last executing test programs:

42.229591407s ago: executing program 1 (id=76):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x14, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@map_fd={0x18, 0x8, 0x1, 0x0, 0x1}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @generic={0xe0, 0x2, 0x1, 0x5, 0xff}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0x3, 0x3}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000240)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000003c0)=[{0x0, 0x2, 0xf, 0xc}, {0x2, 0x2, 0xf, 0x6}, {0x3, 0x2, 0x2, 0x5}, {0x1, 0x2, 0xc, 0x8}, {0x5, 0x4, 0xb, 0xb}, {0x3, 0x3, 0x0, 0xa}, {0x3, 0x2, 0x9}]}, 0x94)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10, 0x0}, 0x34004811)
r2 = socket$kcm(0x10, 0x2, 0x4)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_buf(r3, 0x6, 0x1f, &(0x7f0000000300), 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0xa, 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080fffffffe0000400100e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000000000006911bc00000000008510000002000000850800008b00000095000000000000009500a50500000000699b43160164f7d8c18db44ce3cf122c2d74e3c1b081c16865a27cd49574c26244542623f02a5e19f2aba86f807a3b25c228c3cae180920fc8dba13064e95243659a6a2355e361a2d17b47c4f7044cc168d2a93340ecbce95e922dcf4259932d2d25198c032df2700688ffbbf0d97ccecea92abf074d8dd932426e7dd470472a9b80bfa515d611ef8e7b18b5bcfc5f7b3bcf89bd8b88c9351c1ab6f92bf13a5bc2c7d1fd1c1b148404f8d416483603c238ef00"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94)

36.218796173s ago: executing program 1 (id=76):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x14, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@map_fd={0x18, 0x8, 0x1, 0x0, 0x1}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @generic={0xe0, 0x2, 0x1, 0x5, 0xff}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0x3, 0x3}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000240)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000003c0)=[{0x0, 0x2, 0xf, 0xc}, {0x2, 0x2, 0xf, 0x6}, {0x3, 0x2, 0x2, 0x5}, {0x1, 0x2, 0xc, 0x8}, {0x5, 0x4, 0xb, 0xb}, {0x3, 0x3, 0x0, 0xa}, {0x3, 0x2, 0x9}]}, 0x94)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10, 0x0}, 0x34004811)
r2 = socket$kcm(0x10, 0x2, 0x4)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_buf(r3, 0x6, 0x1f, &(0x7f0000000300), 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0xa, 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080fffffffe0000400100e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000000000006911bc00000000008510000002000000850800008b00000095000000000000009500a50500000000699b43160164f7d8c18db44ce3cf122c2d74e3c1b081c16865a27cd49574c26244542623f02a5e19f2aba86f807a3b25c228c3cae180920fc8dba13064e95243659a6a2355e361a2d17b47c4f7044cc168d2a93340ecbce95e922dcf4259932d2d25198c032df2700688ffbbf0d97ccecea92abf074d8dd932426e7dd470472a9b80bfa515d611ef8e7b18b5bcfc5f7b3bcf89bd8b88c9351c1ab6f92bf13a5bc2c7d1fd1c1b148404f8d416483603c238ef00"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94)

29.640749822s ago: executing program 1 (id=76):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x14, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@map_fd={0x18, 0x8, 0x1, 0x0, 0x1}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @generic={0xe0, 0x2, 0x1, 0x5, 0xff}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0x3, 0x3}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000240)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000003c0)=[{0x0, 0x2, 0xf, 0xc}, {0x2, 0x2, 0xf, 0x6}, {0x3, 0x2, 0x2, 0x5}, {0x1, 0x2, 0xc, 0x8}, {0x5, 0x4, 0xb, 0xb}, {0x3, 0x3, 0x0, 0xa}, {0x3, 0x2, 0x9}]}, 0x94)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10, 0x0}, 0x34004811)
r2 = socket$kcm(0x10, 0x2, 0x4)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_buf(r3, 0x6, 0x1f, &(0x7f0000000300), 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0xa, 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080fffffffe0000400100e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000000000006911bc00000000008510000002000000850800008b00000095000000000000009500a50500000000699b43160164f7d8c18db44ce3cf122c2d74e3c1b081c16865a27cd49574c26244542623f02a5e19f2aba86f807a3b25c228c3cae180920fc8dba13064e95243659a6a2355e361a2d17b47c4f7044cc168d2a93340ecbce95e922dcf4259932d2d25198c032df2700688ffbbf0d97ccecea92abf074d8dd932426e7dd470472a9b80bfa515d611ef8e7b18b5bcfc5f7b3bcf89bd8b88c9351c1ab6f92bf13a5bc2c7d1fd1c1b148404f8d416483603c238ef00"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94)

22.870181039s ago: executing program 1 (id=76):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x14, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@map_fd={0x18, 0x8, 0x1, 0x0, 0x1}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @generic={0xe0, 0x2, 0x1, 0x5, 0xff}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0x3, 0x3}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000240)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000003c0)=[{0x0, 0x2, 0xf, 0xc}, {0x2, 0x2, 0xf, 0x6}, {0x3, 0x2, 0x2, 0x5}, {0x1, 0x2, 0xc, 0x8}, {0x5, 0x4, 0xb, 0xb}, {0x3, 0x3, 0x0, 0xa}, {0x3, 0x2, 0x9}]}, 0x94)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10, 0x0}, 0x34004811)
r2 = socket$kcm(0x10, 0x2, 0x4)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_buf(r3, 0x6, 0x1f, &(0x7f0000000300), 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0xa, 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080fffffffe0000400100e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000000000006911bc00000000008510000002000000850800008b00000095000000000000009500a50500000000699b43160164f7d8c18db44ce3cf122c2d74e3c1b081c16865a27cd49574c26244542623f02a5e19f2aba86f807a3b25c228c3cae180920fc8dba13064e95243659a6a2355e361a2d17b47c4f7044cc168d2a93340ecbce95e922dcf4259932d2d25198c032df2700688ffbbf0d97ccecea92abf074d8dd932426e7dd470472a9b80bfa515d611ef8e7b18b5bcfc5f7b3bcf89bd8b88c9351c1ab6f92bf13a5bc2c7d1fd1c1b148404f8d416483603c238ef00"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94)

15.240093409s ago: executing program 1 (id=76):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x14, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@map_fd={0x18, 0x8, 0x1, 0x0, 0x1}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @generic={0xe0, 0x2, 0x1, 0x5, 0xff}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0x3, 0x3}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000240)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000003c0)=[{0x0, 0x2, 0xf, 0xc}, {0x2, 0x2, 0xf, 0x6}, {0x3, 0x2, 0x2, 0x5}, {0x1, 0x2, 0xc, 0x8}, {0x5, 0x4, 0xb, 0xb}, {0x3, 0x3, 0x0, 0xa}, {0x3, 0x2, 0x9}]}, 0x94)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10, 0x0}, 0x34004811)
r2 = socket$kcm(0x10, 0x2, 0x4)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_buf(r3, 0x6, 0x1f, &(0x7f0000000300), 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0xa, 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080fffffffe0000400100e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000000000006911bc00000000008510000002000000850800008b00000095000000000000009500a50500000000699b43160164f7d8c18db44ce3cf122c2d74e3c1b081c16865a27cd49574c26244542623f02a5e19f2aba86f807a3b25c228c3cae180920fc8dba13064e95243659a6a2355e361a2d17b47c4f7044cc168d2a93340ecbce95e922dcf4259932d2d25198c032df2700688ffbbf0d97ccecea92abf074d8dd932426e7dd470472a9b80bfa515d611ef8e7b18b5bcfc5f7b3bcf89bd8b88c9351c1ab6f92bf13a5bc2c7d1fd1c1b148404f8d416483603c238ef00"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94)

5.706262563s ago: executing program 1 (id=76):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x14, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@map_fd={0x18, 0x8, 0x1, 0x0, 0x1}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @generic={0xe0, 0x2, 0x1, 0x5, 0xff}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0x3, 0x3}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000240)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000003c0)=[{0x0, 0x2, 0xf, 0xc}, {0x2, 0x2, 0xf, 0x6}, {0x3, 0x2, 0x2, 0x5}, {0x1, 0x2, 0xc, 0x8}, {0x5, 0x4, 0xb, 0xb}, {0x3, 0x3, 0x0, 0xa}, {0x3, 0x2, 0x9}]}, 0x94)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10, 0x0}, 0x34004811)
r2 = socket$kcm(0x10, 0x2, 0x4)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_buf(r3, 0x6, 0x1f, &(0x7f0000000300), 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0xa, 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080fffffffe0000400100e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000000000006911bc00000000008510000002000000850800008b00000095000000000000009500a50500000000699b43160164f7d8c18db44ce3cf122c2d74e3c1b081c16865a27cd49574c26244542623f02a5e19f2aba86f807a3b25c228c3cae180920fc8dba13064e95243659a6a2355e361a2d17b47c4f7044cc168d2a93340ecbce95e922dcf4259932d2d25198c032df2700688ffbbf0d97ccecea92abf074d8dd932426e7dd470472a9b80bfa515d611ef8e7b18b5bcfc5f7b3bcf89bd8b88c9351c1ab6f92bf13a5bc2c7d1fd1c1b148404f8d416483603c238ef00"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94)

1.399245754s ago: executing program 0 (id=613):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000380)={{r0}, 0x6, 0xb3a4, 0x9})
connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$sock_int(r4, 0x1, 0xa, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r4, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x401, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13101}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r6, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0xe4, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0xb4, 0x2, [@TCA_CGROUP_EMATCHES={0xb0, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0xa4, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xa0, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0x6d, 0x5, "b3a112af040f2cb057a10b4838593022bffde79cc115462b30c62ae7d0528c9c6fb0da108e6f54219c9759b027c24b33690100000000000080fdd45094969bcb1a6f58ba7109564e2aaf4866e59832829a810be8270176a8fb080aa46da4e800"/105}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x9}]}}]}]}]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x80}, 0x40010)

1.139305685s ago: executing program 0 (id=616):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[], 0x0, 0x56}, 0x28) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="196fcc16470000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000959100"/28], 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x12, 0x4, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18000000010400000000000000000000711235000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) (async)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async)
r2 = socket(0x1e, 0x2, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000480), 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000400), &(0x7f0000000300)=r3}, 0x20)

1.060599724s ago: executing program 0 (id=618):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
unshare(0x6a040000)
mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = gettid()
sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100000000000600000000000000", @ANYRES32=r0, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r2], 0x28}, 0x1, 0x0, 0x0, 0x20000880}, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)

593.112058ms ago: executing program 2 (id=621):
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000970300e0f0ffffff95"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x90)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x80800)
recvmmsg$unix(r2, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x6c, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x50, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x14008044)
accept4$alg(r2, 0x0, 0x0, 0x0)

268.836287ms ago: executing program 2 (id=622):
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000780)=ANY=[@ANYBLOB="2b40000048009125745c7388641f9c0e0a", @ANYBLOB="e6b4eea52b7d"], 0xfe33)
r3 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @netrom, @bcast, @rose, @rose, @default, @netrom]}, &(0x7f0000000080)=0x48, 0x0)
ioctl$SIOCAX25GETINFO(r3, 0x89ed, &(0x7f00000000c0))
sendmmsg$inet(r0, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)="1844ab68257d2068f56d57a02a7eae952da77917f3d3bcfd17fa697866339abc453b61dec0b0cc634d93cda9ed0568f89163a15513547104661234827edb11431d00de617faf10b5325091e6ea70bd944773d08f73c872eace457ba5f58ada6d8990441f2d87f6c1bae3f521039cb80523708fe6b91397d87277dd924be366aa9c7651e9c398a161f7d1a747d585013de417ce572a38b47e7a73da49f859b81397bf6664db41e97563541e39d05c03e9304513a9d7da57dcbfafc8315adb5695c8d37428c186f136f81f76cebb70b48a4970b0c55921f6ba846526e173bf568fc59fac1f823a562bb4", 0xe9}], 0x1, 0x0, 0x0, 0x5000000}}, {{0x0, 0x0, &(0x7f00000010c0)=[{0x0, 0x12}, {&(0x7f0000001040)="7824a0dc9ad7f268aac63ae0191537bc82ee3d56e4fb23064596", 0x1a}], 0x2}}], 0x2, 0x10)

268.481165ms ago: executing program 0 (id=623):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000007112"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0xa, [@type_tag={0x8, 0x0, 0x0, 0x12, 0x3}, @decl_tag={0x1, 0x0, 0x0, 0x11, 0x2, 0xffffffffffffffff}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x1, 0x81}}]}, {0x0, [0x30, 0x2e, 0x30, 0x0, 0x61, 0x5f, 0x30, 0x2e]}}, 0x0, 0x56, 0x0, 0x1, 0x3}, 0x28)
socket$kcm(0x29, 0x5, 0x0)

266.550919ms ago: executing program 0 (id=624):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a1c000000e25f64e8a06d553900000000020000080800024000000000140000001100010000000000000000000a00000a"], 0x44}}, 0x0)

265.538575ms ago: executing program 2 (id=625):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) (async, rerun: 32)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) (async, rerun: 32)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (async)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f00000000c0)={'gre0\x00', <r1=>0x0, 0x8, 0x7800, 0xe39c, 0x5, {{0x25, 0x4, 0x3, 0x9, 0x94, 0x65, 0x0, 0x4, 0x2f, 0x0, @loopback, @broadcast, {[@generic={0x7, 0x4, 'MH'}, @noop, @cipso={0x86, 0x7a, 0x3, [{0x1, 0x11, "9d8b45bb29b7985381c9d3e380b4bf"}, {0x6, 0xe, "c86d7e1cfddbe996c8b6f62a"}, {0x7, 0x11, "bf30a32a7ce8b94ec4b434f53a1533"}, {0x1, 0xd, "bac18824281fe6a313791a"}, {0x0, 0x2}, {0x6, 0x10, "ccd76f2794a828b88c6ab4008bec"}, {0x1, 0x6, "46877d43"}, {0x2, 0x11, "c50063fca9cfb6cfd0bb3a12580bf0"}, {0x2, 0xe, "f217c632a7d20b6d38d390f7"}]}]}}}}})
setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r1}, 0x14)
setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000080)=0x49e1, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x800, 0x0, 0x0)

177.824998ms ago: executing program 2 (id=626):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x20)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-384-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1)
r2 = accept4(r1, 0x0, 0x0, 0x80800)
sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4951}, 0x1)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
mmap(&(0x7f0000868000/0x5000)=nil, 0x5000, 0x100000c, 0x13, r3, 0x4a9b6000)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x20) (async)
socket$alg(0x26, 0x5, 0x0) (async)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-384-generic\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) (async)
accept4(r1, 0x0, 0x0, 0x80800) (async)
sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4951}, 0x1) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async)
mmap(&(0x7f0000868000/0x5000)=nil, 0x5000, 0x100000c, 0x13, r3, 0x4a9b6000) (async)

176.045742ms ago: executing program 0 (id=627):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)=ANY=[@ANYBLOB="d80000001b0001002dbd7000fddbdf25ffffffff000000000000000000000000000000000000000000000000000000004e2200004e2300010a00008032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00080000000000000500000000000000f8ffffffffffffffff010000f2ff00000100000000000000010000000000008009000000000000000000000080000000010000000051a100010100000000000004000000000080000700000000000000000002030000000029"], 0xd8}, 0x1, 0x0, 0x0, 0xc040}, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wg0\x00', &(0x7f0000000000)=@ethtool_rxfh={0x46, 0x0, 0x4, 0x1, 0xfd, "7f7cf4", 0x2, [0x6022]}})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280)={<r3=>0x0, <r4=>0x0}, &(0x7f00000013c0)=0xc)
sendmmsg$unix(r2, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {r3, r4}}}], 0x20, 0x4004c}}], 0x1, 0x20000011)
r5 = getgid()
r6 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r6, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000003dc0)=<r7=>0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000003e00)={{{@in6=@private1, @in6=@ipv4={""/10, ""/2, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in6=@private2}, 0x0, @in6=@mcast1}}, &(0x7f00000004c0)=0xe8)
r9 = getgid()
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003f40)={<r10=>0x0, 0x0, <r11=>0x0}, &(0x7f0000003f80)=0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000280)={<r13=>0x0, <r14=>0x0}, &(0x7f00000013c0)=0xc)
sendmmsg$unix(r12, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {r13, r14}}}], 0x20, 0x4004c}}], 0x1, 0x20000011)
r15 = getgid()
r16 = getpid()
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x1, 0x0, 0x0, {0xf}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=r16}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004240)={{{@in=@broadcast, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r17=>0x0}}, {{@in=@remote}, 0x0, @in=@private}}, &(0x7f0000004340)=0xe8)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000004380)={0x0, <r18=>0x0, <r19=>0x0}, &(0x7f0000000640)=0xc)
r20 = socket$nl_route(0x10, 0x3, 0x0)
r21 = getpid()
r22 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r21, r22, 0x0, 0x0, 0x0}, 0x30)
sendmsg$nl_route(r20, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_BROADCAST={0xa}, @IFLA_NET_NS_PID={0x8, 0x13, r21}, @IFLA_MTU={0x8, 0x4, 0xffe1}]}, 0x50}}, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000004400)={0x0, 0x0, <r23=>0x0}, &(0x7f0000004440)=0xc)
socketpair(0x5, 0xa, 0x101, &(0x7f0000004480)={0xffffffffffffffff, <r24=>0xffffffffffffffff})
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004540)=[{{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000100)="40378ddff8d799f7a38a3c1af9e92adb7aef8c66f353d343c03fa34dc87803c5d5a7d7ada73501efd7bcac35ffd385ff6482f5c742bad6afc55ec3a2334eb4f0851aa4321b3a0aacd60d9adefc50a1d581e92b23765defb5de4e7000", 0x5c}, {&(0x7f0000000180)="18befe6cd07c00879ef4bd5694be37637dbf0d28a8b88c5c32fa937d920c033d9a21c68e39365564f399cedbac49f215f76a6610d1e500afec73046808c756a9534f3878c9afb7768df48e1d456a0e7aada2c8d8083ef83757f7e32d0351675fcf07a60decbb8ab04f3b423ed7af146d908d6d32735a8954dc99f3213cda22f06eaa62d5b08bec93ae7de4182b65b1b49ca7f542b46d4deafacb6c2f08aea325da59f1f7de96cf6a1e81a9dea7c8ee8f2ef7c8aadfbf9212cbca07f0482b041bd2455cf6761b5957ef0e3de00ef808b091328dc0bd5028b70bbb389dd55d1ca477", 0xe1}, {&(0x7f0000000280)="8dda3b00f34ba31a0b8f912c250f864346a6258b435b580371aa4c92f26338fc3e78401382da096accf419e7704346e7ddd6cc0019a39efdd4aaa7146310760e992927b56566cda9b70da0a714096e45ecc840eef83ddd66632e65ea02dc8f21fe901686d0f0a24eca9c266f1003437291c23f53fcc96b842574d98d7931e7464fe0654683e0486f1eaec9d30da6193007b41e83", 0x94}, {&(0x7f0000000340)="26dcc15c27bc1f1f6a32bd03f7d0af6706249aec0fc896fec91bdc4c6f5e680c4a069430e86b45b8ba11ec450f6224af8ca4fcdc97", 0x35}, {&(0x7f0000000380)="9c5fe200e42f1ca593b2b52138d3654c15f018422e41ed803a0291f9afc2301931681050491a4e4a3f925aeba33148d586d161ff1b7fb49e829994e4bbdd9bb7822cfc6a88cb020862cefeaaed6c5c9c663c1e3f1c2fcd9873fd5ad4270de1ef9ef0914c84d3c17d563245f8dfbc171bf38e12d8bcd8d54fd4fda82fa778e6063e5153ffd77bc32a70dc05c2912c2fada06127d2edc505d7bb62b4d03a6ceb", 0x9f}, {&(0x7f0000000740)="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", 0x1000}, {&(0x7f0000001740)="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", 0x1000}], 0x7, &(0x7f0000000680)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80, 0x24040040}}, {{&(0x7f0000002840)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002b00)=[{&(0x7f00000028c0)="49a46e98dc13445606fdcccb96e87012e8e532e88d5a6604562cbd05d4d3481848e4446c106c3939b8646eff5806e5fbf63b86491354fb84f5bb0d3f886e83f55fb6eea4b3af4b0b21c69d165dda0c71ef9befcf0d5bbaec9aa2d0baf5c5ff01ab84a9e4c52a6e269422d9c0fa080ed2501d99da3398ff844e51", 0x7a}, {&(0x7f0000002940)="130840b3a99714b6499fd75697e73b77fab342964ed038eea30f6337af5fa809d36672d18348de29a96b5c147345aca4bb9c7ba8ece19ebf09462b1db50ab208a6fa543a225cb43cbdff5498402c83c5c1a6d1e574044ddac86ab9ddbcc2b9710cdb7dc6069505d8ffc14133eb44b30dd06eb9901d381ac18781a18e3f93b6ae229b899a054cdc84aab227d28d29b1edd106fbde5d00afedd591a8a24a1b9b2fd38a139233b4e67b7aa646f8a090d3ad05009c8c343901811bf2e6a9ef81dd09aca3d5bb7ef1f41c2389346e70015177d2dc2ced", 0xd4}, {&(0x7f0000002a40)="78589ef3635417f097abd6c61c76c456a595edf763ad66d3bae398b45532a783cb95ac9a7cbdecb1878b3ebd", 0x2c}, {&(0x7f0000002a80)="245655843380615fbe07368078438c836d51d769a354cb213b61d5fedd226b24e54eca1da91c705a9fa281ecf2ca27610ba2f994fa4352613641981b0481ee82c921ac85bc35f2", 0x47}], 0x4, 0x0, 0x0, 0x8000}}, {{&(0x7f0000002b40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003d40), 0x0, &(0x7f0000003fc0)=[@cred={{0x1c, 0x1, 0x2, {r7, r18, r11}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {r3, r17, r19}}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}, @cred={{0x1c, 0x1, 0x2, {r10, r14, r15}}}], 0xa0, 0x4}}, {{0x0, 0x0, &(0x7f0000004200)=[{&(0x7f0000004080)="7a41c3820e80bf3e26ec0e2b1eea9fa0f7e490b0ca348e1ea3c2f995bdf63916e72ab8fdef7dc0c9a11853428566f29477ce34c1b8a3d8f60539cf4296e9ec653007ba32ea8665f72a86863cad1a29ff9800942939dc60de1c22c447fccfef19320ea3dd1578d1757b", 0x69}, {&(0x7f0000004100)="cf754ae7458c6c3dd6c605784c8a74c9b4523615d858459317ed2c7c2143dbfbebe5d10e875e4b3be631e7858be8816d04d7d0d44e9eb27b66589d7e26a3e22c7f99cd2d690a60887be9c0c9d9c51672719dcfe7f389e855b7aebde765c39fdd34eb48f4e159bff6e6b8e7395cc94c5fead671", 0x73}, {&(0x7f0000004180)="108eee", 0x3}, {&(0x7f00000041c0)="790b5a2b5f462532a4631f934c", 0xd}], 0x4, &(0x7f00000044c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r16, @ANYRES32=r17, @ANYRES32=r19, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r21, @ANYRES32=0xee00, @ANYRES32=r23, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="00000100000001000000001b0000000000000000", @ANYRES32=r0, @ANYRES32=r24], 0x70, 0x4000}}], 0x4, 0x20000004)

79.083151ms ago: executing program 2 (id=628):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1)
sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r2, 0x1}, 0x14}}, 0x0)
bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfc, 0x100}, 0xc)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r4, 0x1, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)={0x10, 0x140c, 0xe9f0406d24920287, 0x70bd2b, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x40085)
socket(0x28, 0x1, 0xfffffff7)

0s ago: executing program 2 (id=629):
r0 = socket$netlink(0x10, 0x3, 0xc)
r1 = socket(0x1e, 0x4, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', <r5=>0x0})
sendmsg$can_j1939(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x1d, r5, 0x3, {0x1, 0x0, 0x3}}, 0x18, &(0x7f00000001c0)={&(0x7f0000000100)}, 0x1, 0x0, 0x0, 0x4008001}, 0x10)
pipe(&(0x7f0000000340)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x20, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="fb12ca2f33d63308000000000000000079100c00a70000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94)
write(r7, &(0x7f0000000140)="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"/297, 0x3accf8d5)
vmsplice(r7, &(0x7f0000000440)=[{&(0x7f00000000c0)='7', 0x1}], 0x1, 0x100000000000000)
close(r6)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r9, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]})
sendmmsg$inet6(r8, &(0x7f0000003a00)=[{{&(0x7f0000000580)={0xa, 0x20, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000200)="c5df6a", 0x3}], 0x1}}, {{&(0x7f0000000b40)={0xa, 0x4e21, 0x900000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, 0x1c, &(0x7f0000001600)=[{&(0x7f0000000e40)="af", 0x1}], 0x1}}], 0x2, 0xc0c0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_TOL(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010025bd7000fcdbdf25010005000000000007410000004c00180000000762726f6164636173742d6c696e6b00"/98], 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x4000000)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
sendfile(r9, 0xffffffffffffffff, &(0x7f0000000000), 0x8000000000000000)
r12 = socket$inet6(0xa, 0x80003, 0xff)
r13 = socket$inet6(0xa, 0x80003, 0xff)
setsockopt$inet6_int(r13, 0x29, 0x16, &(0x7f0000fcb000), 0x4)
setsockopt$inet6_int(r12, 0x29, 0x16, &(0x7f0000000100), 0x4)
close(0x3)
recvmmsg$unix(r1, &(0x7f0000004400), 0x0, 0x100, 0x0)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:47166' (ED25519) to the list of known hosts.
syzkaller login: [   56.744094][ T5814] cgroup: Unknown subsys name 'net'
[   56.851345][ T5814] cgroup: Unknown subsys name 'cpuset'
[   56.858259][ T5814] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.990063][ T5814] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   64.269127][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   64.273365][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   64.277983][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   64.283255][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   64.292803][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   64.325028][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   64.329162][ T5221] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   64.332418][ T5221] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   64.336782][ T5221] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   64.340115][ T5221] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   64.344903][ T5221] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   64.350496][ T5221] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   64.354202][ T5221] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.393846][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   64.398795][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   64.687655][ T5829] chnl_net:caif_netlink_parms(): no params data found
[   64.743792][ T5834] chnl_net:caif_netlink_parms(): no params data found
[   64.901203][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.905142][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.908651][ T5829] bridge_slave_0: entered allmulticast mode
[   64.913579][ T5829] bridge_slave_0: entered promiscuous mode
[   64.956664][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.961746][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.967244][ T5829] bridge_slave_1: entered allmulticast mode
[   64.972059][ T5829] bridge_slave_1: entered promiscuous mode
[   64.992222][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.997319][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.000544][ T5834] bridge_slave_0: entered allmulticast mode
[   65.005471][ T5834] bridge_slave_0: entered promiscuous mode
[   65.027964][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.032159][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.036302][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.039818][ T5834] bridge_slave_1: entered allmulticast mode
[   65.044425][ T5834] bridge_slave_1: entered promiscuous mode
[   65.062014][ T5835] chnl_net:caif_netlink_parms(): no params data found
[   65.073589][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.098501][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.106735][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.201763][ T5834] team0: Port device team_slave_0 added
[   65.207372][ T5829] team0: Port device team_slave_0 added
[   65.219953][ T5834] team0: Port device team_slave_1 added
[   65.225607][ T5829] team0: Port device team_slave_1 added
[   65.317998][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.321198][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.334999][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.340385][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.343536][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.355948][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.376706][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.379751][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.392425][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.399663][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.402942][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.415723][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.420561][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.425408][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.429394][ T5835] bridge_slave_0: entered allmulticast mode
[   65.433434][ T5835] bridge_slave_0: entered promiscuous mode
[   65.450500][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.454186][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.459243][ T5835] bridge_slave_1: entered allmulticast mode
[   65.463357][ T5835] bridge_slave_1: entered promiscuous mode
[   65.535967][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.546362][ T5834] hsr_slave_0: entered promiscuous mode
[   65.550015][ T5834] hsr_slave_1: entered promiscuous mode
[   65.556850][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.613484][ T5829] hsr_slave_0: entered promiscuous mode
[   65.617936][ T5829] hsr_slave_1: entered promiscuous mode
[   65.621446][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   65.626246][ T5829] Cannot create hsr debugfs directory
[   65.653239][ T5835] team0: Port device team_slave_0 added
[   65.689104][ T5835] team0: Port device team_slave_1 added
[   65.748980][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.752081][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.766640][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.802539][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.805818][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.817967][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.948861][ T5835] hsr_slave_0: entered promiscuous mode
[   65.952075][ T5835] hsr_slave_1: entered promiscuous mode
[   65.955496][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   65.959263][ T5835] Cannot create hsr debugfs directory
[   66.110183][ T5834] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   66.120037][ T5834] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   66.139445][ T5834] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   66.163927][ T5834] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   66.227541][ T5829] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   66.237709][ T5829] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   66.257570][ T5829] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   66.263577][ T5829] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   66.320007][ T5835] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   66.336385][ T5835] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   66.345085][   T54] Bluetooth: hci0: command tx timeout
[   66.348026][ T5835] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   66.365406][ T5835] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   66.412414][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.426089][ T5838] Bluetooth: hci1: command tx timeout
[   66.429368][   T54] Bluetooth: hci2: command tx timeout
[   66.448945][ T5834] 8021q: adding VLAN 0 to HW filter on device team0
[   66.466533][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.470000][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.497321][ T4395] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.500917][ T4395] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.525318][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.580686][ T5829] 8021q: adding VLAN 0 to HW filter on device team0
[   66.599503][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.605945][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.608864][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.625915][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.629044][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.653765][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   66.689412][ T4395] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.692134][ T4395] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.726643][ T4395] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.730512][ T4395] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.822456][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.865483][ T5834] veth0_vlan: entered promiscuous mode
[   66.877950][ T5834] veth1_vlan: entered promiscuous mode
[   66.932851][ T5834] veth0_macvtap: entered promiscuous mode
[   66.939090][ T5834] veth1_macvtap: entered promiscuous mode
[   66.962773][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.988743][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.998759][ T5834] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.002704][ T5834] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.007218][ T5834] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.010638][ T5834] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.059380][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.072040][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.159631][ T4395] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.173412][ T4395] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.206599][ T5835] veth0_vlan: entered promiscuous mode
[   67.227578][ T5829] veth0_vlan: entered promiscuous mode
[   67.240002][ T5835] veth1_vlan: entered promiscuous mode
[   67.246364][ T5829] veth1_vlan: entered promiscuous mode
[   67.249466][ T4395] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.252979][ T4395] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.289896][ T5835] veth0_macvtap: entered promiscuous mode
[   67.295970][ T5829] veth0_macvtap: entered promiscuous mode
[   67.303036][ T5829] veth1_macvtap: entered promiscuous mode
[   67.306304][ T5835] veth1_macvtap: entered promiscuous mode
[   67.325745][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.339226][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.346202][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   67.360068][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.367197][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.377423][ T5829] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.381790][ T5829] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.389427][ T5829] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.394880][ T5829] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.403601][ T5835] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.412538][ T5835] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.416575][ T5835] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.421790][ T5835] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.604039][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.610004][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.656215][ T4395] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.659632][ T4395] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.755828][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.760582][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.778974][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.785608][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.846123][ T5906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6'.
[   67.850382][ T5906] netlink: 312 bytes leftover after parsing attributes in process `syz.0.6'.
[   67.858499][ T5906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6'.
[   67.938042][ T5910] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6'.
[   67.952204][ T5912] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[   68.032338][ T5919] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.7'.
[   68.069245][ T5919] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7'.
[   68.091950][ T5923] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8'.
[   68.163866][ T5923] netlink: 'syz.0.8': attribute type 4 has an invalid length.
[   68.168625][ T5923] netlink: 'syz.0.8': attribute type 10 has an invalid length.
[   68.172885][ T5923] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8'.
[   68.183735][ T5923] veth0_vlan: entered allmulticast mode
[   68.187742][ T5923] bridge0: port 3(veth0_vlan) entered blocking state
[   68.191717][ T5923] bridge0: port 3(veth0_vlan) entered disabled state
[   68.203219][ T5929] netlink: 'syz.1.12': attribute type 1 has an invalid length.
[   68.204022][ T5923] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[   68.210669][ T5929] netlink: 180 bytes leftover after parsing attributes in process `syz.1.12'.
[   68.293815][ T5936] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14'.
[   68.298919][ T5936] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[   68.306616][ T5936] netlink: 'syz.1.14': attribute type 1 has an invalid length.
[   68.312904][ T5936] syz.1.14 uses obsolete (PF_INET,SOCK_PACKET)
[   68.330571][ T5936] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   68.352400][ T5940] netlink: 'syz.0.15': attribute type 10 has an invalid length.
[   68.425137][   T54] Bluetooth: hci0: command tx timeout
[   68.506559][   T54] Bluetooth: hci2: command tx timeout
[   68.509289][ T5838] Bluetooth: hci1: command tx timeout
[   68.590614][ T5951] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   68.621520][ T5951] vti0: entered promiscuous mode
[   69.809666][ T5960] netlink: 'syz.1.22': attribute type 1 has an invalid length.
[   69.921147][ T5967] dvmrp0: entered allmulticast mode
[   69.951511][ T5971] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   70.086796][ T5976] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[   70.099517][ T5976] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   70.420732][   T33] audit: type=1800 audit(1752633212.680:2): pid=6003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.35" name="@" dev="tmpfs" ino=85 res=0 errno=0
[   70.444015][ T6004] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.448241][ T6004] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.567586][ T6004] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   70.578638][ T6004] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   70.586508][   T54] Bluetooth: hci2: command tx timeout
[   70.588821][ T5838] Bluetooth: hci1: command tx timeout
[   70.659838][ T6004] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.663210][ T6004] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.667807][ T6004] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.672062][ T6004] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.716566][ T6009] ip_vti0: Master is either lo or non-ether device
[   70.832250][ T6017] netlink: 'syz.1.40': attribute type 7 has an invalid length.
[   70.987964][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.556399][ T6028] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[   71.597297][ T6030] openvswitch: netlink: Unknown nsh attribute 0
[   71.599774][ T6030] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   72.064067][ T6051] netlink: 'syz.1.50': attribute type 20 has an invalid length.
[   72.089684][ T6051] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   72.093300][ T6051] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   72.097401][ T6051] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   72.102536][ T6051] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   72.109777][ T6051] netlink: 'syz.1.50': attribute type 20 has an invalid length.
[   72.115841][ T6054] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   72.129859][ T6051] Zero length message leads to an empty skb
[   72.461291][ T6074] netlink: 'syz.0.57': attribute type 5 has an invalid length.
[   72.474064][ T6076] syzkaller1: tun_chr_ioctl cmd 1074025677
[   72.484467][ T6076] syzkaller1: Linktype set failed because interface is up
[   72.694393][   T54] Bluetooth: hci2: command tx timeout
[   72.697004][   T54] Bluetooth: hci1: command tx timeout
[   72.768282][ T6087] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   73.257329][ T6107] __nla_validate_parse: 20 callbacks suppressed
[   73.257339][ T6107] netlink: 24 bytes leftover after parsing attributes in process `syz.2.68'.
[   73.340118][ T6110] x_tables: duplicate underflow at hook 3
[   73.372228][ T6112] netlink: 92 bytes leftover after parsing attributes in process `syz.2.71'.
[   73.405161][ T6115] warning: `syz.0.72' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   73.464049][ T6119] netlink: 48 bytes leftover after parsing attributes in process `syz.0.74'.
[   73.533302][ T6122] smc: net device bond0 applied user defined pnetid SYZ2
[   73.537283][ T6122] smc: net device bond0 erased user defined pnetid SYZ2
[   73.555804][ T6122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.75'.
[   73.753599][ T6128] netlink: 28 bytes leftover after parsing attributes in process `syz.0.78'.
[   73.882060][ T6136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.81'.
[   73.923114][ T6136] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.942130][ T6136] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.955639][ T6139] Illegal XDP return value 4294967289 on prog  (id 95) dev N/A, expect packet loss!
[   73.996697][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   74.001188][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   74.006460][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   74.011310][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   74.015442][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   74.119466][ T6146] x_tables: unsorted underflow at hook 2
[   74.232521][ T6140] chnl_net:caif_netlink_parms(): no params data found
[   74.339158][ T6140] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.345354][ T6140] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.348747][ T6140] bridge_slave_0: entered allmulticast mode
[   74.353679][ T6140] bridge_slave_0: entered promiscuous mode
[   74.359923][ T6140] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.363059][ T6140] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.367795][ T6140] bridge_slave_1: entered allmulticast mode
[   74.372498][ T6140] bridge_slave_1: entered promiscuous mode
[   74.426030][ T6140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   74.455916][ T6140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   74.501759][ T6140] team0: Port device team_slave_0 added
[   74.512299][ T6140] team0: Port device team_slave_1 added
[   74.556407][ T6140] batman_adv: batadv0: Adding interface: batadv_slave_0
[   74.559582][ T6140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.570922][ T6140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   74.578012][ T6140] batman_adv: batadv0: Adding interface: batadv_slave_1
[   74.580489][ T6140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.604568][ T6140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   74.722464][ T6140] hsr_slave_0: entered promiscuous mode
[   74.726934][ T6140] hsr_slave_1: entered promiscuous mode
[   74.729256][ T6140] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   74.733868][ T6140] Cannot create hsr debugfs directory
[   74.862717][ T6181] netlink: 'syz.0.95': attribute type 1 has an invalid length.
[   74.908348][ T6183] netlink: 'syz.0.96': attribute type 1 has an invalid length.
[   74.909591][ T6140] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   74.975113][ T6140] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   75.027941][ T6140] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   75.053250][ T6189] tun0: tun_chr_ioctl cmd 1074025681
[   75.093019][ T6140] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   75.111716][ T6193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.100'.
[   75.300138][ T6140] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   75.307776][ T6204] netlink: 32 bytes leftover after parsing attributes in process `syz.2.104'.
[   75.313689][ T6140] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   75.323518][ T6140] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   75.331523][ T6140] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   75.393698][ T6214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.106'.
[   75.407743][ T6214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.106'.
[   75.501051][ T6140] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.548350][ T6140] 8021q: adding VLAN 0 to HW filter on device team0
[   75.565856][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.572583][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.648122][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.651437][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.900980][ T6140] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.942946][ T6140] veth0_vlan: entered promiscuous mode
[   75.956687][ T6140] veth1_vlan: entered promiscuous mode
[   75.982384][ T6140] veth0_macvtap: entered promiscuous mode
[   75.991433][ T6140] veth1_macvtap: entered promiscuous mode
[   76.008331][ T6140] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.021329][ T6140] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.037747][ T6140] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.041565][ T6140] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.046487][ T6140] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.051286][ T6140] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.104566][ T5838] Bluetooth: hci2: command tx timeout
[   76.155463][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.159668][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.204020][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.208573][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.582214][ T6258] x_tables: duplicate underflow at hook 1
[   76.718784][ T6266] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[   76.726813][ T6265] netlink: 'syz.2.120': attribute type 26 has an invalid length.
[   76.805497][ T6270] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   77.170230][ T6284] IPv6: sit1: Disabled Multicast RS
[   77.712452][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.138789][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   78.143787][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   78.154460][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   78.159434][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   78.175950][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   78.443202][ T6317] __nla_validate_parse: 26 callbacks suppressed
[   78.443220][ T6317] netlink: 96 bytes leftover after parsing attributes in process `syz.2.135'.
[   78.517550][ T6300] chnl_net:caif_netlink_parms(): no params data found
[   78.539832][ T6320] netlink: 'syz.2.135': attribute type 1 has an invalid length.
[   78.548631][ T6320] netlink: 'syz.2.135': attribute type 3 has an invalid length.
[   78.552553][ T6320] netlink: 224 bytes leftover after parsing attributes in process `syz.2.135'.
[   78.560288][ T6322] netlink: 28 bytes leftover after parsing attributes in process `syz.0.136'.
[   78.567466][ T6320] NCSI netlink: No device for ifindex 246
[   78.576777][ T6322] netlink: 20 bytes leftover after parsing attributes in process `syz.0.136'.
[   78.639824][ T6300] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.642601][ T6300] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.645317][ T6300] bridge_slave_0: entered allmulticast mode
[   78.648477][ T6300] bridge_slave_0: entered promiscuous mode
[   78.654019][ T6300] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.659643][ T6300] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.662421][ T6300] bridge_slave_1: entered allmulticast mode
[   78.667600][ T6300] bridge_slave_1: entered promiscuous mode
[   78.722335][ T6300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.729927][ T6300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.790819][ T6300] team0: Port device team_slave_0 added
[   78.796832][ T6300] team0: Port device team_slave_1 added
[   78.833235][ T6300] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.838840][ T6300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.862651][ T6300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.869083][ T6300] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.872388][ T6300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.888783][ T6300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.930372][ T6338] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[   78.955817][ T6300] hsr_slave_0: entered promiscuous mode
[   78.967855][ T6300] hsr_slave_1: entered promiscuous mode
[   78.971069][ T6300] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   78.982278][ T6300] Cannot create hsr debugfs directory
[   79.093052][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.226696][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.299629][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.312153][ T6346] netlink: 12 bytes leftover after parsing attributes in process `syz.2.144'.
[   79.447573][   T12] bridge_slave_1: left allmulticast mode
[   79.449652][   T12] bridge_slave_1: left promiscuous mode
[   79.458375][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.471725][   T12] bridge_slave_0: left allmulticast mode
[   79.480438][   T12] bridge_slave_0: left promiscuous mode
[   79.482651][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.809464][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   79.813920][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   79.820226][   T12] bond0 (unregistering): Released all slaves
[   79.850279][ T6368] lo: entered promiscuous mode
[   79.852867][ T6368] netlink: 4 bytes leftover after parsing attributes in process `syz.2.148'.
[   80.099726][   T12] hsr_slave_0: left promiscuous mode
[   80.102772][   T12] hsr_slave_1: left promiscuous mode
[   80.118100][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   80.120970][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   80.125548][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   80.128404][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   80.141528][   T12] veth1_macvtap: left promiscuous mode
[   80.145031][   T12] veth0_macvtap: left promiscuous mode
[   80.147035][   T12] veth1_vlan: left promiscuous mode
[   80.148973][   T12] veth0_vlan: left promiscuous mode
[   80.259247][ T6376] netlink: 40 bytes leftover after parsing attributes in process `syz.0.149'.
[   80.274708][ T5838] Bluetooth: hci2: command tx timeout
[   80.471347][   T12] team0 (unregistering): Port device team_slave_1 removed
[   80.496457][   T12] team0 (unregistering): Port device team_slave_0 removed
[   80.922857][ T6365] lo: left promiscuous mode
[   81.139562][ T6300] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   81.171994][ T6300] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   81.192910][ T6300] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   81.223522][ T6300] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   81.475965][ T6300] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.491991][ T6300] 8021q: adding VLAN 0 to HW filter on device team0
[   81.516223][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.519631][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.542498][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.545635][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.588922][ T6413] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[   81.854978][ T6300] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.910679][ T6437] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[   81.939054][ T6300] veth0_vlan: entered promiscuous mode
[   81.949824][ T6300] veth1_vlan: entered promiscuous mode
[   81.986924][ T6440] netlink: 4 bytes leftover after parsing attributes in process `syz.0.161'.
[   81.992411][ T6300] veth0_macvtap: entered promiscuous mode
[   82.007084][ T6300] veth1_macvtap: entered promiscuous mode
[   82.019594][ T6300] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.037902][ T6300] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.050362][ T6300] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.056409][ T6300] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.060432][ T6300] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.071193][ T6300] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.188324][  T143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.199345][  T143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.252260][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.257533][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.370490][ T6454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.166'.
[   82.601666][ T6452] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   82.610297][ T6452] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   82.632970][ T6452] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   82.636554][ T6452] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   82.640384][ T6452] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   82.643888][ T6452] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   82.710885][ T6460] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.728514][ T6465] netlink: 48 bytes leftover after parsing attributes in process `syz.0.168'.
[   82.731927][ T6465] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   82.734768][ T6465] IPv6: NLM_F_CREATE should be set when creating new route
[   82.739913][ T6465] netlink: zone id is out of range
[   82.741640][ T6465] netlink: zone id is out of range
[   82.743284][ T6465] netlink: zone id is out of range
[   82.745652][ T6465] netlink: zone id is out of range
[   82.748245][ T6465] netlink: zone id is out of range
[   82.750225][ T6465] netlink: zone id is out of range
[   82.752057][ T6465] netlink: zone id is out of range
[   82.753814][ T6465] netlink: zone id is out of range
[   82.755628][ T6465] netlink: zone id is out of range
[   82.783917][ T6460] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.876584][ T6460] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.921266][ T6460] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.997414][ T6460] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.013295][ T6460] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.021569][ T6460] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.033421][ T6460] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.718120][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.734929][ T6489] ip6gre1: entered promiscuous mode
[   83.825651][ T6499] netlink: 'syz.0.180': attribute type 1 has an invalid length.
[   83.830356][ T6499] __nla_validate_parse: 4 callbacks suppressed
[   83.830365][ T6499] netlink: 184 bytes leftover after parsing attributes in process `syz.0.180'.
[   83.837336][ T6499] netlink: 'syz.0.180': attribute type 1 has an invalid length.
[   83.883297][ T6499] batadv_slave_1: entered promiscuous mode
[   83.964097][ T6498] batadv_slave_1: left promiscuous mode
[   83.981726][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   83.987166][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   83.990539][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   83.993591][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   84.004596][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   84.256178][ T6512] chnl_net:caif_netlink_parms(): no params data found
[   84.356861][ T6512] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.359218][ T6512] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.361692][ T6512] bridge_slave_0: entered allmulticast mode
[   84.376115][ T6512] bridge_slave_0: entered promiscuous mode
[   84.389461][ T6512] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.394736][ T6512] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.398098][ T6512] bridge_slave_1: entered allmulticast mode
[   84.405885][ T6512] bridge_slave_1: entered promiscuous mode
[   84.480088][ T6512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   84.511288][ T6512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   84.572203][ T6512] team0: Port device team_slave_0 added
[   84.579160][ T6512] team0: Port device team_slave_1 added
[   84.635722][ T6512] batman_adv: batadv0: Adding interface: batadv_slave_0
[   84.638200][ T6512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.650810][ T6512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   84.662711][ T6512] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.666278][ T6512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.677627][ T6512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   84.753847][ T6512] hsr_slave_0: entered promiscuous mode
[   84.756892][ T6512] hsr_slave_1: entered promiscuous mode
[   84.759817][ T6512] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   84.763141][ T6512] Cannot create hsr debugfs directory
[   84.923724][   T33] audit: type=1800 audit(1752633227.180:3): pid=6563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.187" name="blkio.bfq.time_recursive" dev="tmpfs" ino=445 res=0 errno=0
[   85.009097][ T6571] netlink: 'syz.0.190': attribute type 2 has an invalid length.
[   85.011686][ T6571] netlink: 'syz.0.190': attribute type 1 has an invalid length.
[   85.117997][ T6581] tun0: tun_chr_ioctl cmd 1074025673
[   85.160465][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.210373][ T6591] netlink: 12 bytes leftover after parsing attributes in process `syz.2.196'.
[   85.214601][ T6591] netlink: 'syz.2.196': attribute type 14 has an invalid length.
[   85.223434][ T6591] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   85.227824][ T6591] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   85.230999][ T6591] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   85.233877][ T6591] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   85.238960][ T6591] netlink: 12 bytes leftover after parsing attributes in process `syz.2.196'.
[   85.244346][ T6591] netlink: 'syz.2.196': attribute type 14 has an invalid length.
[   85.271779][ T6591] netlink: 24 bytes leftover after parsing attributes in process `syz.2.196'.
[   85.351979][ T6601] netlink: 100 bytes leftover after parsing attributes in process `syz.0.200'.
[   85.355477][ T6601] netlink: 100 bytes leftover after parsing attributes in process `syz.0.200'.
[   85.392722][ T6604] netlink: 12 bytes leftover after parsing attributes in process `syz.0.201'.
[   85.396255][ T6604] netlink: 'syz.0.201': attribute type 2 has an invalid length.
[   85.399129][ T6604] netlink: 'syz.0.201': attribute type 1 has an invalid length.
[   85.401954][ T6604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.201'.
[   85.538956][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.605750][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.789767][   T12] bridge_slave_1: left allmulticast mode
[   85.792916][   T12] bridge_slave_1: left promiscuous mode
[   85.800021][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.809157][   T12] bridge_slave_0: left allmulticast mode
[   85.811827][   T12] bridge_slave_0: left promiscuous mode
[   85.820524][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.104781][   T54] Bluetooth: hci2: command tx timeout
[   86.184236][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   86.195256][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   86.200093][   T12] bond0 (unregistering): Released all slaves
[   86.292881][    T9] IPVS: starting estimator thread 0...
[   86.360374][  T792] cfg80211: failed to load regulatory.db
[   86.384884][ T6635] IPVS: using max 40 ests per chain, 96000 per kthread
[   86.410564][ T6645] netlink: 'syz.2.212': attribute type 1 has an invalid length.
[   86.413085][ T6645] netlink: 232 bytes leftover after parsing attributes in process `syz.2.212'.
[   86.520799][   T12] hsr_slave_0: left promiscuous mode
[   86.523327][   T12] hsr_slave_1: left promiscuous mode
[   86.528025][ T6647] netlink: 'syz.2.212': attribute type 1 has an invalid length.
[   86.542732][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   86.544466][ T6647] netlink: 232 bytes leftover after parsing attributes in process `syz.2.212'.
[   86.545870][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   86.554174][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   86.557266][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   86.572673][   T12] veth1_macvtap: left promiscuous mode
[   86.574648][   T12] veth0_macvtap: left promiscuous mode
[   86.576631][   T12] veth1_vlan: left promiscuous mode
[   86.578518][   T12] veth0_vlan: left promiscuous mode
[   86.898625][   T12] team0 (unregistering): Port device team_slave_1 removed
[   86.922652][   T12] team0 (unregistering): Port device team_slave_0 removed
[   87.337717][ T6512] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   87.351473][ T6512] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   87.374135][ T6512] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   87.388933][ T6512] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   87.532256][ T6512] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.553429][ T6512] 8021q: adding VLAN 0 to HW filter on device team0
[   87.567567][   T80] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.570072][   T80] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.590621][   T80] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.593274][   T80] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.628168][ T6688] tipc: Started in network mode
[   87.630112][ T6688] tipc: Node identity 4e2cc33f6d1c, cluster identity 4711
[   87.633419][ T6688] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   87.651673][ T6688] syzkaller0: entered promiscuous mode
[   87.653775][ T6688] syzkaller0: entered allmulticast mode
[   87.740081][ T6688] tipc: Resetting bearer <eth:syzkaller0>
[   87.745625][ T6687] tipc: Resetting bearer <eth:syzkaller0>
[   87.760892][ T6687] tipc: Disabling bearer <eth:syzkaller0>
[   87.883591][ T6512] 8021q: adding VLAN 0 to HW filter on device batadv0
[   87.980954][ T6512] veth0_vlan: entered promiscuous mode
[   87.988241][ T6512] veth1_vlan: entered promiscuous mode
[   88.013700][ T6512] veth0_macvtap: entered promiscuous mode
[   88.020268][ T6512] veth1_macvtap: entered promiscuous mode
[   88.047688][ T6512] batman_adv: batadv0: Interface activated: batadv_slave_0
[   88.065097][ T6512] batman_adv: batadv0: Interface activated: batadv_slave_1
[   88.069007][ T6719] xt_hashlimit: max too large, truncated to 1048576
[   88.074922][ T6512] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.078109][ T6512] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.084598][ T6512] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.092160][ T6512] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.138654][   T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.141350][   T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.166714][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.169962][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.194454][   T54] Bluetooth: hci2: command tx timeout
[   88.511775][ T6738] batman_adv: batadv0: Adding interface: dummy0
[   88.514063][ T6738] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.524064][ T6738] batman_adv: batadv0: Interface activated: dummy0
[   88.653577][ T6742] 8021q: adding VLAN 0 to HW filter on device bond1
[   88.731266][ T6754] syz.2.234 (6754) used obsolete PPPIOCDETACH ioctl
[   89.831562][ T6782] No such timeout policy "syz1"
[   89.979291][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.986857][ T6793] validate_nla: 2 callbacks suppressed
[   89.986868][ T6793] netlink: 'syz.0.247': attribute type 5 has an invalid length.
[   90.649071][ T6810] netlink: 'syz.0.250': attribute type 2 has an invalid length.
[   90.652143][ T6810] netlink: 'syz.0.250': attribute type 8 has an invalid length.
[   90.665753][ T6810] __nla_validate_parse: 8 callbacks suppressed
[   90.665764][ T6810] netlink: 132 bytes leftover after parsing attributes in process `syz.0.250'.
[   90.683033][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   90.688100][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   90.692862][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   90.699890][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   90.703864][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   90.728833][ T6814] xt_CT: You must specify a L4 protocol and not use inversions on it
[   90.761140][ T6816] netlink: 'syz.0.252': attribute type 1 has an invalid length.
[   90.768974][ T6816] netlink: 228 bytes leftover after parsing attributes in process `syz.0.252'.
[   90.772476][ T6816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.252'.
[   90.850061][ T6818] @: renamed from bond_slave_0 (while UP)
[   90.856868][ T6820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.254'.
[   90.905209][ T6820] netlink: 12 bytes leftover after parsing attributes in process `syz.0.254'.
[   90.969713][ T6811] chnl_net:caif_netlink_parms(): no params data found
[   90.988875][ T6825] vxcan2: entered promiscuous mode
[   91.062872][ T6811] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.067000][ T6811] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.071376][ T6811] bridge_slave_0: entered allmulticast mode
[   91.076427][ T6811] bridge_slave_0: entered promiscuous mode
[   91.081767][ T6811] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.086096][ T6811] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.090491][ T6811] bridge_slave_1: entered allmulticast mode
[   91.095626][ T6811] bridge_slave_1: entered promiscuous mode
[   91.156568][ T6811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   91.164171][ T6811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   91.222011][ T6811] team0: Port device team_slave_0 added
[   91.229117][ T6811] team0: Port device team_slave_1 added
[   91.280876][ T6811] batman_adv: batadv0: Adding interface: batadv_slave_0
[   91.283312][ T6811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.294116][ T6811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   91.301059][ T6811] batman_adv: batadv0: Adding interface: batadv_slave_1
[   91.303760][ T6811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.313459][ T6811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.340769][ T6811] hsr_slave_0: entered promiscuous mode
[   91.343739][ T6811] hsr_slave_1: entered promiscuous mode
[   91.346475][ T6811] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   91.349979][ T6811] Cannot create hsr debugfs directory
[   91.572586][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.641443][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.679911][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.780931][   T12] bridge_slave_1: left allmulticast mode
[   91.784167][   T12] bridge_slave_1: left promiscuous mode
[   91.787394][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.797593][   T12] bridge_slave_0: left allmulticast mode
[   91.801104][   T12] bridge_slave_0: left promiscuous mode
[   91.806301][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.136486][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   92.143305][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   92.149721][   T12] bond0 (unregistering): Released all slaves
[   92.435957][ T6859] IPVS: Scheduler module ip_vs_sip not found
[   92.455404][   T12] hsr_slave_0: left promiscuous mode
[   92.467242][   T12] hsr_slave_1: left promiscuous mode
[   92.469722][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   92.472142][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   92.480267][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   92.483427][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   92.500340][   T12] veth1_macvtap: left promiscuous mode
[   92.502653][   T12] veth0_macvtap: left promiscuous mode
[   92.506614][   T12] veth1_vlan: left promiscuous mode
[   92.508432][   T12] veth0_vlan: left promiscuous mode
[   92.746290][   T54] Bluetooth: hci2: command tx timeout
[   92.850051][   T12] team0 (unregistering): Port device team_slave_1 removed
[   92.879475][   T12] team0 (unregistering): Port device team_slave_0 removed
[   93.365824][ T6811] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   93.394818][ T6811] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   93.424200][ T6811] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   93.438126][ T6811] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   93.499969][ T6885] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[   93.677391][ T6811] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.688252][ T6811] 8021q: adding VLAN 0 to HW filter on device team0
[   93.701354][  T143] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.704151][  T143] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.706331][ T6900] netlink: 24 bytes leftover after parsing attributes in process `syz.0.269'.
[   93.728060][  T143] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.730537][  T143] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.759855][ T6900] netlink: 24 bytes leftover after parsing attributes in process `syz.0.269'.
[   93.977400][ T6811] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.042651][ T6811] veth0_vlan: entered promiscuous mode
[   94.064245][ T6811] veth1_vlan: entered promiscuous mode
[   94.108417][ T6811] veth0_macvtap: entered promiscuous mode
[   94.113365][ T6811] veth1_macvtap: entered promiscuous mode
[   94.132180][ T6929] delete_channel: no stack
[   94.138700][ T6929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.275'.
[   94.140400][ T6811] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.142450][ T6929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.275'.
[   94.150210][ T6811] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.160502][ T6811] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.163526][ T6811] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.171616][ T6811] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.179701][ T6811] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.276125][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.279225][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.303068][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.306204][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.401261][ T6940] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   94.407186][ T6941] netlink: 48 bytes leftover after parsing attributes in process `syz.2.277'.
[   94.422439][ T6940] syzkaller0: entered promiscuous mode
[   94.425274][ T6940] syzkaller0: entered allmulticast mode
[   94.444756][ T6940] tipc: Resetting bearer <eth:syzkaller0>
[   94.454824][ T6939] tipc: Resetting bearer <eth:syzkaller0>
[   94.463053][ T6939] tipc: Disabling bearer <eth:syzkaller0>
[   94.571784][ T6946] bridge2: the hash_elasticity option has been deprecated and is always 16
[   94.584365][ T6946] bridge2: entered allmulticast mode
[   95.763904][ T6996] netlink: 'syz.0.295': attribute type 29 has an invalid length.
[   96.266762][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.788436][ T7016] __nla_validate_parse: 3 callbacks suppressed
[   96.788447][ T7016] netlink: 24 bytes leftover after parsing attributes in process `syz.2.301'.
[   96.843346][ T7018] netlink: 'syz.2.302': attribute type 1 has an invalid length.
[   96.899374][ T7019] bond1: (slave gretap1): making interface the new active one
[   96.905150][ T7019] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   96.948956][ T7029] netlink: 'syz.2.305': attribute type 29 has an invalid length.
[   96.993357][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   97.000643][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   97.005623][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   97.010160][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   97.016443][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   97.058120][ T7034] Cannot find add_set index 3 as target
[   97.121115][ T7037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.307'.
[   97.145226][ T7037] netlink: 4 bytes leftover after parsing attributes in process `syz.2.307'.
[   97.155202][ T7037] netlink: 'syz.2.307': attribute type 12 has an invalid length.
[   97.158619][ T7037] netlink: 'syz.2.307': attribute type 11 has an invalid length.
[   97.262114][ T7031] chnl_net:caif_netlink_parms(): no params data found
[   97.366040][ T7031] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.374550][ T7031] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.378087][ T7031] bridge_slave_0: entered allmulticast mode
[   97.382717][ T7031] bridge_slave_0: entered promiscuous mode
[   97.389898][ T7031] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.393172][ T7031] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.398962][ T7031] bridge_slave_1: entered allmulticast mode
[   97.402712][ T7031] bridge_slave_1: entered promiscuous mode
[   97.434806][ T7031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   97.441576][ T7031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   97.485721][ T7031] team0: Port device team_slave_0 added
[   97.493937][ T7031] team0: Port device team_slave_1 added
[   97.532382][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.556541][ T7031] batman_adv: batadv0: Adding interface: batadv_slave_0
[   97.559692][ T7031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   97.570277][ T7031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   97.586098][ T7031] batman_adv: batadv0: Adding interface: batadv_slave_1
[   97.590652][ T7031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   97.601579][ T7031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   97.621793][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.678833][ T7066] netlink: 'syz.2.315': attribute type 29 has an invalid length.
[   97.712326][ T7031] hsr_slave_0: entered promiscuous mode
[   97.716101][ T7031] hsr_slave_1: entered promiscuous mode
[   97.719750][ T7031] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   97.724230][ T7031] Cannot create hsr debugfs directory
[   97.743743][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.025971][   T12] bridge_slave_1: left allmulticast mode
[   98.028518][   T12] bridge_slave_1: left promiscuous mode
[   98.038039][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.052396][   T12] bridge_slave_0: left allmulticast mode
[   98.054768][   T12] bridge_slave_0: left promiscuous mode
[   98.057402][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.368502][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   98.374702][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   98.379565][   T12] bond0 (unregistering): Released all slaves
[   98.499418][ T7074] netlink: 'syz.2.318': attribute type 3 has an invalid length.
[   98.603747][ T7082] netlink: 'syz.0.320': attribute type 2 has an invalid length.
[   98.614487][ T7082] netlink: 'syz.0.320': attribute type 1 has an invalid length.
[   98.617594][ T7082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.320'.
[   98.680882][ T7088] netlink: 24 bytes leftover after parsing attributes in process `syz.0.320'.
[   98.747369][ T7089] netlink: 12 bytes leftover after parsing attributes in process `syz.2.321'.
[   98.757736][   T12] hsr_slave_0: left promiscuous mode
[   98.760464][   T12] hsr_slave_1: left promiscuous mode
[   98.762872][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   98.765596][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   98.768734][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   98.771589][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   98.790062][   T12] veth1_macvtap: left promiscuous mode
[   98.792572][   T12] veth0_macvtap: left promiscuous mode
[   98.797653][   T12] veth1_vlan: left promiscuous mode
[   98.799861][   T12] veth0_vlan: left promiscuous mode
[   99.074719][   T54] Bluetooth: hci2: command tx timeout
[   99.129983][   T12] team0 (unregistering): Port device team_slave_1 removed
[   99.157911][   T12] team0 (unregistering): Port device team_slave_0 removed
[   99.709895][ T7031] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   99.737273][ T7031] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   99.753138][ T7031] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   99.762803][ T7031] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   99.859674][ T7111] netlink: 'syz.2.323': attribute type 29 has an invalid length.
[   99.889804][ T7031] 8021q: adding VLAN 0 to HW filter on device bond0
[   99.916562][ T7031] 8021q: adding VLAN 0 to HW filter on device team0
[   99.930367][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.933321][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   99.943678][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.946740][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   99.989440][ T7117] netlink: 76 bytes leftover after parsing attributes in process `syz.2.326'.
[   99.992512][ T7117] nbd: illegal input index 65508
[   99.996363][ T7117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.326'.
[  100.154839][ T7031] 8021q: adding VLAN 0 to HW filter on device batadv0
[  100.207431][ T7031] veth0_vlan: entered promiscuous mode
[  100.213313][ T7031] veth1_vlan: entered promiscuous mode
[  100.238948][ T7139] netlink: 64 bytes leftover after parsing attributes in process `syz.0.330'.
[  100.262573][ T7141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.331'.
[  100.289124][ T7031] veth0_macvtap: entered promiscuous mode
[  100.310564][ T7031] veth1_macvtap: entered promiscuous mode
[  100.344914][ T7031] batman_adv: batadv0: Interface activated: batadv_slave_0
[  100.363665][ T7031] batman_adv: batadv0: Interface activated: batadv_slave_1
[  100.371756][ T7031] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.376553][ T7031] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.380556][ T7031] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.386734][ T7031] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.475103][ T7149] syzkaller1: entered promiscuous mode
[  100.480313][ T7149] syzkaller1: entered allmulticast mode
[  100.512261][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.517306][ T7151] net_ratelimit: 11 callbacks suppressed
[  100.517318][ T7151] openvswitch: netlink: Flow actions attr not present in new flow.
[  100.526639][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.564103][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.568421][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.650651][ T7156] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  100.657117][ T7156] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  100.769536][ T7158] validate_nla: 3 callbacks suppressed
[  100.769550][ T7158] netlink: 'syz.2.337': attribute type 5 has an invalid length.
[  101.856310][ T7173] syzkaller0: entered allmulticast mode
[  101.873665][ T7173] syzkaller0 (unregistering): left allmulticast mode
[  101.982451][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.872783][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  102.878937][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  102.883222][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  102.888043][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  102.892194][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  102.945349][ T7203] netlink: 'syz.2.351': attribute type 21 has an invalid length.
[  103.119421][ T7199] chnl_net:caif_netlink_parms(): no params data found
[  103.261409][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.274603][ T7199] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.277539][ T7199] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.280076][ T7199] bridge_slave_0: entered allmulticast mode
[  103.283110][ T7199] bridge_slave_0: entered promiscuous mode
[  103.291962][ T7199] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.295245][ T7199] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.298137][ T7199] bridge_slave_1: entered allmulticast mode
[  103.302189][ T7199] bridge_slave_1: entered promiscuous mode
[  103.343228][ T7199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  103.351125][ T7221] netlink: 'syz.0.354': attribute type 10 has an invalid length.
[  103.354049][ T7221] __nla_validate_parse: 4 callbacks suppressed
[  103.354057][ T7221] netlink: 40 bytes leftover after parsing attributes in process `syz.0.354'.
[  103.362381][ T7199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  103.376334][ T7221] dummy0: entered promiscuous mode
[  103.378722][ T7221] dummy0: entered allmulticast mode
[  103.383098][ T7221] bridge0: port 3(dummy0) entered blocking state
[  103.386185][ T7221] bridge0: port 3(dummy0) entered disabled state
[  103.408494][ T7199] team0: Port device team_slave_0 added
[  103.413153][ T7199] team0: Port device team_slave_1 added
[  103.466574][ T7199] batman_adv: batadv0: Adding interface: batadv_slave_0
[  103.469694][ T7199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  103.482993][ T7199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  103.489275][ T7199] batman_adv: batadv0: Adding interface: batadv_slave_1
[  103.492353][ T7199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  103.503399][ T7199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  103.557826][ T7199] hsr_slave_0: entered promiscuous mode
[  103.560824][ T7199] hsr_slave_1: entered promiscuous mode
[  103.563948][ T7199] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  103.569827][ T7199] Cannot create hsr debugfs directory
[  103.611429][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.627434][ T7234] netlink: 32 bytes leftover after parsing attributes in process `syz.0.358'.
[  103.632612][ T7234] netlink: 24 bytes leftover after parsing attributes in process `syz.0.358'.
[  103.633043][ T7233] Cannot find set identified by id 1 to match
[  103.685919][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.697380][ T7234] netlink: 4 bytes leftover after parsing attributes in process `syz.0.358'.
[  103.738110][ T7237] veth0: entered promiscuous mode
[  103.740741][ T7237] netlink: 172 bytes leftover after parsing attributes in process `syz.2.359'.
[  103.751771][ T7236] veth0: left promiscuous mode
[  103.862282][ T7241] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  103.869551][ T7241] bridge2: left allmulticast mode
[  103.935701][ T7247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.362'.
[  103.940144][ T7247] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  104.031981][   T12] bridge_slave_1: left allmulticast mode
[  104.037677][   T12] bridge_slave_1: left promiscuous mode
[  104.040249][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.043051][ T7252] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.363'.
[  104.057344][   T12] bridge_slave_0: left allmulticast mode
[  104.059208][   T12] bridge_slave_0: left promiscuous mode
[  104.061136][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.152411][ T7258] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  104.401744][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  104.407665][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  104.412344][   T12] bond0 (unregistering): Released all slaves
[  104.525839][ T7262] syzkaller1: entered promiscuous mode
[  104.528359][ T7262] syzkaller1: entered allmulticast mode
[  104.817540][   T12] hsr_slave_0: left promiscuous mode
[  104.826529][   T12] hsr_slave_1: left promiscuous mode
[  104.829538][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  104.839951][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  104.845317][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  104.848687][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  104.868429][   T12] veth1_macvtap: left promiscuous mode
[  104.868929][ T7275] netlink: 36 bytes leftover after parsing attributes in process `syz.0.369'.
[  104.871268][   T12] veth0_macvtap: left promiscuous mode
[  104.877750][   T12] veth1_vlan: left promiscuous mode
[  104.879608][   T12] veth0_vlan: left promiscuous mode
[  104.985109][   T54] Bluetooth: hci2: command tx timeout
[  105.199128][   T12] team0 (unregistering): Port device team_slave_1 removed
[  105.227978][   T12] team0 (unregistering): Port device team_slave_0 removed
[  105.546629][ T7199] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  105.570448][ T7199] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  105.598705][ T7199] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  105.615441][ T7199] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  105.745862][ T7199] 8021q: adding VLAN 0 to HW filter on device bond0
[  105.770028][ T7199] 8021q: adding VLAN 0 to HW filter on device team0
[  105.783312][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.786170][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  105.814774][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.817148][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  105.937997][ T7304] netlink: 4 bytes leftover after parsing attributes in process `syz.2.375'.
[  105.948679][ T7304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.375'.
[  106.298168][ T7199] 8021q: adding VLAN 0 to HW filter on device batadv0
[  106.346548][ T7320] C: renamed from lo (while UP)
[  106.351330][ T7320] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  106.458709][ T7199] veth0_vlan: entered promiscuous mode
[  106.496238][ T7199] veth1_vlan: entered promiscuous mode
[  106.543884][ T7199] veth0_macvtap: entered promiscuous mode
[  106.551004][ T7199] veth1_macvtap: entered promiscuous mode
[  106.582570][ T7199] batman_adv: batadv0: Interface activated: batadv_slave_0
[  106.599086][ T7199] batman_adv: batadv0: Interface activated: batadv_slave_1
[  106.606776][ T7199] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  106.608030][ T7336] netlink: 'syz.2.381': attribute type 1 has an invalid length.
[  106.609918][ T7199] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  106.617822][ T7199] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  106.621266][ T7199] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  106.701647][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.708374][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.729275][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.732890][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.183748][ T7349] netlink: 'syz.2.386': attribute type 3 has an invalid length.
[  107.188066][ T7349] netlink: 'syz.2.386': attribute type 3 has an invalid length.
[  107.192331][ T7349] netlink: 'syz.2.386': attribute type 3 has an invalid length.
[  107.196422][ T7349] netlink: 'syz.2.386': attribute type 3 has an invalid length.
[  107.199854][ T7349] netlink: 'syz.2.386': attribute type 3 has an invalid length.
[  107.209069][ T7349] netlink: 'syz.2.386': attribute type 3 has an invalid length.
[  107.213462][ T7349] netlink: 'syz.2.386': attribute type 3 has an invalid length.
[  107.218366][ T7349] netlink: 'syz.2.386': attribute type 3 has an invalid length.
[  107.221828][ T7349] netlink: 'syz.2.386': attribute type 3 has an invalid length.
[  108.001986][ T5862] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.949555][ T7381] __nla_validate_parse: 3 callbacks suppressed
[  108.949565][ T7381] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.394'.
[  108.990849][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  108.997774][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  109.001422][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  109.006548][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  109.011628][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  109.209351][ T7384] chnl_net:caif_netlink_parms(): no params data found
[  109.279390][ T7404] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  109.340984][ T7384] bridge0: port 1(bridge_slave_0) entered blocking state
[  109.343489][ T7384] bridge0: port 1(bridge_slave_0) entered disabled state
[  109.346676][ T7384] bridge_slave_0: entered allmulticast mode
[  109.350376][ T7384] bridge_slave_0: entered promiscuous mode
[  109.355637][ T7384] bridge0: port 2(bridge_slave_1) entered blocking state
[  109.358236][ T7384] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.361922][ T7384] bridge_slave_1: entered allmulticast mode
[  109.369482][ T7384] bridge_slave_1: entered promiscuous mode
[  109.372537][ T7410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.400'.
[  109.398253][ T5862] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.448653][ T7384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  109.459334][ T7384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  109.518904][ T5862] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.533980][ T7384] team0: Port device team_slave_0 added
[  109.549717][ T7384] team0: Port device team_slave_1 added
[  109.613972][ T5862] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.636381][ T7384] batman_adv: batadv0: Adding interface: batadv_slave_0
[  109.639859][ T7384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  109.655136][ T7384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  109.675827][ T7384] batman_adv: batadv0: Adding interface: batadv_slave_1
[  109.678360][ T7384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  109.693034][ T7384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  109.771378][ T7384] hsr_slave_0: entered promiscuous mode
[  109.784108][ T7384] hsr_slave_1: entered promiscuous mode
[  109.788546][ T7384] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  109.793027][ T7384] Cannot create hsr debugfs directory
[  109.971040][ T5862] bridge_slave_1: left allmulticast mode
[  109.974015][ T5862] bridge_slave_1: left promiscuous mode
[  109.977054][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.983548][ T5862] bridge_slave_0: left allmulticast mode
[  109.986267][ T5862] bridge_slave_0: left promiscuous mode
[  109.988912][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.279585][ T5862] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  110.284052][ T5862] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  110.290235][ T5862] bond0 (unregistering): Released all slaves
[  110.631479][ T5862] hsr_slave_0: left promiscuous mode
[  110.642611][ T5862] hsr_slave_1: left promiscuous mode
[  110.651469][ T5862] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  110.661223][ T5862] batman_adv: batadv0: Removing interface: batadv_slave_0
[  110.672433][ T5862] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  110.704841][ T5862] batman_adv: batadv0: Removing interface: batadv_slave_1
[  110.736869][ T5862] veth1_macvtap: left promiscuous mode
[  110.739541][ T5862] veth0_macvtap: left promiscuous mode
[  110.741711][ T5862] veth1_vlan: left promiscuous mode
[  110.743828][ T5862] veth0_vlan: left promiscuous mode
[  110.748353][ T7445] netlink: 32 bytes leftover after parsing attributes in process `syz.2.408'.
[  111.067401][ T5833] Bluetooth: hci2: command tx timeout
[  111.071633][ T5862] team0 (unregistering): Port device team_slave_1 removed
[  111.107512][ T5862] team0 (unregistering): Port device team_slave_0 removed
[  111.499089][ T7451] Bluetooth: MGMT ver 1.23
[  111.871737][ T7384] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  111.889840][ T7384] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  112.008979][ T7384] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  112.019103][ T7384] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  112.340193][ T7384] 8021q: adding VLAN 0 to HW filter on device bond0
[  112.378597][ T7384] 8021q: adding VLAN 0 to HW filter on device team0
[  112.396006][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  112.398609][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  112.445365][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  112.448187][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  112.637618][ T7384] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  112.671467][ T7477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.415'.
[  112.760778][ T7503] netlink: 64 bytes leftover after parsing attributes in process `syz.0.416'.
[  112.919500][ T7384] 8021q: adding VLAN 0 to HW filter on device batadv0
[  112.937024][ T7514] netlink: 8 bytes leftover after parsing attributes in process `syz.2.418'.
[  112.941330][ T7514] netlink: 36 bytes leftover after parsing attributes in process `syz.2.418'.
[  113.003750][ T7384] veth0_vlan: entered promiscuous mode
[  113.017554][ T7384] veth1_vlan: entered promiscuous mode
[  113.034372][ T7518] netlink: 16 bytes leftover after parsing attributes in process `syz.0.419'.
[  113.038358][ T7517] netlink: 16 bytes leftover after parsing attributes in process `syz.0.419'.
[  113.070809][ T7384] veth0_macvtap: entered promiscuous mode
[  113.077737][ T7384] veth1_macvtap: entered promiscuous mode
[  113.104991][ T7521] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  113.107097][ T7384] batman_adv: batadv0: Interface activated: batadv_slave_0
[  113.127722][ T7384] batman_adv: batadv0: Interface activated: batadv_slave_1
[  113.137461][ T7384] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  113.143490][ T7384] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  113.155303][ T5833] Bluetooth: hci2: command tx timeout
[  113.155609][ T7384] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  113.159553][ T7521] validate_nla: 28 callbacks suppressed
[  113.159570][ T7521] netlink: 'syz.2.420': attribute type 5 has an invalid length.
[  113.161123][ T7384] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  113.172450][ T7521] netlink: 4 bytes leftover after parsing attributes in process `syz.2.420'.
[  113.280779][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  113.287827][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  113.367179][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  113.370152][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  113.688843][ T7530] netlink: 'syz.0.422': attribute type 12 has an invalid length.
[  114.060799][ T7548] netlink: 24 bytes leftover after parsing attributes in process `syz.0.427'.
[  114.570068][ T5843] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.267206][ T5843] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.563665][ T7596] netlink: 208 bytes leftover after parsing attributes in process `syz.2.434'.
[  115.643351][ T7595] nbd0: detected capacity change from 0 to 127
[  115.670898][   T56] block nbd0: Receive control failed (result -104)
[  115.720595][ T7601] netlink: 36 bytes leftover after parsing attributes in process `syz.2.435'.
[  115.740467][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  115.747109][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  115.748325][ T7603] netlink: 'syz.0.436': attribute type 12 has an invalid length.
[  115.755453][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  115.757176][ T7603] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.436'.
[  115.764808][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  115.770293][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  115.860913][ T7608] netlink: 36 bytes leftover after parsing attributes in process `syz.2.437'.
[  115.875272][ T7608] netlink: 'syz.2.437': attribute type 10 has an invalid length.
[  115.893084][ T7608] 8021q: adding VLAN 0 to HW filter on device team0
[  115.907508][ T7608] bond0: (slave team0): Enslaving as an active interface with an up link
[  115.953544][ T7611] netlink: 16 bytes leftover after parsing attributes in process `syz.0.438'.
[  116.019535][ T7614] netlink: 244 bytes leftover after parsing attributes in process `syz.2.439'.
[  116.116645][ T7604] chnl_net:caif_netlink_parms(): no params data found
[  116.210629][ T7604] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.220223][ T7604] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.223959][ T7604] bridge_slave_0: entered allmulticast mode
[  116.229481][ T7604] bridge_slave_0: entered promiscuous mode
[  116.261907][ T5843] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.278025][ T7604] bridge0: port 2(bridge_slave_1) entered blocking state
[  116.281606][ T7604] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.285374][ T7604] bridge_slave_1: entered allmulticast mode
[  116.290462][ T7604] bridge_slave_1: entered promiscuous mode
[  116.343871][ T5843] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.362836][ T7604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  116.372045][ T7604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  116.417082][ T7604] team0: Port device team_slave_0 added
[  116.422109][ T7604] team0: Port device team_slave_1 added
[  116.492927][ T7638] netlink: 4 bytes leftover after parsing attributes in process `syz.2.446'.
[  116.502918][ T7604] batman_adv: batadv0: Adding interface: batadv_slave_0
[  116.515080][ T7604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  116.527772][ T7604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  116.591826][ T7604] batman_adv: batadv0: Adding interface: batadv_slave_1
[  116.596801][ T7604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  116.609546][ T7604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  116.667918][ T5843] bridge_slave_1: left allmulticast mode
[  116.670032][ T5843] bridge_slave_1: left promiscuous mode
[  116.672621][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.680578][ T5843] bridge_slave_0: left allmulticast mode
[  116.682806][ T5843] bridge_slave_0: left promiscuous mode
[  116.685490][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.013233][ T5843] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  117.018665][ T5843] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  117.027703][ T5843] bond0 (unregistering): Released all slaves
[  117.048622][ T7604] hsr_slave_0: entered promiscuous mode
[  117.053177][ T7604] hsr_slave_1: entered promiscuous mode
[  117.056653][ T7604] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  117.060090][ T7604] Cannot create hsr debugfs directory
[  117.413940][ T5843] hsr_slave_0: left promiscuous mode
[  117.423093][ T5843] hsr_slave_1: left promiscuous mode
[  117.427110][ T5843] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  117.430251][ T5843] batman_adv: batadv0: Removing interface: batadv_slave_0
[  117.438204][ T5843] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  117.441858][ T5843] batman_adv: batadv0: Removing interface: batadv_slave_1
[  117.458091][ T5843] veth1_macvtap: left promiscuous mode
[  117.460193][ T5843] veth0_macvtap: left promiscuous mode
[  117.462148][ T5843] veth1_vlan: left promiscuous mode
[  117.464158][ T5843] veth0_vlan: left promiscuous mode
[  117.786583][   T54] Bluetooth: hci2: command tx timeout
[  117.841394][ T5843] team0 (unregistering): Port device team_slave_1 removed
[  117.872490][ T5843] team0 (unregistering): Port device team_slave_0 removed
[  118.203863][ T7660] bridge1: entered promiscuous mode
[  118.868730][ T7685] unsupported nla_type 52263
[  118.920139][ T7604] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  118.933405][ T7604] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  118.999656][ T7690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.456'.
[  119.013822][ T7604] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  119.060284][ T7604] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  119.118775][ T7702] netlink: 'syz.2.458': attribute type 6 has an invalid length.
[  119.278156][ T7604] 8021q: adding VLAN 0 to HW filter on device bond0
[  119.301937][ T7604] 8021q: adding VLAN 0 to HW filter on device team0
[  119.328569][  T137] bridge0: port 1(bridge_slave_0) entered blocking state
[  119.332033][  T137] bridge0: port 1(bridge_slave_0) entered forwarding state
[  119.356972][  T137] bridge0: port 2(bridge_slave_1) entered blocking state
[  119.360084][  T137] bridge0: port 2(bridge_slave_1) entered forwarding state
[  119.538117][ T7731] netlink: 'syz.0.462': attribute type 29 has an invalid length.
[  119.550753][ T7718] netlink: 'syz.2.460': attribute type 4 has an invalid length.
[  119.612647][ T7604] 8021q: adding VLAN 0 to HW filter on device batadv0
[  119.676572][ T7604] veth0_vlan: entered promiscuous mode
[  119.692819][ T7736] netlink: 20 bytes leftover after parsing attributes in process `syz.0.463'.
[  119.698164][ T7604] veth1_vlan: entered promiscuous mode
[  119.736675][ T7604] veth0_macvtap: entered promiscuous mode
[  119.742839][ T7604] veth1_macvtap: entered promiscuous mode
[  119.769080][ T7604] batman_adv: batadv0: Interface activated: batadv_slave_0
[  119.777727][ T7604] batman_adv: batadv0: Interface activated: batadv_slave_1
[  119.785142][ T7604] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  119.788703][ T7604] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  119.791999][ T7604] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  119.796480][ T7604] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  119.864804][   T54] Bluetooth: hci2: command tx timeout
[  119.869595][  T143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.873195][  T143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.915903][  T137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.920642][  T137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  120.227829][ T7750] netlink: 12 bytes leftover after parsing attributes in process `syz.2.467'.
[  120.415609][ T7752] netlink: 88 bytes leftover after parsing attributes in process `syz.2.468'.
[  120.415855][ T7753] x_tables: duplicate entry at hook 1
[  120.562335][ T7757] netlink: 'syz.2.469': attribute type 29 has an invalid length.
[  120.650675][ T7759] netlink: 248 bytes leftover after parsing attributes in process `syz.2.470'.
[  120.922538][ T7769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.473'.
[  120.927835][ T7769] netlink: 120 bytes leftover after parsing attributes in process `syz.2.473'.
[  120.931547][ T7769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.473'.
[  120.946063][ T7765] delete_channel: no stack
[  120.984122][ T7774] netlink: 32 bytes leftover after parsing attributes in process `syz.2.475'.
[  121.042111][ T7779] netlink: 'syz.0.476': attribute type 29 has an invalid length.
[  121.241285][ T7792] netlink: 'syz.2.480': attribute type 7 has an invalid length.
[  121.326142][ T7798] x_tables: duplicate underflow at hook 2
[  121.389171][ T5862] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.595382][ T7804] 8021q: adding VLAN 0 to HW filter on device bond2
[  122.685975][ T5862] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.719364][ T7811] netlink: 32 bytes leftover after parsing attributes in process `syz.0.485'.
[  122.740840][ T7811] netlink: 44 bytes leftover after parsing attributes in process `syz.0.485'.
[  122.808183][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  122.812525][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  122.820249][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  122.827974][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  122.832629][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  122.935448][ T5862] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.010046][ T5862] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.247948][ T7842] netlink: 'syz.0.492': attribute type 13 has an invalid length.
[  123.262764][ T7816] chnl_net:caif_netlink_parms(): no params data found
[  123.277130][ T5862] bridge_slave_1: left allmulticast mode
[  123.279626][ T5862] bridge_slave_1: left promiscuous mode
[  123.282104][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state
[  123.318883][ T5862] bridge_slave_0: left allmulticast mode
[  123.321469][ T5862] bridge_slave_0: left promiscuous mode
[  123.323915][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state
[  123.479490][ T7855] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  123.753457][ T5862] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  123.759460][ T5862] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  123.763754][ T5862] bond0 (unregistering): Released all slaves
[  123.983387][ T7866] netlink: 'syz.2.498': attribute type 29 has an invalid length.
[  124.068360][ T7816] bridge0: port 1(bridge_slave_0) entered blocking state
[  124.071436][ T7816] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.075729][ T7816] bridge_slave_0: entered allmulticast mode
[  124.080864][ T7816] bridge_slave_0: entered promiscuous mode
[  124.101539][ T7816] bridge0: port 2(bridge_slave_1) entered blocking state
[  124.105628][ T7816] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.108955][ T7816] bridge_slave_1: entered allmulticast mode
[  124.112826][ T7816] bridge_slave_1: entered promiscuous mode
[  124.255374][ T5862] hsr_slave_0: left promiscuous mode
[  124.258843][ T5862] hsr_slave_1: left promiscuous mode
[  124.261803][ T5862] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  124.266328][ T5862] batman_adv: batadv0: Removing interface: batadv_slave_0
[  124.271270][ T5862] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  124.275341][ T5862] batman_adv: batadv0: Removing interface: batadv_slave_1
[  124.292546][ T5862] veth1_macvtap: left promiscuous mode
[  124.295998][ T5862] veth0_macvtap: left promiscuous mode
[  124.298664][ T5862] veth1_vlan: left promiscuous mode
[  124.301354][ T5862] veth0_vlan: left promiscuous mode
[  124.770668][ T5862] team0 (unregistering): Port device team_slave_1 removed
[  124.796851][ T5862] team0 (unregistering): Port device team_slave_0 removed
[  124.915751][   T54] Bluetooth: hci2: command tx timeout
[  125.152913][ T7816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  125.163468][ T7816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  125.188990][ T7887] veth1: entered promiscuous mode
[  125.195820][ T7887] __nla_validate_parse: 5 callbacks suppressed
[  125.195834][ T7887] netlink: 8 bytes leftover after parsing attributes in process `syz.0.502'.
[  125.202714][ T7887] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check.
[  125.297835][ T7893] netlink: 16 bytes leftover after parsing attributes in process `syz.0.503'.
[  125.316385][ T7893] Cannot find add_set index 3 as target
[  125.318213][ T7816] team0: Port device team_slave_0 added
[  125.329282][ T7816] team0: Port device team_slave_1 added
[  125.430256][ T7816] batman_adv: batadv0: Adding interface: batadv_slave_0
[  125.446979][ T7816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  125.474683][ T7816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  125.486472][ T7816] batman_adv: batadv0: Adding interface: batadv_slave_1
[  125.489611][ T7816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  125.528626][ T7816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  125.621827][ T7816] hsr_slave_0: entered promiscuous mode
[  125.625906][ T7816] hsr_slave_1: entered promiscuous mode
[  125.629822][ T7816] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  125.634073][ T7816] Cannot create hsr debugfs directory
[  125.802992][ T7905] netlink: 'syz.0.505': attribute type 29 has an invalid length.
[  126.018814][ T7919] netlink: 20 bytes leftover after parsing attributes in process `syz.0.507'.
[  126.192335][ T7922] netlink: 4 bytes leftover after parsing attributes in process `syz.0.508'.
[  126.373474][ T7816] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  126.387219][ T7816] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  126.435243][ T7816] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  126.445205][ T7816] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  126.619676][ T7816] 8021q: adding VLAN 0 to HW filter on device bond0
[  126.646780][ T7947] netlink: 'syz.2.512': attribute type 10 has an invalid length.
[  126.677377][ T7947] veth0_vlan: left promiscuous mode
[  126.684149][ T7947] veth0_vlan: entered promiscuous mode
[  126.690379][ T7947] team0: Device veth0_vlan failed to register rx_handler
[  126.726686][ T7816] 8021q: adding VLAN 0 to HW filter on device team0
[  126.732838][ T7947] syz.2.512 (7947) used greatest stack depth: 20056 bytes left
[  126.735985][  T143] bridge0: port 1(bridge_slave_0) entered blocking state
[  126.739079][  T143] bridge0: port 1(bridge_slave_0) entered forwarding state
[  126.767352][  T143] bridge0: port 2(bridge_slave_1) entered blocking state
[  126.770034][  T143] bridge0: port 2(bridge_slave_1) entered forwarding state
[  126.849763][ T7816] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  126.857488][ T7816] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  126.996201][   T54] Bluetooth: hci2: command tx timeout
[  127.096894][ T7967] xt_hashlimit: size too large, truncated to 1048576
[  127.177769][ T7816] 8021q: adding VLAN 0 to HW filter on device batadv0
[  127.381738][ T7978] netlink: 'syz.2.515': attribute type 1 has an invalid length.
[  127.450419][ T7816] veth0_vlan: entered promiscuous mode
[  127.519870][ T7816] veth1_vlan: entered promiscuous mode
[  127.607961][ T7816] veth0_macvtap: entered promiscuous mode
[  127.621749][ T7816] veth1_macvtap: entered promiscuous mode
[  127.662982][ T7999] syzkaller0: entered promiscuous mode
[  127.669859][ T7999] syzkaller0: entered allmulticast mode
[  127.676641][ T7999] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[  127.686919][ T7816] batman_adv: batadv0: Interface activated: batadv_slave_0
[  127.696526][ T7999] netlink: 24 bytes leftover after parsing attributes in process `syz.2.519'.
[  127.705415][ T7816] batman_adv: batadv0: Interface activated: batadv_slave_1
[  127.731383][ T7816] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  127.735663][ T7816] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  127.739596][ T7816] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  127.743210][ T7816] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  127.847410][ T8006] netlink: 'syz.2.522': attribute type 29 has an invalid length.
[  127.892735][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.898205][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.920253][ T8010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.524'.
[  127.959461][ T8010] veth3: entered allmulticast mode
[  127.973238][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.978218][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  128.297574][ T8031] netlink: 28 bytes leftover after parsing attributes in process `syz.2.530'.
[  128.304479][ T8031] netlink: 12 bytes leftover after parsing attributes in process `syz.2.530'.
[  128.404436][ T8035] netlink: 'syz.2.531': attribute type 29 has an invalid length.
[  128.517785][ T8037] 8021q: VLANs not supported on gre0
[  128.565452][ T8042] bond0: option resend_igmp: invalid value (18446744073709551482)
[  128.568211][ T8042] bond0: option resend_igmp: allowed values 0 - 255
[  128.578717][ T8045] netlink: 'syz.2.535': attribute type 1 has an invalid length.
[  128.608573][ T8044] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  128.612022][ T8044] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  128.615788][ T8044] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  128.619669][ T8044] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  128.628710][ T8044] bond3: (slave geneve2): making interface the new active one
[  128.632912][ T8044] bond3: (slave geneve2): Enslaving as an active interface with an up link
[  128.638977][ T8045] netlink: 28 bytes leftover after parsing attributes in process `syz.2.535'.
[  128.645574][ T8045] 8021q: adding VLAN 0 to HW filter on device bond3
[  128.890700][ T8058] netlink: 'syz.0.540': attribute type 29 has an invalid length.
[  128.975743][ T5861] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.421744][ T8044] syz.2.535 (8044) used greatest stack depth: 18872 bytes left
[  130.005669][ T5861] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.104198][ T8063] netlink: 100 bytes leftover after parsing attributes in process `syz.2.542'.
[  130.223611][ T8070] netlink: 32 bytes leftover after parsing attributes in process `syz.0.544'.
[  130.252273][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  130.259630][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  130.263206][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  130.269337][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  130.272224][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  130.310533][ T8078] xt_cluster: you have exceeded the maximum number of cluster nodes (514 > 32)
[  130.393484][ T5861] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.438843][ T5861] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.463312][ T8083] tipc: New replicast peer: 255.255.255.255
[  130.468264][ T8083] tipc: Enabled bearer <udp:syz2>, priority 10
[  130.688056][ T8088] netlink: 'syz.0.549': attribute type 10 has an invalid length.
[  130.691428][ T8071] chnl_net:caif_netlink_parms(): no params data found
[  130.704548][ T8088] team0: Cannot enslave team device to itself
[  130.722283][ T5861] bridge_slave_1: left allmulticast mode
[  130.725553][ T5861] bridge_slave_1: left promiscuous mode
[  130.729182][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.788944][ T5861] bridge_slave_0: left allmulticast mode
[  130.791314][ T5861] bridge_slave_0: left promiscuous mode
[  130.793622][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.607684][ T6486] tipc: Node number set to 590398271
[  131.631947][ T5861] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  131.637116][ T5861] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  131.640993][ T5861] bond0 (unregistering): Released all slaves
[  131.828628][ T8071] bridge0: port 1(bridge_slave_0) entered blocking state
[  131.831407][ T8071] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.835606][ T8071] bridge_slave_0: entered allmulticast mode
[  131.841257][ T8071] bridge_slave_0: entered promiscuous mode
[  131.852690][ T8071] bridge0: port 2(bridge_slave_1) entered blocking state
[  131.856635][ T8071] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.859535][ T8071] bridge_slave_1: entered allmulticast mode
[  131.862988][ T8071] bridge_slave_1: entered promiscuous mode
[  131.941255][ T8116] netlink: 48 bytes leftover after parsing attributes in process `syz.2.552'.
[  132.012544][ T8071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  132.029047][ T8071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  132.055237][ T5861] hsr_slave_0: left promiscuous mode
[  132.058335][ T5861] hsr_slave_1: left promiscuous mode
[  132.060885][ T5861] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  132.063807][ T5861] batman_adv: batadv0: Removing interface: batadv_slave_0
[  132.068748][ T5861] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  132.071479][ T5861] batman_adv: batadv0: Removing interface: batadv_slave_1
[  132.083184][ T5861] veth1_macvtap: left promiscuous mode
[  132.087023][ T5861] veth0_macvtap: left promiscuous mode
[  132.089519][ T5861] veth1_vlan: left promiscuous mode
[  132.091655][ T5861] veth0_vlan: left promiscuous mode
[  132.347959][ T5833] Bluetooth: hci2: command tx timeout
[  132.429385][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.496026][ T5861] team0 (unregistering): Port device team_slave_1 removed
[  132.521425][ T5861] team0 (unregistering): Port device team_slave_0 removed
[  132.816242][ T8127] netlink: 'syz.0.555': attribute type 29 has an invalid length.
[  132.869693][ T8071] team0: Port device team_slave_0 added
[  132.892176][ T8071] team0: Port device team_slave_1 added
[  132.952811][ T8071] batman_adv: batadv0: Adding interface: batadv_slave_0
[  132.955673][ T8071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  132.968920][ T8071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  132.976667][ T8071] batman_adv: batadv0: Adding interface: batadv_slave_1
[  132.979498][ T8071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  133.001325][ T8071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  133.091747][ T8146] tipc: Started in network mode
[  133.093584][ T8146] tipc: Node identity be1ac9de36e8, cluster identity 4711
[  133.102954][ T8146] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[  133.110497][ T8071] hsr_slave_0: entered promiscuous mode
[  133.113910][ T8071] hsr_slave_1: entered promiscuous mode
[  133.117920][ T8071] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  133.120456][ T8071] Cannot create hsr debugfs directory
[  133.168302][ T8146] tipc: Resetting bearer <eth:syzkaller0>
[  133.185706][ T8144] tipc: Resetting bearer <eth:syzkaller0>
[  133.298259][ T8158] xt_CT: No such helper "pptp"
[  134.164532][ T6486] tipc: Node number set to 2297612766
[  134.368117][ T8144] tipc: Disabling bearer <eth:syzkaller0>
[  134.424924][ T5833] Bluetooth: hci2: command tx timeout
[  134.538848][ T5861] bridge_slave_1: left allmulticast mode
[  134.541392][ T5861] bridge_slave_1: left promiscuous mode
[  134.545905][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.552653][ T5861] bridge_slave_0: left allmulticast mode
[  134.556512][ T5861] bridge_slave_0: left promiscuous mode
[  134.561205][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.788837][ T5861] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  134.792959][ T5861] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  134.797147][ T5861] bond0 (unregistering): Released all slaves
[  134.911183][ T8173] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (34)
[  135.141660][ T5861] hsr_slave_0: left promiscuous mode
[  135.151147][ T5861] hsr_slave_1: left promiscuous mode
[  135.154147][ T5861] batman_adv: batadv0: Removing interface: batadv_slave_0
[  135.163805][ T5861] batman_adv: batadv0: Removing interface: batadv_slave_1
[  135.334505][ T8192] netlink: 224 bytes leftover after parsing attributes in process `syz.0.570'.
[  135.339617][ T8193] netlink: 224 bytes leftover after parsing attributes in process `syz.0.570'.
[  135.523161][ T5861] team0 (unregistering): Port device team_slave_1 removed
[  135.557850][ T5861] team0 (unregistering): Port device team_slave_0 removed
[  135.952505][ T8071] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  135.974775][ T8071] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  135.990811][ T8071] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  135.995305][ T8215] netlink: 12 bytes leftover after parsing attributes in process `syz.0.576'.
[  136.010632][ T8071] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  136.093676][ T8221] netlink: 56 bytes leftover after parsing attributes in process `syz.2.577'.
[  136.218995][ T8071] 8021q: adding VLAN 0 to HW filter on device bond0
[  136.254005][ T8071] 8021q: adding VLAN 0 to HW filter on device team0
[  136.267708][   T80] bridge0: port 1(bridge_slave_0) entered blocking state
[  136.270322][   T80] bridge0: port 1(bridge_slave_0) entered forwarding state
[  136.293520][   T80] bridge0: port 2(bridge_slave_1) entered blocking state
[  136.296149][   T80] bridge0: port 2(bridge_slave_1) entered forwarding state
[  136.520862][ T5833] Bluetooth: hci2: command tx timeout
[  136.575018][ T8071] 8021q: adding VLAN 0 to HW filter on device batadv0
[  136.666008][ T8266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.583'.
[  136.687247][ T8071] veth0_vlan: entered promiscuous mode
[  136.694545][ T8266] tipc: Enabling of bearer <5dp:s > rejected, media not registered
[  136.724548][ T8071] veth1_vlan: entered promiscuous mode
[  136.797427][ T8071] veth0_macvtap: entered promiscuous mode
[  136.802150][ T8071] veth1_macvtap: entered promiscuous mode
[  136.827175][ T8275] netlink: 248 bytes leftover after parsing attributes in process `syz.2.584'.
[  136.830887][ T8071] batman_adv: batadv0: Interface activated: batadv_slave_0
[  136.853254][ T8071] batman_adv: batadv0: Interface activated: batadv_slave_1
[  136.903367][ T8071] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  136.910159][ T8071] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  136.920075][ T8071] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  136.929902][ T8071] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  137.096761][ T8289] netlink: 'syz.2.586': attribute type 21 has an invalid length.
[  137.142050][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  137.145983][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  137.190945][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  137.197557][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  137.221261][ T8295] bond3: entered promiscuous mode
[  137.227969][ T8295] 8021q: adding VLAN 0 to HW filter on device bond3
[  137.239439][ T8295] bond0: (slave bond3): Enslaving as an active interface with a down link
[  137.447389][ T8309] netlink: 'syz.0.590': attribute type 29 has an invalid length.
[  137.590025][ T8321] ksmbd: Unknown IPC event: 3, ignore.
[  137.637732][ T8316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.592'.
[  137.652621][ T8316] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  137.657908][ T8316] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  138.473952][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.490851][ T8344] netlink: 12 bytes leftover after parsing attributes in process `syz.2.598'.
[  139.697767][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.765840][ T8351] netlink: 'syz.2.600': attribute type 29 has an invalid length.
[  139.878171][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.919287][ T8361] netlink: 'syz.2.603': attribute type 83 has an invalid length.
[  139.939069][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.946884][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  139.954614][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  139.958772][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  139.963838][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  139.970152][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  140.022526][ T8365] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  140.135180][   T13] bridge_slave_1: left allmulticast mode
[  140.137616][   T13] bridge_slave_1: left promiscuous mode
[  140.139886][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.149817][   T13] bridge_slave_0: left allmulticast mode
[  140.151787][   T13] bridge_slave_0: left promiscuous mode
[  140.153831][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.473158][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  140.479107][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  140.483735][   T13] bond0 (unregistering): Released all slaves
[  140.632792][ T8362] chnl_net:caif_netlink_parms(): no params data found
[  140.807936][   T13] hsr_slave_0: left promiscuous mode
[  140.820104][   T13] hsr_slave_1: left promiscuous mode
[  140.822534][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  140.833284][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  140.837828][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  140.840758][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  140.858842][   T13] veth1_macvtap: left promiscuous mode
[  140.860831][   T13] veth0_macvtap: left promiscuous mode
[  140.862768][   T13] veth1_vlan: left promiscuous mode
[  140.866459][   T13] veth0_vlan: left promiscuous mode
[  141.221979][   T13] team0 (unregistering): Port device team_slave_1 removed
[  141.251351][   T13] team0 (unregistering): Port device team_slave_0 removed
[  141.710363][ T8362] bridge0: port 1(bridge_slave_0) entered blocking state
[  141.717843][ T8362] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.721270][ T8362] bridge_slave_0: entered allmulticast mode
[  141.731746][ T8362] bridge_slave_0: entered promiscuous mode
[  141.746735][ T8362] bridge0: port 2(bridge_slave_1) entered blocking state
[  141.753385][ T8362] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.756574][ T8362] bridge_slave_1: entered allmulticast mode
[  141.759447][ T8362] bridge_slave_1: entered promiscuous mode
[  141.811875][ T8362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  141.819482][ T8401] netlink: 'syz.0.609': attribute type 142 has an invalid length.
[  141.821627][ T8362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  141.912103][ T8362] team0: Port device team_slave_0 added
[  141.929293][ T8362] team0: Port device team_slave_1 added
[  141.981282][ T8411] vxcan2: entered promiscuous mode
[  142.001700][ T8362] batman_adv: batadv0: Adding interface: batadv_slave_0
[  142.004100][ T8362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  142.026183][   T54] Bluetooth: hci2: command tx timeout
[  142.028382][ T8362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  142.029909][ T8362] batman_adv: batadv0: Adding interface: batadv_slave_1
[  142.037754][ T8362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  142.048709][ T8362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  142.142483][ T8362] hsr_slave_0: entered promiscuous mode
[  142.148045][ T8362] hsr_slave_1: entered promiscuous mode
[  142.151516][ T8362] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  142.164756][ T8362] Cannot create hsr debugfs directory
[  142.573026][ T8423] tunl0: entered allmulticast mode
[  142.592003][ T8423] xt_CT: No such helper "syz0"
[  142.853043][ T8362] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  142.859312][ T8362] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  142.884747][ T8434] only policy match revision 0 supported
[  142.884762][ T8434] unable to load match
[  142.889367][ T8362] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  142.893524][ T8362] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  142.934160][ T8433] veth1_to_hsr: entered promiscuous mode
[  142.939335][ T8433] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check.
[  143.052347][ T8362] 8021q: adding VLAN 0 to HW filter on device bond0
[  143.077521][ T8362] 8021q: adding VLAN 0 to HW filter on device team0
[  143.087861][   T80] bridge0: port 1(bridge_slave_0) entered blocking state
[  143.090558][   T80] bridge0: port 1(bridge_slave_0) entered forwarding state
[  143.102243][   T80] bridge0: port 2(bridge_slave_1) entered blocking state
[  143.104698][   T80] bridge0: port 2(bridge_slave_1) entered forwarding state
[  143.156859][ T8362] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  143.385945][ T8362] 8021q: adding VLAN 0 to HW filter on device batadv0
[  143.425342][ T8362] veth0_vlan: entered promiscuous mode
[  143.435967][ T8362] veth1_vlan: entered promiscuous mode
[  143.471791][ T8362] veth0_macvtap: entered promiscuous mode
[  143.485384][ T8362] veth1_macvtap: entered promiscuous mode
[  143.515502][ T8362] batman_adv: batadv0: Interface activated: batadv_slave_0
[  143.527075][ T8362] batman_adv: batadv0: Interface activated: batadv_slave_1
[  143.541425][ T8362] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  143.564708][ T8362] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  143.573050][ T8362] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  143.585552][ T8362] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  143.810020][ T8482] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.622'.
[  143.911675][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  143.925306][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  143.987544][   T33] audit: type=1804 audit(1752633286.240:4): pid=8492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.626" name="/newroot/300/cgroup.controllers" dev="tmpfs" ino=1539 res=1 errno=0
[  144.014473][   T33] audit: type=1800 audit(1752633286.240:5): pid=8492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.626" name="cgroup.controllers" dev="tmpfs" ino=1539 res=0 errno=0
[  144.024015][   T33] audit: type=1800 audit(1752633286.260:6): pid=8493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.626" name="cgroup.controllers" dev="tmpfs" ino=1539 res=0 errno=0
[  144.027603][   T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  144.052879][   T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  144.059815][ T8497] netlink: 24 bytes leftover after parsing attributes in process `syz.0.627'.
[  144.073130][ T8497] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  144.081862][ T8497] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  144.092244][ T8497] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  144.103025][ T8500] nbd: must specify an index to disconnect
[  144.105136][   T54] Bluetooth: hci2: command tx timeout
[  144.107501][ T8497] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  144.114231][ T8497] geneve2: entered promiscuous mode
[  144.199498][ T8366] ==================================================================
[  144.202151][ T8366] BUG: KASAN: slab-use-after-free in __mutex_lock+0x738/0xe80
[  144.204548][ T8366] Read of size 8 at addr ffff88810a1800a0 by task khidpd_04580058/8366
[  144.208101][ T8366] 
[  144.208995][ T8366] CPU: 1 UID: 0 PID: 8366 Comm: khidpd_04580058 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  144.209007][ T8366] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  144.209013][ T8366] Call Trace:
[  144.209017][ T8366]  <TASK>
[  144.209022][ T8366]  dump_stack_lvl+0x189/0x250
[  144.209034][ T8366]  ? __virt_addr_valid+0x1c8/0x5c0
[  144.209045][ T8366]  ? rcu_is_watching+0x15/0xb0
[  144.209055][ T8366]  ? __kasan_check_byte+0x12/0x40
[  144.209066][ T8366]  ? __pfx_dump_stack_lvl+0x10/0x10
[  144.209075][ T8366]  ? rcu_is_watching+0x15/0xb0
[  144.209084][ T8366]  ? lock_release+0x4b/0x3e0
[  144.209093][ T8366]  ? __virt_addr_valid+0x1c8/0x5c0
[  144.209103][ T8366]  ? __virt_addr_valid+0x4a5/0x5c0
[  144.209114][ T8366]  print_report+0xd2/0x2b0
[  144.209122][ T8366]  ? __mutex_lock+0x738/0xe80
[  144.209130][ T8366]  kasan_report+0x118/0x150
[  144.209140][ T8366]  ? __mutex_lock+0x738/0xe80
[  144.209148][ T8366]  __mutex_lock+0x738/0xe80
[  144.209156][ T8366]  ? __mutex_lock+0x51b/0xe80
[  144.209164][ T8366]  ? l2cap_unregister_user+0x6a/0x1b0
[  144.209178][ T8366]  ? __pfx___mutex_lock+0x10/0x10
[  144.209186][ T8366]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  144.209200][ T8366]  l2cap_unregister_user+0x6a/0x1b0
[  144.209214][ T8366]  hidp_session_thread+0x3c9/0x410
[  144.209223][ T8366]  ? __pfx_hidp_session_thread+0x10/0x10
[  144.209230][ T8366]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  144.209241][ T8366]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  144.209250][ T8366]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  144.209259][ T8366]  ? __kthread_parkme+0x7b/0x200
[  144.209270][ T8366]  ? __kthread_parkme+0x1a1/0x200
[  144.209282][ T8366]  kthread+0x711/0x8a0
[  144.209294][ T8366]  ? __pfx_hidp_session_thread+0x10/0x10
[  144.209303][ T8366]  ? __pfx_kthread+0x10/0x10
[  144.209315][ T8366]  ? _raw_spin_unlock_irq+0x23/0x50
[  144.209327][ T8366]  ? lockdep_hardirqs_on+0x9c/0x150
[  144.209340][ T8366]  ? __pfx_kthread+0x10/0x10
[  144.209353][ T8366]  ret_from_fork+0x3fc/0x770
[  144.209363][ T8366]  ? __pfx_ret_from_fork+0x10/0x10
[  144.209373][ T8366]  ? __switch_to_asm+0x39/0x70
[  144.209384][ T8366]  ? __switch_to_asm+0x33/0x70
[  144.209395][ T8366]  ? __pfx_kthread+0x10/0x10
[  144.209406][ T8366]  ret_from_fork_asm+0x1a/0x30
[  144.209421][ T8366]  </TASK>
[  144.209425][ T8366] 
[  144.291926][ T8366] Allocated by task 8362:
[  144.293542][ T8366]  kasan_save_track+0x3e/0x80
[  144.295016][ T8366]  __kasan_kmalloc+0x93/0xb0
[  144.296553][ T8366]  __kmalloc_noprof+0x27a/0x4f0
[  144.298169][ T8366]  hci_alloc_dev_priv+0x28/0x2040
[  144.300028][ T8366]  vhci_create_device+0x120/0x6e0
[  144.302016][ T8366]  vhci_write+0x3ce/0x4a0
[  144.303665][ T8366]  vfs_write+0x54b/0xa90
[  144.305021][ T8366]  ksys_write+0x145/0x250
[  144.306375][ T8366]  do_syscall_64+0xfa/0x3b0
[  144.307821][ T8366]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.309713][ T8366] 
[  144.310566][ T8366] Freed by task 8362:
[  144.311846][ T8366]  kasan_save_track+0x3e/0x80
[  144.313337][ T8366]  kasan_save_free_info+0x46/0x50
[  144.314988][ T8366]  __kasan_slab_free+0x62/0x70
[  144.316513][ T8366]  kfree+0x18e/0x440
[  144.317828][ T8366]  bt_host_release+0x82/0x90
[  144.319416][ T8366]  device_release+0x9c/0x1c0
[  144.321128][ T8366]  kobject_put+0x22b/0x480
[  144.322706][ T8366]  vhci_release+0x88/0xd0
[  144.324197][ T8366]  __fput+0x44c/0xa70
[  144.325577][ T8366]  task_work_run+0x1d4/0x260
[  144.327155][ T8366]  do_exit+0x6b5/0x22e0
[  144.328535][ T8366]  do_group_exit+0x21c/0x2d0
[  144.330165][ T8366]  __x64_sys_exit_group+0x3f/0x40
[  144.331825][ T8366]  x64_sys_call+0x21ba/0x21c0
[  144.333329][ T8366]  do_syscall_64+0xfa/0x3b0
[  144.334785][ T8366]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.336642][ T8366] 
[  144.337423][ T8366] Last potentially related work creation:
[  144.339321][ T8366]  kasan_save_stack+0x3e/0x60
[  144.341264][ T8366]  kasan_record_aux_stack+0xbd/0xd0
[  144.343575][ T8366]  insert_work+0x3d/0x330
[  144.345431][ T8366]  __queue_work+0xbd9/0xfe0
[  144.347040][ T8366]  queue_work_on+0x181/0x270
[  144.348505][ T8366]  process_scheduled_works+0xae1/0x17b0
[  144.350331][ T8366]  worker_thread+0x8a0/0xda0
[  144.351867][ T8366]  kthread+0x711/0x8a0
[  144.353161][ T8366]  ret_from_fork+0x3fc/0x770
[  144.354624][ T8366]  ret_from_fork_asm+0x1a/0x30
[  144.356137][ T8366] 
[  144.356919][ T8366] Second to last potentially related work creation:
[  144.359002][ T8366]  kasan_save_stack+0x3e/0x60
[  144.360820][ T8366]  kasan_record_aux_stack+0xbd/0xd0
[  144.363005][ T8366]  insert_work+0x3d/0x330
[  144.364719][ T8366]  __queue_work+0xcfc/0xfe0
[  144.366450][ T8366]  call_timer_fn+0x17e/0x5f0
[  144.368173][ T8366]  __run_timer_base+0x646/0x860
[  144.369850][ T8366]  run_timer_softirq+0xb7/0x180
[  144.371434][ T8366]  handle_softirqs+0x286/0x870
[  144.372997][ T8366]  __irq_exit_rcu+0xca/0x1f0
[  144.374536][ T8366]  irq_exit_rcu+0x9/0x30
[  144.375941][ T8366]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  144.377783][ T8366]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  144.379992][ T8366] 
[  144.381151][ T8366] The buggy address belongs to the object at ffff88810a180000
[  144.381151][ T8366]  which belongs to the cache kmalloc-8k of size 8192
[  144.386641][ T8366] The buggy address is located 160 bytes inside of
[  144.386641][ T8366]  freed 8192-byte region [ffff88810a180000, ffff88810a182000)
[  144.391492][ T8366] 
[  144.392330][ T8366] The buggy address belongs to the physical page:
[  144.394809][ T8366] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88810a184000 pfn:0x10a180
[  144.398352][ T8366] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  144.402139][ T8366] flags: 0x57ff00000000240(workingset|head|node=1|zone=2|lastcpupid=0x7ff)
[  144.405244][ T8366] page_type: f5(slab)
[  144.406552][ T8366] raw: 057ff00000000240 ffff88801a442280 ffffea0004423c10 ffffea0004365610
[  144.409363][ T8366] raw: ffff88810a184000 0000000000020001 00000000f5000000 0000000000000000
[  144.412251][ T8366] head: 057ff00000000240 ffff88801a442280 ffffea0004423c10 ffffea0004365610
[  144.415280][ T8366] head: ffff88810a184000 0000000000020001 00000000f5000000 0000000000000000
[  144.418890][ T8366] head: 057ff00000000003 ffffea0004286001 00000000ffffffff 00000000ffffffff
[  144.422307][ T8366] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  144.425019][ T8366] page dumped because: kasan: bad access detected
[  144.427097][ T8366] page_owner tracks the page as allocated
[  144.428904][ T8366] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 8362, tgid 8362 (syz-executor), ts 139938865821, free_ts 139937856464
[  144.436862][ T8366]  post_alloc_hook+0x240/0x2a0
[  144.438824][ T8366]  get_page_from_freelist+0x21e4/0x22c0
[  144.440851][ T8366]  __alloc_frozen_pages_noprof+0x181/0x370
[  144.442975][ T8366]  alloc_pages_mpol+0x232/0x4a0
[  144.444647][ T8366]  allocate_slab+0x8a/0x3b0
[  144.446294][ T8366]  ___slab_alloc+0xbfc/0x1480
[  144.448076][ T8366]  __kmalloc_noprof+0x305/0x4f0
[  144.450062][ T8366]  hci_alloc_dev_priv+0x28/0x2040
[  144.452007][ T8366]  vhci_create_device+0x120/0x6e0
[  144.453854][ T8366]  vhci_write+0x3ce/0x4a0
[  144.455260][ T8366]  vfs_write+0x54b/0xa90
[  144.456654][ T8366]  ksys_write+0x145/0x250
[  144.458042][ T8366]  do_syscall_64+0xfa/0x3b0
[  144.459514][ T8366]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.461396][ T8366] page last free pid 8359 tgid 8357 stack trace:
[  144.463431][ T8366]  __free_frozen_pages+0xc71/0xe70
[  144.465200][ T8366]  __folio_put+0x21b/0x2c0
[  144.466888][ T8366]  free_large_kmalloc+0x145/0x200
[  144.469313][ T8366]  bpf_check+0x14767/0x19c60
[  144.471551][ T8366]  bpf_prog_load+0x1318/0x1930
[  144.473497][ T8366]  __sys_bpf+0x5f1/0x860
[  144.475227][ T8366]  __x64_sys_bpf+0x7c/0x90
[  144.477086][ T8366]  do_syscall_64+0xfa/0x3b0
[  144.478993][ T8366]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.481404][ T8366] 
[  144.482405][ T8366] Memory state around the buggy address:
[  144.484917][ T8366]  ffff88810a17ff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  144.489258][ T8366]  ffff88810a180000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  144.492945][ T8366] >ffff88810a180080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  144.496376][ T8366]                                ^
[  144.498499][ T8366]  ffff88810a180100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  144.501853][ T8366]  ffff88810a180180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  144.505240][ T8366] ==================================================================
[  144.510240][ T8366] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  144.513635][ T8366] CPU: 1 UID: 0 PID: 8366 Comm: khidpd_04580058 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  144.518802][ T8366] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  144.523105][ T8366] Call Trace:
[  144.524740][ T8366]  <TASK>
[  144.526285][ T8366]  dump_stack_lvl+0x99/0x250
[  144.528691][ T8366]  ? __asan_memcpy+0x40/0x70
[  144.530947][ T8366]  ? __pfx_dump_stack_lvl+0x10/0x10
[  144.533344][ T8366]  ? __pfx__printk+0x10/0x10
[  144.535383][ T8366]  panic+0x2db/0x790
[  144.537124][ T8366]  ? __pfx_panic+0x10/0x10
[  144.539098][ T8366]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  144.541753][ T8366]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  144.544572][ T8366]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  144.547765][ T8366]  ? print_memory_metadata+0x314/0x400
[  144.550321][ T8366]  ? __mutex_lock+0x738/0xe80
[  144.552359][ T8366]  check_panic_on_warn+0x89/0xb0
[  144.554485][ T8366]  ? __mutex_lock+0x738/0xe80
[  144.556443][ T8366]  end_report+0x78/0x160
[  144.558527][ T8366]  kasan_report+0x129/0x150
[  144.560917][ T8366]  ? __mutex_lock+0x738/0xe80
[  144.563278][ T8366]  __mutex_lock+0x738/0xe80
[  144.565280][ T8366]  ? __mutex_lock+0x51b/0xe80
[  144.567253][ T8366]  ? l2cap_unregister_user+0x6a/0x1b0
[  144.569452][ T8366]  ? __pfx___mutex_lock+0x10/0x10
[  144.571639][ T8366]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  144.574347][ T8366]  l2cap_unregister_user+0x6a/0x1b0
[  144.576840][ T8366]  hidp_session_thread+0x3c9/0x410
[  144.579270][ T8366]  ? __pfx_hidp_session_thread+0x10/0x10
[  144.581844][ T8366]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  144.584412][ T8366]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  144.587118][ T8366]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  144.589997][ T8366]  ? __kthread_parkme+0x7b/0x200
[  144.592694][ T8366]  ? __kthread_parkme+0x1a1/0x200
[  144.595212][ T8366]  kthread+0x711/0x8a0
[  144.597040][ T8366]  ? __pfx_hidp_session_thread+0x10/0x10
[  144.599466][ T8366]  ? __pfx_kthread+0x10/0x10
[  144.601503][ T8366]  ? _raw_spin_unlock_irq+0x23/0x50
[  144.603732][ T8366]  ? lockdep_hardirqs_on+0x9c/0x150
[  144.606180][ T8366]  ? __pfx_kthread+0x10/0x10
[  144.608545][ T8366]  ret_from_fork+0x3fc/0x770
[  144.610829][ T8366]  ? __pfx_ret_from_fork+0x10/0x10
[  144.612929][ T8366]  ? __switch_to_asm+0x39/0x70
[  144.615026][ T8366]  ? __switch_to_asm+0x33/0x70
[  144.617077][ T8366]  ? __pfx_kthread+0x10/0x10
[  144.619050][ T8366]  ret_from_fork_asm+0x1a/0x30
[  144.621317][ T8366]  </TASK>
[  144.623879][ T8366] Kernel Offset: disabled
[  144.625969][ T8366] Rebooting in 86400 seconds..

VM DIAGNOSIS:
02:34:46  Registers:
info registers vcpu 0

CPU#0
RAX=00007f65671f1b30 RBX=fffffffffffffe98 RCX=0000000000000044 RDX=0000000000000000
RSI=00007f65671f1b40 RDI=0000000000000040 RBP=00007f65671f1aa0 RSP=00007fff964f9cf0
R8 =0000000000000000 R9 =00007f65671f1b30 R10=00007f65670d7960 R11=0000000000000000
R12=0000000000000004 R13=0000000000000002 R14=0000000000000030 R15=0000000000000040
RIP=00007f65670c80c4 RFL=00000202 [-------] CPL=3 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA]
SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f656749ec80 ffffffff 00c00000
GS =0000 0000000000000000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f6ed85cdba8 CR3=000000001ef99000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffff000000000000 ffff000000000000 XMM01=0000000000000000 0001000000000000
XMM02=00007f65671f1b00 0048544150564544 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 ffff00000000ff00 XMM05=000000000000028a 0000000000347475
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffff0000 ffffffffff000000 XMM09=00000000000002a1 0000000000347475
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000073 RBX=0000000000000073 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000398f370
R8 =ffff888020f40237 R9 =1ffff110041e8046 R10=dffffc0000000000 R11=ffffffff85478780
R12=dffffc0000000000 R13=ffffffff99af98c5 R14=ffffffff99dfe6e0 R15=0000000000000000
RIP=ffffffff854787fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f22317b7bac CR3=0000000105bf4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f2231785478 00007f2231785450 XMM03=00007f2231785488 00007f2231785480
XMM04=00007f22322ed100 00007f2231785440 XMM05=00007f2231785458 00007f22317854a0
XMM06=00007f2231785498 00007f2231785490 XMM07=00007f2231785488 00007f2231785480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f2231611c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
