last executing test programs:

41.581248512s ago: executing program 0 (id=68):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
close(r0)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1}, 0xc)
r2 = socket$qrtr(0x2a, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0)
connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc)
writev(r2, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)

34.612581198s ago: executing program 0 (id=68):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
close(r0)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1}, 0xc)
r2 = socket$qrtr(0x2a, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0)
connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc)
writev(r2, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)

26.784205993s ago: executing program 0 (id=68):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
close(r0)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1}, 0xc)
r2 = socket$qrtr(0x2a, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0)
connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc)
writev(r2, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)

19.075965327s ago: executing program 0 (id=68):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
close(r0)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1}, 0xc)
r2 = socket$qrtr(0x2a, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0)
connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc)
writev(r2, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)

11.232998488s ago: executing program 0 (id=68):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
close(r0)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1}, 0xc)
r2 = socket$qrtr(0x2a, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0)
connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc)
writev(r2, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)

4.916858049s ago: executing program 0 (id=68):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
close(r0)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1}, 0xc)
r2 = socket$qrtr(0x2a, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0)
connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc)
writev(r2, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)

1.098251998s ago: executing program 2 (id=1271):
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x4, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00)
syz_emit_ethernet(0x82, &(0x7f0000000240)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @rand_addr=0x4, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast1=0xe0000089}, {@private}, {@local}, {@remote}, {@private}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@private}]}]}}}}}}}, 0x0)

849.577165ms ago: executing program 2 (id=1275):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x6, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x44010)

779.85676ms ago: executing program 2 (id=1277):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
bpf$MAP_CREATE(0x700000000000000, &(0x7f0000001a00)=ANY=[@ANYBLOB="1d00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000011", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000005"], 0x50)

730.059107ms ago: executing program 2 (id=1279):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd00}, 0x48)

659.126812ms ago: executing program 2 (id=1281):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000040)={0x14, 0x4, 0xa, 0x101, 0x70bd28, 0x25dfdbff, {0x1, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x2004d805}, 0x8000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x4, 0xfa, &(0x7f00000007c0)=""/250}, 0x90)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x2}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0x800000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffd}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0x8, 0x0, 0x2, 0x0, 0x8}, &(0x7f0000000180)={0x9, 0x2, 0x7fff, 0x22c, 0x5, 0x0, 0xa9e, 0x7}, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, &(0x7f00000004c0)={0x0})
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe8000000000"], 0xfdef)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r4, 0x0, 0x0)
sendmsg$can_bcm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="050000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000000000009dfc47318ccc3455"], 0x48}}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB], 0x4c}}, 0x2)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="6a0e6435f82b96e120e95ef657c67f3804ab3fd20f854380e05a23b6758439b1bcc2af4612a9ffbedef954ca796197b2ad54eb4aa5e40f7e0679b02c55444cd757567b124e1c78808a05eac11e93d4de3287", 0x52)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c0002800800"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0xf00)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000013c0)=0xc)

549.609401ms ago: executing program 1 (id=1283):
r0 = socket$nl_route(0x10, 0x3, 0x0)
getpid()
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newlink={0x54, 0x10, 0x403, 0x0, 0x80000000, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bond={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}, @IFLA_BOND_PRIMARY_RESELECT={0x5}, @IFLA_BOND_PRIMARY={0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x54}}, 0x0)

367.030509ms ago: executing program 1 (id=1284):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DONE(r0, 0x29, 0xc9, 0x12, 0x0)

331.125461ms ago: executing program 1 (id=1285):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x880}, 0x50)

327.461734ms ago: executing program 2 (id=1286):
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write(r0, &(0x7f0000000340), 0x11000)
vmsplice(r0, &(0x7f0000000280)=[{&(0x7f0000000680)="85", 0x1}], 0x1, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x1f00)
pipe(&(0x7f0000000600)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x10)
write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c)
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

208.826781ms ago: executing program 1 (id=1287):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
listen(r0, 0x100)
accept4(r0, 0x0, 0x0, 0x0)
shutdown(r0, 0x0)

79.930241ms ago: executing program 1 (id=1288):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], &(0x7f0000000f40)=""/4089, 0x46, 0xff9, 0x8}, 0x28)

0s ago: executing program 1 (id=1289):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112})
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'rose0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r3], 0x20}}, 0x0)

kernel console output (not intermixed with test programs):

2190] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.088644][ T2190] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.153339][ T5814] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   57.175150][ T5815] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   57.188456][ T5815] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   57.282698][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.308300][ T5813] Bluetooth: hci2: command tx timeout
[   57.310355][ T5813] Bluetooth: hci0: command tx timeout
[   57.312319][   T54] Bluetooth: hci1: command tx timeout
[   57.367416][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.382329][ T5810] veth0_vlan: entered promiscuous mode
[   57.395544][ T5810] veth1_vlan: entered promiscuous mode
[   57.414483][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.438726][ T5810] veth0_macvtap: entered promiscuous mode
[   57.449065][ T5810] veth1_macvtap: entered promiscuous mode
[   57.474180][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.483871][ T5815] veth0_vlan: entered promiscuous mode
[   57.493416][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.495939][ T5814] veth0_vlan: entered promiscuous mode
[   57.505094][ T5810] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.511642][ T5810] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.514574][ T5810] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.518562][ T5810] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.525002][ T5814] veth1_vlan: entered promiscuous mode
[   57.529731][ T5815] veth1_vlan: entered promiscuous mode
[   57.590381][ T5814] veth0_macvtap: entered promiscuous mode
[   57.594870][ T5814] veth1_macvtap: entered promiscuous mode
[   57.604176][ T5815] veth0_macvtap: entered promiscuous mode
[   57.613788][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.620422][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.623700][ T5815] veth1_macvtap: entered promiscuous mode
[   57.640377][ T5814] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.643311][ T5814] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.646224][ T5814] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.650842][ T5814] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.657161][  T447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.665626][  T447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.696705][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.701418][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.717398][ T5815] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.720317][ T5815] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.723083][ T5815] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.725908][ T5815] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.739009][  T447] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.742380][  T447] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.784109][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.792224][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.839076][ T5810] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.854758][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.859569][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.896668][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.899949][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.930515][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.944893][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.124226][ T5883] syz.1.4 uses obsolete (PF_INET,SOCK_PACKET)
[   58.179688][ T5890] netlink: 'syz.0.7': attribute type 1 has an invalid length.
[   58.378477][ T5905] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14'.
[   58.440716][ T5908] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16'.
[   58.443680][ T5908] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16'.
[   58.461819][ T5908] netlink: 'syz.2.16': attribute type 18 has an invalid length.
[   58.601038][ T5919] netlink: 12 bytes leftover after parsing attributes in process `syz.0.21'.
[   58.604232][ T5919] netlink: 12 bytes leftover after parsing attributes in process `syz.0.21'.
[   59.233029][ T5934] netlink: 'syz.1.27': attribute type 1 has an invalid length.
[   59.237462][ T5934] netlink: 244 bytes leftover after parsing attributes in process `syz.1.27'.
[   59.376768][ T5202] Bluetooth: hci1: command tx timeout
[   59.378950][ T5202] Bluetooth: hci2: command tx timeout
[   59.381367][ T5813] Bluetooth: hci0: command tx timeout
[   59.521062][ T5948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.34'.
[   59.840868][ T5965] netlink: 4 bytes leftover after parsing attributes in process `syz.0.42'.
[   59.866467][ T5965] netlink: 12 bytes leftover after parsing attributes in process `syz.0.42'.
[   60.011151][ T5982] netlink: 176 bytes leftover after parsing attributes in process `syz.1.51'.
[   60.708774][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.805281][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.878226][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.939081][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.987720][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   60.991018][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   60.994078][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   61.000804][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   61.004369][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   61.051948][   T13] bridge_slave_1: left allmulticast mode
[   61.054108][   T13] bridge_slave_1: left promiscuous mode
[   61.060465][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.097596][   T13] bridge_slave_0: left allmulticast mode
[   61.100103][   T13] bridge_slave_0: left promiscuous mode
[   61.113729][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.456626][ T5813] Bluetooth: hci0: command tx timeout
[   61.457958][   T54] Bluetooth: hci1: command tx timeout
[   61.581207][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   61.591375][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   61.597605][   T13] bond0 (unregistering): Released all slaves
[   62.014060][ T6050] bond0: entered promiscuous mode
[   62.017265][ T6050] bond_slave_0: entered promiscuous mode
[   62.019806][ T6050] bond_slave_1: entered promiscuous mode
[   62.024059][ T6050] batadv_slave_0: entered promiscuous mode
[   62.030175][ T6050] hsr1: entered promiscuous mode
[   62.040552][ T6018] chnl_net:caif_netlink_parms(): no params data found
[   62.100656][   T13] hsr_slave_0: left promiscuous mode
[   62.103082][   T13] hsr_slave_1: left promiscuous mode
[   62.105135][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   62.112825][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   62.121225][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   62.123744][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   62.141491][   T13] veth1_macvtap: left promiscuous mode
[   62.143374][   T13] veth0_macvtap: left promiscuous mode
[   62.149597][   T13] veth1_vlan: left promiscuous mode
[   62.151365][   T13] veth0_vlan: left promiscuous mode
[   62.182476][ T6054] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   62.840574][   T13] team0 (unregistering): Port device team_slave_1 removed
[   63.086632][   T54] Bluetooth: hci2: command tx timeout
[   63.537590][   T54] Bluetooth: hci0: command tx timeout
[   63.550656][   T54] Bluetooth: hci1: command tx timeout
[   63.768498][   T13] team0 (unregistering): Port device team_slave_0 removed
[   64.433788][ T6018] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.436134][ T6018] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.438703][ T6018] bridge_slave_0: entered allmulticast mode
[   64.445713][ T6018] bridge_slave_0: entered promiscuous mode
[   64.451274][ T6018] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.453640][ T6018] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.456510][ T6018] bridge_slave_1: entered allmulticast mode
[   64.462089][ T6018] bridge_slave_1: entered promiscuous mode
[   64.583714][ T6018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.588776][ T6096] Zero length message leads to an empty skb
[   64.613110][ T6018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.747202][ T6018] team0: Port device team_slave_0 added
[   64.751340][ T6018] team0: Port device team_slave_1 added
[   64.807985][ T6018] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.826230][ T6018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.836054][ T6018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.850677][ T6018] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.853005][ T6018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.864114][ T6018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.964728][ T6018] hsr_slave_0: entered promiscuous mode
[   64.977512][ T6018] hsr_slave_1: entered promiscuous mode
[   64.983199][ T6018] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   64.985808][ T6018] Cannot create hsr debugfs directory
[   65.085387][ T6116] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[   65.088654][ T6116] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[   65.137228][   T54] Bluetooth: hci2: command tx timeout
[   65.814366][ T6050] Set syz1 is full, maxelem 65536 reached
[   65.870323][ T6018] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.878870][ T6018] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.895482][ T6018] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.944139][ T6018] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   66.014339][ T6162] lo: entered promiscuous mode
[   66.015935][ T6162] lo: entered allmulticast mode
[   66.021303][ T6162] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   66.062482][ T6018] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.075591][ T6018] 8021q: adding VLAN 0 to HW filter on device team0
[   66.089191][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.091577][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.112162][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.114512][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.282092][ T6018] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.321317][ T6018] veth0_vlan: entered promiscuous mode
[   66.328477][ T6018] veth1_vlan: entered promiscuous mode
[   66.347978][ T6018] veth0_macvtap: entered promiscuous mode
[   66.352071][ T6018] veth1_macvtap: entered promiscuous mode
[   66.367369][ T6018] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.383503][ T6018] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.392583][ T6018] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.398601][ T6018] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.401530][ T6018] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.404483][ T6018] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.536258][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.540955][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.577817][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.580737][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.590567][ T6191] bridge1: entered promiscuous mode
[   66.831355][ T6203] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   66.877659][ T6207] __nla_validate_parse: 2 callbacks suppressed
[   66.877669][ T6207] netlink: 24 bytes leftover after parsing attributes in process `syz.2.111'.
[   67.305529][ T6244] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   67.375420][ T6246] trusted_key: syz.2.122 sent an empty control message without MSG_MORE.
[   67.599670][ T6266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.129'.
[   67.608478][ T6266] netlink: 4 bytes leftover after parsing attributes in process `syz.2.129'.
[   67.617451][ T6266] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   67.620403][ T6266] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   67.623638][ T6266] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   67.627700][ T6266] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   67.692499][ T6271] netlink: 4 bytes leftover after parsing attributes in process `syz.2.132'.
[   68.095724][ T6285] netlink: 27 bytes leftover after parsing attributes in process `syz.2.139'.
[   68.128779][ T6290] netlink: 'syz.1.140': attribute type 1 has an invalid length.
[   68.132099][ T6290] netlink: 'syz.1.140': attribute type 2 has an invalid length.
[   68.135552][ T6290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.140'.
[   68.368463][ T5682] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.689039][ T5813] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   68.692910][ T5813] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   68.693960][ T6318] netlink: 28 bytes leftover after parsing attributes in process `syz.1.151'.
[   68.697805][ T5813] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   68.700271][ T6318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.151'.
[   68.703370][ T5813] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   68.711057][ T5813] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   68.816893][ T6322] netlink: 'syz.1.153': attribute type 3 has an invalid length.
[   68.917423][ T6315] chnl_net:caif_netlink_parms(): no params data found
[   69.077806][ T6315] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.080838][ T6315] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.083831][ T6315] bridge_slave_0: entered allmulticast mode
[   69.108893][ T6315] bridge_slave_0: entered promiscuous mode
[   69.113726][ T6315] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.128600][ T6315] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.131740][ T6315] bridge_slave_1: entered allmulticast mode
[   69.149433][ T6315] bridge_slave_1: entered promiscuous mode
[   69.223063][ T6315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.239951][ T6315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.318546][ T6315] team0: Port device team_slave_0 added
[   69.330195][ T6315] team0: Port device team_slave_1 added
[   69.392290][ T6315] batman_adv: batadv0: Adding interface: batadv_slave_0
[   69.395123][ T6315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.419153][ T6315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   69.425341][ T6315] batman_adv: batadv0: Adding interface: batadv_slave_1
[   69.442568][ T6315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.466515][ T6315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   69.540324][ T6315] hsr_slave_0: entered promiscuous mode
[   69.548653][ T6315] hsr_slave_1: entered promiscuous mode
[   69.554248][ T6315] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   69.559734][ T6315] Cannot create hsr debugfs directory
[   69.910303][ T6352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.162'.
[   70.014745][ T6362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.167'.
[   70.098578][ T6366] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[   70.352745][ T5682] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.440311][ T5682] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.526872][ T5682] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.704425][ T5682] bridge_slave_1: left allmulticast mode
[   70.710772][ T5682] bridge_slave_1: left promiscuous mode
[   70.713495][ T5682] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.718848][ T5682] bridge_slave_0: left allmulticast mode
[   70.720806][ T5682] bridge_slave_0: left promiscuous mode
[   70.722731][ T5682] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.737197][ T6400] netlink: 'syz.1.184': attribute type 1 has an invalid length.
[   70.739670][ T6400] nbd: error processing sock list
[   70.741609][ T6400] block nbd0: shutting down sockets
[   70.746447][   T54] Bluetooth: hci2: command tx timeout
[   70.899277][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   70.901528][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   70.948974][ T5682] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   70.957345][ T5682] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   70.962268][ T5682] bond0 (unregistering): Released all slaves
[   71.484111][ T5682] hsr_slave_0: left promiscuous mode
[   71.489432][ T5682] hsr_slave_1: left promiscuous mode
[   71.491547][ T5682] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   71.493884][ T5682] batman_adv: batadv0: Removing interface: batadv_slave_0
[   71.501716][ T5682] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   71.504383][ T5682] batman_adv: batadv0: Removing interface: batadv_slave_1
[   71.532841][ T5682] veth1_macvtap: left promiscuous mode
[   71.535070][ T5682] veth0_macvtap: left promiscuous mode
[   71.546080][ T5682] veth1_vlan: left promiscuous mode
[   71.549255][ T5682] veth0_vlan: left promiscuous mode
[   71.851330][ T5682] team0 (unregistering): Port device team_slave_1 removed
[   71.876302][ T5682] team0 (unregistering): Port device team_slave_0 removed
[   72.123578][ T6315] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   72.142159][ T6315] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   72.166229][ T6315] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   72.195905][ T6315] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   72.410323][ T6315] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.419957][ T6315] 8021q: adding VLAN 0 to HW filter on device team0
[   72.424865][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.427338][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.450663][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.453472][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.645883][ T6315] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.692346][ T6315] veth0_vlan: entered promiscuous mode
[   72.698130][ T6315] veth1_vlan: entered promiscuous mode
[   72.715784][ T6315] veth0_macvtap: entered promiscuous mode
[   72.731748][ T6315] veth1_macvtap: entered promiscuous mode
[   72.741964][ T6315] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.757554][ T6315] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.769480][ T6315] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.772392][ T6315] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.775222][ T6315] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.785964][ T6315] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.816869][   T54] Bluetooth: hci2: command tx timeout
[   72.919662][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.922287][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.942173][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.946939][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.022855][ T6509] __nla_validate_parse: 6 callbacks suppressed
[   73.022864][ T6509] netlink: 24 bytes leftover after parsing attributes in process `syz.2.221'.
[   73.179598][ T6516] warning: `syz.1.224' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   74.143123][ T6566] netlink: 'syz.1.248': attribute type 30 has an invalid length.
[   74.174601][ T6569] netlink: 40 bytes leftover after parsing attributes in process `syz.1.249'.
[   74.649360][ T6573] netlink: 'syz.1.249': attribute type 4 has an invalid length.
[   75.006813][ T5843] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.439559][ T5813] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   75.443396][ T5813] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   75.471312][ T5813] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   75.474595][ T5813] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   75.477943][ T5813] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   75.674239][ T6587] chnl_net:caif_netlink_parms(): no params data found
[   75.738947][ T6587] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.741592][ T6587] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.744591][ T6587] bridge_slave_0: entered allmulticast mode
[   75.751278][ T6587] bridge_slave_0: entered promiscuous mode
[   75.756808][ T6587] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.759741][ T6587] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.762852][ T6587] bridge_slave_1: entered allmulticast mode
[   75.768521][ T6587] bridge_slave_1: entered promiscuous mode
[   75.819554][ T6587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   75.824755][ T6587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   75.874581][ T6587] team0: Port device team_slave_0 added
[   75.880660][ T6587] team0: Port device team_slave_1 added
[   75.912679][ T6587] batman_adv: batadv0: Adding interface: batadv_slave_0
[   75.915905][ T6587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   75.928064][ T6587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   75.934387][ T6587] batman_adv: batadv0: Adding interface: batadv_slave_1
[   75.938209][ T6587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   75.949366][ T6587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   75.970530][ T6607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.257'.
[   76.021414][ T6587] hsr_slave_0: entered promiscuous mode
[   76.024606][ T6587] hsr_slave_1: entered promiscuous mode
[   76.031098][ T6587] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   76.034176][ T6587] Cannot create hsr debugfs directory
[   76.269323][ T6619] netlink: 'syz.1.263': attribute type 4 has an invalid length.
[   76.359984][ T6625] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[   76.411240][ T6629] sit0: entered promiscuous mode
[   76.416235][ T6629] netlink: 'syz.2.267': attribute type 1 has an invalid length.
[   76.431032][ T6629] netlink: 1 bytes leftover after parsing attributes in process `syz.2.267'.
[   76.700844][ T5843] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.780617][ T5843] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.905408][ T5843] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.014978][ T6661] Driver unsupported XDP return value 0 on prog  (id 46) dev N/A, expect packet loss!
[   77.081292][ T5843] bridge_slave_1: left allmulticast mode
[   77.083258][ T5843] bridge_slave_1: left promiscuous mode
[   77.085378][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.110383][ T5843] bridge_slave_0: left allmulticast mode
[   77.119104][ T5843] bridge_slave_0: left promiscuous mode
[   77.122702][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.248831][ T6680] netlink: 4 bytes leftover after parsing attributes in process `syz.1.288'.
[   77.257055][ T6678] netlink: 'syz.2.290': attribute type 10 has an invalid length.
[   77.385573][ T5843] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   77.391772][ T5843] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   77.395765][ T5843] bond0 (unregistering): Released all slaves
[   77.437478][ T6678] macvlan0: entered promiscuous mode
[   77.439316][ T6678] macvlan0: entered allmulticast mode
[   77.444851][ T6678] veth1_vlan: entered allmulticast mode
[   77.453119][ T6678] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[   77.536628][   T54] Bluetooth: hci2: command tx timeout
[   77.865270][ T5843] hsr_slave_0: left promiscuous mode
[   77.866237][ T6699] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   77.872317][ T5843] hsr_slave_1: left promiscuous mode
[   77.875248][ T5843] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   77.895737][ T5843] batman_adv: batadv0: Removing interface: batadv_slave_0
[   77.907436][ T5843] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   77.910659][ T5843] batman_adv: batadv0: Removing interface: batadv_slave_1
[   77.938992][ T5843] veth1_macvtap: left promiscuous mode
[   77.941577][ T5843] veth0_macvtap: left promiscuous mode
[   77.943659][ T5843] veth1_vlan: left promiscuous mode
[   77.945621][ T5843] veth0_vlan: left promiscuous mode
[   78.260028][ T5843] team0 (unregistering): Port device team_slave_1 removed
[   78.283551][ T5843] team0 (unregistering): Port device team_slave_0 removed
[   78.648723][ T6713] netlink: 32 bytes leftover after parsing attributes in process `syz.1.302'.
[   78.688887][ T6587] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   78.717521][ T6587] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   78.734168][ T6587] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   78.750442][ T6587] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   78.949577][ T6587] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.011062][ T6738] netlink: 20 bytes leftover after parsing attributes in process `syz.2.306'.
[   79.055877][ T6587] 8021q: adding VLAN 0 to HW filter on device team0
[   79.080372][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.083423][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.141540][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.143958][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.259490][ T6587] 8021q: adding VLAN 0 to HW filter on device batadv0
[   79.299649][ T6587] veth0_vlan: entered promiscuous mode
[   79.313720][ T6587] veth1_vlan: entered promiscuous mode
[   79.333304][ T6587] veth0_macvtap: entered promiscuous mode
[   79.340838][ T6587] veth1_macvtap: entered promiscuous mode
[   79.362494][ T6587] batman_adv: batadv0: Interface activated: batadv_slave_0
[   79.370367][ T6587] batman_adv: batadv0: Interface activated: batadv_slave_1
[   79.375525][ T6587] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   79.380945][ T6587] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   79.384197][ T6587] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   79.388708][ T6587] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   79.506288][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.511012][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.531457][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.535779][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.741231][ T6759] netlink: 36 bytes leftover after parsing attributes in process `syz.1.310'.
[   79.745106][ T6759] netlink: 36 bytes leftover after parsing attributes in process `syz.1.310'.
[   79.973359][ T6770] Cannot find set identified by id 2 to match
[   80.009138][ T6770] wg1: entered promiscuous mode
[   80.011304][ T6770] wg1: entered allmulticast mode
[   80.063197][ T6772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.316'.
[   80.450472][ T6797] lo speed is unknown, defaulting to 1000
[   80.453005][ T6797] lo speed is unknown, defaulting to 1000
[   80.460821][ T6797] lo speed is unknown, defaulting to 1000
[   80.465377][ T6797] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   80.475293][ T6797] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   80.494210][ T6797] lo speed is unknown, defaulting to 1000
[   80.507959][ T6797] lo speed is unknown, defaulting to 1000
[   80.510807][ T6797] lo speed is unknown, defaulting to 1000
[   80.595002][ T6806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.327'.
[   80.791012][    C0] Unknown status report in ack skb
[   81.005047][ T6832] netlink: 232 bytes leftover after parsing attributes in process `syz.1.339'.
[   81.076026][ T6834] openvswitch: netlink: IP tunnel dst address not specified
[   81.152583][   T51] cfg80211: failed to load regulatory.db
[   81.323856][ T5682] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.884613][ T6843] netlink: 'syz.1.343': attribute type 4 has an invalid length.
[   81.892540][ T6843] netlink: 'syz.1.343': attribute type 4 has an invalid length.
[   81.906090][    T9] lo speed is unknown, defaulting to 1000
[   81.911408][    T9] syz2: Port: 1 Link ACTIVE
[   81.993581][ T6850] xt_bpf: check failed: parse error
[   82.077862][ T6854] netlink: 'syz.1.348': attribute type 2 has an invalid length.
[   82.111037][ T5813] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   82.117944][ T5813] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   82.121537][ T5813] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   82.126043][ T5813] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   82.129630][ T5813] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   82.130434][ T6858] netlink: 'syz.1.349': attribute type 2 has an invalid length.
[   82.167951][ T6855] lo speed is unknown, defaulting to 1000
[   82.311429][ T6855] chnl_net:caif_netlink_parms(): no params data found
[   82.399902][ T6855] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.402780][ T6855] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.405617][ T6855] bridge_slave_0: entered allmulticast mode
[   82.409397][ T6855] bridge_slave_0: entered promiscuous mode
[   82.416096][ T6855] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.422690][ T6855] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.423673][ T6876] netlink: 'syz.1.355': attribute type 1 has an invalid length.
[   82.425584][ T6855] bridge_slave_1: entered allmulticast mode
[   82.431762][ T6855] bridge_slave_1: entered promiscuous mode
[   82.448448][ T6876] 8021q: adding VLAN 0 to HW filter on device bond1
[   82.468668][ T6876] 8021q: adding VLAN 0 to HW filter on device bond1
[   82.471503][ T6876] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address
[   82.476816][ T6876] bond1: (slave vxcan1): Error -95 calling set_mac_address
[   82.498875][ T6855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   82.503511][ T6855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   82.520380][ T6878] gretap1: entered promiscuous mode
[   82.525461][ T6878] bond1: (slave gretap1): making interface the new active one
[   82.529655][ T6878] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   82.544305][ T6855] team0: Port device team_slave_0 added
[   82.550380][ T6855] team0: Port device team_slave_1 added
[   82.566873][ T6876] macvlan2: entered promiscuous mode
[   82.569001][ T6876] macvlan2: entered allmulticast mode
[   82.571164][ T6876] bond1: entered promiscuous mode
[   82.573350][ T6876] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   82.578266][ T6876] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1
[   82.582806][ T6876] bond1: left promiscuous mode
[   82.622016][ T5682] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.633468][ T6855] batman_adv: batadv0: Adding interface: batadv_slave_0
[   82.635696][ T6855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   82.650382][ T6855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   82.661462][ T5682] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.665236][ T6876] syz.1.355 (6876) used greatest stack depth: 19800 bytes left
[   82.679485][ T6855] batman_adv: batadv0: Adding interface: batadv_slave_1
[   82.681884][ T6855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   82.706546][ T6855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   82.738444][ T6855] hsr_slave_0: entered promiscuous mode
[   82.741544][ T6855] hsr_slave_1: entered promiscuous mode
[   82.744261][ T6855] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   82.751632][ T6855] Cannot create hsr debugfs directory
[   82.830027][ T5682] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.089351][ T5682] bridge_slave_1: left allmulticast mode
[   83.091338][ T5682] bridge_slave_1: left promiscuous mode
[   83.093503][ T5682] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.110682][ T5682] bridge_slave_0: left allmulticast mode
[   83.112564][ T5682] bridge_slave_0: left promiscuous mode
[   83.115446][ T5682] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.383223][ T5682] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   83.392329][ T5682] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   83.399955][ T5682] bond0 (unregistering): Released all slaves
[   83.546009][ T6930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.379'.
[   83.795841][ T5682] hsr_slave_0: left promiscuous mode
[   83.817181][ T5682] hsr_slave_1: left promiscuous mode
[   83.819587][ T5682] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   83.821928][ T5682] batman_adv: batadv0: Removing interface: batadv_slave_0
[   83.834766][ T5682] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   83.838608][ T5682] batman_adv: batadv0: Removing interface: batadv_slave_1
[   83.862257][ T5682] veth1_macvtap: left promiscuous mode
[   83.864134][ T5682] veth0_macvtap: left promiscuous mode
[   83.865994][ T5682] veth1_vlan: left promiscuous mode
[   83.869359][ T5682] veth0_vlan: left promiscuous mode
[   84.118666][ T5682] team0 (unregistering): Port device team_slave_1 removed
[   84.138648][ T5682] team0 (unregistering): Port device team_slave_0 removed
[   84.178662][ T5813] Bluetooth: hci2: command tx timeout
[   84.513151][ T6855] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   84.529635][ T6855] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   84.570506][ T6855] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   84.594552][ T6855] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   84.725817][ T6990] bridge_slave_1: left allmulticast mode
[   84.734440][ T6990] bridge_slave_1: left promiscuous mode
[   84.738448][ T6990] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.747894][ T6990] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[   84.845858][ T6855] 8021q: adding VLAN 0 to HW filter on device bond0
[   84.861447][ T6855] 8021q: adding VLAN 0 to HW filter on device team0
[   84.875388][ T2190] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.878662][ T2190] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.918772][ T2190] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.921804][ T2190] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.177975][ T6855] 8021q: adding VLAN 0 to HW filter on device batadv0
[   85.221820][ T7031] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[   85.250199][ T6855] veth0_vlan: entered promiscuous mode
[   85.259216][ T6855] veth1_vlan: entered promiscuous mode
[   85.291898][ T6855] veth0_macvtap: entered promiscuous mode
[   85.318082][ T6855] veth1_macvtap: entered promiscuous mode
[   85.361734][ T6855] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.371646][ T6855] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.388964][ T6855] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.404134][ T6855] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.412421][ T6855] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.419883][ T6855] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.493740][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.500376][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.505115][ T7050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.423'.
[   85.522675][ T7050] lo speed is unknown, defaulting to 1000
[   85.533599][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.538165][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.825880][ T7066] netlink: 288 bytes leftover after parsing attributes in process `syz.2.431'.
[   86.008029][ T7085] delete_channel: no stack
[   86.018194][ T7086] netdevsim netdevsim2 netdevsim0: left allmulticast mode
[   86.025645][ T7086] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   86.079347][ T7090] netlink: 32 bytes leftover after parsing attributes in process `syz.2.443'.
[   86.271940][ T7107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.451'.
[   86.328825][ T7109] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[   86.333805][ T7109] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[   86.436242][ T7114] Bluetooth: MGMT ver 1.23
[   86.824510][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.737847][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   87.741182][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   87.744422][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   87.749110][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   87.752436][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   87.795327][ T7137] lo speed is unknown, defaulting to 1000
[   87.979569][ T7137] chnl_net:caif_netlink_parms(): no params data found
[   87.992883][ T7150] macvtap1: entered allmulticast mode
[   87.994786][ T7150] veth0_macvtap: entered allmulticast mode
[   88.058379][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.142499][ T7137] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.145003][ T7137] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.150372][ T7137] bridge_slave_0: entered allmulticast mode
[   88.158110][ T7137] bridge_slave_0: entered promiscuous mode
[   88.169658][ T7137] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.172572][ T7137] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.175566][ T7137] bridge_slave_1: entered allmulticast mode
[   88.199099][ T7137] bridge_slave_1: entered promiscuous mode
[   88.269720][ T7137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.276087][ T7137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.351423][ T7137] team0: Port device team_slave_0 added
[   88.356218][ T7137] team0: Port device team_slave_1 added
[   88.448195][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.459294][ T7168] netlink: 16 bytes leftover after parsing attributes in process `syz.2.475'.
[   88.460098][ T7137] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.469166][ T7137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.479690][ T7137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.490083][ T7137] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.493614][ T7137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.507321][ T7137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.513753][ T7169] GUP no longer grows the stack in syz.1.476 (7169): 200000006000-20000000a000 (200000005000)
[   88.525139][ T7169] CPU: 0 UID: 0 PID: 7169 Comm: syz.1.476 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[   88.525152][ T7169] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   88.525157][ T7169] Call Trace:
[   88.525161][ T7169]  <TASK>
[   88.525165][ T7169]  dump_stack_lvl+0x189/0x250
[   88.525183][ T7169]  ? __pfx_dump_stack_lvl+0x10/0x10
[   88.525196][ T7169]  ? __pfx__printk+0x10/0x10
[   88.525205][ T7169]  ? find_vma+0xe7/0x160
[   88.525218][ T7169]  __get_user_pages+0x2a60/0x30b0
[   88.525245][ T7169]  ? __pfx___get_user_pages+0x10/0x10
[   88.525255][ T7169]  ? __gup_longterm_locked+0xbf7/0x15b0
[   88.525266][ T7169]  ? down_read_killable+0x1d1/0x350
[   88.525274][ T7169]  ? try_get_folio+0x633/0x660
[   88.525284][ T7169]  __gup_longterm_locked+0xd66/0x15b0
[   88.525297][ T7169]  ? try_grab_folio_fast+0x1be/0x4f0
[   88.525312][ T7169]  ? gup_fast_fallback+0x1afc/0x2260
[   88.525324][ T7169]  gup_fast_fallback+0x1cd4/0x2260
[   88.525348][ T7169]  ? __pfx_gup_fast_fallback+0x10/0x10
[   88.525357][ T7169]  ? trace_contention_end+0x39/0x120
[   88.525366][ T7169]  ? __mutex_lock+0x330/0xe80
[   88.525378][ T7169]  ? futex_unqueue+0x22/0x240
[   88.525388][ T7169]  ? futex_unqueue+0x22/0x240
[   88.525395][ T7169]  ? futex_unqueue+0x22/0x240
[   88.525402][ T7169]  ? is_valid_gup_args+0x11f/0x200
[   88.525414][ T7169]  ? get_user_pages_fast+0x4d/0xb0
[   88.525427][ T7169]  __iov_iter_get_pages_alloc+0x39a/0xb40
[   88.525437][ T7169]  ? __pfx_pipe_clear_nowait+0x10/0x10
[   88.525444][ T7169]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   88.525471][ T7169]  ? wait_for_space+0x24d/0x2d0
[   88.525483][ T7169]  iov_iter_get_pages2+0x5e/0xa0
[   88.525496][ T7169]  __se_sys_vmsplice+0x548/0x10d0
[   88.525513][ T7169]  ? __pfx___se_sys_vmsplice+0x10/0x10
[   88.525522][ T7169]  ? __pfx_futex_wait+0x10/0x10
[   88.525537][ T7169]  ? __lock_acquire+0xab9/0xd20
[   88.525560][ T7169]  ? do_pipe2+0xf7/0x170
[   88.525570][ T7169]  ? rcu_is_watching+0x15/0xb0
[   88.525585][ T7169]  ? do_syscall_64+0xbe/0x3b0
[   88.525595][ T7169]  do_syscall_64+0xfa/0x3b0
[   88.525601][ T7169]  ? lockdep_hardirqs_on+0x9c/0x150
[   88.525612][ T7169]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   88.525619][ T7169]  ? exc_page_fault+0x9f/0xf0
[   88.525630][ T7169]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   88.525637][ T7169] RIP: 0033:0x7fb3d798e929
[   88.525645][ T7169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   88.525651][ T7169] RSP: 002b:00007fb3d8850038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[   88.525660][ T7169] RAX: ffffffffffffffda RBX: 00007fb3d7bb5fa0 RCX: 00007fb3d798e929
[   88.525665][ T7169] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000b
[   88.525670][ T7169] RBP: 00007fb3d7a10b39 R08: 0000000000000000 R09: 0000000000000000
[   88.525674][ T7169] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[   88.525678][ T7169] R13: 0000000000000000 R14: 00007fb3d7bb5fa0 R15: 00007ffcd67901a8
[   88.525689][ T7169]  </TASK>
[   88.533231][ T7171] xt_l2tp: v2 tid > 0xffff: 4294967295
[   88.603975][ T7172] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[   88.607628][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.774583][ T7137] hsr_slave_0: entered promiscuous mode
[   88.792807][ T7137] hsr_slave_1: entered promiscuous mode
[   88.795828][ T7176] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.479'.
[   88.795880][ T7137] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   88.806281][ T7137] Cannot create hsr debugfs directory
[   88.878935][ T7178] netlink: 'syz.2.480': attribute type 1 has an invalid length.
[   88.998432][ T7180] bond2: (slave gretap1): making interface the new active one
[   89.002555][ T7180] bond2: (slave gretap1): Enslaving as an active interface with an up link
[   89.013116][   T12] bridge_slave_1: left allmulticast mode
[   89.015536][   T12] bridge_slave_1: left promiscuous mode
[   89.031169][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.052353][   T12] bridge_slave_0: left allmulticast mode
[   89.063656][   T12] bridge_slave_0: left promiscuous mode
[   89.066117][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.188960][ T7186] netlink: 270 bytes leftover after parsing attributes in process `syz.1.481'.
[   89.477479][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   89.481688][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   89.485957][   T12] bond0 (unregistering): Released all slaves
[   89.715555][ T7216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.493'.
[   89.776952][   T54] Bluetooth: hci2: command tx timeout
[   89.903991][   T12] hsr_slave_0: left promiscuous mode
[   89.914392][   T12] hsr_slave_1: left promiscuous mode
[   89.922183][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   89.924655][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   89.940728][ T7227] netlink: 'syz.1.498': attribute type 1 has an invalid length.
[   89.943405][ T7227] netlink: 224 bytes leftover after parsing attributes in process `syz.1.498'.
[   89.950197][ T7227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.498'.
[   89.954030][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   89.958829][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   89.981048][   T12] veth1_macvtap: left promiscuous mode
[   89.987714][   T12] veth0_macvtap: left promiscuous mode
[   89.989666][   T12] veth1_vlan: left promiscuous mode
[   89.991681][   T12] veth0_vlan: left promiscuous mode
[   90.230701][ T7247] openvswitch: netlink: Missing key (keys=40, expected=200000)
[   90.480414][   T12] team0 (unregistering): Port device team_slave_1 removed
[   90.510285][   T12] team0 (unregistering): Port device team_slave_0 removed
[   91.271094][ T7137] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   91.279480][ T7137] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   91.294096][ T7137] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   91.304874][ T7137] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   91.414201][ T7286] tipc: Started in network mode
[   91.415990][ T7286] tipc: Node identity 4, cluster identity 4711
[   91.424522][ T7286] tipc: Node number set to 4
[   91.511429][ T7137] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.553144][ T7137] 8021q: adding VLAN 0 to HW filter on device team0
[   91.579543][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.582559][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.598337][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.601283][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.705350][ T7312] bridge_slave_0: left allmulticast mode
[   91.708208][ T7312] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.714003][ T7312] bond0: (slave bond_slave_0): Releasing backup interface
[   91.721220][ T7312] bond0: (slave bond_slave_1): Releasing backup interface
[   91.734398][ T7312] team0: Port device team_slave_0 removed
[   91.749798][ T7312] team0: Port device team_slave_1 removed
[   91.752233][ T7312] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   91.762504][ T7312] batman_adv: batadv0: Removing interface: batadv_slave_0
[   91.770723][ T7312] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   91.773414][ T7312] batman_adv: batadv0: Removing interface: batadv_slave_1
[   91.779894][ T7317] __nla_validate_parse: 1 callbacks suppressed
[   91.779908][ T7317] netlink: 124 bytes leftover after parsing attributes in process `syz.1.527'.
[   91.787055][ T7312] bond0: (slave macvlan0): Releasing backup interface
[   91.790476][ T7312] veth1_vlan: left allmulticast mode
[   91.801134][ T7312] bond2: (slave gretap1): Releasing active interface
[   91.858199][   T54] Bluetooth: hci2: command tx timeout
[   91.930884][ T7137] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.973392][ T7137] veth0_vlan: entered promiscuous mode
[   91.983775][ T7137] veth1_vlan: entered promiscuous mode
[   92.021681][ T7137] veth0_macvtap: entered promiscuous mode
[   92.025778][ T7137] veth1_macvtap: entered promiscuous mode
[   92.058760][ T7137] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.067488][ T7137] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.083084][ T7137] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.089600][ T7137] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.096811][ T7137] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.099883][ T7137] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.215095][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.228090][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.257369][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.261211][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.709677][ T7346] bridge_slave_0: left allmulticast mode
[   92.711518][ T7346] bridge_slave_0: left promiscuous mode
[   92.713432][ T7346] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.720303][ T7346] bridge_slave_1: left allmulticast mode
[   92.728320][ T7346] bridge_slave_1: left promiscuous mode
[   92.730613][ T7346] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.751013][ T7346] bond0: (slave bond_slave_0): Releasing backup interface
[   92.753822][ T7346] bond_slave_0: left promiscuous mode
[   92.760804][ T7346] bond0: (slave bond_slave_1): Releasing backup interface
[   92.769705][ T7346] bond_slave_1: left promiscuous mode
[   92.789408][ T7346] team0: Port device team_slave_0 removed
[   92.795290][ T7346] team0: Port device team_slave_1 removed
[   92.798492][ T7346] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   92.801132][ T7346] batman_adv: batadv0: Removing interface: batadv_slave_0
[   92.806052][ T7346] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   92.810662][ T7346] batman_adv: batadv0: Removing interface: batadv_slave_1
[   92.834807][ T7346] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[   93.855838][ T5843] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.880280][ T7397] netlink: 48 bytes leftover after parsing attributes in process `syz.2.563'.
[   93.884083][ T7397] netlink: 245 bytes leftover after parsing attributes in process `syz.2.563'.
[   94.803856][ T7416] netlink: 'syz.2.567': attribute type 13 has an invalid length.
[   94.816518][ T7416] netlink: 'syz.2.567': attribute type 17 has an invalid length.
[   94.841550][ T5813] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   94.845135][ T5813] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   94.852174][ T5813] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   94.855042][ T7416] sit0: left promiscuous mode
[   94.864715][ T5813] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   94.869980][ T5813] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   94.907786][ T7416] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   94.938540][ T7421] lo speed is unknown, defaulting to 1000
[   94.994077][ T7407] lo speed is unknown, defaulting to 1000
[   95.032972][ T7416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   95.105974][ T7421] chnl_net:caif_netlink_parms(): no params data found
[   95.139000][ T7407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   95.194614][ T7421] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.197436][ T7407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   95.197579][ T7421] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.204342][ T7421] bridge_slave_0: entered allmulticast mode
[   95.208809][ T7421] bridge_slave_0: entered promiscuous mode
[   95.212507][ T7421] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.215522][ T7421] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.221124][ T7421] bridge_slave_1: entered allmulticast mode
[   95.224088][ T7421] bridge_slave_1: entered promiscuous mode
[   95.249809][ T7421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   95.255380][ T7421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   95.283897][ T7421] team0: Port device team_slave_0 added
[   95.288730][ T7421] team0: Port device team_slave_1 added
[   95.310749][ T7421] batman_adv: batadv0: Adding interface: batadv_slave_0
[   95.313826][ T7421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.329227][ T7421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   95.335459][ T7421] batman_adv: batadv0: Adding interface: batadv_slave_1
[   95.339023][ T7421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.350379][ T7421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   95.358379][ T7446] netlink: 44 bytes leftover after parsing attributes in process `syz.1.579'.
[   95.398531][ T7421] hsr_slave_0: entered promiscuous mode
[   95.402594][ T7421] hsr_slave_1: entered promiscuous mode
[   95.408517][ T7421] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   95.411819][ T7421] Cannot create hsr debugfs directory
[   95.549469][ T5843] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.584400][ T7457] netlink: 8 bytes leftover after parsing attributes in process `syz.1.583'.
[   95.609025][ T5843] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.668059][ T5843] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.746280][ T7416] syz.2.567 (7416) used greatest stack depth: 19104 bytes left
[   95.770395][ T5843] bridge_slave_1: left allmulticast mode
[   95.772337][ T5843] bridge_slave_1: left promiscuous mode
[   95.774297][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.795469][ T5843] bridge_slave_0: left allmulticast mode
[   95.803292][ T5843] bridge_slave_0: left promiscuous mode
[   95.805556][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.082139][ T2329] IPVS: starting estimator thread 0...
[   96.136199][ T5843] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   96.143097][ T5843] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   96.148695][ T5843] bond0 (unregistering): Released all slaves
[   96.197152][ T7482] IPVS: using max 79 ests per chain, 189600 per kthread
[   96.202302][ T7480] lo speed is unknown, defaulting to 1000
[   96.540167][ T5843] hsr_slave_0: left promiscuous mode
[   96.547719][ T5843] hsr_slave_1: left promiscuous mode
[   96.556874][ T5843] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   96.559301][ T5843] batman_adv: batadv0: Removing interface: batadv_slave_0
[   96.572040][ T5843] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   96.575002][ T5843] batman_adv: batadv0: Removing interface: batadv_slave_1
[   96.589274][ T5843] veth1_macvtap: left promiscuous mode
[   96.591248][ T5843] veth0_macvtap: left promiscuous mode
[   96.593442][ T5843] veth1_vlan: left promiscuous mode
[   96.595253][ T5843] veth0_vlan: left promiscuous mode
[   96.898836][   T54] Bluetooth: hci2: command tx timeout
[   96.905038][ T5843] team0 (unregistering): Port device team_slave_1 removed
[   96.939707][ T5843] team0 (unregistering): Port device team_slave_0 removed
[   97.166130][ T7510] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[   97.169503][ T7510] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[   97.172461][ T7510] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   97.259403][ T7421] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   97.268809][ T7421] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   97.278701][ T7421] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   97.288199][ T7421] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   97.351274][ T7421] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.366054][ T7421] 8021q: adding VLAN 0 to HW filter on device team0
[   97.381534][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.383836][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.397763][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.400521][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.669678][ T7421] 8021q: adding VLAN 0 to HW filter on device batadv0
[   97.696110][ T7421] veth0_vlan: entered promiscuous mode
[   97.703277][ T7547] netlink: 56 bytes leftover after parsing attributes in process `syz.2.610'.
[   97.709461][ T7547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.610'.
[   97.718155][ T7421] veth1_vlan: entered promiscuous mode
[   97.740784][ T7421] veth0_macvtap: entered promiscuous mode
[   97.749236][ T7421] veth1_macvtap: entered promiscuous mode
[   97.787711][ T7421] batman_adv: batadv0: Interface activated: batadv_slave_0
[   97.795066][ T7421] batman_adv: batadv0: Interface activated: batadv_slave_1
[   97.805827][ T7421] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.809441][ T7421] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.813164][ T7421] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.818986][ T7421] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.885507][ T2190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.892035][ T2190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.909677][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.912752][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.944625][ T7554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.612'.
[   98.218179][ T7561] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   98.223053][ T7561] netlink: 'syz.2.614': attribute type 4 has an invalid length.
[   99.119696][ T7572] bond0: option lp_interval: invalid value (18446744073709551604)
[   99.122967][ T7572] bond0: option lp_interval: allowed values 1 - 2147483647
[   99.229543][ T7578] netlink: 24 bytes leftover after parsing attributes in process `syz.2.621'.
[   99.233425][ T7578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.621'.
[   99.238143][ T7578] netlink: 'syz.2.621': attribute type 5 has an invalid length.
[   99.644951][ T5843] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.666474][ T7599] tipc: Can't bind to reserved service type 0
[   99.689951][ T7599] bond0: entered promiscuous mode
[   99.692065][ T7599] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   99.695447][ T7599] bond0: left promiscuous mode
[  100.492880][ T7604] sctp: [Deprecated]: syz.2.630 (pid 7604) Use of int in max_burst socket option.
[  100.492880][ T7604] Use struct sctp_assoc_value instead
[  100.507487][ T7605] syzkaller1: entered promiscuous mode
[  100.509386][ T7605] syzkaller1: entered allmulticast mode
[  100.637988][ T5813] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  100.641907][ T5813] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  100.653627][ T5813] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  100.663459][ T5813] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  100.670573][ T5813] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  100.714677][ T7610] lo speed is unknown, defaulting to 1000
[  100.908290][ T7610] chnl_net:caif_netlink_parms(): no params data found
[  101.024809][ T7610] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.027459][ T7610] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.029824][ T7610] bridge_slave_0: entered allmulticast mode
[  101.032608][ T7610] bridge_slave_0: entered promiscuous mode
[  101.036857][ T7641] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  101.040470][ T7610] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.042795][ T7610] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.045140][ T7610] bridge_slave_1: entered allmulticast mode
[  101.049856][ T7610] bridge_slave_1: entered promiscuous mode
[  101.094907][ T7643] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  101.100626][ T7643] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  101.131045][ T7610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  101.141432][ T7610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  101.212719][ T7610] team0: Port device team_slave_0 added
[  101.232291][ T7610] team0: Port device team_slave_1 added
[  101.275555][ T5843] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.365757][ T7610] batman_adv: batadv0: Adding interface: batadv_slave_0
[  101.377799][ T7610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  101.395437][ T7610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  101.411381][ T5843] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.425000][ T7610] batman_adv: batadv0: Adding interface: batadv_slave_1
[  101.429719][ T7610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  101.442046][ T7610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  101.471962][ T5843] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.555967][ T7610] hsr_slave_0: entered promiscuous mode
[  101.566804][ T7610] hsr_slave_1: entered promiscuous mode
[  101.571406][ T7610] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  101.574492][ T7610] Cannot create hsr debugfs directory
[  101.602396][ T7665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.654'.
[  101.605937][ T7665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.654'.
[  101.613567][ T7665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.654'.
[  101.618805][ T7665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.654'.
[  101.622943][ T7665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.654'.
[  101.806755][ T5843] bridge_slave_1: left allmulticast mode
[  101.808726][ T5843] bridge_slave_1: left promiscuous mode
[  101.811331][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.822415][ T5843] bridge_slave_0: left allmulticast mode
[  101.824716][ T5843] bridge_slave_0: left promiscuous mode
[  101.827879][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.945879][ T7668] netlink: 'syz.2.655': attribute type 1 has an invalid length.
[  102.166022][ T5843] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  102.171062][ T5843] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  102.175258][ T5843] bond0 (unregistering): Released all slaves
[  102.285815][ T7669] bond3: (slave veth5): Enslaving as an active interface with a down link
[  102.313727][ T7670] bond3: (slave veth7): Enslaving as an active interface with a down link
[  102.625987][ T5843] hsr_slave_0: left promiscuous mode
[  102.632461][ T5843] hsr_slave_1: left promiscuous mode
[  102.634989][ T5843] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  102.637964][ T5843] batman_adv: batadv0: Removing interface: batadv_slave_0
[  102.641801][ T5843] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  102.644850][ T5843] batman_adv: batadv0: Removing interface: batadv_slave_1
[  102.658804][ T5843] veth1_macvtap: left promiscuous mode
[  102.662375][ T5843] veth0_macvtap: left promiscuous mode
[  102.666790][ T5843] veth1_vlan: left promiscuous mode
[  102.669064][ T5843] veth0_vlan: left promiscuous mode
[  102.737496][ T5813] Bluetooth: hci2: command tx timeout
[  102.844066][ T7695] netlink: 'syz.2.663': attribute type 4 has an invalid length.
[  103.074045][ T5843] team0 (unregistering): Port device team_slave_1 removed
[  103.102000][ T5843] team0 (unregistering): Port device team_slave_0 removed
[  103.893704][ T7695] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  103.896944][ T7695] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  103.899745][ T7695] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  103.902606][ T7695] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  103.940679][ T7695] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  103.943930][ T7695] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  103.947010][ T7695] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  103.949855][ T7695] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  104.198083][ T7610] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  104.212817][ T7610] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  104.219510][ T7610] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  104.231140][ T7610] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  104.330636][ T7741] netlink: 'syz.2.677': attribute type 1 has an invalid length.
[  104.360880][ T7741] 8021q: adding VLAN 0 to HW filter on device bond4
[  104.369405][ T7610] 8021q: adding VLAN 0 to HW filter on device bond0
[  104.386046][ T7610] 8021q: adding VLAN 0 to HW filter on device team0
[  104.392804][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.395147][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  104.415014][ T7741] bond4: (slave veth9): Enslaving as an active interface with a down link
[  104.427890][ T7741] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  104.433331][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.435702][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  104.459852][ T7741] vlan3: entered allmulticast mode
[  104.461662][ T7741] veth1: entered allmulticast mode
[  104.463680][ T7741] bond4: (slave vlan3): Opening slave failed
[  104.683802][ T7610] 8021q: adding VLAN 0 to HW filter on device batadv0
[  104.739373][ T7766] pim6reg: entered allmulticast mode
[  104.743320][ T7766] pim6reg: left allmulticast mode
[  104.779971][ T7610] veth0_vlan: entered promiscuous mode
[  104.788936][ T7610] veth1_vlan: entered promiscuous mode
[  104.818299][ T5813] Bluetooth: hci2: command tx timeout
[  104.832521][ T7610] veth0_macvtap: entered promiscuous mode
[  104.837360][ T7610] veth1_macvtap: entered promiscuous mode
[  104.860657][ T7610] batman_adv: batadv0: Interface activated: batadv_slave_0
[  104.868709][ T7610] batman_adv: batadv0: Interface activated: batadv_slave_1
[  104.875316][ T7610] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  104.879660][ T7610] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  104.882732][ T7610] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  104.886087][ T7610] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  104.931360][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  104.939728][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  104.965110][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  104.969004][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  105.541710][ T7804] __nla_validate_parse: 77 callbacks suppressed
[  105.541729][ T7804] netlink: 4 bytes leftover after parsing attributes in process `syz.2.703'.
[  105.645234][ T7807] netlink: 'syz.2.704': attribute type 1 has an invalid length.
[  105.648678][ T7807] netlink: 228 bytes leftover after parsing attributes in process `syz.2.704'.
[  105.700075][ T7809] netlink: 4 bytes leftover after parsing attributes in process `syz.2.705'.
[  105.925770][ T7823] netlink: 36 bytes leftover after parsing attributes in process `syz.2.711'.
[  106.025828][ T7831] netlink: 8 bytes leftover after parsing attributes in process `syz.2.715'.
[  106.037705][ T7831] netlink: 20 bytes leftover after parsing attributes in process `syz.2.715'.
[  106.430309][ T7854] netlink: 16 bytes leftover after parsing attributes in process `syz.2.727'.
[  106.582648][ T6324] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.578763][ T7869] netlink: 'syz.1.732': attribute type 1 has an invalid length.
[  107.582040][ T7869] netlink: 'syz.1.732': attribute type 1 has an invalid length.
[  107.810969][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  107.815829][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  107.819829][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  107.822976][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  107.825968][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  107.849420][ T6324] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.885014][ T7887] lo speed is unknown, defaulting to 1000
[  108.075537][ T6324] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.129391][ T7887] chnl_net:caif_netlink_parms(): no params data found
[  108.214313][ T6324] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.301108][ T7923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.755'.
[  108.329950][ T7887] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.333499][ T7887] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.343836][ T7887] bridge_slave_0: entered allmulticast mode
[  108.349854][ T7887] bridge_slave_0: entered promiscuous mode
[  108.380762][ T7887] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.383283][ T7887] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.385819][ T7887] bridge_slave_1: entered allmulticast mode
[  108.390532][ T7887] bridge_slave_1: entered promiscuous mode
[  108.474174][ T7887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  108.478402][ T6324] bridge_slave_1: left allmulticast mode
[  108.480523][ T6324] bridge_slave_1: left promiscuous mode
[  108.482827][ T6324] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.491958][ T6324] bridge_slave_0: left allmulticast mode
[  108.493826][ T6324] bridge_slave_0: left promiscuous mode
[  108.495880][ T6324] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.568706][ T7932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.758'.
[  108.835680][ T6324] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  108.840845][ T6324] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  108.844524][ T6324] bond0 (unregistering): Released all slaves
[  108.852341][ T7887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  109.037626][ T7887] team0: Port device team_slave_0 added
[  109.041830][ T7887] team0: Port device team_slave_1 added
[  109.083432][ T7949] netlink: 24 bytes leftover after parsing attributes in process `syz.2.764'.
[  109.090543][ T7887] batman_adv: batadv0: Adding interface: batadv_slave_0
[  109.093452][ T7887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  109.104588][ T7887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  109.151419][ T7887] batman_adv: batadv0: Adding interface: batadv_slave_1
[  109.157559][ T7887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  109.175809][ T7887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  109.273189][ T7887] hsr_slave_0: entered promiscuous mode
[  109.276086][ T7887] hsr_slave_1: entered promiscuous mode
[  109.289075][ T7887] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  109.291761][ T7887] Cannot create hsr debugfs directory
[  109.325725][ T6324] hsr_slave_0: left promiscuous mode
[  109.332218][ T6324] hsr_slave_1: left promiscuous mode
[  109.337674][ T6324] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  109.347275][ T6324] batman_adv: batadv0: Removing interface: batadv_slave_0
[  109.358511][ T6324] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  109.361478][ T6324] batman_adv: batadv0: Removing interface: batadv_slave_1
[  109.394577][ T6324] veth1_macvtap: left promiscuous mode
[  109.398029][ T6324] veth0_macvtap: left promiscuous mode
[  109.400038][ T6324] veth1_vlan: left promiscuous mode
[  109.401972][ T6324] veth0_vlan: left promiscuous mode
[  109.711183][ T6324] team0 (unregistering): Port device team_slave_1 removed
[  109.733422][ T6324] team0 (unregistering): Port device team_slave_0 removed
[  109.858133][ T5813] Bluetooth: hci2: command tx timeout
[  110.233748][ T7988] netlink: 'syz.2.779': attribute type 30 has an invalid length.
[  110.720866][ T2329] IPVS: starting estimator thread 0...
[  110.757972][ T8020] tap0: tun_chr_ioctl cmd 1074025677
[  110.760284][ T8020] tap0: linktype set to 0
[  110.808502][ T8024] IPVS: using max 77 ests per chain, 184800 per kthread
[  110.859031][ T7887] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  110.873742][ T8028] lo speed is unknown, defaulting to 1000
[  110.876848][ T7887] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  110.885523][ T7887] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  110.900441][ T7887] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  111.130022][ T7887] 8021q: adding VLAN 0 to HW filter on device bond0
[  111.163691][ T7887] 8021q: adding VLAN 0 to HW filter on device team0
[  111.189645][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  111.192622][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  111.211943][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  111.214941][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  111.491784][ T7887] 8021q: adding VLAN 0 to HW filter on device batadv0
[  111.519428][ T7887] veth0_vlan: entered promiscuous mode
[  111.529534][ T7887] veth1_vlan: entered promiscuous mode
[  111.545258][ T7887] veth0_macvtap: entered promiscuous mode
[  111.552064][ T7887] veth1_macvtap: entered promiscuous mode
[  111.581733][ T8063] __nla_validate_parse: 2 callbacks suppressed
[  111.581752][ T8063] netlink: 8 bytes leftover after parsing attributes in process `syz.2.798'.
[  111.612891][ T7887] batman_adv: batadv0: Interface activated: batadv_slave_0
[  111.614226][ T8066] netlink: 'syz.1.799': attribute type 10 has an invalid length.
[  111.621215][ T7887] batman_adv: batadv0: Interface activated: batadv_slave_1
[  111.629710][ T7887] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  111.632866][ T7887] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  111.636275][ T7887] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  111.640669][ T7887] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  111.675810][ T8066] team0: Device ipvlan1 failed to register rx_handler
[  111.758862][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  111.761703][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  111.789795][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  111.792724][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  111.936210][ T8074] netlink: 24 bytes leftover after parsing attributes in process `syz.1.803'.
[  112.095973][ T8084] netlink: 40 bytes leftover after parsing attributes in process `syz.1.808'.
[  112.100047][ T8084] netlink: 260 bytes leftover after parsing attributes in process `syz.1.808'.
[  112.535489][ T8118] lo speed is unknown, defaulting to 1000
[  113.305470][ T8126] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  113.460770][ T8135] netlink: 'syz.1.824': attribute type 10 has an invalid length.
[  113.471587][ T8135] 8021q: adding VLAN 0 to HW filter on device batadv0
[  113.474696][ T8135] batadv0: entered promiscuous mode
[  113.564167][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.256627][   T54] Bluetooth: hci0: command 0x0401 tx timeout
[  114.258750][ T5813] Bluetooth: hci0: Opcode 0x0401 failed: -110
[  114.679659][ T8147] xt_hashlimit: size too large, truncated to 1048576
[  114.902876][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  114.906830][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  114.910689][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  114.914860][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  114.918651][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  114.993523][ T8154] lo speed is unknown, defaulting to 1000
[  115.171486][ T8154] chnl_net:caif_netlink_parms(): no params data found
[  115.235669][ T8175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.839'.
[  115.323596][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.341903][ T8154] bridge0: port 1(bridge_slave_0) entered blocking state
[  115.352594][ T8154] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.355627][ T8154] bridge_slave_0: entered allmulticast mode
[  115.358699][ T8154] bridge_slave_0: entered promiscuous mode
[  115.368142][ T8154] bridge0: port 2(bridge_slave_1) entered blocking state
[  115.370973][ T8154] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.373370][ T8154] bridge_slave_1: entered allmulticast mode
[  115.376028][ T8154] bridge_slave_1: entered promiscuous mode
[  115.458275][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.467094][ T8154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  115.478480][ T8154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  115.545209][ T8193] netlink: 12 bytes leftover after parsing attributes in process `syz.2.846'.
[  115.561711][ T8154] team0: Port device team_slave_0 added
[  115.565544][ T8154] team0: Port device team_slave_1 added
[  115.603367][ T8195] xt_hashlimit: size too large, truncated to 1048576
[  115.639184][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.656222][ T8187] lo speed is unknown, defaulting to 1000
[  115.657213][ T8154] batman_adv: batadv0: Adding interface: batadv_slave_0
[  115.661027][ T8154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  115.693058][ T8154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  115.706221][ T8154] batman_adv: batadv0: Adding interface: batadv_slave_1
[  115.713571][ T8154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  115.733416][ T8154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  115.896939][ T8154] hsr_slave_0: entered promiscuous mode
[  115.899778][ T8154] hsr_slave_1: entered promiscuous mode
[  115.901902][ T8154] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  115.906111][ T8154] Cannot create hsr debugfs directory
[  116.764804][   T13] bridge_slave_1: left allmulticast mode
[  116.772594][   T13] bridge_slave_1: left promiscuous mode
[  116.774485][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.787116][   T13] bridge_slave_0: left allmulticast mode
[  116.789073][   T13] bridge_slave_0: left promiscuous mode
[  116.791173][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.979441][   T54] Bluetooth: hci2: command tx timeout
[  117.225872][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  117.239893][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  117.249524][   T13] bond0 (unregistering): Released all slaves
[  117.674772][ T8257] netlink: 4 bytes leftover after parsing attributes in process `syz.1.872'.
[  117.708541][ T8257] netlink: 4 bytes leftover after parsing attributes in process `syz.1.872'.
[  117.721604][   T13] hsr_slave_0: left promiscuous mode
[  117.723885][   T13] hsr_slave_1: left promiscuous mode
[  117.726123][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  117.733723][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  117.740037][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  117.742990][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  117.754950][   T13] veth1_macvtap: left promiscuous mode
[  117.757082][   T13] veth0_macvtap: left promiscuous mode
[  117.759019][   T13] veth1_vlan: left promiscuous mode
[  117.761256][   T13] veth0_vlan: left promiscuous mode
[  118.117545][   T13] team0 (unregistering): Port device team_slave_1 removed
[  118.147065][   T13] team0 (unregistering): Port device team_slave_0 removed
[  118.872792][ T8154] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  118.891363][ T8154] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  118.903126][ T8154] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  118.914596][ T8154] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  119.061450][   T54] Bluetooth: hci2: command tx timeout
[  119.062219][ T8154] 8021q: adding VLAN 0 to HW filter on device bond0
[  119.110484][ T8154] 8021q: adding VLAN 0 to HW filter on device team0
[  119.122610][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[  119.125624][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[  119.163060][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[  119.166007][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[  119.204533][ T8319] netlink: 5 bytes leftover after parsing attributes in process `syz.1.896'.
[  119.313279][ T8327] syzkaller0: entered promiscuous mode
[  119.315395][ T8327] syzkaller0: entered allmulticast mode
[  119.544471][ T8339] netlink: 248 bytes leftover after parsing attributes in process `syz.1.903'.
[  120.145025][ T8154] 8021q: adding VLAN 0 to HW filter on device batadv0
[  120.217811][ T8154] veth0_vlan: entered promiscuous mode
[  120.224980][ T8154] veth1_vlan: entered promiscuous mode
[  120.294935][ T8154] veth0_macvtap: entered promiscuous mode
[  120.310697][ T8154] veth1_macvtap: entered promiscuous mode
[  120.359769][ T8154] batman_adv: batadv0: Interface activated: batadv_slave_0
[  120.373010][ T8154] batman_adv: batadv0: Interface activated: batadv_slave_1
[  120.399750][ T8154] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  120.403417][ T8154] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  120.416848][ T8154] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  120.426018][ T8154] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  120.453270][ T8358] IPVS: Error joining to the multicast group
[  120.569871][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  120.573136][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  120.678032][ T2190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  120.681357][ T2190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  121.415696][ T5843] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.936763][ T5843] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.508938][ T5843] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.720615][ T5843] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.816035][ T5813] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  122.822695][ T5813] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  122.827653][ T5813] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  122.831556][ T5813] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  122.834707][ T5813] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  122.861138][ T8418] lo speed is unknown, defaulting to 1000
[  122.928529][ T8428] netlink: 17 bytes leftover after parsing attributes in process `syz.1.931'.
[  122.983082][ T8422] lo speed is unknown, defaulting to 1000
[  123.000698][ T5843] bridge_slave_1: left allmulticast mode
[  123.006147][ T5843] bridge_slave_1: left promiscuous mode
[  123.012130][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[  123.019759][ T5843] bridge_slave_0: left allmulticast mode
[  123.021626][ T5843] bridge_slave_0: left promiscuous mode
[  123.023510][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[  123.400206][ T5843] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  123.409635][ T5843] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  123.415256][ T5843] bond0 (unregistering): Released all slaves
[  123.461735][ T8450] macvlan1: entered promiscuous mode
[  123.465362][ T8450] ipvlan0: entered promiscuous mode
[  123.470783][ T8450] ipvlan0: left promiscuous mode
[  123.474599][ T8450] macvlan1: left promiscuous mode
[  123.821318][ T8462] syzkaller0: entered promiscuous mode
[  123.823232][ T8462] syzkaller0: entered allmulticast mode
[  123.859867][ T5843] hsr_slave_0: left promiscuous mode
[  123.879967][ T5843] hsr_slave_1: left promiscuous mode
[  123.890296][ T5843] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  123.893397][ T5843] batman_adv: batadv0: Removing interface: batadv_slave_0
[  123.900295][ T5843] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  123.903610][ T5843] batman_adv: batadv0: Removing interface: batadv_slave_1
[  123.927634][ T5843] veth1_macvtap: left promiscuous mode
[  123.929997][ T5843] veth0_macvtap: left promiscuous mode
[  123.932546][ T5843] veth1_vlan: left promiscuous mode
[  123.934795][ T5843] veth0_vlan: left promiscuous mode
[  124.235799][ T5843] team0 (unregistering): Port device team_slave_1 removed
[  124.260006][ T5843] team0 (unregistering): Port device team_slave_0 removed
[  124.561661][ T8422] chnl_net:caif_netlink_parms(): no params data found
[  124.908941][   T54] Bluetooth: hci2: command tx timeout
[  125.364419][ T8483] netlink: 830 bytes leftover after parsing attributes in process `syz.2.948'.
[  125.490998][ T8422] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.493772][ T8422] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.499231][ T8422] bridge_slave_0: entered allmulticast mode
[  125.502304][ T8422] bridge_slave_0: entered promiscuous mode
[  125.505515][ T8422] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.512674][ T8422] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.515042][ T8422] bridge_slave_1: entered allmulticast mode
[  125.524198][ T8422] bridge_slave_1: entered promiscuous mode
[  125.601503][ T8422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  125.617126][ T8422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  125.652136][ T8505] delete_channel: no stack
[  125.663531][ T8422] team0: Port device team_slave_0 added
[  125.677645][ T8422] team0: Port device team_slave_1 added
[  125.710357][ T8422] batman_adv: batadv0: Adding interface: batadv_slave_0
[  125.712713][ T8422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  125.723142][ T8422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  125.728942][ T8422] batman_adv: batadv0: Adding interface: batadv_slave_1
[  125.731932][ T8422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  125.742002][ T8422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  125.785849][ T8422] hsr_slave_0: entered promiscuous mode
[  125.793370][ T8422] hsr_slave_1: entered promiscuous mode
[  125.800175][ T8422] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  125.804895][ T8422] Cannot create hsr debugfs directory
[  126.410019][ T8503] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  126.502467][ T8547] batman_adv: batadv0: Adding interface: ip6gretap1
[  126.505200][ T8547] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  126.516415][ T8547] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active
[  126.523286][ T8422] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  126.541417][ T8422] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  126.560795][ T8547] batman_adv: batadv0: Removing interface: ip6gretap1
[  126.575466][ T8550] ip6t_srh: unknown srh match flags  4000
[  126.593940][ T8422] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  126.610002][ T8422] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  126.789268][ T8422] 8021q: adding VLAN 0 to HW filter on device bond0
[  126.832088][ T8422] 8021q: adding VLAN 0 to HW filter on device team0
[  126.841522][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  126.843891][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  126.863876][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  126.866280][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  126.915833][ T8422] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  126.987759][   T54] Bluetooth: hci2: command tx timeout
[  127.069099][ T8422] 8021q: adding VLAN 0 to HW filter on device batadv0
[  127.160532][ T8422] veth0_vlan: entered promiscuous mode
[  127.181415][ T8422] veth1_vlan: entered promiscuous mode
[  127.215318][ T8422] veth0_macvtap: entered promiscuous mode
[  127.236062][ T8422] veth1_macvtap: entered promiscuous mode
[  127.274191][ T8422] batman_adv: batadv0: Interface activated: batadv_slave_0
[  127.294776][ T8422] batman_adv: batadv0: Interface activated: batadv_slave_1
[  127.312576][ T8422] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  127.316409][ T8605] netlink: 'syz.1.979': attribute type 1 has an invalid length.
[  127.320082][ T8422] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  127.323681][ T8422] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  127.328144][ T8422] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  127.332669][ T8604] netlink: 'syz.2.980': attribute type 1 has an invalid length.
[  127.407796][ T8605] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  127.421530][ T8605] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  127.425344][ T8605] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  127.436868][ T8605] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  127.443186][ T8605] bond3: (slave geneve2): making interface the new active one
[  127.453014][ T8611] netlink: 28 bytes leftover after parsing attributes in process `syz.1.979'.
[  127.468437][ T8605] bond3: (slave geneve2): Enslaving as an active interface with an up link
[  127.480769][ T8611] 8021q: adding VLAN 0 to HW filter on device bond3
[  127.509462][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.518464][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.541313][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.546125][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.567058][ T8617] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  127.623503][ T8619] netlink: 12 bytes leftover after parsing attributes in process `syz.1.985'.
[  127.748763][ T8633] netlink: 56 bytes leftover after parsing attributes in process `syz.2.992'.
[  127.974647][ T8657] netlink: 'syz.2.1004': attribute type 2 has an invalid length.
[  128.025464][ T8661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1006'.
[  128.030399][ T8661] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  128.032958][ T8661] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  128.199495][ T8671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1010'.
[  128.202617][ T8671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1010'.
[  128.720623][ T8703] pim6reg1: entered promiscuous mode
[  128.723105][ T8703] pim6reg1: entered allmulticast mode
[  128.841727][ T8703] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1026'.
[  128.862729][ T8703] 8021q: adding VLAN 0 to HW filter on device bond6
[  128.865697][ T8703] team0: Port device bond6 added
[  128.958895][ T8707] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1028'.
[  129.049189][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.279158][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.402672][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.489856][ T5813] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  130.493780][ T5813] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  130.498000][ T5813] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  130.502242][ T5813] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  130.505717][ T5813] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  130.521506][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.532481][ T8732]  (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  130.565041][ T8733] lo speed is unknown, defaulting to 1000
[  130.739836][   T13] bridge_slave_1: left allmulticast mode
[  130.742366][   T13] bridge_slave_1: left promiscuous mode
[  130.744493][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.769033][   T13] bridge_slave_0: left allmulticast mode
[  130.771058][   T13] bridge_slave_0: left promiscuous mode
[  130.773301][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.912625][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  131.928067][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  131.932311][   T13] bond0 (unregistering): Released all slaves
[  132.035529][ T8733] chnl_net:caif_netlink_parms(): no params data found
[  132.084466][ T8778] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  132.282599][ T8733] bridge0: port 1(bridge_slave_0) entered blocking state
[  132.285337][ T8733] bridge0: port 1(bridge_slave_0) entered disabled state
[  132.300194][ T8733] bridge_slave_0: entered allmulticast mode
[  132.303055][ T8733] bridge_slave_0: entered promiscuous mode
[  132.316119][ T8733] bridge0: port 2(bridge_slave_1) entered blocking state
[  132.321604][ T8733] bridge0: port 2(bridge_slave_1) entered disabled state
[  132.324421][ T8733] bridge_slave_1: entered allmulticast mode
[  132.332344][ T8733] bridge_slave_1: entered promiscuous mode
[  132.341018][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  132.343624][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  132.357425][   T13] hsr_slave_0: left promiscuous mode
[  132.359694][   T13] hsr_slave_1: left promiscuous mode
[  132.361987][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  132.364970][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  132.370707][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  132.373726][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  132.384700][   T13] veth1_macvtap: left promiscuous mode
[  132.397644][   T13] veth0_macvtap: left promiscuous mode
[  132.400580][   T13] veth1_vlan: left promiscuous mode
[  132.405693][   T13] veth0_vlan: left promiscuous mode
[  132.576540][ T5813] Bluetooth: hci2: command tx timeout
[  132.970186][   T13] team0 (unregistering): Port device team_slave_1 removed
[  133.015472][   T13] team0 (unregistering): Port device team_slave_0 removed
[  133.424711][ T8733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  133.448539][ T8733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  133.539264][ T8733] team0: Port device team_slave_0 added
[  133.549704][ T8733] team0: Port device team_slave_1 added
[  133.609800][ T8733] batman_adv: batadv0: Adding interface: batadv_slave_0
[  133.616143][ T8733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  133.649449][ T8733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  133.661690][ T8733] batman_adv: batadv0: Adding interface: batadv_slave_1
[  133.664400][ T8733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  133.676858][ T8733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  133.754052][ T8733] hsr_slave_0: entered promiscuous mode
[  133.758040][ T8733] hsr_slave_1: entered promiscuous mode
[  133.760856][ T8733] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  133.764107][ T8733] Cannot create hsr debugfs directory
[  133.853788][ T8851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1080'.
[  133.882557][ T8851] hsr0: entered promiscuous mode
[  134.013590][ T8857] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  134.075469][ T8862] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1083'.
[  134.243988][ T8872] openvswitch: netlink: Message has 1 unknown bytes.
[  134.250977][ T8872] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  134.440706][ T8733] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  134.450486][ T8733] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  134.458283][ T8733] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  134.462983][ T8733] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  134.488808][ T8894] syzkaller1: entered promiscuous mode
[  134.495717][ T8894] syzkaller1: entered allmulticast mode
[  134.628106][ T8733] 8021q: adding VLAN 0 to HW filter on device bond0
[  134.660037][ T5813] Bluetooth: hci2: command tx timeout
[  134.714871][ T8733] 8021q: adding VLAN 0 to HW filter on device team0
[  134.723876][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  134.727124][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  134.744837][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  134.748063][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  135.063340][ T8733] 8021q: adding VLAN 0 to HW filter on device batadv0
[  135.095180][ T8950] netlink: 'syz.1.1104': attribute type 1 has an invalid length.
[  135.098849][ T8950] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1104'.
[  135.102609][ T8950] netlink: 'syz.1.1104': attribute type 1 has an invalid length.
[  135.153015][ T8733] veth0_vlan: entered promiscuous mode
[  135.173499][ T8733] veth1_vlan: entered promiscuous mode
[  135.218784][ T8733] veth0_macvtap: entered promiscuous mode
[  135.230128][ T8733] veth1_macvtap: entered promiscuous mode
[  135.256144][ T8733] batman_adv: batadv0: Interface activated: batadv_slave_0
[  135.268255][ T8733] batman_adv: batadv0: Interface activated: batadv_slave_1
[  135.283430][ T8733] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  135.287982][ T8733] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  135.292085][ T8733] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  135.298415][ T8733] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  135.422206][ T8965] netlink: 'syz.2.1109': attribute type 5 has an invalid length.
[  135.426877][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  135.430743][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  135.488225][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  135.496698][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  135.644852][ T8982] netlink: 'syz.1.1115': attribute type 1 has an invalid length.
[  135.649422][ T8982] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1115'.
[  135.845748][ T8995] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  136.461308][ T9007] netlink: 'syz.2.1122': attribute type 21 has an invalid length.
[  136.464797][ T9007] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1122'.
[  136.470618][ T9007] netlink: 'syz.2.1122': attribute type 5 has an invalid length.
[  136.473599][ T9007] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1122'.
[  136.619629][ T9017] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1127'.
[  136.623575][ T9017] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1127'.
[  136.842432][ T9031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1134'.
[  136.915115][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.248470][ T9040] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  138.351051][ T9046] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1141'.
[  138.417726][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  138.422276][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  138.427812][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  138.429670][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.432764][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  138.439998][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  138.440406][ T9050] syz_tun: refused to change device tx_queue_len
[  138.445585][ T9050] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  138.477498][ T9051] lo speed is unknown, defaulting to 1000
[  138.624023][ T9051] chnl_net:caif_netlink_parms(): no params data found
[  138.657230][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.728560][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.787266][ T9051] bridge0: port 1(bridge_slave_0) entered blocking state
[  138.789671][ T9051] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.792013][ T9051] bridge_slave_0: entered allmulticast mode
[  138.794694][ T9051] bridge_slave_0: entered promiscuous mode
[  138.811034][ T9051] bridge0: port 2(bridge_slave_1) entered blocking state
[  138.815566][ T9051] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.819572][ T9051] bridge_slave_1: entered allmulticast mode
[  138.823847][ T9051] bridge_slave_1: entered promiscuous mode
[  138.879368][ T9051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  138.885567][ T9051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  138.914341][ T9089] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  138.940968][ T9089] syzkaller0: entered promiscuous mode
[  138.943269][ T9089] syzkaller0: entered allmulticast mode
[  138.952159][ T9095] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1159'.
[  138.984483][ T9051] team0: Port device team_slave_0 added
[  138.991621][ T9051] team0: Port device team_slave_1 added
[  139.003877][ T9089] tipc: Resetting bearer <eth:syzkaller0>
[  139.068837][ T9088] tipc: Resetting bearer <eth:syzkaller0>
[  139.084649][ T9088] tipc: Disabling bearer <eth:syzkaller0>
[  139.093829][ T9051] batman_adv: batadv0: Adding interface: batadv_slave_0
[  139.099268][ T9051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  139.109613][ T9051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  139.114167][   T13] bridge_slave_1: left allmulticast mode
[  139.116848][   T13] bridge_slave_1: left promiscuous mode
[  139.119152][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  139.123058][   T13] bridge_slave_0: left allmulticast mode
[  139.124902][   T13] bridge_slave_0: left promiscuous mode
[  139.128031][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  139.397772][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  139.403243][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  139.407575][   T13] bond0 (unregistering): Released all slaves
[  139.414828][ T9051] batman_adv: batadv0: Adding interface: batadv_slave_1
[  139.420351][ T9051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  139.433077][ T9051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  139.521610][ T9051] hsr_slave_0: entered promiscuous mode
[  139.527122][ T9051] hsr_slave_1: entered promiscuous mode
[  139.529754][ T9051] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  139.532976][ T9051] Cannot create hsr debugfs directory
[  139.755317][ T9126] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1171'.
[  139.824453][   T13] hsr_slave_0: left promiscuous mode
[  139.829642][   T13] hsr_slave_1: left promiscuous mode
[  139.832009][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  139.834335][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  139.839976][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  139.842337][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  139.859573][   T13] veth1_macvtap: left promiscuous mode
[  139.861505][   T13] veth0_macvtap: left promiscuous mode
[  139.863411][   T13] veth1_vlan: left promiscuous mode
[  139.865499][   T13] veth0_vlan: left promiscuous mode
[  139.870611][ T9132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1174'.
[  140.118420][   T13] team0 (unregistering): Port device team_slave_1 removed
[  140.142154][   T13] team0 (unregistering): Port device team_slave_0 removed
[  140.411892][ T9135] netdevsim netdevsim2: Direct firmware load for .. failed with error -2
[  140.415454][ T9135] netdevsim netdevsim2: Falling back to sysfs fallback for: ..
[  140.506949][   T54] Bluetooth: hci2: command tx timeout
[  140.599373][ T9150] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1180'.
[  140.768438][ T9051] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  140.773227][ T9051] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  140.781480][ T9051] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  140.790640][ T9051] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  140.852023][ T9051] 8021q: adding VLAN 0 to HW filter on device bond0
[  140.861676][ T9051] 8021q: adding VLAN 0 to HW filter on device team0
[  140.874712][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  140.877129][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  140.887558][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  140.890495][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  141.044384][ T9051] 8021q: adding VLAN 0 to HW filter on device batadv0
[  141.068869][ T9051] veth0_vlan: entered promiscuous mode
[  141.074132][ T9051] veth1_vlan: entered promiscuous mode
[  141.090111][ T9051] veth0_macvtap: entered promiscuous mode
[  141.093879][ T9051] veth1_macvtap: entered promiscuous mode
[  141.103225][ T9051] batman_adv: batadv0: Interface activated: batadv_slave_0
[  141.110402][ T9051] batman_adv: batadv0: Interface activated: batadv_slave_1
[  141.115284][ T9051] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  141.119342][ T9051] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  141.122547][ T9051] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  141.125382][ T9051] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  141.173640][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  141.180664][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  141.194185][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  141.197302][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  141.328844][ T9207] netlink: 'syz.1.1198': attribute type 5 has an invalid length.
[  141.331445][ T9207] netlink: 'syz.1.1198': attribute type 7 has an invalid length.
[  141.341081][ T9207] : entered promiscuous mode
[  142.240964][ T9222] netlink: 'syz.2.1206': attribute type 11 has an invalid length.
[  142.292500][ T9228] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1208'.
[  142.303028][ T9229] lo speed is unknown, defaulting to 1000
[  142.363339][ T9229] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1209'.
[  142.821943][ T9273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1229'.
[  142.849936][ T9275] x_tables: duplicate underflow at hook 4
[  142.856043][ T9275] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  142.859599][ T9275] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  142.862567][ T9275] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  142.865473][ T9275] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  142.944762][ T9283] netlink: 'syz.1.1234': attribute type 10 has an invalid length.
[  143.234543][ T6324] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.657410][ T6324] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.672454][ T9307] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  144.676015][ T9307] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  144.686119][ T9307] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  144.717582][ T6324] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.819379][ T6324] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.830202][ T9313] batadv_slave_1: entered promiscuous mode
[  144.848777][ T9312] batadv_slave_1: left promiscuous mode
[  144.901635][ T5813] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  144.904881][ T5813] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  144.909503][ T5813] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  144.912948][ T5813] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  144.915782][ T5813] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  144.968751][ T6324] bridge_slave_1: left allmulticast mode
[  144.970594][ T6324] bridge_slave_1: left promiscuous mode
[  144.978720][ T6324] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.987170][ T6324] bridge_slave_0: left allmulticast mode
[  144.995402][ T6324] bridge_slave_0: left promiscuous mode
[  145.000447][ T6324] bridge0: port 1(bridge_slave_0) entered disabled state
[  145.049367][ T9327] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1245'.
[  145.221540][ T6324] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  145.227351][ T6324] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  145.232945][ T6324] bond0 (unregistering): Released all slaves
[  145.270904][ T9317] lo speed is unknown, defaulting to 1000
[  145.518672][ T9317] chnl_net:caif_netlink_parms(): no params data found
[  145.563204][ T6324] hsr_slave_0: left promiscuous mode
[  145.565889][ T6324] hsr_slave_1: left promiscuous mode
[  145.569170][ T6324] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  145.571754][ T6324] batman_adv: batadv0: Removing interface: batadv_slave_0
[  145.574623][ T6324] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  145.577643][ T6324] batman_adv: batadv0: Removing interface: batadv_slave_1
[  145.588507][ T6324] veth1_macvtap: left promiscuous mode
[  145.590373][ T6324] veth0_macvtap: left promiscuous mode
[  145.592820][ T6324] veth1_vlan: left promiscuous mode
[  145.594839][ T6324] veth0_vlan: left promiscuous mode
[  145.615498][ T9353] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1252'.
[  145.848134][ T6324] team0 (unregistering): Port device team_slave_1 removed
[  145.865839][ T6324] team0 (unregistering): Port device team_slave_0 removed
[  146.212828][ T9317] bridge0: port 1(bridge_slave_0) entered blocking state
[  146.215245][ T9317] bridge0: port 1(bridge_slave_0) entered disabled state
[  146.217860][ T9317] bridge_slave_0: entered allmulticast mode
[  146.220529][ T9317] bridge_slave_0: entered promiscuous mode
[  146.223595][ T9317] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.225975][ T9317] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.228820][ T9317] bridge_slave_1: entered allmulticast mode
[  146.231493][ T9317] bridge_slave_1: entered promiscuous mode
[  146.270058][ T9317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  146.274515][ T9317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  146.315743][ T9317] team0: Port device team_slave_0 added
[  146.329933][ T9317] team0: Port device team_slave_1 added
[  146.429076][ T9317] batman_adv: batadv0: Adding interface: batadv_slave_0
[  146.439440][ T9317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  146.455337][ T9317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  146.468083][ T9317] batman_adv: batadv0: Adding interface: batadv_slave_1
[  146.471053][ T9317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  146.483130][ T9317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  146.521749][ T9379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1258'.
[  146.526864][ T9379] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1258'.
[  146.532641][ T9379] netlink: 'syz.2.1258': attribute type 18 has an invalid length.
[  146.567470][ T9317] hsr_slave_0: entered promiscuous mode
[  146.578570][ T9317] hsr_slave_1: entered promiscuous mode
[  146.581426][ T9317] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  146.584437][ T9317] Cannot create hsr debugfs directory
[  146.780111][ T2329] hid-generic 0005:04F3:000E.0001: collection stack underflow
[  146.794253][ T2329] hid-generic 0005:04F3:000E.0001: item 0 0 0 12 parsing failed
[  146.805065][ T2329] hid-generic 0005:04F3:000E.0001: probe with driver hid-generic failed with error -22
[  146.921474][ T9406] xt_TCPMSS: Only works on TCP SYN packets
[  146.978424][ T5813] Bluetooth: hci2: command tx timeout
[  146.994198][ T9412] ip6tnl2: entered promiscuous mode
[  146.996109][ T9412] ip6tnl2: entered allmulticast mode
[  147.017702][ T9414] netlink: 'syz.2.1271': attribute type 13 has an invalid length.
[  147.159130][ T9414] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  147.162137][ T9414] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  147.165058][ T9414] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  147.167978][ T9414] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  147.250863][ T9317] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  147.255410][ T9424] netlink: 'syz.1.1276': attribute type 12 has an invalid length.
[  147.267677][ T9317] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  147.273070][ T9317] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  147.287090][ T9317] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  147.356250][ T9438] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1278'.
[  147.362485][ T9438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1278'.
[  147.401543][ T9317] 8021q: adding VLAN 0 to HW filter on device bond0
[  147.412445][ T9442] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  147.427568][ T9317] 8021q: adding VLAN 0 to HW filter on device team0
[  147.438174][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  147.440607][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  147.465800][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  147.468229][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  147.551056][ T9445] bridge_slave_0: left promiscuous mode
[  147.569822][ T9445] macvlan0: left promiscuous mode
[  147.571983][ T9445] macvlan0: left allmulticast mode
[  147.574998][ T9445] netdevsim netdevsim2 netdevsim0: left allmulticast mode
[  147.579876][ T9445] bridge1: left promiscuous mode
[  147.648944][ T9451] bond4: entered promiscuous mode
[  147.651563][ T9451] 8021q: adding VLAN 0 to HW filter on device bond4
[  147.729618][ T9317] 8021q: adding VLAN 0 to HW filter on device batadv0
[  147.804119][ T9317] veth0_vlan: entered promiscuous mode
[  147.809967][ T9317] veth1_vlan: entered promiscuous mode
[  147.833618][ T9317] veth0_macvtap: entered promiscuous mode
[  147.844622][ T9317] veth1_macvtap: entered promiscuous mode
[  147.861386][ T9317] batman_adv: batadv0: Interface activated: batadv_slave_0
[  147.875028][ T9317] batman_adv: batadv0: Interface activated: batadv_slave_1
[  147.881209][ T9317] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  147.884234][ T9317] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  147.887524][ T9317] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  147.891078][ T9317] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  147.938316][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  147.940963][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  147.996041][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  148.004734][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  148.156536][ T9396] ==================================================================
[  148.159269][ T9396] BUG: KASAN: slab-use-after-free in __mutex_lock+0x738/0xe80
[  148.161719][ T9396] Read of size 8 at addr ffff888033d1c0a0 by task khidpd_04f3000e/9396
[  148.165383][ T9396] 
[  148.166200][ T9396] CPU: 0 UID: 0 PID: 9396 Comm: khidpd_04f3000e Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  148.166210][ T9396] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  148.166215][ T9396] Call Trace:
[  148.166218][ T9396]  <TASK>
[  148.166221][ T9396]  dump_stack_lvl+0x189/0x250
[  148.166235][ T9396]  ? __virt_addr_valid+0x1c8/0x5c0
[  148.166243][ T9396]  ? rcu_is_watching+0x15/0xb0
[  148.166254][ T9396]  ? __kasan_check_byte+0x12/0x40
[  148.166262][ T9396]  ? __pfx_dump_stack_lvl+0x10/0x10
[  148.166274][ T9396]  ? rcu_is_watching+0x15/0xb0
[  148.166284][ T9396]  ? lock_release+0x4b/0x3e0
[  148.166294][ T9396]  ? __virt_addr_valid+0x1c8/0x5c0
[  148.166301][ T9396]  ? __virt_addr_valid+0x4a5/0x5c0
[  148.166308][ T9396]  print_report+0xd2/0x2b0
[  148.166318][ T9396]  ? __mutex_lock+0x738/0xe80
[  148.166328][ T9396]  kasan_report+0x118/0x150
[  148.166336][ T9396]  ? __mutex_lock+0x738/0xe80
[  148.166346][ T9396]  __mutex_lock+0x738/0xe80
[  148.166357][ T9396]  ? __mutex_lock+0x51b/0xe80
[  148.166367][ T9396]  ? l2cap_unregister_user+0x6a/0x1b0
[  148.166380][ T9396]  ? __pfx___mutex_lock+0x10/0x10
[  148.166392][ T9396]  ? __pfx___timer_delete_sync+0x10/0x10
[  148.166402][ T9396]  l2cap_unregister_user+0x6a/0x1b0
[  148.166412][ T9396]  hidp_session_thread+0x3c9/0x410
[  148.166424][ T9396]  ? __pfx_hidp_session_thread+0x10/0x10
[  148.166433][ T9396]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  148.166443][ T9396]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  148.166454][ T9396]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  148.166464][ T9396]  ? __kthread_parkme+0x7b/0x200
[  148.166471][ T9396]  ? __kthread_parkme+0x1a1/0x200
[  148.166478][ T9396]  kthread+0x711/0x8a0
[  148.166486][ T9396]  ? __pfx_hidp_session_thread+0x10/0x10
[  148.166496][ T9396]  ? __pfx_kthread+0x10/0x10
[  148.166504][ T9396]  ? _raw_spin_unlock_irq+0x23/0x50
[  148.166512][ T9396]  ? lockdep_hardirqs_on+0x9c/0x150
[  148.166521][ T9396]  ? __pfx_kthread+0x10/0x10
[  148.166529][ T9396]  ret_from_fork+0x3fc/0x770
[  148.166539][ T9396]  ? __pfx_ret_from_fork+0x10/0x10
[  148.166549][ T9396]  ? __switch_to_asm+0x39/0x70
[  148.166556][ T9396]  ? __switch_to_asm+0x33/0x70
[  148.166563][ T9396]  ? __pfx_kthread+0x10/0x10
[  148.166570][ T9396]  ret_from_fork_asm+0x1a/0x30
[  148.166580][ T9396]  </TASK>
[  148.166582][ T9396] 
[  148.243815][ T9396] Allocated by task 9317:
[  148.245304][ T9396]  kasan_save_track+0x3e/0x80
[  148.246849][ T9396]  __kasan_kmalloc+0x93/0xb0
[  148.248425][ T9396]  __kmalloc_noprof+0x27a/0x4f0
[  148.250144][ T9396]  hci_alloc_dev_priv+0x28/0x2040
[  148.252188][ T9396]  vhci_create_device+0x120/0x6e0
[  148.254067][ T9396]  vhci_write+0x3ce/0x4a0
[  148.255585][ T9396]  vfs_write+0x54b/0xa90
[  148.257038][ T9396]  ksys_write+0x145/0x250
[  148.258610][ T9396]  do_syscall_64+0xfa/0x3b0
[  148.260239][ T9396]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  148.262221][ T9396] 
[  148.263054][ T9396] Freed by task 9317:
[  148.264424][ T9396]  kasan_save_track+0x3e/0x80
[  148.265994][ T9396]  kasan_save_free_info+0x46/0x50
[  148.267644][ T9396]  __kasan_slab_free+0x62/0x70
[  148.269350][ T9396]  kfree+0x18e/0x440
[  148.270657][ T9396]  bt_host_release+0x82/0x90
[  148.272270][ T9396]  device_release+0x9c/0x1c0
[  148.274097][ T9396]  kobject_put+0x22b/0x480
[  148.275561][ T9396]  vhci_release+0x88/0xd0
[  148.277177][ T9396]  __fput+0x44c/0xa70
[  148.278673][ T9396]  task_work_run+0x1d4/0x260
[  148.280362][ T9396]  do_exit+0x6b5/0x22e0
[  148.281896][ T9396]  do_group_exit+0x21c/0x2d0
[  148.283839][ T9396]  __x64_sys_exit_group+0x3f/0x40
[  148.285821][ T9396]  x64_sys_call+0x21ba/0x21c0
[  148.287456][ T9396]  do_syscall_64+0xfa/0x3b0
[  148.289024][ T9396]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  148.291045][ T9396] 
[  148.291851][ T9396] Last potentially related work creation:
[  148.293718][ T9396]  kasan_save_stack+0x3e/0x60
[  148.295276][ T9396]  kasan_record_aux_stack+0xbd/0xd0
[  148.297131][ T9396]  insert_work+0x3d/0x330
[  148.298633][ T9396]  __queue_work+0xbd9/0xfe0
[  148.300193][ T9396]  queue_work_on+0x181/0x270
[  148.301972][ T9396]  process_scheduled_works+0xae1/0x17b0
[  148.303902][ T9396]  worker_thread+0x8a0/0xda0
[  148.305624][ T9396]  kthread+0x711/0x8a0
[  148.307022][ T9396]  ret_from_fork+0x3fc/0x770
[  148.308642][ T9396]  ret_from_fork_asm+0x1a/0x30
[  148.310236][ T9396] 
[  148.311049][ T9396] Second to last potentially related work creation:
[  148.313233][ T9396]  kasan_save_stack+0x3e/0x60
[  148.314745][ T9396]  kasan_record_aux_stack+0xbd/0xd0
[  148.316405][ T9396]  insert_work+0x3d/0x330
[  148.317787][ T9396]  __queue_work+0xcfc/0xfe0
[  148.319224][ T9396]  call_timer_fn+0x17e/0x5f0
[  148.320745][ T9396]  __run_timer_base+0x646/0x860
[  148.322339][ T9396]  run_timer_softirq+0xb7/0x180
[  148.324120][ T9396]  handle_softirqs+0x286/0x870
[  148.325886][ T9396]  __irq_exit_rcu+0xca/0x1f0
[  148.327778][ T9396]  irq_exit_rcu+0x9/0x30
[  148.329316][ T9396]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  148.331344][ T9396]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  148.333409][ T9396] 
[  148.334221][ T9396] The buggy address belongs to the object at ffff888033d1c000
[  148.334221][ T9396]  which belongs to the cache kmalloc-8k of size 8192
[  148.338961][ T9396] The buggy address is located 160 bytes inside of
[  148.338961][ T9396]  freed 8192-byte region [ffff888033d1c000, ffff888033d1e000)
[  148.344177][ T9396] 
[  148.345016][ T9396] The buggy address belongs to the physical page:
[  148.347054][ T9396] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888033d18000 pfn:0x33d18
[  148.350351][ T9396] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  148.353106][ T9396] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff)
[  148.355869][ T9396] page_type: f5(slab)
[  148.357219][ T9396] raw: 00fff00000000240 ffff88801a442280 ffff88801a440ac8 ffffea0000bf0810
[  148.359939][ T9396] raw: ffff888033d18000 0000000000020001 00000000f5000000 0000000000000000
[  148.362724][ T9396] head: 00fff00000000240 ffff88801a442280 ffff88801a440ac8 ffffea0000bf0810
[  148.365869][ T9396] head: ffff888033d18000 0000000000020001 00000000f5000000 0000000000000000
[  148.368745][ T9396] head: 00fff00000000003 ffffea0000cf4601 00000000ffffffff 00000000ffffffff
[  148.371663][ T9396] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  148.374654][ T9396] page dumped because: kasan: bad access detected
[  148.376768][ T9396] page_owner tracks the page as allocated
[  148.378700][ T9396] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x528c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP), pid 8733, tgid 8733 (syz-executor), ts 132213168495, free_ts 110375454906
[  148.385194][ T9396]  post_alloc_hook+0x240/0x2a0
[  148.386964][ T9396]  get_page_from_freelist+0x21e4/0x22c0
[  148.388764][ T9396]  __alloc_frozen_pages_noprof+0x181/0x370
[  148.390675][ T9396]  alloc_pages_mpol+0x232/0x4a0
[  148.392283][ T9396]  allocate_slab+0x8a/0x3b0
[  148.393733][ T9396]  ___slab_alloc+0xbfc/0x1480
[  148.395264][ T9396]  __kvmalloc_node_noprof+0x429/0x5f0
[  148.397052][ T9396]  wg_packet_queue_init+0xb7/0x320
[  148.398651][ T9396]  wg_newlink+0x2f6/0x650
[  148.400029][ T9396]  rtnl_newlink_create+0x310/0xb00
[  148.401721][ T9396]  rtnl_newlink+0x16d6/0x1c70
[  148.403348][ T9396]  rtnetlink_rcv_msg+0x7cf/0xb70
[  148.405002][ T9396]  netlink_rcv_skb+0x208/0x470
[  148.406569][ T9396]  netlink_unicast+0x75b/0x8d0
[  148.408590][ T9396]  netlink_sendmsg+0x805/0xb30
[  148.410411][ T9396]  __sock_sendmsg+0x21c/0x270
[  148.412053][ T9396] page last free pid 5557 tgid 5557 stack trace:
[  148.414107][ T9396]  __free_frozen_pages+0xc71/0xe70
[  148.415751][ T9396]  __slab_free+0x326/0x400
[  148.417311][ T9396]  qlist_free_all+0x97/0x140
[  148.418892][ T9396]  kasan_quarantine_reduce+0x148/0x160
[  148.420779][ T9396]  __kasan_slab_alloc+0x22/0x80
[  148.422480][ T9396]  kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  148.424474][ T9396]  __alloc_skb+0x112/0x2d0
[  148.426061][ T9396]  alloc_skb_with_frags+0xca/0x890
[  148.428059][ T9396]  sock_alloc_send_pskb+0x857/0x990
[  148.430156][ T9396]  unix_dgram_sendmsg+0x4f6/0x1870
[  148.431870][ T9396]  __sock_sendmsg+0x21c/0x270
[  148.433730][ T9396]  sock_write_iter+0x258/0x330
[  148.435578][ T9396]  do_iter_readv_writev+0x56e/0x7f0
[  148.437837][ T9396]  vfs_writev+0x31a/0x960
[  148.439724][ T9396]  do_writev+0x14d/0x2d0
[  148.441537][ T9396]  do_syscall_64+0xfa/0x3b0
[  148.443428][ T9396] 
[  148.444460][ T9396] Memory state around the buggy address:
[  148.446853][ T9396]  ffff888033d1bf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  148.450230][ T9396]  ffff888033d1c000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  148.453597][ T9396] >ffff888033d1c080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  148.456229][ T9396]                                ^
[  148.458178][ T9396]  ffff888033d1c100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  148.461511][ T9396]  ffff888033d1c180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  148.464711][ T9396] ==================================================================
[  148.468704][ T9396] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  148.471826][ T9396] CPU: 0 UID: 0 PID: 9396 Comm: khidpd_04f3000e Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  148.476990][ T9396] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  148.481019][ T9396] Call Trace:
[  148.482320][ T9396]  <TASK>
[  148.483553][ T9396]  dump_stack_lvl+0x99/0x250
[  148.485419][ T9396]  ? __asan_memcpy+0x40/0x70
[  148.487220][ T9396]  ? __pfx_dump_stack_lvl+0x10/0x10
[  148.489360][ T9396]  ? __pfx__printk+0x10/0x10
[  148.491186][ T9396]  panic+0x2db/0x790
[  148.492766][ T9396]  ? __pfx_panic+0x10/0x10
[  148.494581][ T9396]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  148.496988][ T9396]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  148.499447][ T9396]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  148.502104][ T9396]  ? print_memory_metadata+0x314/0x400
[  148.504339][ T9396]  ? __mutex_lock+0x738/0xe80
[  148.506359][ T9396]  check_panic_on_warn+0x89/0xb0
[  148.508422][ T9396]  ? __mutex_lock+0x738/0xe80
[  148.510349][ T9396]  end_report+0x78/0x160
[  148.512112][ T9396]  kasan_report+0x129/0x150
[  148.513950][ T9396]  ? __mutex_lock+0x738/0xe80
[  148.515847][ T9396]  __mutex_lock+0x738/0xe80
[  148.517775][ T9396]  ? __mutex_lock+0x51b/0xe80
[  148.519761][ T9396]  ? l2cap_unregister_user+0x6a/0x1b0
[  148.522028][ T9396]  ? __pfx___mutex_lock+0x10/0x10
[  148.524175][ T9396]  ? __pfx___timer_delete_sync+0x10/0x10
[  148.526492][ T9396]  l2cap_unregister_user+0x6a/0x1b0
[  148.528580][ T9396]  hidp_session_thread+0x3c9/0x410
[  148.530739][ T9396]  ? __pfx_hidp_session_thread+0x10/0x10
[  148.533063][ T9396]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  148.535712][ T9396]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  148.538300][ T9396]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  148.540890][ T9396]  ? __kthread_parkme+0x7b/0x200
[  148.542971][ T9396]  ? __kthread_parkme+0x1a1/0x200
[  148.544996][ T9396]  kthread+0x711/0x8a0
[  148.546685][ T9396]  ? __pfx_hidp_session_thread+0x10/0x10
[  148.548974][ T9396]  ? __pfx_kthread+0x10/0x10
[  148.550857][ T9396]  ? _raw_spin_unlock_irq+0x23/0x50
[  148.553112][ T9396]  ? lockdep_hardirqs_on+0x9c/0x150
[  148.555358][ T9396]  ? __pfx_kthread+0x10/0x10
[  148.557374][ T9396]  ret_from_fork+0x3fc/0x770
[  148.559365][ T9396]  ? __pfx_ret_from_fork+0x10/0x10
[  148.561556][ T9396]  ? __switch_to_asm+0x39/0x70
[  148.563446][ T9396]  ? __switch_to_asm+0x33/0x70
[  148.565052][ T9396]  ? __pfx_kthread+0x10/0x10
[  148.566818][ T9396]  ret_from_fork_asm+0x1a/0x30
[  148.568870][ T9396]  </TASK>
[  148.570991][ T9396] Kernel Offset: disabled
[  148.572723][ T9396] Rebooting in 86400 seconds..

VM DIAGNOSIS:
18:00:53  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000066 RBX=0000000000000066 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900038ef370
R8 =ffff888107308237 R9 =1ffff11020e61046 R10=dffffc0000000000 R11=ffffffff85474610
R12=dffffc0000000000 R13=ffffffff99ac48f2 R14=ffffffff99dc9760 R15=0000000000000000
RIP=ffffffff8547468c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8650000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f0652a18690 CR3=0000000123616000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00ff000000000000 ff00000000000000 XMM05=0000000000000230 00302d0032303a00
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffff0000 ff0000ff000000ff XMM09=313030302e453030 303a334634303a35
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=00000000000000af RBX=ffffffff8e13ee60 RCX=ffffffff9345b330 RDX=0000000000000002
RSI=0000000000000007 RDI=ffff88801edb8000 RBP=0000000000000000 RSP=ffffc9000469e608
R8 =0000000000000000 R9 =0000000000000000 R10=ffffc9000469e858 R11=ffffffff81ace6a0
R12=0000000000000002 R13=0000000000000002 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff819e268b RFL=00000087 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fb3d88506c0 ffffffff 00c00000
GS =0000 ffff8881a3c50000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055c9bcc52950 CR3=00000000240a8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff81b6cc67 ffffffff81744eb2
XMM02=00007f2f02f84478 ffffffff81744eb2 XMM03=00007f2f02f84488 00007f2f02f84480
XMM04=00007f2f03aed100 00007f2f02f84440 XMM05=00007f2f02f84458 00007f2f02f844a0
XMM06=00007f2f02f84498 00007f2f02f84490 XMM07=00007f2f02f84488 00007f2f02f84480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f2f02e11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
