   98.700646][ T7760] netlink: 'syz.0.823': attribute type 1 has an invalid length.
[   98.703426][ T7760] __nla_validate_parse: 12 callbacks suppressed
[   98.703437][ T7760] netlink: 8 bytes leftover after parsing attributes in process `syz.0.823'.
[   98.764952][ T7761] netlink: 24 bytes leftover after parsing attributes in process `syz.0.823'.
[   99.492859][ T7800] netlink: 32 bytes leftover after parsing attributes in process `syz.2.841'.
[   99.748624][ T7813] netlink: 4 bytes leftover after parsing attributes in process `syz.1.845'.
[  100.167939][ T7839] netlink: 208 bytes leftover after parsing attributes in process `syz.1.858'.
[  100.172924][ T7839] netlink: 208 bytes leftover after parsing attributes in process `syz.1.858'.
[  100.232533][ T7844] netlink: 'syz.0.861': attribute type 22 has an invalid length.
[  100.407650][ T7856] netlink: 4 bytes leftover after parsing attributes in process `syz.1.864'.
[  100.415889][ T7856] macvtap1: entered promiscuous mode
[  100.419883][ T7856] batadv0: entered promiscuous mode
[  100.421758][ T7856] macvtap1: entered allmulticast mode
[  100.423550][ T7856] batadv0: entered allmulticast mode
[  100.426417][ T7856] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  100.433583][ T7851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.864'.
[  100.437966][ T7851] batadv0: left allmulticast mode
[  100.440065][ T7851] batadv0: left promiscuous mode
[  100.601001][ T7863] netlink: 'syz.1.867': attribute type 11 has an invalid length.
[  100.604193][ T7863] netlink: 'syz.1.867': attribute type 4 has an invalid length.
[  100.607964][ T7863] netlink: 224 bytes leftover after parsing attributes in process `syz.1.867'.
[  100.694121][ T7867] netlink: 48 bytes leftover after parsing attributes in process `syz.1.869'.
[  100.933826][ T7880] netlink: 'syz.1.875': attribute type 1 has an invalid length.
[  100.984141][ T7880] bond0: (slave gretap1): making interface the new active one
[  100.989693][ T7880] bond0: (slave gretap1): Enslaving as an active interface with an up link
[  101.010208][ T7880] vlan3: entered allmulticast mode
[  101.012867][ T7880] bond0: entered allmulticast mode
[  101.015132][ T7880] gretap1: entered allmulticast mode
[  101.019405][ T7880] bond0: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  101.192522][ T7897] syzkaller0: entered allmulticast mode
[  101.399773][ T7919] netlink: 'syz.0.892': attribute type 1 has an invalid length.
[  101.402425][ T7919] netlink: 'syz.0.892': attribute type 2 has an invalid length.
[  101.419546][ T7919] netlink: 'syz.0.892': attribute type 1 has an invalid length.
[  101.674324][ T7935] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  101.674798][ T5894] IPVS: starting estimator thread 0...
[  101.785218][ T7939] IPVS: using max 62 ests per chain, 148800 per kthread
[  101.813704][ T7948] netlink: 'syz.1.907': attribute type 15 has an invalid length.
[  101.949841][ T5845] bridge0: port 3(batadv0) entered disabled state
[  101.954475][ T5845] bridge_slave_1: left allmulticast mode
[  101.956410][ T5845] bridge_slave_1: left promiscuous mode
[  101.960371][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.980621][ T5845] bridge_slave_0: left allmulticast mode
[  101.982884][ T5845] bridge_slave_0: left promiscuous mode
[  101.985152][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.012390][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  102.015520][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  102.021171][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  102.030161][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  102.042933][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  102.058189][ T7961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  102.319153][ T5845] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  102.323910][ T5845] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  102.328787][ T5845] bond0 (unregistering): Released all slaves
[  102.407181][ T5845] tipc: Left network mode
[  102.791672][ T5845] hsr_slave_0: left promiscuous mode
[  102.798144][ T5845] hsr_slave_1: left promiscuous mode
[  102.809095][ T5845] batman_adv: batadv0: Removing interface: batadv_slave_0
[  102.815826][ T5845] batman_adv: batadv0: Removing interface: batadv_slave_1
[  103.492363][ T7958] chnl_net:caif_netlink_parms(): no params data found
[  103.679256][ T8030] netlink: 'syz.1.932': attribute type 1 has an invalid length.
[  103.684639][ T8030] netlink: 'syz.1.932': attribute type 4 has an invalid length.
[  103.705554][ T8024] dvmrp0: entered allmulticast mode
[  103.744962][ T7958] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.760479][ T7958] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.763664][ T7958] bridge_slave_0: entered allmulticast mode
[  103.774691][ T7958] bridge_slave_0: entered promiscuous mode
[  103.788065][ T7958] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.790474][ T7958] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.793204][ T7958] bridge_slave_1: entered allmulticast mode
[  103.797740][ T5845] IPVS: stop unused estimator thread 0...
[  103.807501][ T7958] bridge_slave_1: entered promiscuous mode
[  103.864300][ T8039] __nla_validate_parse: 5 callbacks suppressed
[  103.864314][ T8039] netlink: 84 bytes leftover after parsing attributes in process `syz.0.935'.
[  103.920168][ T7958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  103.948765][ T7958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  104.001928][ T7958] team0: Port device team_slave_0 added
[  104.007519][ T7958] team0: Port device team_slave_1 added
[  104.054445][ T7958] batman_adv: batadv0: Adding interface: batadv_slave_0
[  104.058205][ T7958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  104.068764][ T7958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  104.085538][ T7958] batman_adv: batadv0: Adding interface: batadv_slave_1
[  104.090584][ T7958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  104.101705][ T7958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  104.106979][ T5830] Bluetooth: hci2: command tx timeout
[  104.173070][ T7958] hsr_slave_0: entered promiscuous mode
[  104.175314][ T7958] hsr_slave_1: entered promiscuous mode
[  104.178323][ T7958] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  104.183459][ T7958] Cannot create hsr debugfs directory
[  104.273121][ T8053] netlink: 24 bytes leftover after parsing attributes in process `syz.0.939'.
[  104.658880][ T8072] netlink: 24 bytes leftover after parsing attributes in process `syz.0.945'.
[  104.792288][ T8081] netlink: 'syz.0.949': attribute type 1 has an invalid length.
[  104.795335][ T7958] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  104.804328][ T7958] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  104.821691][ T7958] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  104.828971][ T7958] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  105.020520][ T7958] 8021q: adding VLAN 0 to HW filter on device bond0
[  105.060428][ T7958] 8021q: adding VLAN 0 to HW filter on device team0
[  105.083001][ T1016] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.085904][ T1016] bridge0: port 1(bridge_slave_0) entered forwarding state
[  105.102017][ T1016] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.105063][ T1016] bridge0: port 2(bridge_slave_1) entered forwarding state
[  105.119293][ T8104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.955'.
[  105.172945][ T8104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.955'.
[  105.246213][ T7958] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  105.497772][ T7958] 8021q: adding VLAN 0 to HW filter on device batadv0
[  105.542594][ T8129] netlink: 64 bytes leftover after parsing attributes in process `syz.0.962'.
[  105.550944][ T8130] netlink: 16 bytes leftover after parsing attributes in process `syz.1.963'.
[  105.602787][ T7958] veth0_vlan: entered promiscuous mode
[  105.631529][ T7958] veth1_vlan: entered promiscuous mode
[  105.701157][ T7958] veth0_macvtap: entered promiscuous mode
[  105.722826][ T7958] veth1_macvtap: entered promiscuous mode
[  105.769222][ T7958] batman_adv: batadv0: Interface activated: batadv_slave_0
[  105.775723][ T7958] batman_adv: batadv0: Interface activated: batadv_slave_1
[  105.800715][ T7958] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  105.804092][ T7958] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  105.810441][ T7958] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  105.813589][ T7958] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  105.823038][ T8150] netlink: 4 bytes leftover after parsing attributes in process `syz.1.970'.
[  105.859814][ T8153] netlink: 60 bytes leftover after parsing attributes in process `syz.1.972'.
[  105.964708][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  105.978120][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.018374][ T6526] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.020933][ T6526] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.308416][ T8188] netlink: 'syz.1.983': attribute type 3 has an invalid length.
[  106.381928][ T8198] tipc: New replicast peer: 255.255.255.255
[  106.384207][ T8198] tipc: Enabled bearer <udp:syz2>, priority 10
[  106.661213][ T8222] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  106.950743][ T8244] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1006'.
[  106.955406][ T8244] netlink: zone id is out of range
[  106.963666][ T8244] netlink: zone id is out of range
[  106.966389][ T8244] netlink: zone id is out of range
[  106.968610][ T8244] netlink: zone id is out of range
[  106.970619][ T8244] netlink: zone id is out of range
[  106.972205][ T8244] netlink: zone id is out of range
[  106.974127][ T8244] netlink: zone id is out of range
[  106.975745][ T8244] netlink: zone id is out of range
[  106.978915][ T8244] netlink: zone id is out of range
[  107.441145][ T8290] netlink: 'syz.0.1029': attribute type 142 has an invalid length.
[  107.613072][ T5861] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.937901][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  107.942444][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  107.946302][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  107.955906][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  107.960392][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  108.227726][ T8319] chnl_net:caif_netlink_parms(): no params data found
[  108.371163][ T8319] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.375394][ T8319] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.382606][ T8319] bridge_slave_0: entered allmulticast mode
[  108.395468][ T8319] bridge_slave_0: entered promiscuous mode
[  108.407355][ T8319] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.412740][ T8319] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.415532][ T8319] bridge_slave_1: entered allmulticast mode
[  108.425237][ T8319] bridge_slave_1: entered promiscuous mode
[  108.573926][ T8319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  108.582482][ T8319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  108.663551][ T8319] team0: Port device team_slave_0 added
[  108.680472][ T8319] team0: Port device team_slave_1 added
[  108.777299][ T8319] batman_adv: batadv0: Adding interface: batadv_slave_0
[  108.779884][ T8319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  108.809169][ T8319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  108.831001][ T8319] batman_adv: batadv0: Adding interface: batadv_slave_1
[  108.833697][ T8319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  108.860437][ T8319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  108.961668][ T8319] hsr_slave_0: entered promiscuous mode
[  108.966301][ T8319] hsr_slave_1: entered promiscuous mode
[  108.970607][ T8319] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  108.972988][ T8319] Cannot create hsr debugfs directory
[  109.080175][ T8371] team0 (unregistering): Port device vxlan1 removed
[  109.468223][ T5861] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.619347][ T5861] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.728989][ T5861] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.903813][ T5861] bridge_slave_1: left allmulticast mode
[  109.905909][ T5861] bridge_slave_1: left promiscuous mode
[  109.912054][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.919050][ T5861] bridge_slave_0: left allmulticast mode
[  109.920855][ T5861] bridge_slave_0: left promiscuous mode
[  109.925349][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.027255][ T5830] Bluetooth: hci2: command tx timeout
[  110.279140][ T5861] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  110.289443][ T5861] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  110.297661][ T5861] bond0 (unregistering): Released all slaves
[  110.325864][ T8411] __nla_validate_parse: 6 callbacks suppressed
[  110.325879][ T8411] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1075'.
[  110.584329][ T8422] bond0: Unable to set down delay as MII monitoring is disabled
[  110.843679][ T5861] hsr_slave_0: left promiscuous mode
[  110.857523][ T5861] hsr_slave_1: left promiscuous mode
[  110.860264][ T5861] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  110.863156][ T5861] batman_adv: batadv0: Removing interface: batadv_slave_0
[  110.870925][ T5861] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  110.873893][ T5861] batman_adv: batadv0: Removing interface: batadv_slave_1
[  110.896191][ T5861] veth1_macvtap: left promiscuous mode
[  110.899480][ T5861] veth0_macvtap: left promiscuous mode
[  110.901815][ T5861] veth1_vlan: left promiscuous mode
[  110.904008][ T5861] veth0_vlan: left promiscuous mode
[  111.221608][ T5861] team0 (unregistering): Port device team_slave_1 removed
[  111.250155][ T5861] team0 (unregistering): Port device team_slave_0 removed
[  111.667059][ T8439] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1085'.
[  111.761384][ T8319] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  111.792931][ T8319] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  111.805239][ T8449] netlink: 'syz.1.1087': attribute type 32 has an invalid length.
[  111.810665][ T8449] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1087'.
[  111.813998][ T8319] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  111.840113][ T8319] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  111.998500][ T8319] 8021q: adding VLAN 0 to HW filter on device bond0
[  112.015439][ T8319] 8021q: adding VLAN 0 to HW filter on device team0
[  112.025982][ T1016] bridge0: port 1(bridge_slave_0) entered blocking state
[  112.028954][ T1016] bridge0: port 1(bridge_slave_0) entered forwarding state
[  112.061020][ T1016] bridge0: port 2(bridge_slave_1) entered blocking state
[  112.063832][ T1016] bridge0: port 2(bridge_slave_1) entered forwarding state
[  112.108885][ T5830] Bluetooth: hci2: command tx timeout
[  112.201396][ T8481] netlink: 'syz.0.1095': attribute type 6 has an invalid length.
[  112.271290][ T8319] 8021q: adding VLAN 0 to HW filter on device batadv0
[  112.322045][ T8319] veth0_vlan: entered promiscuous mode
[  112.329619][ T8319] veth1_vlan: entered promiscuous mode
[  112.352739][ T8319] veth0_macvtap: entered promiscuous mode
[  112.365211][ T8319] veth1_macvtap: entered promiscuous mode
[  112.381946][ T8319] batman_adv: batadv0: Interface activated: batadv_slave_0
[  112.394633][ T8319] batman_adv: batadv0: Interface activated: batadv_slave_1
[  112.405541][ T8319] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  112.411897][ T8319] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  112.426705][ T8319] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  112.429588][ T8319] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  112.444341][ T8496] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  112.509599][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  112.512245][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  112.544157][ T1016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  112.550465][ T1016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  112.649994][ T8507] net_ratelimit: 75 callbacks suppressed
[  112.650028][ T8507] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  114.007049][ T8558] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1132'.
[  114.010635][ T8558] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1132'.
[  114.014468][ T8558] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1132'.
[  114.063503][ T8564] netlink: 'syz.1.1135': attribute type 1 has an invalid length.
[  114.115442][ T8566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1137'.
[  114.585701][ T5860] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.917749][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  114.921676][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  114.925968][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  114.935433][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  114.943285][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  114.962368][ T8621] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1162'.
[  115.201278][ T8617] chnl_net:caif_netlink_parms(): no params data found
[  115.322569][ T8617] bridge0: port 1(bridge_slave_0) entered blocking state
[  115.325413][ T8617] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.338340][ T8617] bridge_slave_0: entered allmulticast mode
[  115.342020][ T8617] bridge_slave_0: entered promiscuous mode
[  115.346321][ T8617] bridge0: port 2(bridge_slave_1) entered blocking state
[  115.350190][ T8617] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.353111][ T8617] bridge_slave_1: entered allmulticast mode
[  115.359457][ T8617] bridge_slave_1: entered promiscuous mode
[  115.396778][ T8617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  115.403413][ T8617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  115.480161][ T8617] team0: Port device team_slave_0 added
[  115.485194][ T8617] team0: Port device team_slave_1 added
[  115.515175][ T8652] netlink: 252 bytes leftover after parsing attributes in process `syz.1.1173'.
[  115.525735][ T8617] batman_adv: batadv0: Adding interface: batadv_slave_0
[  115.531061][ T8617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  115.542590][ T8617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  115.565325][ T8617] batman_adv: batadv0: Adding interface: batadv_slave_1
[  115.570014][ T8617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  115.580822][ T8617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  115.701460][ T8617] hsr_slave_0: entered promiscuous mode
[  115.704613][ T8617] hsr_slave_1: entered promiscuous mode
[  115.727896][ T8617] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  115.730938][ T8617] Cannot create hsr debugfs directory
[  115.752185][ T8661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1178'.
[  116.304285][ T5860] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.372816][ T5860] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.437212][ T5860] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.618775][ T5860] bridge_slave_1: left allmulticast mode
[  116.621687][ T5860] bridge_slave_1: left promiscuous mode
[  116.624181][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.633081][ T5860] bridge_slave_0: left allmulticast mode
[  116.635396][ T5860] bridge_slave_0: left promiscuous mode
[  116.641562][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.997054][ T5834] Bluetooth: hci2: command tx timeout
[  117.045777][ T5860] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  117.052505][ T5860] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  117.058363][ T5860] bond0 (unregistering): Released all slaves
[  117.097417][ T8733] xt_CT: No such helper "snmp"
[  117.151391][ T8737] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  117.267877][ T8749] netlink: 'syz.1.1208': attribute type 1 has an invalid length.
[  117.270247][ T8749] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1208'.
[  117.393500][ T5860] hsr_slave_0: left promiscuous mode
[  117.395978][ T5860] hsr_slave_1: left promiscuous mode
[  117.401118][ T5860] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  117.408502][ T5860] batman_adv: batadv0: Removing interface: batadv_slave_0
[  117.415166][ T5860] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  117.418820][ T5860] batman_adv: batadv0: Removing interface: batadv_slave_1
[  117.431318][ T8761] can: request_module (can-proto-3) failed.
[  117.436416][ T5860] veth1_macvtap: left promiscuous mode
[  117.438905][ T5860] veth0_macvtap: left promiscuous mode
[  117.441253][ T5860] veth1_vlan: left promiscuous mode
[  117.444775][ T5860] veth0_vlan: left promiscuous mode
[  117.891200][ T5860] team0 (unregistering): Port device team_slave_1 removed
[  117.918233][ T5860] team0 (unregistering): Port device team_slave_0 removed
[  118.359126][ T8617] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  118.374314][ T8617] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  118.382509][ T8617] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  118.408880][ T8617] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  118.553414][ T8811] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1232'.
[  118.585036][ T8813] netem: change failed
[  118.603154][ T8617] 8021q: adding VLAN 0 to HW filter on device bond0
[  118.628729][ T8617] 8021q: adding VLAN 0 to HW filter on device team0
[  118.638888][ T1016] bridge0: port 1(bridge_slave_0) entered blocking state
[  118.641324][ T1016] bridge0: port 1(bridge_slave_0) entered forwarding state
[  118.652418][ T1016] bridge0: port 2(bridge_slave_1) entered blocking state
[  118.655275][ T1016] bridge0: port 2(bridge_slave_1) entered forwarding state
[  118.737023][ T8824] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1237'.
[  118.744690][ T8824] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1237'.
[  118.786243][ T8617] 8021q: adding VLAN 0 to HW filter on device batadv0
[  118.824697][ T8617] veth0_vlan: entered promiscuous mode
[  118.832689][ T8617] veth1_vlan: entered promiscuous mode
[  118.860930][ T8617] veth0_macvtap: entered promiscuous mode
[  118.865367][ T8617] veth1_macvtap: entered promiscuous mode
[  118.879391][ T8617] batman_adv: batadv0: Interface activated: batadv_slave_0
[  118.887409][ T8617] batman_adv: batadv0: Interface activated: batadv_slave_1
[  118.892908][ T8617] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  118.895639][ T8617] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  118.901745][ T8617] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  118.904550][ T8617] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  118.988571][ T8841] netlink: 'syz.1.1245': attribute type 1 has an invalid length.
[  118.991128][ T8841] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1245'.
[  118.991162][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.993818][ T8841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1245'.
[  118.996220][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.046235][ T1016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.050992][ T1016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.067494][ T5834] Bluetooth: hci2: command tx timeout
[  119.070318][ T8849] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1249'.
[  119.073770][ T8849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1249'.
[  119.191162][ T8855] gretap0: entered promiscuous mode
[  119.590444][ T8880] bridge_slave_0: left allmulticast mode
[  119.592587][ T8880] bridge_slave_0: left promiscuous mode
[  119.594448][ T8880] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.598917][ T8880] bridge_slave_1: left allmulticast mode
[  119.600747][ T8880] bridge_slave_1: left promiscuous mode
[  119.603061][ T8880] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.609914][ T8880] team0: Port device team_slave_0 removed
[  119.614509][ T8880] team0: Port device team_slave_1 removed
[  119.617302][ T8880] batman_adv: batadv0: Removing interface: batadv_slave_0
[  119.623099][ T8880] batman_adv: batadv0: Removing interface: batadv_slave_1
[  119.631050][ T8880] bond0: (slave gretap1): Releasing active interface
[  119.633744][ T8880] gretap1: left allmulticast mode
[  119.638441][ T8886] netlink: 'syz.1.1263': attribute type 10 has an invalid length.
[  119.723848][ T8890] netlink: 'syz.1.1266': attribute type 1 has an invalid length.
[  119.866283][   T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  119.875944][   T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  119.887290][  T790] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  120.082489][ T8918] bond0: option min_links: invalid value (18446744073709551604)
[  120.085527][ T8918] bond0: option min_links: allowed values 0 - 2147483647
[  120.136220][ T8922] netem: incorrect gi model size
[  120.146600][ T8922] netem: change failed
[  120.176815][    T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  120.529594][    T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  120.732923][ T8974] bond0: (slave wlan1): Releasing backup interface
[  120.747841][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  120.763958][ T8977] __nla_validate_parse: 5 callbacks suppressed
[  120.763969][ T8977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1307'.
[  120.769712][ T8977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1307'.
[  120.871322][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.067297][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  121.552794][ T8996] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1316'.
[  121.672052][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  121.676268][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  121.680245][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  121.685511][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  121.691923][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  121.982171][ T9001] chnl_net:caif_netlink_parms(): no params data found
[  121.995952][ T9021] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1327'.
[  122.020427][ T9023] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1326'.
[  122.230414][ T9001] bridge0: port 1(bridge_slave_0) entered blocking state
[  122.233346][ T9001] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.242882][ T9001] bridge_slave_0: entered allmulticast mode
[  122.247365][ T9001] bridge_slave_0: entered promiscuous mode
[  122.310928][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.350100][ T9001] bridge0: port 2(bridge_slave_1) entered blocking state
[  122.369388][ T9001] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.372289][ T9001] bridge_slave_1: entered allmulticast mode
[  122.380708][ T9001] bridge_slave_1: entered promiscuous mode
[  122.451420][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.495648][ T9062] netlink: 'syz.0.1340': attribute type 5 has an invalid length.
[  122.538280][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.553456][ T9001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  122.563652][ T9001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  122.671330][ T9001] team0: Port device team_slave_0 added
[  122.696883][ T9001] team0: Port device team_slave_1 added
[  122.775578][ T9001] batman_adv: batadv0: Adding interface: batadv_slave_0
[  122.785915][ T9001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  122.824059][ T9001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  122.842556][ T9001] batman_adv: batadv0: Adding interface: batadv_slave_1
[  122.845169][ T9001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  122.878370][ T9001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  123.043079][ T9001] hsr_slave_0: entered promiscuous mode
[  123.046166][ T9001] hsr_slave_1: entered promiscuous mode
[  123.055716][ T9001] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  123.060041][ T9001] Cannot create hsr debugfs directory
[  123.063097][   T13] bridge_slave_1: left allmulticast mode
[  123.065359][   T13] bridge_slave_1: left promiscuous mode
[  123.076870][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  123.098671][   T13] bridge_slave_0: left allmulticast mode
[  123.106551][   T13] bridge_slave_0: left promiscuous mode
[  123.108466][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  123.155562][ T9098] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  123.381538][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  123.387691][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  123.391559][   T13] bond0 (unregistering): Released all slaves
[  123.626730][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  123.664821][ T9120] netlink: 'syz.0.1362': attribute type 1 has an invalid length.
[  123.669318][ T9118] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1361'.
[  123.780327][ T9124] bond3: (slave gretap2): making interface the new active one
[  123.783931][ T9124] bond3: (slave gretap2): Enslaving as an active interface with an up link
[  123.787236][ T5830] Bluetooth: hci2: command tx timeout
[  123.820150][   T13] hsr_slave_0: left promiscuous mode
[  123.832860][   T13] hsr_slave_1: left promiscuous mode
[  123.835669][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  123.856685][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  123.864064][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  123.878018][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  123.904927][   T13] veth1_macvtap: left promiscuous mode
[  123.913013][   T13] veth0_macvtap: left promiscuous mode
[  123.915025][   T13] veth1_vlan: left promiscuous mode
[  123.916950][   T13] veth0_vlan: left promiscuous mode
[  124.397613][   T13] team0 (unregistering): Port device team_slave_1 removed
[  124.434483][   T13] team0 (unregistering): Port device team_slave_0 removed
[  125.168852][ T9001] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  125.181098][ T9001] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  125.199603][ T9001] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  125.211625][ T9001] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  125.401012][ T9001] 8021q: adding VLAN 0 to HW filter on device bond0
[  125.412130][ T9214] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1393'.
[  125.453814][ T9001] 8021q: adding VLAN 0 to HW filter on device team0
[  125.456034][ T9214] netlink: 'syz.1.1393': attribute type 1 has an invalid length.
[  125.472380][  T189] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.474598][  T189] bridge0: port 1(bridge_slave_0) entered forwarding state
[  125.498346][  T189] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.500564][  T189] bridge0: port 2(bridge_slave_1) entered forwarding state
[  125.503227][ T9223] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1398'.
[  125.670269][ T9241] x_tables: unsorted underflow at hook 2
[  125.703786][ T9001] 8021q: adding VLAN 0 to HW filter on device batadv0
[  125.738432][ T9246] IPv6: sit1: Disabled Multicast RS
[  125.774787][ T9001] veth0_vlan: entered promiscuous mode
[  125.785660][ T9001] veth1_vlan: entered promiscuous mode
[  125.826251][ T9001] veth0_macvtap: entered promiscuous mode
[  125.841483][ T9001] veth1_macvtap: entered promiscuous mode
[  125.861728][ T9001] batman_adv: batadv0: Interface activated: batadv_slave_0
[  125.867265][ T5830] Bluetooth: hci2: command tx timeout
[  125.881027][ T9001] batman_adv: batadv0: Interface activated: batadv_slave_1
[  125.894504][ T9001] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  125.900023][ T9001] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  125.903141][ T9001] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  125.906083][ T9001] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  125.975096][ T1016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  125.983631][ T1016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.010905][  T189] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.014041][  T189] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.162833][ T9269] netlink: 'syz.0.1411': attribute type 2 has an invalid length.
[  126.346960][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  126.375962][ T9281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1417'.
[  126.596822][ T9293] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1421'.
[  126.858790][ T9306] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1426'.
[  126.873785][ T9306] netlink: 'syz.1.1426': attribute type 21 has an invalid length.
[  126.878271][ T9306] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1426'.
[  126.883083][ T9306] netlink: 'syz.1.1426': attribute type 13 has an invalid length.
[  126.886155][ T9306] netlink: 'syz.1.1426': attribute type 17 has an invalid length.
[  126.987776][ T5894] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  127.209383][ T5894] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  127.647589][ T9327] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744072284733443)
[  127.652506][ T9327] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647
[  127.971598][ T5861] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.778162][ T9366] netlink: 'syz.1.1448': attribute type 4 has an invalid length.
[  128.790864][ T9366] netlink: 'syz.1.1448': attribute type 4 has an invalid length.
[  128.877881][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  128.882721][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  128.886310][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  128.892436][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  128.895982][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  129.126270][ T9384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1456'.
[  129.141382][ T9369] chnl_net:caif_netlink_parms(): no params data found
[  129.250908][ T9369] bridge0: port 1(bridge_slave_0) entered blocking state
[  129.253974][ T9369] bridge0: port 1(bridge_slave_0) entered disabled state
[  129.257565][ T9369] bridge_slave_0: entered allmulticast mode
[  129.261719][ T9369] bridge_slave_0: entered promiscuous mode
[  129.267090][ T9369] bridge0: port 2(bridge_slave_1) entered blocking state
[  129.270110][ T9369] bridge0: port 2(bridge_slave_1) entered disabled state
[  129.273286][ T9369] bridge_slave_1: entered allmulticast mode
[  129.279878][ T9369] bridge_slave_1: entered promiscuous mode
[  129.318021][ T9369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  129.324971][ T9369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  129.366761][ T9369] team0: Port device team_slave_0 added
[  129.372496][ T9369] team0: Port device team_slave_1 added
[  129.421414][ T9369] batman_adv: batadv0: Adding interface: batadv_slave_0
[  129.424171][ T9369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  129.435416][ T9369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  129.442014][ T9369] batman_adv: batadv0: Adding interface: batadv_slave_1
[  129.444832][ T9369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  129.456357][ T9369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  129.507082][ T9369] hsr_slave_0: entered promiscuous mode
[  129.518303][ T9369] hsr_slave_1: entered promiscuous mode
[  129.521474][ T9369] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  129.524490][ T9369] Cannot create hsr debugfs directory
[  129.615101][ T5861] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.627057][ T9398] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1461'.
[  129.633648][ T9402] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1463'.
[  129.686128][ T5861] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.800240][ T5861] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.941459][ T5861] bridge_slave_1: left allmulticast mode
[  129.943791][ T5861] bridge_slave_1: left promiscuous mode
[  129.946163][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state
[  129.960486][ T5861] bridge_slave_0: left allmulticast mode
[  129.962826][ T5861] bridge_slave_0: left promiscuous mode
[  129.965231][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.328364][ T5861] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  130.334152][ T5861] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  130.340660][ T5861] bond0 (unregistering): Released all slaves
[  130.684427][ T9437] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1474'.
[  130.775456][ T5861] hsr_slave_0: left promiscuous mode
[  130.779412][ T5861] hsr_slave_1: left promiscuous mode
[  130.781610][ T5861] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  130.784088][ T5861] batman_adv: batadv0: Removing interface: batadv_slave_0
[  130.791639][ T5861] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  130.794947][ T5861] batman_adv: batadv0: Removing interface: batadv_slave_1
[  130.814951][ T5861] veth1_macvtap: left promiscuous mode
[  130.819294][ T5861] veth0_macvtap: left promiscuous mode
[  130.822670][ T5861] veth1_vlan: left promiscuous mode
[  130.824824][ T5861] veth0_vlan: left promiscuous mode
[  130.990240][ T5830] Bluetooth: hci2: command tx timeout
[  131.211371][ T5861] team0 (unregistering): Port device team_slave_1 removed
[  131.235463][ T5861] team0 (unregistering): Port device team_slave_0 removed
[  131.467819][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  131.757472][ T9369] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  131.778383][ T9369] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  131.804406][ T9369] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  131.829877][ T9369] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  131.959316][ T9465] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  131.967077][ T9465] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  132.131221][ T9369] 8021q: adding VLAN 0 to HW filter on device bond0
[  132.172753][ T9369] 8021q: adding VLAN 0 to HW filter on device team0
[  132.181847][  T189] bridge0: port 1(bridge_slave_0) entered blocking state
[  132.184807][  T189] bridge0: port 1(bridge_slave_0) entered forwarding state
[  132.209519][  T189] bridge0: port 2(bridge_slave_1) entered blocking state
[  132.212461][  T189] bridge0: port 2(bridge_slave_1) entered forwarding state
[  132.432951][ T9369] 8021q: adding VLAN 0 to HW filter on device batadv0
[  132.493957][ T9369] veth0_vlan: entered promiscuous mode
[  132.505794][ T9369] veth1_vlan: entered promiscuous mode
[  132.544008][ T9369] veth0_macvtap: entered promiscuous mode
[  132.552518][ T9369] veth1_macvtap: entered promiscuous mode
[  132.578841][ T9369] batman_adv: batadv0: Interface activated: batadv_slave_0
[  132.594866][ T9369] batman_adv: batadv0: Interface activated: batadv_slave_1
[  132.637256][ T9369] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  132.640876][ T9369] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  132.644251][ T9369] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  132.649325][ T9369] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  132.745960][  T189] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  132.752672][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.762757][  T189] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  132.782883][   T33] audit: type=1800 audit(1752346053.955:3): pid=9503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1494" name="cgroup.controllers" dev="tmpfs" ino=3018 res=0 errno=0
[  132.799396][  T189] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  132.802410][  T189] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  132.952839][ T9518] netlink: zone id is out of range
[  132.956737][ T9518] netlink: zone id is out of range
[  132.958820][ T9518] netlink: zone id is out of range
[  132.961064][ T9518] netlink: zone id is out of range
[  132.963090][ T9518] netlink: zone id is out of range
[  132.965087][ T9518] netlink: zone id is out of range
[  132.968513][ T9518] netlink: zone id is out of range
[  132.970517][ T9518] netlink: zone id is out of range
[  132.972705][ T9518] netlink: zone id is out of range
[  133.067610][ T9523] syzkaller1: entered promiscuous mode
[  133.069818][ T9523] syzkaller1: entered allmulticast mode
[  133.222565][ T9532] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  133.345420][ T9538] netlink: 'syz.0.1507': attribute type 2 has an invalid length.
[  133.353642][ T9538] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1507'.
[  134.628205][ T9560] netlink: 'syz.1.1517': attribute type 1 has an invalid length.
[  134.683875][ T5845] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.627999][ T9511] IPVS: starting estimator thread 0...
[  135.716613][ T9575] IPVS: using max 40 ests per chain, 96000 per kthread
[  135.841737][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  135.848644][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  135.852361][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  135.856228][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  135.863452][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  136.081223][ T9586] chnl_net:caif_netlink_parms(): no params data found
[  136.156177][ T9605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1530'.
[  136.208843][ T9586] bridge0: port 1(bridge_slave_0) entered blocking state
[  136.211828][ T9586] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.214848][ T9586] bridge_slave_0: entered allmulticast mode
[  136.220243][ T9586] bridge_slave_0: entered promiscuous mode
[  136.224777][ T9586] bridge0: port 2(bridge_slave_1) entered blocking state
[  136.229541][ T9586] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.232410][ T9586] bridge_slave_1: entered allmulticast mode
[  136.236314][ T9586] bridge_slave_1: entered promiscuous mode
[  136.298442][ T9586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  136.330613][ T5845] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.350776][ T9586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  136.392224][ T9586] team0: Port device team_slave_0 added
[  136.404351][ T9586] team0: Port device team_slave_1 added
[  136.436930][ T5845] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.477954][ T9586] batman_adv: batadv0: Adding interface: batadv_slave_0
[  136.480762][ T9586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  136.491301][ T9586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  136.510157][ T5845] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.524912][ T9586] batman_adv: batadv0: Adding interface: batadv_slave_1
[  136.527971][ T9586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  136.540410][ T9586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  136.630996][ T9586] hsr_slave_0: entered promiscuous mode
[  136.634608][ T9586] hsr_slave_1: entered promiscuous mode
[  136.637886][ T9586] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  136.640933][ T9586] Cannot create hsr debugfs directory
[  136.857892][ T5845] bridge_slave_1: left allmulticast mode
[  136.860265][ T5845] bridge_slave_1: left promiscuous mode
[  136.862684][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.881363][ T5845] bridge_slave_0: left allmulticast mode
[  136.883690][ T5845] bridge_slave_0: left promiscuous mode
[  136.886212][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[  137.221634][ T5845] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  137.230526][ T5845] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  137.235463][ T5845] bond0 (unregistering): Released all slaves
[  137.511626][ T5845] hsr_slave_0: left promiscuous mode
[  137.515193][ T5845] hsr_slave_1: left promiscuous mode
[  137.520437][ T5845] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  137.523005][ T5845] batman_adv: batadv0: Removing interface: batadv_slave_0
[  137.526146][ T5845] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  137.528860][ T5845] batman_adv: batadv0: Removing interface: batadv_slave_1
[  137.551982][ T5845] veth1_macvtap: left promiscuous mode
[  137.553855][ T5845] veth0_macvtap: left promiscuous mode
[  137.555696][ T5845] veth1_vlan: left promiscuous mode
[  137.557833][ T5845] veth0_vlan: left promiscuous mode
[  137.957416][ T5830] Bluetooth: hci2: command tx timeout
[  138.037023][ T5845] team0 (unregistering): Port device team_slave_1 removed
[  138.067578][ T5845] team0 (unregistering): Port device team_slave_0 removed
[  138.118550][ T9675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1558'.
[  138.821362][ T9696] netlink: 'syz.1.1565': attribute type 3 has an invalid length.
[  138.824203][ T9696] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1565'.
[  138.871540][ T9586] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  138.897621][ T9586] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  138.910282][ T9586] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  138.918493][ T9586] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  139.002670][ T9586] 8021q: adding VLAN 0 to HW filter on device bond0
[  139.023618][ T9586] 8021q: adding VLAN 0 to HW filter on device team0
[  139.032291][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[  139.034675][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[  139.047575][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[  139.050287][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[  139.261387][ T9586] 8021q: adding VLAN 0 to HW filter on device batadv0
[  139.274905][ T9733] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1578'.
[  139.303211][ T9586] veth0_vlan: entered promiscuous mode
[  139.308649][ T9586] veth1_vlan: entered promiscuous mode
[  139.323254][ T9586] veth0_macvtap: entered promiscuous mode
[  139.332527][ T9586] veth1_macvtap: entered promiscuous mode
[  139.346075][ T9586] batman_adv: batadv0: Interface activated: batadv_slave_0
[  139.353135][ T9586] batman_adv: batadv0: Interface activated: batadv_slave_1
[  139.359761][ T9586] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  139.362436][ T9586] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  139.365072][ T9586] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  139.369136][ T9586] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  139.463684][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  139.466102][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  139.491895][ T1016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  139.495108][ T1016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  139.520423][ T9746] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1583'.
[  139.589526][ T9747] 8021q: adding VLAN 0 to HW filter on device team0
[  139.600063][ T9747] net_ratelimit: 10 callbacks suppressed
[  139.600072][ T9747] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  140.580277][ T9441] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x4
[  141.337763][ T5860] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.471495][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  142.475187][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  142.479442][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  142.483099][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  142.489128][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  142.637117][ T9792] chnl_net:caif_netlink_parms(): no params data found
[  142.738421][ T9792] bridge0: port 1(bridge_slave_0) entered blocking state
[  142.742296][ T9792] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.744600][ T9792] bridge_slave_0: entered allmulticast mode
[  142.749979][ T9792] bridge_slave_0: entered promiscuous mode
[  142.754445][ T9792] bridge0: port 2(bridge_slave_1) entered blocking state
[  142.759994][ T9792] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.762954][ T9792] bridge_slave_1: entered allmulticast mode
[  142.773135][ T9792] bridge_slave_1: entered promiscuous mode
[  142.790796][ T9816] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  142.820411][ T9792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  142.825463][ T9792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  142.894160][ T9792] team0: Port device team_slave_0 added
[  142.898788][ T9792] team0: Port device team_slave_1 added
[  142.931559][ T9792] batman_adv: batadv0: Adding interface: batadv_slave_0
[  142.933746][ T9792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  142.942541][ T9792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  142.949109][ T9792] batman_adv: batadv0: Adding interface: batadv_slave_1
[  142.949295][ T9826] netlink: 'syz.0.1602': attribute type 4 has an invalid length.
[  142.952921][ T9792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  142.970714][ T9792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  143.051289][ T9792] hsr_slave_0: entered promiscuous mode
[  143.057419][ T9792] hsr_slave_1: entered promiscuous mode
[  143.067951][ T9792] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  143.070865][ T9792] Cannot create hsr debugfs directory
[  143.140290][ T9832] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1607'.
[  143.263419][ T5860] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.330949][ T5860] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.334586][ T9851] netlink: 'syz.0.1615': attribute type 4 has an invalid length.
[  143.341136][ T9851] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1615'.
[  143.393939][ T5860] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.395713][ T9856] netlink: 'syz.0.1617': attribute type 1 has an invalid length.
[  143.431843][ T9856] 8021q: adding VLAN 0 to HW filter on device bond4
[  143.454720][ T9856] 8021q: adding VLAN 0 to HW filter on device batadv0
[  143.464319][ T9856] bond4: (slave batadv0): making interface the new active one
[  143.472059][ T9856] bond4: (slave batadv0): Enslaving as an active interface with an up link
[  143.646030][ T5860] bridge_slave_1: left allmulticast mode
[  143.653459][ T5860] bridge_slave_1: left promiscuous mode
[  143.655600][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.665369][ T5860] bridge_slave_0: left allmulticast mode
[  143.667682][ T5860] bridge_slave_0: left promiscuous mode
[  143.676078][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.987830][ T5860] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  143.993351][ T5860] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  143.998811][ T5860] bond0 (unregistering): Released all slaves
[  144.308034][ T9883] netlink: 'syz.0.1624': attribute type 1 has an invalid length.
[  144.352182][ T5860] hsr_slave_0: left promiscuous mode
[  144.354805][ T5860] hsr_slave_1: left promiscuous mode
[  144.360227][ T5860] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  144.363153][ T5860] batman_adv: batadv0: Removing interface: batadv_slave_0
[  144.367689][ T5860] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  144.369940][ T5860] batman_adv: batadv0: Removing interface: batadv_slave_1
[  144.390714][ T5860] veth1_macvtap: left promiscuous mode
[  144.392991][ T5860] veth0_macvtap: left promiscuous mode
[  144.395239][ T5860] veth1_vlan: left promiscuous mode
[  144.398613][ T5860] veth0_vlan: left promiscuous mode
[  144.511613][ T5834] Bluetooth: hci2: command tx timeout
[  145.002569][ T5860] team0 (unregistering): Port device team_slave_1 removed
[  145.040953][ T5860] team0 (unregistering): Port device team_slave_0 removed
[  145.494769][ T9883] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  145.749928][ T9792] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  145.774331][ T9792] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  145.793778][ T9904] delete_channel: no stack
[  145.821486][ T9792] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  145.833357][ T9792] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  145.923482][ T9917] vlan3: entered promiscuous mode
[  145.925176][ T9917] vlan3: entered allmulticast mode
[  145.929507][ T9917] hsr_slave_1: entered allmulticast mode
[  146.037551][ T9792] 8021q: adding VLAN 0 to HW filter on device bond0
[  146.040502][ T9925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1634'.
[  146.129862][ T9792] 8021q: adding VLAN 0 to HW filter on device team0
[  146.139776][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[  146.142381][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[  146.186417][ T9792] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  146.186696][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  146.193079][ T9792] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  146.209073][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.212148][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[  146.391111][ T9792] 8021q: adding VLAN 0 to HW filter on device batadv0
[  146.450880][ T9792] veth0_vlan: entered promiscuous mode
[  146.462862][ T9792] veth1_vlan: entered promiscuous mode
[  146.473410][ T9955] xt_hashlimit: size too large, truncated to 1048576
[  146.477537][ T9955] xt_hashlimit: overflow, try lower: 3/0
[  146.513754][ T9792] veth0_macvtap: entered promiscuous mode
[  146.525236][ T9792] veth1_macvtap: entered promiscuous mode
[  146.550978][ T9792] batman_adv: batadv0: Interface activated: batadv_slave_0
[  146.563005][ T9792] batman_adv: batadv0: Interface activated: batadv_slave_1
[  146.570641][ T9792] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  146.573288][ T9792] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  146.576698][ T9792] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  146.580320][ T9792] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  146.587721][ T5834] Bluetooth: hci2: command tx timeout
[  146.766760][ T9959] netlink: 'syz.0.1649': attribute type 1 has an invalid length.
[  146.770239][ T9959] nbd: error processing sock list
[  146.773289][ T9959] block nbd0: shutting down sockets
[  146.843111][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  146.845524][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  146.869375][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  146.873105][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  147.116863][ T9819] ==================================================================
[  147.120090][ T9819] BUG: KASAN: slab-use-after-free in __mutex_lock+0x738/0xe80
[  147.123023][ T9819] Read of size 8 at addr ffff88801ebc40a0 by task khidpd_0b578002/9819
[  147.127295][ T9819] 
[  147.128356][ T9819] CPU: 1 UID: 0 PID: 9819 Comm: khidpd_0b578002 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  147.128375][ T9819] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  147.128386][ T9819] Call Trace:
[  147.128395][ T9819]  <TASK>
[  147.128404][ T9819]  dump_stack_lvl+0x189/0x250
[  147.128428][ T9819]  ? __virt_addr_valid+0x1c8/0x5c0
[  147.128447][ T9819]  ? rcu_is_watching+0x15/0xb0
[  147.128464][ T9819]  ? __kasan_check_byte+0x12/0x40
[  147.128482][ T9819]  ? __pfx_dump_stack_lvl+0x10/0x10
[  147.128497][ T9819]  ? rcu_is_watching+0x15/0xb0
[  147.128512][ T9819]  ? lock_release+0x4b/0x3e0
[  147.128528][ T9819]  ? __virt_addr_valid+0x1c8/0x5c0
[  147.128545][ T9819]  ? __virt_addr_valid+0x4a5/0x5c0
[  147.128562][ T9819]  print_report+0xd2/0x2b0
[  147.128576][ T9819]  ? __mutex_lock+0x738/0xe80
[  147.128590][ T9819]  kasan_report+0x118/0x150
[  147.128607][ T9819]  ? __mutex_lock+0x738/0xe80
[  147.128622][ T9819]  __mutex_lock+0x738/0xe80
[  147.128642][ T9819]  ? __mutex_lock+0x51b/0xe80
[  147.128657][ T9819]  ? l2cap_unregister_user+0x6a/0x1b0
[  147.128671][ T9819]  ? __pfx___mutex_lock+0x10/0x10
[  147.128687][ T9819]  ? __pfx___timer_delete_sync+0x10/0x10
[  147.128710][ T9819]  l2cap_unregister_user+0x6a/0x1b0
[  147.128725][ T9819]  hidp_session_thread+0x3c9/0x410
[  147.128741][ T9819]  ? __pfx_hidp_session_thread+0x10/0x10
[  147.128754][ T9819]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  147.128774][ T9819]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  147.128789][ T9819]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  147.128803][ T9819]  ? __kthread_parkme+0x7b/0x200
[  147.128821][ T9819]  ? __kthread_parkme+0x1a1/0x200
[  147.128839][ T9819]  kthread+0x711/0x8a0
[  147.128858][ T9819]  ? __pfx_hidp_session_thread+0x10/0x10
[  147.128871][ T9819]  ? __pfx_kthread+0x10/0x10
[  147.128889][ T9819]  ? _raw_spin_unlock_irq+0x23/0x50
[  147.128907][ T9819]  ? lockdep_hardirqs_on+0x9c/0x150
[  147.128927][ T9819]  ? __pfx_kthread+0x10/0x10
[  147.128944][ T9819]  ret_from_fork+0x3fc/0x770
[  147.128960][ T9819]  ? __pfx_ret_from_fork+0x10/0x10
[  147.128975][ T9819]  ? __switch_to_asm+0x39/0x70
[  147.128990][ T9819]  ? __switch_to_asm+0x33/0x70
[  147.129005][ T9819]  ? __pfx_kthread+0x10/0x10
[  147.129022][ T9819]  ret_from_fork_asm+0x1a/0x30
[  147.129046][ T9819]  </TASK>
[  147.129051][ T9819] 
[  147.217251][ T9819] Allocated by task 9792:
[  147.218931][ T9819]  kasan_save_track+0x3e/0x80
[  147.220798][ T9819]  __kasan_kmalloc+0x93/0xb0
[  147.222645][ T9819]  __kmalloc_noprof+0x27a/0x4f0
[  147.224529][ T9819]  hci_alloc_dev_priv+0x28/0x2040
[  147.226595][ T9819]  vhci_create_device+0x120/0x6e0
[  147.228585][ T9819]  vhci_write+0x3ce/0x4a0
[  147.230304][ T9819]  vfs_write+0x54b/0xa90
[  147.231944][ T9819]  ksys_write+0x145/0x250
[  147.233680][ T9819]  do_syscall_64+0xfa/0x3b0
[  147.235463][ T9819]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.237769][ T9819] 
[  147.238715][ T9819] Freed by task 9792:
[  147.240359][ T9819]  kasan_save_track+0x3e/0x80
[  147.242230][ T9819]  kasan_save_free_info+0x46/0x50
[  147.244254][ T9819]  __kasan_slab_free+0x62/0x70
[  147.246248][ T9819]  kfree+0x18e/0x440
[  147.247884][ T9819]  bt_host_release+0x82/0x90
[  147.249758][ T9819]  device_release+0x9c/0x1c0
[  147.251604][ T9819]  kobject_put+0x22b/0x480
[  147.253425][ T9819]  vhci_release+0x88/0xd0
[  147.255216][ T9819]  __fput+0x44c/0xa70
[  147.256855][ T9819]  task_work_run+0x1d4/0x260
[  147.258719][ T9819]  do_exit+0x6b5/0x22e0
[  147.260421][ T9819]  do_group_exit+0x21c/0x2d0
[  147.262298][ T9819]  __x64_sys_exit_group+0x3f/0x40
[  147.264292][ T9819]  x64_sys_call+0x21ba/0x21c0
[  147.266158][ T9819]  do_syscall_64+0xfa/0x3b0
[  147.267925][ T9819]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.270214][ T9819] 
[  147.271159][ T9819] Last potentially related work creation:
[  147.273294][ T9819]  kasan_save_stack+0x3e/0x60
[  147.275120][ T9819]  kasan_record_aux_stack+0xbd/0xd0
[  147.277259][ T9819]  insert_work+0x3d/0x330
[  147.278982][ T9819]  __queue_work+0xbd9/0xfe0
[  147.280820][ T9819]  queue_work_on+0x181/0x270
[  147.282725][ T9819]  process_scheduled_works+0xae1/0x17b0
[  147.284830][ T9819]  worker_thread+0x8a0/0xda0
[  147.286662][ T9819]  kthread+0x711/0x8a0
[  147.288256][ T9819]  ret_from_fork+0x3fc/0x770
[  147.290005][ T9819]  ret_from_fork_asm+0x1a/0x30
[  147.291885][ T9819] 
[  147.292848][ T9819] Second to last potentially related work creation:
[  147.295525][ T9819]  kasan_save_stack+0x3e/0x60
[  147.297355][ T9819]  kasan_record_aux_stack+0xbd/0xd0
[  147.299371][ T9819]  insert_work+0x3d/0x330
[  147.301245][ T9819]  __queue_work+0xcfc/0xfe0
[  147.303228][ T9819]  call_timer_fn+0x17e/0x5f0
[  147.305062][ T9819]  __run_timer_base+0x646/0x860
[  147.307017][ T9819]  run_timer_softirq+0xb7/0x180
[  147.308888][ T9819]  handle_softirqs+0x286/0x870
[  147.310747][ T9819]  __irq_exit_rcu+0xca/0x1f0
[  147.312530][ T9819]  irq_exit_rcu+0x9/0x30
[  147.314115][ T9819]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  147.315787][ T9819]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  147.317526][ T9819] 
[  147.318285][ T9819] The buggy address belongs to the object at ffff88801ebc4000
[  147.318285][ T9819]  which belongs to the cache kmalloc-8k of size 8192
[  147.322630][ T9819] The buggy address is located 160 bytes inside of
[  147.322630][ T9819]  freed 8192-byte region [ffff88801ebc4000, ffff88801ebc6000)
[  147.327044][ T9819] 
[  147.327826][ T9819] The buggy address belongs to the physical page:
[  147.329840][ T9819] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88801ebc0000 pfn:0x1ebc0
[  147.333024][ T9819] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  147.335723][ T9819] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff)
[  147.338262][ T9819] page_type: f5(slab)
[  147.339462][ T9819] raw: 00fff00000000240 ffff88801a442280 ffffea0000bede10 ffffea0000bbfa10
[  147.342556][ T9819] raw: ffff88801ebc0000 0000000000020001 00000000f5000000 0000000000000000
[  147.345631][ T9819] head: 00fff00000000240 ffff88801a442280 ffffea0000bede10 ffffea0000bbfa10
[  147.348984][ T9819] head: ffff88801ebc0000 0000000000020001 00000000f5000000 0000000000000000
[  147.352126][ T9819] head: 00fff00000000003 ffffea00007af001 00000000ffffffff 00000000ffffffff
[  147.355316][ T9819] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  147.358286][ T9819] page dumped because: kasan: bad access detected
[  147.360440][ T9819] page_owner tracks the page as allocated
[  147.362527][ T9819] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x528c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP), pid 9510, tgid 9509 (syz.1.1496), ts 132603416710, free_ts 132534800486
[  147.368749][ T9819]  post_alloc_hook+0x240/0x2a0
[  147.370374][ T9819]  get_page_from_freelist+0x21e4/0x22c0
[  147.372380][ T9819]  __alloc_frozen_pages_noprof+0x181/0x370
[  147.374408][ T9819]  alloc_pages_mpol+0x232/0x4a0
[  147.376107][ T9819]  allocate_slab+0x8a/0x3b0
[  147.377605][ T9819]  ___slab_alloc+0xbfc/0x1480
[  147.379102][ T9819]  __kvmalloc_node_noprof+0x429/0x5f0
[  147.381063][ T9819]  pfifo_fast_init+0x363/0x6b0
[  147.382700][ T9819]  qdisc_create_dflt+0x13b/0x4e0
[  147.384304][ T9819]  dev_activate+0x378/0x1150
[  147.385830][ T9819]  __dev_open+0x69c/0x880
[  147.387300][ T9819]  __dev_change_flags+0x1ea/0x6d0
[  147.388919][ T9819]  netif_change_flags+0x88/0x1a0
[  147.390623][ T9819]  dev_change_flags+0x130/0x260
[  147.392521][ T9819]  devinet_ioctl+0xbb4/0x1b50
[  147.394364][ T9819]  inet_ioctl+0x3c0/0x4c0
[  147.396018][ T9819] page last free pid 9507 tgid 9506 stack trace:
[  147.398373][ T9819]  __free_frozen_pages+0xc71/0xe70
[  147.400323][ T9819]  __folio_put+0x21b/0x2c0
[  147.401979][ T9819]  free_large_kmalloc+0x145/0x200
[  147.403939][ T9819]  bpf_check+0x14767/0x19c60
[  147.405490][ T9819]  bpf_prog_load+0x1318/0x1930
[  147.407129][ T9819]  __sys_bpf+0x5f1/0x860
[  147.408475][ T9819]  __x64_sys_bpf+0x7c/0x90
[  147.409959][ T9819]  do_syscall_64+0xfa/0x3b0
[  147.411477][ T9819]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.413471][ T9819] 
[  147.414250][ T9819] Memory state around the buggy address:
[  147.416100][ T9819]  ffff88801ebc3f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  147.418649][ T9819]  ffff88801ebc4000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  147.421461][ T9819] >ffff88801ebc4080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  147.424545][ T9819]                                ^
[  147.426577][ T9819]  ffff88801ebc4100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  147.429712][ T9819]  ffff88801ebc4180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  147.432903][ T9819] ==================================================================
[  147.437125][ T9819] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  147.439991][ T9819] CPU: 1 UID: 0 PID: 9819 Comm: khidpd_0b578002 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  147.445063][ T9819] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  147.448433][ T9819] Call Trace:
[  147.449693][ T9819]  <TASK>
[  147.450799][ T9819]  dump_stack_lvl+0x99/0x250
[  147.452442][ T9819]  ? __asan_memcpy+0x40/0x70
[  147.454182][ T9819]  ? __pfx_dump_stack_lvl+0x10/0x10
[  147.456027][ T9819]  ? __pfx__printk+0x10/0x10
[  147.457608][ T9819]  panic+0x2db/0x790
[  147.458897][ T9819]  ? __pfx_panic+0x10/0x10
[  147.460490][ T9819]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  147.462809][ T9819]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  147.464772][ T9819]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  147.466914][ T9819]  ? print_memory_metadata+0x314/0x400
[  147.468686][ T9819]  ? __mutex_lock+0x738/0xe80
[  147.470258][ T9819]  check_panic_on_warn+0x89/0xb0
[  147.471837][ T9819]  ? __mutex_lock+0x738/0xe80
[  147.473593][ T9819]  end_report+0x78/0x160
[  147.474987][ T9819]  kasan_report+0x129/0x150
[  147.476420][ T9819]  ? __mutex_lock+0x738/0xe80
[  147.477938][ T9819]  __mutex_lock+0x738/0xe80
[  147.479547][ T9819]  ? __mutex_lock+0x51b/0xe80
[  147.481428][ T9819]  ? l2cap_unregister_user+0x6a/0x1b0
[  147.483557][ T9819]  ? __pfx___mutex_lock+0x10/0x10
[  147.485590][ T9819]  ? __pfx___timer_delete_sync+0x10/0x10
[  147.487760][ T9819]  l2cap_unregister_user+0x6a/0x1b0
[  147.489764][ T9819]  hidp_session_thread+0x3c9/0x410
[  147.491815][ T9819]  ? __pfx_hidp_session_thread+0x10/0x10
[  147.493996][ T9819]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  147.496588][ T9819]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  147.499137][ T9819]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  147.501574][ T9819]  ? __kthread_parkme+0x7b/0x200
[  147.503485][ T9819]  ? __kthread_parkme+0x1a1/0x200
[  147.505434][ T9819]  kthread+0x711/0x8a0
[  147.506991][ T9819]  ? __pfx_hidp_session_thread+0x10/0x10
[  147.509189][ T9819]  ? __pfx_kthread+0x10/0x10
[  147.511116][ T9819]  ? _raw_spin_unlock_irq+0x23/0x50
[  147.513159][ T9819]  ? lockdep_hardirqs_on+0x9c/0x150
[  147.515230][ T9819]  ? __pfx_kthread+0x10/0x10
[  147.517052][ T9819]  ret_from_fork+0x3fc/0x770
[  147.518897][ T9819]  ? __pfx_ret_from_fork+0x10/0x10
[  147.520893][ T9819]  ? __switch_to_asm+0x39/0x70
[  147.522814][ T9819]  ? __switch_to_asm+0x33/0x70
[  147.524750][ T9819]  ? __pfx_kthread+0x10/0x10
[  147.526561][ T9819]  ret_from_fork_asm+0x1a/0x30
[  147.528446][ T9819]  </TASK>
[  147.530403][ T9819] Kernel Offset: disabled
[  147.532041][ T9819] Rebooting in 86400 seconds..

VM DIAGNOSIS:
18:47:48  Registers:
info registers vcpu 0

CPU#0
RAX=5f02ea3e7cdd4400 RBX=ffffffff81976c78 RCX=5f02ea3e7cdd4400 RDX=0000000000000001
RSI=ffffffff8d998c17 RDI=ffffffff8be29dc0 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa1f3f0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6f34d3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffe0c692b58 CR3=000000010fc10000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffffff ffff00ff00000000 XMM05=0000000000000021 0000000000326963
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffffff000000 XMM09=706e692f3030323a 326963682f326963
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000038 RBX=0000000000000038 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000296f370
R8 =ffff888107a70237 R9 =1ffff11020f4e046 R10=dffffc0000000000 R11=ffffffff85478780
R12=dffffc0000000000 R13=ffffffff99af98d9 R14=ffffffff99dfe6e0 R15=0000000000000000
RIP=ffffffff854787fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000555589e475c8 CR3=0000000027eb2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 ff000000000000ff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007ff995e11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
