last executing test programs:

30.051407784s ago: executing program 1 (id=136):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c00018006000600800a0000100002800c00148008000400"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

29.828820301s ago: executing program 1 (id=144):
r0 = socket$tipc(0x1e, 0x5, 0x0)
listen(r0, 0x0)
ioctl$int_in(r0, 0x5421, &(0x7f0000000180)=0x7)
accept4(r0, 0x0, 0x0, 0x0)

24.208002301s ago: executing program 1 (id=144):
r0 = socket$tipc(0x1e, 0x5, 0x0)
listen(r0, 0x0)
ioctl$int_in(r0, 0x5421, &(0x7f0000000180)=0x7)
accept4(r0, 0x0, 0x0, 0x0)

18.601235415s ago: executing program 1 (id=144):
r0 = socket$tipc(0x1e, 0x5, 0x0)
listen(r0, 0x0)
ioctl$int_in(r0, 0x5421, &(0x7f0000000180)=0x7)
accept4(r0, 0x0, 0x0, 0x0)

11.097237453s ago: executing program 1 (id=144):
r0 = socket$tipc(0x1e, 0x5, 0x0)
listen(r0, 0x0)
ioctl$int_in(r0, 0x5421, &(0x7f0000000180)=0x7)
accept4(r0, 0x0, 0x0, 0x0)

5.44027289s ago: executing program 1 (id=144):
r0 = socket$tipc(0x1e, 0x5, 0x0)
listen(r0, 0x0)
ioctl$int_in(r0, 0x5421, &(0x7f0000000180)=0x7)
accept4(r0, 0x0, 0x0, 0x0)

2.058992366s ago: executing program 2 (id=478):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a70000000060a010400000000000000000a0004010900010073797a310000000044000480400001800e000100627974656f726465720000002c000280080005400000000408000440000000550800034000000001080001400000000108000240a80000130900020073797a32"], 0x98}, 0x1, 0x0, 0x0, 0x4000015}, 0x24000000)

1.949365642s ago: executing program 2 (id=480):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e24, 0x20f, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x1ff}, 0x1c)

1.881836425s ago: executing program 2 (id=481):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0xf51)
readv(r0, &(0x7f0000000340)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1)
sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000140)="2aa229111272ff", 0x7}, {&(0x7f0000000200)="3cc5c48b32b27a215ed6734667e778fd5e31bd2a645c1ad3521f8bb3347afdda1150f0871a3dc29260bd8c43222471588c75a894d31eb4e0a8b9439adf553dd6c343aa6a7cb47d37bfcc1b89ff13a3e68d9ec5751948ea50e29915258db6597fa5c3ed168fe9704d5ecced81fd9dc1400a7b749d9495e6e621", 0x79}], 0x2}, 0x24044014)

1.046666215s ago: executing program 2 (id=485):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001f00000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)
sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10)
listen(r0, 0xda90)
setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0)
accept4(r0, 0x0, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0x14, 0x34, 0x701, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4044840}, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
socket$inet6(0xa, 0x3, 0x3ff)
unshare(0x6a040000)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00080300000000000000330000000e0001006e657464657673696d0000000f0002006e657064657673696d30000008008e0000000000"], 0x3c}}, 0x20000040)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, &(0x7f0000000100)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x20048010)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x9}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040)
socketpair(0x1a, 0x1, 0x11, &(0x7f0000000040))

278.754724ms ago: executing program 0 (id=498):
bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xts-twofish-avx,camellia-asm,cbcmac(aes))\x00'}, 0x58)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62)
recvmmsg(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x2, 0x0)

278.608467ms ago: executing program 0 (id=499):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
connect$inet6(r0, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @private0, 0x4}, 0x1c)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x4000000, @empty, 0x6}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)

151.252059ms ago: executing program 0 (id=500):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="9c0400001900010000000000000000001d0109005000128049002100c9a7befe6f6d645a1a11b81b2c4b101c7510e19feecb90ee6bb49f6cc7a2c50fd57c06db1a75df432aa833928a0772ff8f5e9ed32d3b477d35b296674f1fe35663c0d236fd0000003804068034047580"], 0x49c}, 0x1, 0x0, 0x0, 0x5}, 0x804)

151.015079ms ago: executing program 0 (id=501):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000d80)=@raw={'raw\x00', 0x3c1, 0xffffff80, 0x2e0, 0x1f0, 0x12, 0x60d, 0x0, 0x202, 0x2f8, 0x2e8, 0x2e8, 0x2f8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@local, [0x0, 0xff, 0x15544f338ecf0204, 0xffffffff], 0x4e24, 0x4e24, 0x4e23, 0x4e23, 0x6, 0xe, 0x1, 0x80, 0x1}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14, 0x2d}, [0xff000000, 0xff, 0xffffff00, 0xff], 0x4e23, 0x4e23, 0x4e21, 0x0, 0x1ff, 0x0, 0xfffffffb, 0x400, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340)

90.60404ms ago: executing program 2 (id=502):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x2102, 0x4128}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x1}, @IFLA_NET_NS_FD={0x8}, @IFLA_VFINFO_LIST={0x29, 0x16, 0x0, 0x1, [{0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x2400a88c}, 0x4044800)

90.458037ms ago: executing program 0 (id=503):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x5, 0x0, 0x9, 0xa, 0x0, 0x700, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x50}, 0x1, 0x7}, 0x0)

316.352µs ago: executing program 2 (id=504):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0xce, 0x0, 0x0)

0s ago: executing program 0 (id=505):
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10)
write(r0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:59600' (ED25519) to the list of known hosts.
syzkaller login: [   49.531356][ T5755] cgroup: Unknown subsys name 'net'
[   49.638585][ T5755] cgroup: Unknown subsys name 'cpuset'
[   49.642861][ T5755] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.323487][ T5755] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.373831][ T5220] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.377924][ T5220] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.381473][ T5220] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.385584][ T5220] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.390865][ T5220] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.428063][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.432206][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.437062][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.441592][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.445405][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.466989][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.471465][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.477263][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.481119][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.484685][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.691235][ T5823] chnl_net:caif_netlink_parms(): no params data found
[   55.828691][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.831835][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.834280][ T5823] bridge_slave_0: entered allmulticast mode
[   55.837473][ T5823] bridge_slave_0: entered promiscuous mode
[   55.853925][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.856739][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.859315][ T5823] bridge_slave_1: entered allmulticast mode
[   55.862353][ T5823] bridge_slave_1: entered promiscuous mode
[   55.887698][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.896156][ T5827] chnl_net:caif_netlink_parms(): no params data found
[   55.906252][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.950456][ T5830] chnl_net:caif_netlink_parms(): no params data found
[   55.962266][ T5823] team0: Port device team_slave_0 added
[   55.978538][ T5823] team0: Port device team_slave_1 added
[   56.032777][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.035104][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.044885][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.050336][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.052552][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.062000][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.123888][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.127260][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.130306][ T5827] bridge_slave_0: entered allmulticast mode
[   56.134204][ T5827] bridge_slave_0: entered promiscuous mode
[   56.164690][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.167178][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.169669][ T5827] bridge_slave_1: entered allmulticast mode
[   56.172501][ T5827] bridge_slave_1: entered promiscuous mode
[   56.182576][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.185010][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.188006][ T5830] bridge_slave_0: entered allmulticast mode
[   56.191493][ T5830] bridge_slave_0: entered promiscuous mode
[   56.200536][ T5823] hsr_slave_0: entered promiscuous mode
[   56.204201][ T5823] hsr_slave_1: entered promiscuous mode
[   56.218738][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.221900][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.224251][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.227473][ T5830] bridge_slave_1: entered allmulticast mode
[   56.231578][ T5830] bridge_slave_1: entered promiscuous mode
[   56.250489][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.298323][ T5827] team0: Port device team_slave_0 added
[   56.302883][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.308694][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.318587][ T5827] team0: Port device team_slave_1 added
[   56.371210][ T5830] team0: Port device team_slave_0 added
[   56.376207][ T5830] team0: Port device team_slave_1 added
[   56.416607][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.419288][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.429397][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.454339][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.457113][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.466572][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.489936][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.492829][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.504923][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.527215][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.529530][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.538761][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.596457][ T5827] hsr_slave_0: entered promiscuous mode
[   56.598900][ T5827] hsr_slave_1: entered promiscuous mode
[   56.601157][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.603887][ T5827] Cannot create hsr debugfs directory
[   56.625393][ T5830] hsr_slave_0: entered promiscuous mode
[   56.628680][ T5830] hsr_slave_1: entered promiscuous mode
[   56.631672][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.634740][ T5830] Cannot create hsr debugfs directory
[   56.763316][ T5823] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.782934][ T5823] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.790647][ T5823] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.817614][ T5823] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.917924][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.926546][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.933848][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.942888][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   57.036205][ T5830] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   57.048656][ T5830] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   57.056209][ T5830] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   57.062676][ T5830] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   57.126944][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.167879][ T5823] 8021q: adding VLAN 0 to HW filter on device team0
[   57.190043][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.192577][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.211299][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.213731][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.220213][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.244252][ T5827] 8021q: adding VLAN 0 to HW filter on device team0
[   57.271860][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.274227][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.291593][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.294585][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.324846][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.352209][ T5830] 8021q: adding VLAN 0 to HW filter on device team0
[   57.357204][ T5827] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   57.361477][ T5827] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   57.392066][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.395157][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.416502][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.419085][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.476861][   T55] Bluetooth: hci1: command tx timeout
[   57.479126][   T55] Bluetooth: hci0: command tx timeout
[   57.525024][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.554817][ T5823] veth0_vlan: entered promiscuous mode
[   57.558930][   T55] Bluetooth: hci2: command tx timeout
[   57.571105][ T5823] veth1_vlan: entered promiscuous mode
[   57.581326][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.612391][ T5823] veth0_macvtap: entered promiscuous mode
[   57.620104][ T5823] veth1_macvtap: entered promiscuous mode
[   57.641321][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.647060][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.651358][ T5827] veth0_vlan: entered promiscuous mode
[   57.656530][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.664152][ T5823] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.671488][ T5823] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.675056][ T5823] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.679811][ T5823] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.689026][ T5827] veth1_vlan: entered promiscuous mode
[   57.756201][ T2186] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.758582][ T5830] veth0_vlan: entered promiscuous mode
[   57.761953][ T2186] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.774335][ T5827] veth0_macvtap: entered promiscuous mode
[   57.788062][ T5827] veth1_macvtap: entered promiscuous mode
[   57.790948][ T5830] veth1_vlan: entered promiscuous mode
[   57.805131][ T5105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.808420][ T5105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.821776][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.837580][ T5830] veth0_macvtap: entered promiscuous mode
[   57.842133][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.850596][ T5827] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.853441][ T5827] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.861211][ T5827] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.864221][ T5827] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.871163][ T5830] veth1_macvtap: entered promiscuous mode
[   57.880526][ T5823] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.906951][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.941519][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.959620][ T5830] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.963120][ T5830] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.967869][ T5830] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.971390][ T5830] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.074852][ T2186] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.082722][ T2186] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.115136][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.120157][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.162524][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.174769][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.235023][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.240851][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.364778][ T5903] ip6tnl1: entered promiscuous mode
[   58.367129][ T5903] ip6tnl1: entered allmulticast mode
[   58.370742][ T5903] team0: Device ip6tnl1 is of different type
[   58.524850][ T5909] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8'.
[   58.851815][ T5921] 8021q: adding VLAN 0 to HW filter on device bond1
[   58.856969][ T5921] team0: Port device bond1 added
[   58.933098][ T5924] netlink: 'syz.1.15': attribute type 1 has an invalid length.
[   58.939397][ T5924] netlink: 232 bytes leftover after parsing attributes in process `syz.1.15'.
[   58.944877][ T5924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15'.
[   59.419091][ T5946] netlink: 'syz.2.25': attribute type 2 has an invalid length.
[   59.429401][ T5946] netlink: 'syz.2.25': attribute type 2 has an invalid length.
[   59.439736][ T5949] netlink: 16 bytes leftover after parsing attributes in process `syz.1.27'.
[   59.447455][ T5949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.27'.
[   59.549460][ T5957] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   59.554224][ T5955] netlink: 'syz.0.30': attribute type 30 has an invalid length.
[   59.565688][   T55] Bluetooth: hci0: command tx timeout
[   59.566330][ T5220] Bluetooth: hci1: command tx timeout
[   59.582318][ T5959] netlink: 24 bytes leftover after parsing attributes in process `syz.2.32'.
[   59.595746][ T5959] netlink: 24 bytes leftover after parsing attributes in process `syz.2.32'.
[   59.635711][ T5220] Bluetooth: hci2: command tx timeout
[   59.703139][   T52] hid-generic 0005:16BF:5505.0001: item fetching failed at offset 0/3
[   59.712212][   T52] hid-generic 0005:16BF:5505.0001: probe with driver hid-generic failed with error -22
[   59.762541][ T5972] netlink: 104 bytes leftover after parsing attributes in process `syz.0.38'.
[   60.251299][ T6018] netlink: 'syz.1.58': attribute type 1 has an invalid length.
[   60.254176][ T6018] netlink: 224 bytes leftover after parsing attributes in process `syz.1.58'.
[   60.272771][ T6018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.58'.
[   60.376260][ T6026] Zero length message leads to an empty skb
[   60.432416][ T6031] netlink: 'syz.2.64': attribute type 3 has an invalid length.
[   60.449852][ T6032] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 4294967272. macoff=96
[   61.636143][ T5220] Bluetooth: hci1: command tx timeout
[   61.645339][ T5220] Bluetooth: hci0: command tx timeout
[   61.650749][ T6083] tipc: Started in network mode
[   61.652391][ T6083] tipc: Node identity ac14140f, cluster identity 4711
[   61.654847][ T6083] tipc: New replicast peer: 255.255.255.255
[   61.669450][ T6083] tipc: Enabled bearer <udp:syz2>, priority 10
[   61.715987][ T5220] Bluetooth: hci2: command tx timeout
[   61.802658][ T6093] vxcan3: entered allmulticast mode
[   61.857059][ T6096] syz.2.86 uses obsolete (PF_INET,SOCK_PACKET)
[   62.308166][ T6141] warning: `syz.0.101' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   62.324057][ T6146] Driver unsupported XDP return value 0 on prog  (id 17) dev N/A, expect packet loss!
[   62.677893][    T9] tipc: Node number set to 2886997007
[   62.955960][ T6190] netlink: 'syz.1.120': attribute type 3 has an invalid length.
[   63.154692][ T6207] team0: No ports can be present during mode change
[   63.248029][ T6213] xt_HMARK: proto mask must be zero with L3 mode
[   63.639611][ T5691] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.720116][ T5220] Bluetooth: hci1: command tx timeout
[   63.730086][ T5691] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.795475][ T5220] Bluetooth: hci2: command tx timeout
[   63.809180][ T5691] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.886578][ T5691] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.019835][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   64.022964][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   64.034183][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   64.041724][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   64.047750][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   64.050549][ T5691] bridge_slave_1: left allmulticast mode
[   64.055516][ T5691] bridge_slave_1: left promiscuous mode
[   64.063389][ T5691] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.073776][ T5691] bridge_slave_0: left allmulticast mode
[   64.083888][ T5691] bridge_slave_0: left promiscuous mode
[   64.088550][ T5691] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.213860][ T6260] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   64.416044][ T5691] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   64.421944][ T5691] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   64.427390][ T5691] bond0 (unregistering): Released all slaves
[   64.496431][ T5691] team0: Port device bond1 removed
[   64.500545][ T5691] bond1 (unregistering): Released all slaves
[   64.562399][ T5691] tipc: Disabling bearer <udp:syz2>
[   64.574183][ T5691] tipc: Left network mode
[   64.760329][ T6283] netlink: 'syz.0.156': attribute type 1 has an invalid length.
[   64.763017][ T6283] __nla_validate_parse: 8 callbacks suppressed
[   64.763024][ T6283] netlink: 244 bytes leftover after parsing attributes in process `syz.0.156'.
[   64.899502][ T5691] hsr_slave_0: left promiscuous mode
[   64.901744][ T5691] hsr_slave_1: left promiscuous mode
[   64.904206][ T5691] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   64.912570][ T5691] batman_adv: batadv0: Removing interface: batadv_slave_0
[   64.920078][ T5691] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   64.922692][ T5691] batman_adv: batadv0: Removing interface: batadv_slave_1
[   64.938745][ T5691] veth1_macvtap: left promiscuous mode
[   64.940927][ T5691] veth0_macvtap: left promiscuous mode
[   64.942990][ T5691] veth1_vlan: left promiscuous mode
[   64.944914][ T5691] veth0_vlan: left promiscuous mode
[   65.181721][ T5691] team0 (unregistering): Port device team_slave_1 removed
[   65.201230][ T5691] team0 (unregistering): Port device team_slave_0 removed
[   65.404522][ T6293] netlink: 12 bytes leftover after parsing attributes in process `syz.2.159'.
[   65.411320][ T6293] netlink: 12 bytes leftover after parsing attributes in process `syz.2.159'.
[   65.442768][ T6252] chnl_net:caif_netlink_parms(): no params data found
[   65.599489][ T6252] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.602257][ T6252] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.604723][ T6252] bridge_slave_0: entered allmulticast mode
[   65.630129][ T6252] bridge_slave_0: entered promiscuous mode
[   65.637877][ T6252] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.640568][ T6252] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.643935][ T6252] bridge_slave_1: entered allmulticast mode
[   65.653975][ T6252] bridge_slave_1: entered promiscuous mode
[   65.733929][ T6252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.761207][ T6315] bond0: option min_links: invalid value (18446744073709551604)
[   65.770996][ T6315] bond0: option min_links: allowed values 0 - 2147483647
[   65.781927][ T6252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.859040][ T6252] team0: Port device team_slave_0 added
[   65.865140][ T6252] team0: Port device team_slave_1 added
[   66.016234][ T6252] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.019496][ T6252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.036661][ T6252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.048594][ T6321] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[   66.058298][ T6252] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.061540][ T6321] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[   66.068798][ T6252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.079140][ T6321] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[   66.086281][ T6252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.115536][ T5220] Bluetooth: hci0: command tx timeout
[   66.168636][ T6252] hsr_slave_0: entered promiscuous mode
[   66.173947][ T6252] hsr_slave_1: entered promiscuous mode
[   66.818781][ T6252] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   66.840905][ T6252] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   66.850966][ T6346] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   66.869903][ T6252] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   66.876937][ T6252] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   67.049287][ T6363] openvswitch: netlink: IPv4 tun info is not correct
[   67.057947][ T6252] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.100471][ T6252] 8021q: adding VLAN 0 to HW filter on device team0
[   67.123388][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.125858][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.138243][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.140627][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.239477][ T6367] netlink: 'syz.0.178': attribute type 3 has an invalid length.
[   67.380364][ T6375] netlink: 'syz.0.179': attribute type 3 has an invalid length.
[   67.526097][ T6252] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.561719][ T6252] veth0_vlan: entered promiscuous mode
[   67.572261][ T6252] veth1_vlan: entered promiscuous mode
[   67.607665][ T6252] veth0_macvtap: entered promiscuous mode
[   67.611826][ T6252] veth1_macvtap: entered promiscuous mode
[   67.633719][ T6252] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.642533][ T6252] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.654492][ T6252] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.668529][ T6252] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.671647][ T6252] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.674507][ T6252] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.749602][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.752252][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.772240][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.775034][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.063971][ T6406] syzkaller0: entered promiscuous mode
[   68.066726][ T6406] syzkaller0: entered allmulticast mode
[   68.193121][ T6420] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[   69.219601][ T6445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.197'.
[   69.222795][ T6445] netlink: 'syz.0.197': attribute type 30 has an invalid length.
[   69.227944][ T6439] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   69.230938][ T6439] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   69.233788][ T6439] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   69.236895][ T6439] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   69.244772][ T6445] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   69.248645][ T6445] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   69.252156][ T6445] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   69.255375][ T6445] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   69.262098][ T6445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.197'.
[   69.266086][ T6445] netlink: 'syz.0.197': attribute type 30 has an invalid length.
[   69.284993][ T6439] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   69.288736][ T6439] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.318535][ T5691] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.349739][ T6439] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   69.353259][ T6439] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.433580][ T6448] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[   69.490584][ T6439] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   69.495013][ T6439] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.591838][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   69.600735][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   69.603912][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   69.607252][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   69.608044][ T6439] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   69.614309][ T6439] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.618897][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   69.712996][ T6439] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   69.716139][ T6439] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.729044][ T6439] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   69.731935][ T6439] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.741635][ T6439] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   69.744540][ T6439] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.804033][ T6439] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   69.807836][ T6439] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.890233][ T6454] chnl_net:caif_netlink_parms(): no params data found
[   70.030970][ T6454] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.048547][ T6454] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.050995][ T6454] bridge_slave_0: entered allmulticast mode
[   70.053919][ T6454] bridge_slave_0: entered promiscuous mode
[   70.068684][ T6454] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.071210][ T6454] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.073810][ T6454] bridge_slave_1: entered allmulticast mode
[   70.096097][ T6454] bridge_slave_1: entered promiscuous mode
[   70.149356][ T6480] netlink: 12 bytes leftover after parsing attributes in process `syz.2.207'.
[   70.178649][ T6480] pim6reg: entered allmulticast mode
[   70.184028][ T6454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.191916][ T6480] pim6reg: left allmulticast mode
[   70.210514][ T6454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.239995][ T6454] team0: Port device team_slave_0 added
[   70.244208][ T6454] team0: Port device team_slave_1 added
[   70.297021][ T6454] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.300528][ T6454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.322409][ T6454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.335633][ T6454] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.345535][ T6454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.368088][ T6454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.435075][ T6454] hsr_slave_0: entered promiscuous mode
[   70.440688][ T6454] hsr_slave_1: entered promiscuous mode
[   70.443009][ T6454] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   70.446007][ T6454] Cannot create hsr debugfs directory
[   70.463307][ T5691] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.540363][ T6493] syzkaller1: entered promiscuous mode
[   70.542201][ T6493] syzkaller1: entered allmulticast mode
[   70.975121][ T5691] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.038152][ T5691] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.081099][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   71.084007][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   71.193008][ T5691] bridge_slave_1: left allmulticast mode
[   71.195964][ T5691] bridge_slave_1: left promiscuous mode
[   71.198071][ T5691] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.202222][ T5691] bridge_slave_0: left allmulticast mode
[   71.204105][ T5691] bridge_slave_0: left promiscuous mode
[   71.208680][ T5691] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.414500][ T5691] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   71.419295][ T5691] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   71.423188][ T5691] bond0 (unregistering): Released all slaves
[   71.684211][ T6512] netlink: 4 bytes leftover after parsing attributes in process `syz.0.215'.
[   71.721272][   T55] Bluetooth: hci0: command tx timeout
[   71.741412][ T5691] hsr_slave_0: left promiscuous mode
[   71.744385][ T5691] hsr_slave_1: left promiscuous mode
[   71.752745][ T5691] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   71.756128][ T5691] batman_adv: batadv0: Removing interface: batadv_slave_0
[   71.759754][ T5691] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   71.762769][ T5691] batman_adv: batadv0: Removing interface: batadv_slave_1
[   71.778278][ T5691] veth1_macvtap: left promiscuous mode
[   71.780726][ T5691] veth0_macvtap: left promiscuous mode
[   71.783053][ T5691] veth1_vlan: left promiscuous mode
[   71.785584][ T5691] veth0_vlan: left promiscuous mode
[   72.068256][ T5691] team0 (unregistering): Port device team_slave_1 removed
[   72.086666][ T5691] team0 (unregistering): Port device team_slave_0 removed
[   72.321818][ T6454] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   72.332696][ T6454] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   72.348544][ T6454] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   72.362585][ T6454] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   72.443751][ T6454] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.453682][ T6454] 8021q: adding VLAN 0 to HW filter on device team0
[   72.460615][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.462938][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.476866][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.479280][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.635657][ T6454] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.660528][ T6454] veth0_vlan: entered promiscuous mode
[   72.667932][ T6454] veth1_vlan: entered promiscuous mode
[   72.689188][ T6454] veth0_macvtap: entered promiscuous mode
[   72.698038][ T6454] veth1_macvtap: entered promiscuous mode
[   72.711883][ T6454] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.731784][ T6454] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.742070][ T6454] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.744946][ T6454] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.749725][ T6454] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.752681][ T6454] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.817044][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.823285][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.841509][ T5105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.844072][ T5105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.561994][ T6541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.221'.
[   73.628150][ T6545] netlink: 'syz.2.223': attribute type 4 has an invalid length.
[   73.717798][ T6553] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   74.230826][ T6594] netlink: 16 bytes leftover after parsing attributes in process `syz.2.244'.
[   74.262512][ T6596] netlink: 4 bytes leftover after parsing attributes in process `syz.2.245'.
[   74.518389][ T6608] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[   74.881608][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.279840][   T24] IPVS: starting estimator thread 0...
[   75.282692][ T6634] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[   75.376819][ T5220] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   75.380420][ T5220] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   75.383356][ T5220] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   75.388930][ T5220] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   75.393394][ T5220] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   75.396724][ T6640] IPVS: using max 74 ests per chain, 177600 per kthread
[   75.670692][ T6643] chnl_net:caif_netlink_parms(): no params data found
[   75.817955][ T6643] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.820947][ T6643] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.824017][ T6643] bridge_slave_0: entered allmulticast mode
[   75.832712][ T6643] bridge_slave_0: entered promiscuous mode
[   75.840951][ T6643] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.843994][ T6643] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.847510][ T6643] bridge_slave_1: entered allmulticast mode
[   75.851554][ T6643] bridge_slave_1: entered promiscuous mode
[   75.903969][ T6661] syzkaller0: entered promiscuous mode
[   75.907230][ T6661] syzkaller0: entered allmulticast mode
[   75.912725][ T6643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   76.726430][ T6643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   76.743774][ T6670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.274'.
[   76.778778][ T6643] team0: Port device team_slave_0 added
[   76.783979][ T6643] team0: Port device team_slave_1 added
[   76.860511][ T6643] batman_adv: batadv0: Adding interface: batadv_slave_0
[   76.868798][ T6643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.885999][ T6643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   76.905865][ T6643] batman_adv: batadv0: Adding interface: batadv_slave_1
[   76.908832][ T6643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.922961][ T6643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   76.986038][ T6643] hsr_slave_0: entered promiscuous mode
[   76.989608][ T6643] hsr_slave_1: entered promiscuous mode
[   77.154000][ T6690] netlink: 12 bytes leftover after parsing attributes in process `syz.0.284'.
[   77.173942][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.199978][ T6690] bond1: entered promiscuous mode
[   77.202303][ T6690] 8021q: adding VLAN 0 to HW filter on device bond1
[   77.221217][ T6690] 8021q: adding VLAN 0 to HW filter on device bond1
[   77.224227][ T6690] bond1: (slave vcan1): The slave device specified does not support setting the MAC address
[   77.230282][ T6690] bond1: (slave vcan1): Error -95 calling set_mac_address
[   77.254078][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.337799][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.449162][   T13] bridge_slave_1: left allmulticast mode
[   77.451169][   T13] bridge_slave_1: left promiscuous mode
[   77.457067][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.462140][   T13] bridge_slave_0: left allmulticast mode
[   77.463994][   T13] bridge_slave_0: left promiscuous mode
[   77.466538][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.476971][ T5220] Bluetooth: hci0: command tx timeout
[   77.754736][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   77.759536][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   77.763375][   T13] bond0 (unregistering): Released all slaves
[   78.030859][ T6718] netlink: 12 bytes leftover after parsing attributes in process `syz.2.292'.
[   78.202136][ T6724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.295'.
[   78.216203][   T13] hsr_slave_0: left promiscuous mode
[   78.218798][   T13] hsr_slave_1: left promiscuous mode
[   78.221179][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   78.223874][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   78.227744][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   78.230149][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   78.238046][   T13] veth1_macvtap: left promiscuous mode
[   78.239825][   T13] veth0_macvtap: left promiscuous mode
[   78.241635][   T13] veth1_vlan: left promiscuous mode
[   78.243437][   T13] veth0_vlan: left promiscuous mode
[   78.474858][   T13] team0 (unregistering): Port device team_slave_1 removed
[   78.494958][   T13] team0 (unregistering): Port device team_slave_0 removed
[   78.835433][ T6643] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   78.863606][ T6643] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   78.872708][ T6731] netlink: 272 bytes leftover after parsing attributes in process `syz.0.297'.
[   78.897497][ T6643] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   78.930684][ T6643] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   78.966242][ T6739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.301'.
[   79.063960][ T6643] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.109122][ T6643] 8021q: adding VLAN 0 to HW filter on device team0
[   79.131854][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.134955][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.177423][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.180488][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.518182][ T6643] 8021q: adding VLAN 0 to HW filter on device batadv0
[   79.555919][ T5220] Bluetooth: hci0: command tx timeout
[   79.593585][ T6643] veth0_vlan: entered promiscuous mode
[   79.617017][ T6643] veth1_vlan: entered promiscuous mode
[   79.657861][ T6643] veth0_macvtap: entered promiscuous mode
[   79.673660][ T6643] veth1_macvtap: entered promiscuous mode
[   79.704853][ T6643] batman_adv: batadv0: Interface activated: batadv_slave_0
[   79.726678][ T6643] batman_adv: batadv0: Interface activated: batadv_slave_1
[   79.740081][ T6643] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   79.744033][ T6643] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   79.753746][ T6643] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   79.760200][ T6643] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   79.876538][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.881838][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.942258][ T6815] netlink: 8 bytes leftover after parsing attributes in process `syz.2.325'.
[   79.943648][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.951470][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.137451][ T6887] netlink: 'syz.2.345': attribute type 49 has an invalid length.
[   82.208011][ T6893] ieee802154 phy0 wpan0: encryption failed: -22
[   82.378982][ T6904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.352'.
[   82.382777][ T6904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.352'.
[   82.432573][ T6901] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.436553][ T6901] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.603164][ T6901] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   82.616667][ T6901] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   82.744979][ T6901] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   82.748234][ T6901] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   82.751151][ T6901] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   82.754179][ T6901] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   82.795335][ T6901] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   82.798691][ T6901] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   82.802681][ T6901] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   82.806048][ T6901] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   82.852360][ T5852] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.993731][ T6909] Cannot find add_set index 0 as target
[   83.002750][ T6910] ieee802154 phy0 wpan0: encryption failed: -90
[   83.183716][ T5852] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.231407][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   83.234980][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   83.244420][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   83.247756][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   83.250287][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   83.289861][ T5852] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.336429][ T5852] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.341476][ T6921] IPv6: NLM_F_CREATE should be specified when creating new route
[   83.426095][   T33] audit: type=1800 audit(1752683754.095:2): pid=6921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.360" name="memory.events" dev="tmpfs" ino=796 res=0 errno=0
[   83.535073][ T6925] chnl_net:caif_netlink_parms(): no params data found
[   83.590832][ T5852] bridge_slave_1: left allmulticast mode
[   83.592768][ T5852] bridge_slave_1: left promiscuous mode
[   83.598923][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.618463][ T5852] bridge_slave_0: left allmulticast mode
[   83.630848][ T5852] bridge_slave_0: left promiscuous mode
[   83.632869][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.837438][ T6954] netlink: 20 bytes leftover after parsing attributes in process `syz.0.368'.
[   83.857150][ T5852] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   83.861995][ T5852] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   83.869160][ T5852] bond0 (unregistering): Released all slaves
[   84.003867][ T6925] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.007560][ T6925] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.010097][ T6925] bridge_slave_0: entered allmulticast mode
[   84.013521][ T6925] bridge_slave_0: entered promiscuous mode
[   84.018178][ T6925] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.020638][ T6925] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.023086][ T6925] bridge_slave_1: entered allmulticast mode
[   84.028932][ T6925] bridge_slave_1: entered promiscuous mode
[   84.111080][ T6925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   84.117087][ T6925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   84.150016][ T6925] team0: Port device team_slave_0 added
[   84.180612][ T5852] hsr_slave_0: left promiscuous mode
[   84.181753][ T6975] xt_CT: You must specify a L4 protocol and not use inversions on it
[   84.188363][ T5852] hsr_slave_1: left promiscuous mode
[   84.190568][ T5852] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   84.203285][ T5852] batman_adv: batadv0: Removing interface: batadv_slave_0
[   84.206481][ T5852] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   84.209090][ T5852] batman_adv: batadv0: Removing interface: batadv_slave_1
[   84.227897][ T5852] veth1_macvtap: left promiscuous mode
[   84.229788][ T5852] veth0_macvtap: left promiscuous mode
[   84.231732][ T5852] veth1_vlan: left promiscuous mode
[   84.234928][ T5852] veth0_vlan: left promiscuous mode
[   84.601907][ T5852] team0 (unregistering): Port device team_slave_1 removed
[   84.621702][ T7000] netlink: 20 bytes leftover after parsing attributes in process `syz.0.381'.
[   84.628541][ T5852] team0 (unregistering): Port device team_slave_0 removed
[   84.900701][ T6925] team0: Port device team_slave_1 added
[   84.947011][ T6925] batman_adv: batadv0: Adding interface: batadv_slave_0
[   84.949218][ T6925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.958478][ T6925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   84.967150][ T6925] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.969493][ T6925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.983218][ T6925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   85.043094][ T6925] hsr_slave_0: entered promiscuous mode
[   85.048454][ T6925] hsr_slave_1: entered promiscuous mode
[   85.290071][ T7031] netlink: 6 bytes leftover after parsing attributes in process `syz.2.392'.
[   85.315381][   T55] Bluetooth: hci0: command tx timeout
[   85.475747][ T7036] netlink: 'syz.2.394': attribute type 1 has an invalid length.
[   85.481258][ T7036] nbd: error processing sock list
[   85.488218][ T7036] block nbd0: shutting down sockets
[   85.499934][ T7043] netlink: 140 bytes leftover after parsing attributes in process `syz.0.397'.
[   85.744621][ T6925] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   85.755145][ T6925] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   85.767055][ T6925] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   85.780608][ T6925] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   85.991121][ T6925] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.026793][ T6925] 8021q: adding VLAN 0 to HW filter on device team0
[   86.048361][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.050651][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[   86.063077][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.065506][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[   86.254667][ T7104] netlink: 9280 bytes leftover after parsing attributes in process `syz.2.414'.
[   86.298226][ T6925] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.377206][ T6925] veth0_vlan: entered promiscuous mode
[   86.391125][ T6925] veth1_vlan: entered promiscuous mode
[   86.427144][ T6925] veth0_macvtap: entered promiscuous mode
[   86.442148][ T6925] veth1_macvtap: entered promiscuous mode
[   86.451348][   T10] cfg80211: failed to load regulatory.db
[   86.508987][ T6925] batman_adv: batadv0: Interface activated: batadv_slave_0
[   86.522673][ T6925] batman_adv: batadv0: Interface activated: batadv_slave_1
[   86.552476][ T6925] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.558455][ T6925] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.561914][ T6925] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.567458][ T6925] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.624452][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.627275][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.648245][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.651428][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.598873][   T52] IPVS: starting estimator thread 0...
[   87.697704][ T7143] IPVS: using max 79 ests per chain, 189600 per kthread
[   87.854961][ T7165] netlink: 240 bytes leftover after parsing attributes in process `syz.2.437'.
[   87.924943][ T7173] netlink: 'syz.0.440': attribute type 21 has an invalid length.
[   88.058708][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.917305][ T7196] syzkaller0: entered promiscuous mode
[   88.919164][ T7196] syzkaller0: entered allmulticast mode
[   88.950107][ T5220] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   88.954087][ T5220] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   88.960320][ T5220] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   88.965139][ T5220] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   88.969004][ T5220] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   89.006334][ T7196] netlink: 12 bytes leftover after parsing attributes in process `syz.0.451'.
[   89.299720][ T7203] chnl_net:caif_netlink_parms(): no params data found
[   89.436418][ T7227] xt_policy: too many policy elements
[   90.172480][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.267224][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.279815][ T7203] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.282667][ T7203] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.288859][ T7203] bridge_slave_0: entered allmulticast mode
[   90.292985][ T7203] bridge_slave_0: entered promiscuous mode
[   90.305670][ T7203] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.308796][ T7203] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.312034][ T7203] bridge_slave_1: entered allmulticast mode
[   90.318354][ T7203] bridge_slave_1: entered promiscuous mode
[   90.331964][ T7236] netlink: 3 bytes leftover after parsing attributes in process `syz.0.467'.
[   90.341613][ T7236] netlink: 4 bytes leftover after parsing attributes in process `syz.0.467'.
[   90.346439][ T7236] netlink: 3 bytes leftover after parsing attributes in process `syz.0.467'.
[   90.350515][ T7236] netlink: 4 bytes leftover after parsing attributes in process `syz.0.467'.
[   90.353884][ T7236] netlink: 3 bytes leftover after parsing attributes in process `syz.0.467'.
[   90.368340][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.411826][ T7203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.424739][ T7203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.511348][ T7203] team0: Port device team_slave_0 added
[   90.549939][ T7203] team0: Port device team_slave_1 added
[   90.624801][ T7203] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.630356][ T7203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.641134][ T7203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.645828][   T13] bridge_slave_1: left allmulticast mode
[   90.648019][   T13] bridge_slave_1: left promiscuous mode
[   90.651202][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.656420][   T13] bridge_slave_0: left allmulticast mode
[   90.658421][   T13] bridge_slave_0: left promiscuous mode
[   90.661799][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.730301][ T7250] xt_CT: You must specify a L4 protocol and not use inversions on it
[   90.954394][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   90.962019][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   90.969295][   T13] bond0 (unregistering): Released all slaves
[   90.981439][ T7203] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.984535][ T7203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.996159][ T7203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.005366][ T5220] Bluetooth: hci0: command tx timeout
[   91.087009][ T7203] hsr_slave_0: entered promiscuous mode
[   91.090414][ T7203] hsr_slave_1: entered promiscuous mode
[   91.093107][ T7203] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   91.096743][ T7203] Cannot create hsr debugfs directory
[   91.319189][  T790] hid-generic 0005:04F3:8002.0002: collection stack underflow
[   91.321696][  T790] hid-generic 0005:04F3:8002.0002: item 0 0 0 12 parsing failed
[   91.336213][  T790] hid-generic 0005:04F3:8002.0002: probe with driver hid-generic failed with error -22
[   91.370818][   T13] hsr_slave_0: left promiscuous mode
[   91.394709][   T13] hsr_slave_1: left promiscuous mode
[   91.400376][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   91.408320][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   91.417868][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   91.421389][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   91.460660][   T13] veth1_macvtap: left promiscuous mode
[   91.463154][   T13] veth0_macvtap: left promiscuous mode
[   91.475181][   T13] veth1_vlan: left promiscuous mode
[   91.486677][   T13] veth0_vlan: left promiscuous mode
[   91.888889][   T13] team0 (unregistering): Port device team_slave_1 removed
[   91.917077][   T13] team0 (unregistering): Port device team_slave_0 removed
[   92.242485][ T7286] IPVS: Error connecting to the multicast addr
[   92.494767][ T7299] netlink: 'syz.2.485': attribute type 10 has an invalid length.
[   92.505158][ T7299] netlink: 40 bytes leftover after parsing attributes in process `syz.2.485'.
[   92.511125][ T7299] bridge0: port 3(dummy0) entered blocking state
[   92.524747][ T7299] bridge0: port 3(dummy0) entered disabled state
[   92.531111][ T7299] dummy0: entered allmulticast mode
[   92.537796][ T7299] dummy0: entered promiscuous mode
[   92.540031][ T7299] bridge0: port 3(dummy0) entered blocking state
[   92.542591][ T7299] bridge0: port 3(dummy0) entered forwarding state
[   92.811910][ T7203] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   92.825558][ T7203] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   92.829918][ T7203] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   92.834650][ T7203] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   92.902599][ T7203] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.914219][ T7203] 8021q: adding VLAN 0 to HW filter on device team0
[   92.920085][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.922589][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.936322][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.938839][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.077302][ T7203] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.079892][ T5220] Bluetooth: hci0: command tx timeout
[   93.134119][ T7203] veth0_vlan: entered promiscuous mode
[   93.149791][ T7203] veth1_vlan: entered promiscuous mode
[   93.161061][ T7351] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[   93.187316][ T7203] veth0_macvtap: entered promiscuous mode
[   93.196376][ T7203] veth1_macvtap: entered promiscuous mode
[   93.211065][ T7203] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.220438][ T7203] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.228888][ T7203] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.231898][ T7203] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.234816][ T7203] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.238532][ T7203] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.333066][ T2186] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.343535][ T2186] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.396484][ T7364] netlink: 8 bytes leftover after parsing attributes in process `syz.2.502'.
[   93.424717][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.427690][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.511412][ T7261] ==================================================================
[   93.514082][ T7261] BUG: KASAN: slab-use-after-free in __mutex_lock+0x738/0xe80
[   93.516445][ T7261] Read of size 8 at addr ffff88803a62c0a0 by task khidpd_04f38002/7261
[   93.519992][ T7261] 
[   93.520846][ T7261] CPU: 0 UID: 0 PID: 7261 Comm: khidpd_04f38002 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[   93.520856][ T7261] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   93.520861][ T7261] Call Trace:
[   93.520865][ T7261]  <TASK>
[   93.520869][ T7261]  dump_stack_lvl+0x189/0x250
[   93.520880][ T7261]  ? __virt_addr_valid+0x1c8/0x5c0
[   93.520891][ T7261]  ? rcu_is_watching+0x15/0xb0
[   93.520899][ T7261]  ? __kasan_check_byte+0x12/0x40
[   93.520908][ T7261]  ? __pfx_dump_stack_lvl+0x10/0x10
[   93.520916][ T7261]  ? rcu_is_watching+0x15/0xb0
[   93.520924][ T7261]  ? lock_release+0x4b/0x3e0
[   93.520932][ T7261]  ? __virt_addr_valid+0x1c8/0x5c0
[   93.520941][ T7261]  ? __virt_addr_valid+0x4a5/0x5c0
[   93.520950][ T7261]  print_report+0xd2/0x2b0
[   93.520957][ T7261]  ? __mutex_lock+0x738/0xe80
[   93.520964][ T7261]  kasan_report+0x118/0x150
[   93.520973][ T7261]  ? __mutex_lock+0x738/0xe80
[   93.520980][ T7261]  __mutex_lock+0x738/0xe80
[   93.520987][ T7261]  ? __mutex_lock+0x51b/0xe80
[   93.520994][ T7261]  ? l2cap_unregister_user+0x6a/0x1b0
[   93.521006][ T7261]  ? __pfx___mutex_lock+0x10/0x10
[   93.521014][ T7261]  ? __pfx___timer_delete_sync+0x10/0x10
[   93.521025][ T7261]  l2cap_unregister_user+0x6a/0x1b0
[   93.521037][ T7261]  hidp_session_thread+0x3c9/0x410
[   93.521044][ T7261]  ? __pfx_hidp_session_thread+0x10/0x10
[   93.521051][ T7261]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   93.521061][ T7261]  ? __pfx_hidp_session_wake_function+0x10/0x10
[   93.521068][ T7261]  ? __pfx_hidp_session_wake_function+0x10/0x10
[   93.521075][ T7261]  ? __kthread_parkme+0x7b/0x200
[   93.521083][ T7261]  ? __kthread_parkme+0x1a1/0x200
[   93.521092][ T7261]  kthread+0x711/0x8a0
[   93.521102][ T7261]  ? __pfx_hidp_session_thread+0x10/0x10
[   93.521109][ T7261]  ? __pfx_kthread+0x10/0x10
[   93.521118][ T7261]  ? _raw_spin_unlock_irq+0x23/0x50
[   93.521128][ T7261]  ? lockdep_hardirqs_on+0x9c/0x150
[   93.521138][ T7261]  ? __pfx_kthread+0x10/0x10
[   93.521147][ T7261]  ret_from_fork+0x3fc/0x770
[   93.521155][ T7261]  ? __pfx_ret_from_fork+0x10/0x10
[   93.521163][ T7261]  ? __switch_to_asm+0x39/0x70
[   93.521172][ T7261]  ? __switch_to_asm+0x33/0x70
[   93.521180][ T7261]  ? __pfx_kthread+0x10/0x10
[   93.521189][ T7261]  ret_from_fork_asm+0x1a/0x30
[   93.521201][ T7261]  </TASK>
[   93.521203][ T7261] 
[   93.602400][ T7261] Allocated by task 7203:
[   93.603748][ T7261]  kasan_save_track+0x3e/0x80
[   93.605251][ T7261]  __kasan_kmalloc+0x93/0xb0
[   93.606971][ T7261]  __kmalloc_noprof+0x27a/0x4f0
[   93.608523][ T7261]  hci_alloc_dev_priv+0x28/0x2040
[   93.610093][ T7261]  vhci_create_device+0x120/0x6e0
[   93.611726][ T7261]  vhci_write+0x3ce/0x4a0
[   93.613146][ T7261]  vfs_write+0x54b/0xa90
[   93.614529][ T7261]  ksys_write+0x145/0x250
[   93.616035][ T7261]  do_syscall_64+0xfa/0x3b0
[   93.617534][ T7261]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   93.619475][ T7261] 
[   93.620252][ T7261] Freed by task 7203:
[   93.621557][ T7261]  kasan_save_track+0x3e/0x80
[   93.623089][ T7261]  kasan_save_free_info+0x46/0x50
[   93.624768][ T7261]  __kasan_slab_free+0x62/0x70
[   93.626632][ T7261]  kfree+0x18e/0x440
[   93.628324][ T7261]  bt_host_release+0x82/0x90
[   93.629950][ T7261]  device_release+0x9c/0x1c0
[   93.631478][ T7261]  kobject_put+0x22b/0x480
[   93.632949][ T7261]  vhci_release+0x88/0xd0
[   93.634333][ T7261]  __fput+0x44c/0xa70
[   93.635724][ T7261]  task_work_run+0x1d4/0x260
[   93.637522][ T7261]  do_exit+0x6b5/0x22e0
[   93.638894][ T7261]  do_group_exit+0x21c/0x2d0
[   93.640403][ T7261]  __x64_sys_exit_group+0x3f/0x40
[   93.642061][ T7261]  x64_sys_call+0x21ba/0x21c0
[   93.643567][ T7261]  do_syscall_64+0xfa/0x3b0
[   93.644991][ T7261]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   93.646879][ T7261] 
[   93.647679][ T7261] Last potentially related work creation:
[   93.649528][ T7261]  kasan_save_stack+0x3e/0x60
[   93.651060][ T7261]  kasan_record_aux_stack+0xbd/0xd0
[   93.652787][ T7261]  insert_work+0x3d/0x330
[   93.654219][ T7261]  __queue_work+0xbd9/0xfe0
[   93.655747][ T7261]  queue_work_on+0x181/0x270
[   93.657197][ T7261]  process_scheduled_works+0xae1/0x17b0
[   93.658956][ T7261]  worker_thread+0x8a0/0xda0
[   93.660416][ T7261]  kthread+0x711/0x8a0
[   93.661746][ T7261]  ret_from_fork+0x3fc/0x770
[   93.663236][ T7261]  ret_from_fork_asm+0x1a/0x30
[   93.664748][ T7261] 
[   93.665577][ T7261] Second to last potentially related work creation:
[   93.667590][ T7261]  kasan_save_stack+0x3e/0x60
[   93.669516][ T7261]  kasan_record_aux_stack+0xbd/0xd0
[   93.671563][ T7261]  insert_work+0x3d/0x330
[   93.673196][ T7261]  __queue_work+0xcfc/0xfe0
[   93.675031][ T7261]  call_timer_fn+0x17e/0x5f0
[   93.676732][ T7261]  __run_timer_base+0x646/0x860
[   93.678665][ T7261]  run_timer_softirq+0xb7/0x180
[   93.680442][ T7261]  handle_softirqs+0x286/0x870
[   93.682255][ T7261]  __irq_exit_rcu+0xca/0x1f0
[   93.683850][ T7261]  irq_exit_rcu+0x9/0x30
[   93.685349][ T7261]  sysvec_apic_timer_interrupt+0xa6/0xc0
[   93.687174][ T7261]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[   93.689193][ T7261] 
[   93.690017][ T7261] The buggy address belongs to the object at ffff88803a62c000
[   93.690017][ T7261]  which belongs to the cache kmalloc-8k of size 8192
[   93.694670][ T7261] The buggy address is located 160 bytes inside of
[   93.694670][ T7261]  freed 8192-byte region [ffff88803a62c000, ffff88803a62e000)
[   93.699206][ T7261] 
[   93.700026][ T7261] The buggy address belongs to the physical page:
[   93.702085][ T7261] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803a628000 pfn:0x3a628
[   93.705252][ T7261] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[   93.707967][ T7261] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[   93.710433][ T7261] page_type: f5(slab)
[   93.711730][ T7261] raw: 00fff00000000040 ffff88801a442280 ffffea0000a73000 dead000000000004
[   93.714479][ T7261] raw: ffff88803a628000 0000000000020001 00000000f5000000 0000000000000000
[   93.717307][ T7261] head: 00fff00000000040 ffff88801a442280 ffffea0000a73000 dead000000000004
[   93.720184][ T7261] head: ffff88803a628000 0000000000020001 00000000f5000000 0000000000000000
[   93.722999][ T7261] head: 00fff00000000003 ffffea0000e98a01 00000000ffffffff 00000000ffffffff
[   93.725910][ T7261] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[   93.728587][ T7261] page dumped because: kasan: bad access detected
[   93.730897][ T7261] page_owner tracks the page as allocated
[   93.732946][ T7261] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5575, tgid 5575 (dhcpcd), ts 85415147626, free_ts 62066996618
[   93.740465][ T7261]  post_alloc_hook+0x240/0x2a0
[   93.742249][ T7261]  get_page_from_freelist+0x21e4/0x22c0
[   93.744357][ T7261]  __alloc_frozen_pages_noprof+0x181/0x370
[   93.746638][ T7261]  alloc_pages_mpol+0x232/0x4a0
[   93.748528][ T7261]  allocate_slab+0x8a/0x3b0
[   93.750288][ T7261]  ___slab_alloc+0xbfc/0x1480
[   93.751910][ T7261]  __kmalloc_node_track_caller_noprof+0x2f8/0x4e0
[   93.754142][ T7261]  kmalloc_reserve+0x136/0x290
[   93.755834][ T7261]  __alloc_skb+0x142/0x2d0
[   93.757296][ T7261]  netlink_dump+0x169/0xe90
[   93.758780][ T7261]  netlink_recvmsg+0x676/0xa30
[   93.760352][ T7261]  sock_recvmsg+0x22c/0x270
[   93.762051][ T7261]  ____sys_recvmsg+0x1c9/0x460
[   93.763637][ T7261]  ___sys_recvmsg+0x1b5/0x510
[   93.765170][ T7261]  __x64_sys_recvmsg+0x198/0x260
[   93.766893][ T7261]  do_syscall_64+0xfa/0x3b0
[   93.768440][ T7261] page last free pid 5755 tgid 5755 stack trace:
[   93.770573][ T7261]  __free_frozen_pages+0xc71/0xe70
[   93.772215][ T7261]  __put_partials+0x161/0x1c0
[   93.773690][ T7261]  put_cpu_partial+0x17c/0x250
[   93.775225][ T7261]  __slab_free+0x2f7/0x400
[   93.776608][ T7261]  qlist_free_all+0x97/0x140
[   93.778034][ T7261]  kasan_quarantine_reduce+0x148/0x160
[   93.779722][ T7261]  __kasan_slab_alloc+0x22/0x80
[   93.781396][ T7261]  kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[   93.783201][ T7261]  __alloc_skb+0x112/0x2d0
[   93.784600][ T7261]  tcp_stream_alloc_skb+0x3d/0x340
[   93.786202][ T7261]  tcp_sendmsg_locked+0xf38/0x5710
[   93.787813][ T7261]  tcp_sendmsg+0x2f/0x50
[   93.789151][ T7261]  __sock_sendmsg+0x19c/0x270
[   93.790702][ T7261]  sock_write_iter+0x258/0x330
[   93.792338][ T7261]  vfs_write+0x54b/0xa90
[   93.793712][ T7261]  ksys_write+0x145/0x250
[   93.795142][ T7261] 
[   93.795940][ T7261] Memory state around the buggy address:
[   93.797721][ T7261]  ffff88803a62bf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   93.800244][ T7261]  ffff88803a62c000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   93.803090][ T7261] >ffff88803a62c080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   93.805711][ T7261]                                ^
[   93.807342][ T7261]  ffff88803a62c100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   93.809874][ T7261]  ffff88803a62c180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   93.812378][ T7261] ==================================================================
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   93.815627][ T7261] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   93.818038][ T7261] CPU: 0 UID: 0 PID: 7261 Comm: khidpd_04f38002 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[   93.822341][ T7261] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   93.825518][ T7261] Call Trace:
[   93.826645][ T7261]  <TASK>
[   93.827656][ T7261]  dump_stack_lvl+0x99/0x250
[   93.829223][ T7261]  ? __asan_memcpy+0x40/0x70
[   93.831038][ T7261]  ? __pfx_dump_stack_lvl+0x10/0x10
[   93.832964][ T7261]  ? __pfx__printk+0x10/0x10
[   93.834477][ T7261]  panic+0x2db/0x790
[   93.835729][ T7261]  ? __pfx_panic+0x10/0x10
[   93.837107][ T7261]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[   93.838970][ T7261]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   93.840817][ T7261]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   93.842811][ T7261]  ? print_memory_metadata+0x314/0x400
[   93.844526][ T7261]  ? __mutex_lock+0x738/0xe80
[   93.846020][ T7261]  check_panic_on_warn+0x89/0xb0
[   93.847622][ T7261]  ? __mutex_lock+0x738/0xe80
[   93.849137][ T7261]  end_report+0x78/0x160
[   93.850583][ T7261]  kasan_report+0x129/0x150
[   93.852323][ T7261]  ? __mutex_lock+0x738/0xe80
[   93.853982][ T7261]  __mutex_lock+0x738/0xe80
[   93.855603][ T7261]  ? __mutex_lock+0x51b/0xe80
[   93.857374][ T7261]  ? l2cap_unregister_user+0x6a/0x1b0
[   93.859351][ T7261]  ? __pfx___mutex_lock+0x10/0x10
[   93.861231][ T7261]  ? __pfx___timer_delete_sync+0x10/0x10
[   93.863327][ T7261]  l2cap_unregister_user+0x6a/0x1b0
[   93.864970][ T7261]  hidp_session_thread+0x3c9/0x410
[   93.866632][ T7261]  ? __pfx_hidp_session_thread+0x10/0x10
[   93.868534][ T7261]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   93.870481][ T7261]  ? __pfx_hidp_session_wake_function+0x10/0x10
[   93.872864][ T7261]  ? __pfx_hidp_session_wake_function+0x10/0x10
[   93.874895][ T7261]  ? __kthread_parkme+0x7b/0x200
[   93.876447][ T7261]  ? __kthread_parkme+0x1a1/0x200
[   93.878090][ T7261]  kthread+0x711/0x8a0
[   93.879479][ T7261]  ? __pfx_hidp_session_thread+0x10/0x10
[   93.881470][ T7261]  ? __pfx_kthread+0x10/0x10
[   93.883092][ T7261]  ? _raw_spin_unlock_irq+0x23/0x50
[   93.884788][ T7261]  ? lockdep_hardirqs_on+0x9c/0x150
[   93.886575][ T7261]  ? __pfx_kthread+0x10/0x10
[   93.888149][ T7261]  ret_from_fork+0x3fc/0x770
[   93.889682][ T7261]  ? __pfx_ret_from_fork+0x10/0x10
[   93.891404][ T7261]  ? __switch_to_asm+0x39/0x70
[   93.892982][ T7261]  ? __switch_to_asm+0x33/0x70
[   93.894577][ T7261]  ? __pfx_kthread+0x10/0x10
[   93.896185][ T7261]  ret_from_fork_asm+0x1a/0x30
[   93.897731][ T7261]  </TASK>
[   93.899400][ T7261] Kernel Offset: disabled
[   93.900841][ T7261] Rebooting in 86400 seconds..

VM DIAGNOSIS:
16:36:04  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000061 RBX=0000000000000061 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90002aa7370
R8 =ffff888107cb0237 R9 =1ffff11020f96046 R10=dffffc0000000000 R11=ffffffff85478780
R12=dffffc0000000000 R13=ffffffff99af98b8 R14=ffffffff99dfe6e0 R15=0000000000000000
RIP=ffffffff854787fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fffea78ada8 CR3=0000000026a7e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 ff000000000000ff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fe072c11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000003818 RBX=000000000000002a RCX=ffff8881079f1cc0 RDX=ffff88810a424f98
RSI=0000000000000000 RDI=ffff88810a424faa RBP=ffffc90003276cf0 RSP=ffffc90003276ae0
R8 =ffffffff8fa1f3f7 R9 =1ffffffff1f43e7e R10=dffffc0000000000 R11=fffffbfff1f43e7f
R12=00000000ffffffff R13=dffffc0000000000 R14=ffffc900075c0000 R15=00000000ffffffd5
RIP=ffffffff868ec251 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f6a30181800 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000140 CR3=0000000028598000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
