last executing test programs:

40.441565289s ago: executing program 1 (id=689):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x0, 0x5, 0x800}, 0x5, 0x0, 0xffffff3d, 0x6, 0xb, 0x1, 0x10, 0x12, 0x2, 0x4, {0x0, 0xcecc, 0x7, 0x5d, 0xe9, 0x7}}}}]}, 0x78}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xe, 0x3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xffff}}]}}]}, 0x38}}, 0x4000)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

33.708524338s ago: executing program 1 (id=689):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x0, 0x5, 0x800}, 0x5, 0x0, 0xffffff3d, 0x6, 0xb, 0x1, 0x10, 0x12, 0x2, 0x4, {0x0, 0xcecc, 0x7, 0x5d, 0xe9, 0x7}}}}]}, 0x78}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xe, 0x3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xffff}}]}}]}, 0x38}}, 0x4000)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

24.459913679s ago: executing program 1 (id=689):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x0, 0x5, 0x800}, 0x5, 0x0, 0xffffff3d, 0x6, 0xb, 0x1, 0x10, 0x12, 0x2, 0x4, {0x0, 0xcecc, 0x7, 0x5d, 0xe9, 0x7}}}}]}, 0x78}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xe, 0x3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xffff}}]}}]}, 0x38}}, 0x4000)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

17.043252736s ago: executing program 1 (id=689):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x0, 0x5, 0x800}, 0x5, 0x0, 0xffffff3d, 0x6, 0xb, 0x1, 0x10, 0x12, 0x2, 0x4, {0x0, 0xcecc, 0x7, 0x5d, 0xe9, 0x7}}}}]}, 0x78}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xe, 0x3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xffff}}]}}]}, 0x38}}, 0x4000)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

9.834867381s ago: executing program 1 (id=689):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x0, 0x5, 0x800}, 0x5, 0x0, 0xffffff3d, 0x6, 0xb, 0x1, 0x10, 0x12, 0x2, 0x4, {0x0, 0xcecc, 0x7, 0x5d, 0xe9, 0x7}}}}]}, 0x78}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xe, 0x3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xffff}}]}}]}, 0x38}}, 0x4000)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.546702394s ago: executing program 1 (id=689):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x0, 0x5, 0x800}, 0x5, 0x0, 0xffffff3d, 0x6, 0xb, 0x1, 0x10, 0x12, 0x2, 0x4, {0x0, 0xcecc, 0x7, 0x5d, 0xe9, 0x7}}}}]}, 0x78}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xe, 0x3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xffff}}]}}]}, 0x38}}, 0x4000)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

519.434738ms ago: executing program 0 (id=1328):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x39, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5}]}, {0x4}]}]}, 0x30}}, 0x0)

426.786519ms ago: executing program 0 (id=1331):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000000)=[{{0x4, 0x0, 0x1, 0x1}, {0x2, 0x0, 0x1, 0x1}}], 0x8)

426.624366ms ago: executing program 2 (id=1332):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d00)={0x6c, r1, 0x1, 0x4, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x2, @mcast1, 0x400005}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x4, @local, 0x6}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0)

361.671562ms ago: executing program 0 (id=1333):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0xfff3}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0xfffffffd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x40010}, 0x0)

361.354685ms ago: executing program 2 (id=1334):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001180)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0xffffffe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbfffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff]}, @TCA_POLICE_TBF={0xf, 0x1, {0x0, 0x256da761e0644cfa, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0xffff, 0xffffc3fd}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x488}}, 0x0)

239.708166ms ago: executing program 0 (id=1335):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xf11, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6004}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_IP_TARGET={0x8, 0x8, 0x0, 0x1, [@dev={0xac, 0x14, 0x14, 0x31}]}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x4}]}}}]}, 0x44}}, 0x0)

239.278305ms ago: executing program 2 (id=1336):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0xffffff7f}]}, 0x20}, 0x1, 0x7}, 0x0)

159.65128ms ago: executing program 2 (id=1337):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)

159.159682ms ago: executing program 0 (id=1338):
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=@ethtool_regs={0x11}})

80.718243ms ago: executing program 2 (id=1339):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240)=0x6, 0x9)

80.432451ms ago: executing program 0 (id=1340):
unshare(0x26020480)
r0 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/user\x00')
ioctl$NS_GET_USERNS(r0, 0xb701, 0x0)

0s ago: executing program 2 (id=1341):
syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x3, 0x62}, @timestamp_addr={0x44, 0x4, 0x75, 0x1, 0x2}, @timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:62588' (ED25519) to the list of known hosts.
syzkaller login: [   58.491623][ T5817] cgroup: Unknown subsys name 'net'
[   58.589390][ T5817] cgroup: Unknown subsys name 'cpuset'
[   58.605046][ T5817] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   60.750911][ T5817] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   66.456443][ T5220] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   66.464300][ T5220] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   66.468054][ T5220] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   66.471849][ T5220] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   66.476353][ T5220] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   66.482053][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   66.487636][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   66.497663][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   66.502948][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   66.506596][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   66.558202][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   66.561691][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   66.566064][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   66.577304][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   66.580973][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   66.760211][ T5831] chnl_net:caif_netlink_parms(): no params data found
[   66.919302][ T5835] chnl_net:caif_netlink_parms(): no params data found
[   66.927441][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.931527][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.936264][ T5831] bridge_slave_0: entered allmulticast mode
[   66.940454][ T5831] bridge_slave_0: entered promiscuous mode
[   66.969232][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.972104][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.976294][ T5831] bridge_slave_1: entered allmulticast mode
[   66.980217][ T5831] bridge_slave_1: entered promiscuous mode
[   67.070292][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.091988][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.128183][ T5831] team0: Port device team_slave_0 added
[   67.130338][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.132533][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.136326][ T5835] bridge_slave_0: entered allmulticast mode
[   67.139563][ T5835] bridge_slave_0: entered promiscuous mode
[   67.149825][ T5831] team0: Port device team_slave_1 added
[   67.151903][ T5839] chnl_net:caif_netlink_parms(): no params data found
[   67.160072][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.162695][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.165738][ T5835] bridge_slave_1: entered allmulticast mode
[   67.168557][ T5835] bridge_slave_1: entered promiscuous mode
[   67.230768][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.236304][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.250009][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.252585][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.262550][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.282317][ T5835] team0: Port device team_slave_0 added
[   67.286198][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.288885][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.298547][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.315362][ T5835] team0: Port device team_slave_1 added
[   67.364645][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.367496][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.377468][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.395224][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.397972][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.408413][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.461607][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.465053][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.467974][ T5839] bridge_slave_0: entered allmulticast mode
[   67.471846][ T5839] bridge_slave_0: entered promiscuous mode
[   67.484294][ T5831] hsr_slave_0: entered promiscuous mode
[   67.487478][ T5831] hsr_slave_1: entered promiscuous mode
[   67.510989][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.515078][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.517678][ T5839] bridge_slave_1: entered allmulticast mode
[   67.520430][ T5839] bridge_slave_1: entered promiscuous mode
[   67.545467][ T5835] hsr_slave_0: entered promiscuous mode
[   67.548534][ T5835] hsr_slave_1: entered promiscuous mode
[   67.551948][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   67.555311][ T5835] Cannot create hsr debugfs directory
[   67.589171][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.604474][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.676292][ T5839] team0: Port device team_slave_0 added
[   67.688547][ T5839] team0: Port device team_slave_1 added
[   67.735531][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.737886][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.748661][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.778776][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.781302][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.790787][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.892512][ T5839] hsr_slave_0: entered promiscuous mode
[   67.895430][ T5839] hsr_slave_1: entered promiscuous mode
[   67.897780][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   67.900413][ T5839] Cannot create hsr debugfs directory
[   67.952292][ T5831] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   67.961310][ T5831] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   67.973282][ T5831] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   67.992627][ T5831] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   68.059071][ T5835] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   68.066903][ T5835] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   68.093293][ T5835] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   68.114353][ T5835] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   68.209917][ T5839] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   68.222542][ T5839] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   68.232888][ T5839] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   68.244196][ T5839] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   68.330176][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.363403][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.371325][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   68.387083][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.396500][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.399249][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.426641][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.429526][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.436443][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   68.443236][ T5839] 8021q: adding VLAN 0 to HW filter on device team0
[   68.458562][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.460962][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.480178][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.482651][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.497709][ T5833] Bluetooth: hci0: command tx timeout
[   68.498961][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.502292][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.529138][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.531346][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.540614][ T5831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   68.565081][ T5833] Bluetooth: hci1: command tx timeout
[   68.645089][ T5833] Bluetooth: hci2: command tx timeout
[   68.744741][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.790238][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.804184][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.841491][ T5839] veth0_vlan: entered promiscuous mode
[   68.849389][ T5831] veth0_vlan: entered promiscuous mode
[   68.858911][ T5839] veth1_vlan: entered promiscuous mode
[   68.868132][ T5831] veth1_vlan: entered promiscuous mode
[   68.898891][ T5835] veth0_vlan: entered promiscuous mode
[   68.916526][ T5835] veth1_vlan: entered promiscuous mode
[   68.928318][ T5831] veth0_macvtap: entered promiscuous mode
[   68.934673][ T5831] veth1_macvtap: entered promiscuous mode
[   68.943937][ T5839] veth0_macvtap: entered promiscuous mode
[   68.957364][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.972358][ T5839] veth1_macvtap: entered promiscuous mode
[   68.984103][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.999865][ T5831] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.003394][ T5831] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.007318][ T5831] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.010755][ T5831] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.022888][ T5835] veth0_macvtap: entered promiscuous mode
[   69.030539][ T5835] veth1_macvtap: entered promiscuous mode
[   69.034588][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.042859][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.052357][ T5839] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.057137][ T5839] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.059751][ T5839] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.062344][ T5839] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.087004][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.123468][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.166195][ T5835] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.170477][ T5835] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.173611][ T5835] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.178469][ T5835] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.236588][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.240798][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.314933][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.318165][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.354795][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.358440][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.375153][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.379730][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.397005][  T550] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.399811][  T550] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.429261][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.431819][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.460276][ T5839] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   69.588170][ T5900] openvswitch: netlink: IP tunnel dst address not specified
[   69.645112][ T5899] Bluetooth: MGMT ver 1.23
[   69.908301][ T5915] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8'.
[   69.913470][ T5915] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8'.
[   70.060515][ T5919] netlink: 124 bytes leftover after parsing attributes in process `syz.0.11'.
[   70.565723][ T5833] Bluetooth: hci0: command tx timeout
[   70.644356][ T5833] Bluetooth: hci1: command tx timeout
[   70.727117][ T5833] Bluetooth: hci2: command tx timeout
[   70.992751][ T5961] syz.2.27 uses obsolete (PF_INET,SOCK_PACKET)
[   71.129165][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.133218][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.573519][ T5979] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[   71.846120][ T5949] syz.0.25: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x404dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_RETRY_MAYFAIL), nodemask=(null),cpuset=/,mems_allowed=0-1
[   71.856331][ T5949] CPU: 0 UID: 0 PID: 5949 Comm: syz.0.25 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[   71.856355][ T5949] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   71.856365][ T5949] Call Trace:
[   71.856372][ T5949]  <TASK>
[   71.856380][ T5949]  dump_stack_lvl+0x189/0x250
[   71.856409][ T5949]  ? __pfx_dump_stack_lvl+0x10/0x10
[   71.856431][ T5949]  ? __pfx__printk+0x10/0x10
[   71.856452][ T5949]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   71.856472][ T5949]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   71.856492][ T5949]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   71.856513][ T5949]  warn_alloc+0x214/0x310
[   71.856572][ T5949]  ? __pfx_warn_alloc+0x10/0x10
[   71.856598][ T5949]  ? __get_vm_area_node+0x28f/0x300
[   71.856619][ T5949]  ? veth_dev_init+0x363/0x570
[   71.856643][ T5949]  __vmalloc_node_range_noprof+0x67e/0x12f0
[   71.856685][ T5949]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   71.856700][ T5949]  ? __kasan_kmalloc_large+0x1c/0xa0
[   71.856718][ T5949]  ? rcu_is_watching+0x15/0xb0
[   71.856736][ T5949]  ? veth_dev_init+0x363/0x570
[   71.856754][ T5949]  ? veth_dev_init+0x363/0x570
[   71.856769][ T5949]  __kvmalloc_node_noprof+0x3b8/0x5f0
[   71.856786][ T5949]  ? veth_dev_init+0x363/0x570
[   71.856810][ T5949]  veth_dev_init+0x363/0x570
[   71.856832][ T5949]  register_netdevice+0x6bf/0x1ae0
[   71.856856][ T5949]  ? snprintf+0xda/0x120
[   71.856874][ T5949]  ? __pfx_register_netdevice+0x10/0x10
[   71.856889][ T5949]  ? __pfx_snprintf+0x10/0x10
[   71.856903][ T5949]  ? __asan_memset+0x22/0x50
[   71.856914][ T5949]  ? dev_addr_mod+0x2ce/0x3d0
[   71.856933][ T5949]  veth_newlink+0x5cc/0xa50
[   71.856951][ T5949]  ? __pfx_veth_newlink+0x10/0x10
[   71.856969][ T5949]  ? __pfx_css_rstat_updated+0x10/0x10
[   71.857021][ T5949]  ? validate_linkmsg+0x765/0x950
[   71.857048][ T5949]  ? __pfx_veth_newlink+0x10/0x10
[   71.857065][ T5949]  rtnl_newlink_create+0x310/0xb00
[   71.857085][ T5949]  ? __pfx_aa_get_newest_label+0x10/0x10
[   71.857107][ T5949]  ? __pfx_rtnl_newlink_create+0x10/0x10
[   71.857119][ T5949]  ? rtnl_newlink+0x8db/0x1c70
[   71.857133][ T5949]  ? __pfx___mutex_lock+0x10/0x10
[   71.857153][ T5949]  ? ns_capable+0x8a/0xf0
[   71.857169][ T5949]  rtnl_newlink+0x16d6/0x1c70
[   71.857184][ T5949]  ? netlink_sendmsg+0x805/0xb30
[   71.857208][ T5949]  ? __pfx_rtnl_newlink+0x10/0x10
[   71.857274][ T5949]  ? __lock_acquire+0xab9/0xd20
[   71.857307][ T5949]  ? __pfx_rtnl_newlink+0x10/0x10
[   71.857320][ T5949]  rtnetlink_rcv_msg+0x7cf/0xb70
[   71.857337][ T5949]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[   71.857351][ T5949]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   71.857363][ T5949]  ? ref_tracker_free+0x63a/0x7d0
[   71.857384][ T5949]  ? __copy_skb_header+0xa7/0x550
[   71.857403][ T5949]  ? __pfx_ref_tracker_free+0x10/0x10
[   71.857430][ T5949]  ? __skb_clone+0x63/0x7a0
[   71.857456][ T5949]  netlink_rcv_skb+0x208/0x470
[   71.857474][ T5949]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   71.857490][ T5949]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   71.857518][ T5949]  ? netlink_deliver_tap+0x2e/0x1b0
[   71.857567][ T5949]  ? netlink_deliver_tap+0x2e/0x1b0
[   71.857588][ T5949]  netlink_unicast+0x75c/0x8e0
[   71.857613][ T5949]  netlink_sendmsg+0x805/0xb30
[   71.857633][ T5949]  ? __pfx_netlink_sendmsg+0x10/0x10
[   71.857652][ T5949]  ? aa_sock_msg_perm+0x94/0x160
[   71.857673][ T5949]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   71.857694][ T5949]  ? __pfx_netlink_sendmsg+0x10/0x10
[   71.857708][ T5949]  __sock_sendmsg+0x21c/0x270
[   71.857724][ T5949]  ____sys_sendmsg+0x505/0x830
[   71.857748][ T5949]  ? __pfx_____sys_sendmsg+0x10/0x10
[   71.857771][ T5949]  ? import_iovec+0x74/0xa0
[   71.857792][ T5949]  ___sys_sendmsg+0x21f/0x2a0
[   71.857813][ T5949]  ? __pfx____sys_sendmsg+0x10/0x10
[   71.857859][ T5949]  ? __fget_files+0x2a/0x420
[   71.857878][ T5949]  ? __fget_files+0x3a0/0x420
[   71.857905][ T5949]  __x64_sys_sendmsg+0x19b/0x260
[   71.857927][ T5949]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   71.857953][ T5949]  ? rcu_is_watching+0x15/0xb0
[   71.857975][ T5949]  ? do_syscall_64+0xbe/0x3b0
[   71.857993][ T5949]  do_syscall_64+0xfa/0x3b0
[   71.858007][ T5949]  ? lockdep_hardirqs_on+0x9c/0x150
[   71.858029][ T5949]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   71.858044][ T5949]  ? exc_page_fault+0x9f/0xf0
[   71.858067][ T5949]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   71.858081][ T5949] RIP: 0033:0x7f904a58e929
[   71.858097][ T5949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   71.858109][ T5949] RSP: 002b:00007f904b322038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   71.858125][ T5949] RAX: ffffffffffffffda RBX: 00007f904a7b5fa0 RCX: 00007f904a58e929
[   71.858135][ T5949] RDX: 0000000000000002 RSI: 00002000000000c0 RDI: 0000000000000003
[   71.858144][ T5949] RBP: 00007f904a610b39 R08: 0000000000000000 R09: 0000000000000000
[   71.858152][ T5949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   71.858161][ T5949] R13: 0000000000000000 R14: 00007f904a7b5fa0 R15: 00007ffdd05ff958
[   71.858182][ T5949]  </TASK>
[   71.858189][ T5949] Mem-Info:
[   72.061646][ T5949] active_anon:5317 inactive_anon:0 isolated_anon:0
[   72.061646][ T5949]  active_file:873 inactive_file:38206 isolated_file:0
[   72.061646][ T5949]  unevictable:1768 dirty:1423 writeback:0
[   72.061646][ T5949]  slab_reclaimable:9030 slab_unreclaimable:54438
[   72.061646][ T5949]  mapped:18077 shmem:2434 pagetables:909
[   72.061646][ T5949]  sec_pagetables:0 bounce:0
[   72.061646][ T5949]  kernel_misc_reclaimable:0
[   72.061646][ T5949]  free:291934 free_pcp:26906 free_cma:0
[   72.078454][ T5949] Node 0 active_anon:12080kB inactive_anon:0kB active_file:2844kB inactive_file:16724kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:33496kB dirty:1372kB writeback:0kB shmem:4952kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7980kB pagetables:2292kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   72.091888][ T5949] Node 1 active_anon:9188kB inactive_anon:0kB active_file:648kB inactive_file:136100kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:38812kB dirty:4320kB writeback:0kB shmem:4784kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:3408kB pagetables:1344kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   72.104420][ T5949] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   72.115409][ T5949] lowmem_reserve[]: 0 812 812 812 812
[   72.117585][ T5949] Node 0 DMA32 free:375384kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12080kB inactive_anon:0kB active_file:2844kB inactive_file:16724kB unevictable:3536kB writepending:1372kB present:1556484kB managed:831872kB mlocked:0kB bounce:0kB free_pcp:43756kB local_pcp:22876kB free_cma:0kB
[   72.129739][ T5949] lowmem_reserve[]: 0 0 0 0 0
[   72.131662][ T5949] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   72.142957][ T5949] lowmem_reserve[]: 0 0 854 854 854
[   72.145165][ T5949] Node 1 Normal free:318376kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9188kB inactive_anon:0kB active_file:648kB inactive_file:136100kB unevictable:3536kB writepending:4320kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:64472kB local_pcp:18860kB free_cma:0kB
[   72.158140][ T5949] lowmem_reserve[]: 0 0 0 0 0
[   72.160115][ T5949] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   72.168005][ T5949] Node 0 DMA32: 141*4kB (UM) 118*8kB (UM) 63*16kB (UME) 44*32kB (UME) 6*64kB (UM) 3*128kB (ME) 4*256kB (UME) 2*512kB (M) 2*1024kB (ME) 3*2048kB (ME) 88*4096kB (M) = 375380kB
[   72.176417][ T5949] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[   72.182563][ T5949] Node 1 Normal: 458*4kB (M) 384*8kB (UME) 292*16kB (UME) 73*32kB (UME) 49*64kB (UME) 32*128kB (UME) 9*256kB (UM) 3*512kB (UM) 4*1024kB (UM) 4*2048kB (M) 69*4096kB (M) = 317896kB
[   72.189576][ T5949] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   72.193100][ T5949] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   72.196748][ T5949] 41513 total pagecache pages
[   72.198581][ T5949] 0 pages in swap cache
[   72.200204][ T5949] Free swap  = 124996kB
[   72.201831][ T5949] Total swap = 124996kB
[   72.203454][ T5949] 786301 pages RAM
[   72.205055][ T5949] 0 pages HighMem/MovableOnly
[   72.206885][ T5949] 241085 pages reserved
[   72.208481][ T5949] 0 pages cma reserved
[   72.643906][ T5833] Bluetooth: hci0: command tx timeout
[   72.724200][ T5833] Bluetooth: hci1: command tx timeout
[   72.803914][ T5833] Bluetooth: hci2: command tx timeout
[   73.455947][ T5999] IPv6: addrconf: prefix option has invalid lifetime
[   73.619907][ T6006] netlink: 12 bytes leftover after parsing attributes in process `syz.2.46'.
[   73.938250][ T6013] xt_time: invalid argument - start or stop time greater than 23:59:59
[   74.443159][ T6031] bridge_slave_0: left allmulticast mode
[   74.445870][ T6031] bridge_slave_0: left promiscuous mode
[   74.450707][ T6031] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.460283][ T6031] bridge_slave_1: left allmulticast mode
[   74.462338][ T6031] bridge_slave_1: left promiscuous mode
[   74.468712][ T6031] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.482283][ T6031] bond0: (slave bond_slave_0): Releasing backup interface
[   74.490412][ T6031] bond0: (slave bond_slave_1): Releasing backup interface
[   74.505235][ T6031] team0: Port device team_slave_0 removed
[   74.512423][ T6031] team0: Port device team_slave_1 removed
[   74.515994][ T6031] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   74.518328][ T6031] batman_adv: batadv0: Removing interface: batadv_slave_0
[   74.522080][ T6031] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   74.525629][ T6031] batman_adv: batadv0: Removing interface: batadv_slave_1
[   74.724835][ T5833] Bluetooth: hci0: command tx timeout
[   74.813994][ T5833] Bluetooth: hci1: command tx timeout
[   74.894172][ T5833] Bluetooth: hci2: command tx timeout
[   75.068943][ T6066] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   75.094096][ T6066] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   75.104186][ T6066] xt_SECMARK: invalid mode: 0
[   75.282089][ T6081] netlink: 24 bytes leftover after parsing attributes in process `syz.1.79'.
[   75.336546][ T6081] Zero length message leads to an empty skb
[   75.946019][ T6115] netlink: 4 bytes leftover after parsing attributes in process `syz.1.96'.
[   76.280762][ T6128] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   76.666727][ T6148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.112'.
[   77.168356][ T6168] netlink: 16 bytes leftover after parsing attributes in process `syz.1.119'.
[   77.188599][ T6169] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0
[   77.366882][ T6178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.125'.
[   77.563911][ T6187] netlink: 'syz.1.129': attribute type 1 has an invalid length.
[   77.667622][ T6187] veth3: entered promiscuous mode
[   77.750966][ T6198] tipc: Started in network mode
[   77.753164][ T6198] tipc: Node identity , cluster identity 4711
[   78.202316][ T6227] tipc: Started in network mode
[   78.207339][ T6227] tipc: Node identity cac8cdfc5f2d, cluster identity 4711
[   78.210007][ T6227] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   78.213296][ T6227] syzkaller0: entered promiscuous mode
[   78.225300][ T6227] syzkaller0: entered allmulticast mode
[   78.371877][ T6244] tipc: Resetting bearer <eth:syzkaller0>
[   78.488550][ T6234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.146'.
[   78.516659][ T6227] tipc: Resetting bearer <eth:syzkaller0>
[   78.534218][ T6227] tipc: Disabling bearer <eth:syzkaller0>
[   78.628161][ T6258] netlink: 4 bytes leftover after parsing attributes in process `syz.2.154'.
[   78.728279][ T6259] delete_channel: no stack
[   78.758731][ T6264] netlink: 24 bytes leftover after parsing attributes in process `syz.2.157'.
[   78.922248][ T6270] macvlan1: entered promiscuous mode
[   78.938167][ T6272] xt_TCPMSS: Only works on TCP SYN packets
[   78.945546][ T6270] ipvlan0: entered promiscuous mode
[   78.957948][ T6270] ipvlan0: left promiscuous mode
[   78.971567][ T6270] macvlan1: left promiscuous mode
[   79.438225][ T6304] tipc: Started in network mode
[   79.440251][ T6304] tipc: Node identity 46a8dd243e63, cluster identity 4711
[   79.443132][ T6304] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   79.491904][ T6304] syzkaller0: entered promiscuous mode
[   79.508770][ T6304] syzkaller0: entered allmulticast mode
[   79.512964][ T6304] tipc: Resetting bearer <eth:syzkaller0>
[   79.535526][ T6302] tipc: Resetting bearer <eth:syzkaller0>
[   79.574502][ T6310] netlink: 4 bytes leftover after parsing attributes in process `syz.2.175'.
[   79.746184][ T6317] netlink: 4 bytes leftover after parsing attributes in process `syz.2.175'.
[   80.517572][ T5894] tipc: Node number set to 2026626340
[   80.749384][ T6302] tipc: Disabling bearer <eth:syzkaller0>
[   80.792055][ T6314] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   81.158246][ T6339] nbd: must specify a device to reconfigure
[   81.332030][ T6346] vlan3: entered promiscuous mode
[   81.336073][ T6346] vlan2: entered promiscuous mode
[   81.341340][ T6346] gretap0: entered promiscuous mode
[   81.384838][ T1270] cfg80211: failed to load regulatory.db
[   81.510414][ T6348] IPVS: Scheduler module ip_vs_sip not found
[   81.751640][ T6363] tipc: Cannot configure node identity twice
[   82.194260][ T6389] tipc: New replicast peer: 255.255.255.255
[   82.199531][ T6389] tipc: Enabled bearer <udp:syz2>, priority 10
[   82.202491][ T6389] netlink: 12 bytes leftover after parsing attributes in process `syz.1.204'.
[   82.207309][ T6389] tipc: Disabling bearer <udp:syz2>
[   82.480966][ T6394] warning: `syz.1.205' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   83.816466][ T6428] netlink: 288 bytes leftover after parsing attributes in process `syz.2.220'.
[   83.836875][ T6430] netlink: 'syz.0.221': attribute type 2 has an invalid length.
[   83.889177][ T6433] pimreg: entered allmulticast mode
[   84.324765][ T5838] Bluetooth: hci2: command 0x0405 tx timeout
[   84.401790][ T6462] netlink: 'syz.0.233': attribute type 10 has an invalid length.
[   84.412285][ T6462] bridge0: port 3(netdevsim0) entered blocking state
[   84.415982][ T6462] bridge0: port 3(netdevsim0) entered disabled state
[   84.421006][ T6462] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[   84.429603][ T6462] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[   84.433300][ T6462] bridge0: port 3(netdevsim0) entered blocking state
[   84.436096][ T6462] bridge0: port 3(netdevsim0) entered forwarding state
[   85.147497][ T6500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.251'.
[   85.161828][ T6504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.253'.
[   85.247316][ T6508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.255'.
[   85.255499][ T6510] netlink: 20 bytes leftover after parsing attributes in process `syz.1.256'.
[   85.551759][ T6531] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   85.720208][ T6541] netlink: 4 bytes leftover after parsing attributes in process `syz.2.270'.
[   86.307694][ T6582] smc: net device bond0 applied user defined pnetid SYZ2
[   86.314409][ T6582] netlink: 14 bytes leftover after parsing attributes in process `syz.0.287'.
[   86.560339][ T6582] smc: removing net device bond0 with user defined pnetid SYZ2
[   86.565707][ T6582] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   86.572544][ T6582] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   86.578834][ T6582] bond0 (unregistering): Released all slaves
[   86.611689][ T6591] gtp0: entered promiscuous mode
[   86.852473][ T6611] netlink: 8 bytes leftover after parsing attributes in process `syz.1.301'.
[   86.935948][ T6615] netlink: 32 bytes leftover after parsing attributes in process `syz.1.303'.
[   87.568983][ T6633] __nla_validate_parse: 2 callbacks suppressed
[   87.568996][ T6633] netlink: 4 bytes leftover after parsing attributes in process `syz.1.312'.
[   87.990260][ T6655] netlink: 'syz.1.322': attribute type 11 has an invalid length.
[   88.108808][ T6661] netlink: 'syz.0.325': attribute type 12 has an invalid length.
[   88.111620][ T6661] netlink: 'syz.0.325': attribute type 29 has an invalid length.
[   88.117612][ T6661] netlink: 148 bytes leftover after parsing attributes in process `syz.0.325'.
[   88.120566][ T6661] netlink: 59 bytes leftover after parsing attributes in process `syz.0.325'.
[   88.130610][ T6659] netlink: 16 bytes leftover after parsing attributes in process `syz.1.324'.
[   88.283538][ T6671] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   88.288684][ T6671] macsec1: entered promiscuous mode
[   88.291067][ T6671] macsec1: entered allmulticast mode
[   88.293213][ T6671] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[   88.468419][ T6687] netlink: 8 bytes leftover after parsing attributes in process `syz.0.337'.
[   88.566149][ T6693] netlink: 4 bytes leftover after parsing attributes in process `syz.0.340'.
[   88.603155][ T6693] 8021q: adding VLAN 0 to HW filter on device team1
[   88.625658][ T6699] netlink: 'syz.1.343': attribute type 1 has an invalid length.
[   88.628078][ T6699] netlink: 'syz.1.343': attribute type 2 has an invalid length.
[   88.630616][ T6699] netlink: 1172 bytes leftover after parsing attributes in process `syz.1.343'.
[   88.674962][ T6703] syz.0.345 (6703) used obsolete PPPIOCDETACH ioctl
[   88.678397][ T6701] netlink: 'syz.2.344': attribute type 1 has an invalid length.
[   88.690803][ T6701] netlink: 'syz.2.344': attribute type 4 has an invalid length.
[   88.693974][ T6701] netlink: 14506 bytes leftover after parsing attributes in process `syz.2.344'.
[   88.741315][ T6707] netlink: 34 bytes leftover after parsing attributes in process `syz.1.348'.
[   88.747232][ T6707] netlink: 12 bytes leftover after parsing attributes in process `syz.1.348'.
[   89.050224][ T6729] netlink: 'syz.1.357': attribute type 1 has an invalid length.
[   89.368894][ T6746] erspan0: entered promiscuous mode
[   91.091510][ T6819] tipc: Enabled bearer <eth:team0>, priority 0
[   91.193314][   T12] nci: nci_add_new_protocol: the target found does not have the desired protocol
[   91.445382][ T5833] Bluetooth: hci2: command 0x0405 tx timeout
[   92.453595][ T6849] netlink: 'syz.1.408': attribute type 1 has an invalid length.
[   92.790053][ T6861] block nbd0: Unsupported socket: shutdown callout must be supported.
[   93.173047][ T6875] __nla_validate_parse: 4 callbacks suppressed
[   93.173064][ T6875] netlink: 4 bytes leftover after parsing attributes in process `syz.2.421'.
[   93.365454][ T6887] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2
[   93.368971][ T6887] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0
[   94.228199][ T6914] tipc: Started in network mode
[   94.231898][ T6914] tipc: Node identity , cluster identity 4711
[   94.238823][ T6914] tipc: Failed to obtain node identity
[   94.240948][ T6915] netlink: 12 bytes leftover after parsing attributes in process `syz.2.438'.
[   94.251800][ T6914] tipc: Enabling of bearer <eth:gre0> rejected, failed to enable media
[   94.272703][ T6915] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   94.490068][ T6930] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   94.587003][ T6919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   94.594144][ T6919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   94.898958][ T6952] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4300
[   95.165665][ T6964] netlink: 20 bytes leftover after parsing attributes in process `syz.0.457'.
[   95.973637][ T6991] netlink: 'syz.1.470': attribute type 1 has an invalid length.
[   95.977360][ T6991] netlink: 224 bytes leftover after parsing attributes in process `syz.1.470'.
[   96.032830][ T6994] netlink: 'syz.0.471': attribute type 21 has an invalid length.
[   96.038928][ T6994] IPv6: NLM_F_CREATE should be specified when creating new route
[   96.362846][ T7016] netlink: 20 bytes leftover after parsing attributes in process `syz.0.481'.
[   96.681042][ T7036] netlink: 28 bytes leftover after parsing attributes in process `syz.1.487'.
[   96.684748][ T7036] netlink: 28 bytes leftover after parsing attributes in process `syz.1.487'.
[   96.758717][ T7040] tipc: Resetting bearer <eth:team0>
[   97.328471][ T7068] netlink: 224 bytes leftover after parsing attributes in process `syz.2.503'.
[   97.489436][ T7082] netlink: 'syz.1.509': attribute type 1 has an invalid length.
[   97.498860][ T7078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.507'.
[   97.553600][ T7084] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[   97.568057][ T7084] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   97.604800][ T7090] netlink: 'syz.0.513': attribute type 30 has an invalid length.
[   98.003591][ T7117] netlink: 'syz.1.525': attribute type 10 has an invalid length.
[   98.040128][ T7117] tipc: Resetting bearer <eth:team0>
[   98.047381][ T7117] team0: Cannot enslave team device to itself
[   98.163503][ T7123] netlink: 16 bytes leftover after parsing attributes in process `syz.2.529'.
[   98.211592][ T7126] netlink: 'syz.1.530': attribute type 29 has an invalid length.
[   98.842018][ T7170] netlink: 'syz.1.548': attribute type 1 has an invalid length.
[   98.879115][ T7170] 8021q: adding VLAN 0 to HW filter on device bond2
[   98.925296][ T7170] bond2: (slave gretap1): making interface the new active one
[   98.933358][ T7170] bond2: (slave gretap1): Enslaving as an active interface with an up link
[   99.347630][ T7206] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   99.853187][ T7238] xt_recent: Unsupported userspace flags (00000048)
[  100.030358][ T7249] netlink: 'syz.1.580': attribute type 13 has an invalid length.
[  100.043552][ T7249] netlink: 'syz.1.580': attribute type 17 has an invalid length.
[  100.107347][ T1270] IPVS: starting estimator thread 0...
[  100.194247][ T7252] IPVS: using max 38 ests per chain, 91200 per kthread
[  100.823375][ T7249] 8021q: adding VLAN 0 to HW filter on device team0
[  100.834118][ T7249] tipc: Resetting bearer <eth:team0>
[  100.836800][ T7249] tipc: Resetting bearer <eth:team0>
[  100.840208][ T7249] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  101.050504][ T7275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.592'.
[  102.092659][ T7319] netlink: 20 bytes leftover after parsing attributes in process `syz.0.610'.
[  102.625141][ T7356] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  102.809947][ T7368] netlink: 24 bytes leftover after parsing attributes in process `syz.2.632'.
[  102.909093][ T7375] netlink: 12 bytes leftover after parsing attributes in process `syz.2.634'.
[  102.980806][   T33] audit: type=1800 audit(1752676912.222:2): pid=7378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.634" name="memory.events" dev="tmpfs" ino=1185 res=0 errno=0
[  103.430855][ T7389] xt_TCPMSS: Only works on TCP SYN packets
[  103.602477][ T7397] netlink: 'syz.0.643': attribute type 1 has an invalid length.
[  103.605839][ T7397] netlink: 136 bytes leftover after parsing attributes in process `syz.0.643'.
[  103.609194][ T7397] netlink: 'syz.0.643': attribute type 2 has an invalid length.
[  103.612170][ T7397] netlink: 'syz.0.643': attribute type 1 has an invalid length.
[  104.049185][ T7416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.650'.
[  104.052620][ T7416] netlink: 12 bytes leftover after parsing attributes in process `syz.2.650'.
[  104.056971][ T7416] netlink: 'syz.2.650': attribute type 18 has an invalid length.
[  104.075341][ T7405] veth0_to_bridge: entered promiscuous mode
[  104.180516][ T7419] netlink: 336 bytes leftover after parsing attributes in process `syz.2.651'.
[  104.313068][ T7428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.655'.
[  104.318284][ T7428] netlink: 4 bytes leftover after parsing attributes in process `syz.2.655'.
[  104.546695][ T7438] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  104.728328][ T7404] veth0_to_bridge: left promiscuous mode
[  104.967105][ T7467] netlink: 'syz.1.674': attribute type 21 has an invalid length.
[  105.494169][ T5661] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.582819][ T5661] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.675882][ T5661] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.721272][ T7499] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.730625][ T7499] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.779805][ T5661] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.793875][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  105.798324][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  105.801807][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  105.806307][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  105.809862][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  105.961213][ T7500] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  105.967619][ T7500] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  106.016794][ T7500] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  106.019597][ T7500] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  106.022541][ T7500] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  106.025360][ T7500] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  106.048928][ T7500] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[  106.273212][ T7512] __nla_validate_parse: 1 callbacks suppressed
[  106.273231][ T7512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.694'.
[  106.538891][ T5661] bond2 (unregistering): (slave gretap1): Releasing active interface
[  106.619535][  T973] IPVS: starting estimator thread 0...
[  106.725743][ T7522] IPVS: using max 62 ests per chain, 148800 per kthread
[  106.750035][ T5661] bond0 (unregistering): Released all slaves
[  106.758169][ T5661] bond1 (unregistering): Released all slaves
[  106.857901][ T5661] bond2 (unregistering): Released all slaves
[  106.963082][ T5661] tipc: Disabling bearer <eth:team0>
[  106.976335][ T5661] tipc: Left network mode
[  106.983206][ T5661] IPVS: stopping backup sync thread 6169 ...
[  107.057769][ T7501] chnl_net:caif_netlink_parms(): no params data found
[  107.121909][ T7501] bridge0: port 1(bridge_slave_0) entered blocking state
[  107.139160][ T7501] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.144180][ T7501] bridge_slave_0: entered allmulticast mode
[  107.149001][ T7501] bridge_slave_0: entered promiscuous mode
[  107.175944][ T7501] bridge0: port 2(bridge_slave_1) entered blocking state
[  107.181258][ T7501] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.203433][ T7501] bridge_slave_1: entered allmulticast mode
[  107.207081][ T7501] bridge_slave_1: entered promiscuous mode
[  107.292292][ T7538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.697'.
[  107.355067][ T5661] hsr_slave_0: left promiscuous mode
[  107.361210][ T5661] hsr_slave_1: left promiscuous mode
[  107.376728][ T5661] veth1_macvtap: left promiscuous mode
[  107.380067][ T5661] veth0_macvtap: left promiscuous mode
[  107.382437][ T5661] veth1_vlan: left promiscuous mode
[  107.386859][ T5661] veth0_vlan: left promiscuous mode
[  107.632930][ T7546] netlink: 'syz.0.698': attribute type 16 has an invalid length.
[  107.635585][ T7546] netlink: 'syz.0.698': attribute type 17 has an invalid length.
[  107.845554][ T5838] Bluetooth: hci2: command tx timeout
[  108.389098][ T7501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  108.399447][ T7501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  108.412091][ T7546] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  108.508430][ T7501] team0: Port device team_slave_0 added
[  108.527868][ T7501] team0: Port device team_slave_1 added
[  108.588693][ T7501] batman_adv: batadv0: Adding interface: batadv_slave_0
[  108.598450][ T7501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  108.607439][ T7501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  108.621151][ T7501] batman_adv: batadv0: Adding interface: batadv_slave_1
[  108.623321][ T7501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  108.637396][ T7501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  108.742649][ T7501] hsr_slave_0: entered promiscuous mode
[  108.758008][ T7501] hsr_slave_1: entered promiscuous mode
[  108.761127][ T7501] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  108.766079][ T7501] Cannot create hsr debugfs directory
[  108.901391][ T5661] IPVS: stop unused estimator thread 0...
[  108.942001][ T7571] netlink: 'syz.0.708': attribute type 1 has an invalid length.
[  108.945957][ T7571] netlink: 236 bytes leftover after parsing attributes in process `syz.0.708'.
[  109.248969][ T7587] netlink: 'syz.0.713': attribute type 1 has an invalid length.
[  109.574240][ T7501] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  109.606500][ T7501] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  109.631286][ T7501] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  109.640396][ T7501] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  109.827932][ T7501] 8021q: adding VLAN 0 to HW filter on device bond0
[  109.881442][ T7501] 8021q: adding VLAN 0 to HW filter on device team0
[  109.908440][  T161] bridge0: port 1(bridge_slave_0) entered blocking state
[  109.911352][  T161] bridge0: port 1(bridge_slave_0) entered forwarding state
[  109.924028][ T5838] Bluetooth: hci2: command tx timeout
[  109.931908][  T161] bridge0: port 2(bridge_slave_1) entered blocking state
[  109.934991][  T161] bridge0: port 2(bridge_slave_1) entered forwarding state
[  110.290297][ T7501] 8021q: adding VLAN 0 to HW filter on device batadv0
[  110.398260][ T7501] veth0_vlan: entered promiscuous mode
[  110.416409][ T7501] veth1_vlan: entered promiscuous mode
[  110.460423][ T7501] veth0_macvtap: entered promiscuous mode
[  110.469772][ T7501] veth1_macvtap: entered promiscuous mode
[  110.497523][ T7501] batman_adv: batadv0: Interface activated: batadv_slave_0
[  110.519006][ T7501] batman_adv: batadv0: Interface activated: batadv_slave_1
[  110.537400][ T7501] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  110.546688][ T7501] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  110.550607][ T7501] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  110.573556][ T7501] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  110.728870][   T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.732528][   T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.780597][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.782985][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  111.178691][ T7702] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  111.181545][ T7702] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  111.386587][ T7707] netlink: 'syz.0.753': attribute type 1 has an invalid length.
[  111.403210][ T7707] smc: adding net device bond0 with user defined pnetid SYZ2
[  111.426230][ T7707] bond0: (slave gretap1): making interface the new active one
[  111.429191][ T7707] bond0: (slave gretap1): Enslaving as an active interface with an up link
[  111.747148][ T7721] ipt_rpfilter: unknown options
[  112.056702][ T5858] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.411234][ T7737] netlink: 'syz.2.765': attribute type 22 has an invalid length.
[  112.467019][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  112.470455][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  112.473279][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  112.490677][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  112.495054][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  112.674130][ T7740] chnl_net:caif_netlink_parms(): no params data found
[  112.780715][ T7740] bridge0: port 1(bridge_slave_0) entered blocking state
[  112.783073][ T7740] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.793967][ T7740] bridge_slave_0: entered allmulticast mode
[  112.796901][ T7740] bridge_slave_0: entered promiscuous mode
[  112.802273][ T7740] bridge0: port 2(bridge_slave_1) entered blocking state
[  112.813131][ T7740] bridge0: port 2(bridge_slave_1) entered disabled state
[  112.818742][ T7740] bridge_slave_1: entered allmulticast mode
[  112.823344][ T7740] bridge_slave_1: entered promiscuous mode
[  112.870173][ T7740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  112.879045][ T7740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  112.923049][ T7740] team0: Port device team_slave_0 added
[  112.928472][ T7740] team0: Port device team_slave_1 added
[  113.048769][ T7740] batman_adv: batadv0: Adding interface: batadv_slave_0
[  113.050937][ T7740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  113.064007][ T7740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  113.069308][ T7740] batman_adv: batadv0: Adding interface: batadv_slave_1
[  113.071839][ T7740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  113.080886][ T7740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  113.145047][ T5858] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.193472][ T7740] hsr_slave_0: entered promiscuous mode
[  113.197243][ T7740] hsr_slave_1: entered promiscuous mode
[  113.199403][ T7740] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  113.201911][ T7740] Cannot create hsr debugfs directory
[  113.203352][ T7782] netlink: 'syz.2.783': attribute type 1 has an invalid length.
[  113.209913][ T7782] netlink: 228 bytes leftover after parsing attributes in process `syz.2.783'.
[  113.217639][ T7782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.783'.
[  113.249381][ T7784] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  113.337675][ T7790] netlink: 24 bytes leftover after parsing attributes in process `syz.0.787'.
[  113.465139][ T7802] sch_tbf: burst 0 is lower than device vlan0 mtu (1514) !
[  113.527064][ T5858] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.583399][ T5858] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.620092][ T7809] macsec1: entered promiscuous mode
[  113.621733][ T7809] macsec1: entered allmulticast mode
[  113.768935][ T5858] bridge_slave_1: left allmulticast mode
[  113.777334][ T5858] bridge_slave_1: left promiscuous mode
[  113.780601][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.790070][ T5858] bridge_slave_0: left allmulticast mode
[  113.792285][ T5858] bridge_slave_0: left promiscuous mode
[  113.798109][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.202627][ T5858] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  114.209540][ T5858] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  114.215282][ T5858] bond0 (unregistering): Released all slaves
[  114.566019][ T5838] Bluetooth: hci2: command tx timeout
[  114.688300][ T5858] hsr_slave_0: left promiscuous mode
[  114.694172][ T5858] hsr_slave_1: left promiscuous mode
[  114.697301][ T5858] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  114.700414][ T5858] batman_adv: batadv0: Removing interface: batadv_slave_0
[  114.710921][ T5858] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  114.716132][ T5858] batman_adv: batadv0: Removing interface: batadv_slave_1
[  114.756410][ T5858] veth1_macvtap: left promiscuous mode
[  114.758843][ T5858] veth0_macvtap: left promiscuous mode
[  114.762643][ T5858] veth1_vlan: left promiscuous mode
[  114.765695][ T5858] veth0_vlan: left promiscuous mode
[  115.105007][  T973] hid-generic 0005:04F3:8002.0001: collection stack underflow
[  115.134018][  T973] hid-generic 0005:04F3:8002.0001: item 0 0 0 12 parsing failed
[  115.143071][  T973] hid-generic 0005:04F3:8002.0001: probe with driver hid-generic failed with error -22
[  115.351914][ T5858] team0 (unregistering): Port device team_slave_1 removed
[  115.386526][ T5858] team0 (unregistering): Port device team_slave_0 removed
[  115.981573][ T7740] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  116.009080][ T7740] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  116.037366][ T7740] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  116.081362][ T7740] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  116.166813][ T7879] xt_time: unknown flags 0x4
[  116.318866][   T33] audit: type=1800 audit(1752676925.552:3): pid=7886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.814" name=14 dev="tmpfs" ino=1429 res=0 errno=0
[  116.378009][ T7740] 8021q: adding VLAN 0 to HW filter on device bond0
[  116.423030][ T7740] 8021q: adding VLAN 0 to HW filter on device team0
[  116.441517][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.445427][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[  116.466746][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[  116.469040][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[  116.482885][ T7892] netlink: 8 bytes leftover after parsing attributes in process `syz.2.817'.
[  116.520995][ T7892] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  116.554323][ T7892] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  116.636361][ T7740] 8021q: adding VLAN 0 to HW filter on device batadv0
[  116.645332][ T5838] Bluetooth: hci2: command tx timeout
[  116.720631][ T7740] veth0_vlan: entered promiscuous mode
[  116.736929][ T7740] veth1_vlan: entered promiscuous mode
[  116.781314][ T7740] veth0_macvtap: entered promiscuous mode
[  116.791919][ T7740] veth1_macvtap: entered promiscuous mode
[  116.811088][ T7740] batman_adv: batadv0: Interface activated: batadv_slave_0
[  116.819587][ T7740] batman_adv: batadv0: Interface activated: batadv_slave_1
[  116.827140][ T7740] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  116.835087][ T7740] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  116.837972][ T7740] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  116.840677][ T7740] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  116.853018][ T7909] SET target dimension over the limit!
[  116.956934][ T7914] netlink: 'syz.2.824': attribute type 27 has an invalid length.
[  116.966967][   T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.969768][   T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.011437][   T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.016716][   T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.275681][ T7944] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  118.647716][ T7961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  118.918427][ T5661] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.208617][ T7966] netlink: 'syz.2.849': attribute type 1 has an invalid length.
[  119.211149][ T7966] netlink: 228 bytes leftover after parsing attributes in process `syz.2.849'.
[  119.217048][ T7966] NCSI netlink: No device for ifindex 0
[  119.289721][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  119.295429][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  119.298506][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  119.302138][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  119.305949][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  119.576988][ T7969] chnl_net:caif_netlink_parms(): no params data found
[  119.589606][ T7989] openvswitch: netlink: EtherType 10 is less than min 600
[  119.734947][ T7969] bridge0: port 1(bridge_slave_0) entered blocking state
[  119.743617][ T7969] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.750056][ T7969] bridge_slave_0: entered allmulticast mode
[  119.755594][ T7969] bridge_slave_0: entered promiscuous mode
[  119.760006][ T7969] bridge0: port 2(bridge_slave_1) entered blocking state
[  119.763066][ T8004] netlink: 'syz.2.864': attribute type 2 has an invalid length.
[  119.769579][ T7969] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.776621][ T7969] bridge_slave_1: entered allmulticast mode
[  119.781434][ T7969] bridge_slave_1: entered promiscuous mode
[  119.786137][ T8006] netlink: 'syz.0.865': attribute type 10 has an invalid length.
[  119.818433][ T8004] : entered promiscuous mode
[  119.822458][ T8006] bridge0: port 3(netdevsim0) entered disabled state
[  119.825404][ T8006] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.828703][ T8006] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.855881][ T7969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  119.860652][ T7969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  119.899134][ T7969] team0: Port device team_slave_0 added
[  119.922161][ T7969] team0: Port device team_slave_1 added
[  119.950793][ T7969] batman_adv: batadv0: Adding interface: batadv_slave_0
[  119.952884][ T7969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  119.962382][ T7969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  119.968691][ T7969] batman_adv: batadv0: Adding interface: batadv_slave_1
[  119.971428][ T7969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  119.981192][ T7969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  120.032937][ T7969] hsr_slave_0: entered promiscuous mode
[  120.038724][ T7969] hsr_slave_1: entered promiscuous mode
[  120.040891][ T7969] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  120.043142][ T7969] Cannot create hsr debugfs directory
[  120.087085][ T8018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.871'.
[  120.106550][ T8018] IPVS: Error joining to the multicast group
[  120.246297][ T8030] netlink: 248 bytes leftover after parsing attributes in process `syz.0.877'.
[  120.375441][ T5661] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.450734][ T5661] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.492685][ T8044] tipc: Started in network mode
[  120.495795][ T8044] tipc: Node identity 3a583aacc39b, cluster identity 4711
[  120.498214][ T8044] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  120.503056][ T8044] syzkaller0: entered promiscuous mode
[  120.510614][ T8044] syzkaller0: entered allmulticast mode
[  120.535675][ T8044] tipc: Resetting bearer <eth:syzkaller0>
[  120.562492][ T5661] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.589118][ T8042] tipc: Resetting bearer <eth:syzkaller0>
[  120.611365][ T8042] tipc: Disabling bearer <eth:syzkaller0>
[  120.718527][ T5661] bridge_slave_1: left allmulticast mode
[  120.720952][ T5661] bridge_slave_1: left promiscuous mode
[  120.722757][ T5661] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.743564][ T5661] bridge_slave_0: left allmulticast mode
[  120.748324][ T5661] bridge_slave_0: left promiscuous mode
[  120.750718][ T5661] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.812184][ T8064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.890'.
[  121.176069][ T5661] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  121.181993][ T5661] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  121.190051][ T5661] bond0 (unregistering): Released all slaves
[  121.365117][ T5838] Bluetooth: hci2: command tx timeout
[  121.532417][ T8086] netlink: 'syz.0.896': attribute type 5 has an invalid length.
[  121.637676][ T5661] hsr_slave_0: left promiscuous mode
[  121.643618][ T5661] hsr_slave_1: left promiscuous mode
[  121.647846][ T5661] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  121.650691][ T5661] batman_adv: batadv0: Removing interface: batadv_slave_0
[  121.659654][ T5661] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  121.662543][ T5661] batman_adv: batadv0: Removing interface: batadv_slave_1
[  121.691817][ T5661] veth1_macvtap: left promiscuous mode
[  121.713897][ T5661] veth0_macvtap: left promiscuous mode
[  121.721617][ T5661] veth1_vlan: left promiscuous mode
[  121.730022][ T5661] veth0_vlan: left promiscuous mode
[  122.230408][ T5661] team0 (unregistering): Port device team_slave_1 removed
[  122.263064][ T5661] team0 (unregistering): Port device team_slave_0 removed
[  122.789691][ T7969] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  122.831573][ T8110] netlink: 132 bytes leftover after parsing attributes in process `syz.0.902'.
[  122.837154][ T7969] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  122.856559][ T7969] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  122.870474][ T7969] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  123.176313][ T7969] 8021q: adding VLAN 0 to HW filter on device bond0
[  123.219544][ T7969] 8021q: adding VLAN 0 to HW filter on device team0
[  123.252498][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[  123.255852][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[  123.289122][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[  123.292256][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[  123.454280][ T5838] Bluetooth: hci2: command tx timeout
[  123.631366][ T7969] 8021q: adding VLAN 0 to HW filter on device batadv0
[  123.722332][ T7969] veth0_vlan: entered promiscuous mode
[  123.742044][ T7969] veth1_vlan: entered promiscuous mode
[  123.791355][ T7969] veth0_macvtap: entered promiscuous mode
[  123.801276][ T7969] veth1_macvtap: entered promiscuous mode
[  123.833396][ T7969] batman_adv: batadv0: Interface activated: batadv_slave_0
[  123.837158][ T8167] warn_alloc: 1 callbacks suppressed
[  123.837171][ T8167] syz.0.918: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  123.850913][ T7969] batman_adv: batadv0: Interface activated: batadv_slave_1
[  123.862610][ T7969] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  123.867534][ T8167] CPU: 1 UID: 0 PID: 8167 Comm: syz.0.918 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  123.867551][ T8167] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  123.867557][ T8167] Call Trace:
[  123.867563][ T8167]  <TASK>
[  123.867569][ T8167]  dump_stack_lvl+0x189/0x250
[  123.867587][ T8167]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  123.867607][ T8167]  ? __pfx_dump_stack_lvl+0x10/0x10
[  123.867617][ T8167]  ? __pfx__printk+0x10/0x10
[  123.867631][ T8167]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  123.867644][ T8167]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  123.867660][ T8167]  warn_alloc+0x214/0x310
[  123.867673][ T8167]  ? stack_depot_save_flags+0x40/0x900
[  123.867689][ T8167]  ? __pfx_warn_alloc+0x10/0x10
[  123.867707][ T8167]  ? kasan_save_track+0x4f/0x80
[  123.867719][ T8167]  ? xskq_create+0x56/0x170
[  123.867733][ T8167]  ? xsk_init_queue+0xb0/0x110
[  123.867743][ T8167]  ? xsk_setsockopt+0x43f/0x710
[  123.867753][ T8167]  ? do_sock_setsockopt+0x25a/0x3e0
[  123.867768][ T8167]  ? __x64_sys_setsockopt+0x18b/0x220
[  123.867782][ T8167]  ? do_syscall_64+0xfa/0x3b0
[  123.867794][ T8167]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.867815][ T8167]  __vmalloc_node_range_noprof+0x125/0x12f0
[  123.867845][ T8167]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  123.867861][ T8167]  ? __kasan_kmalloc+0x93/0xb0
[  123.867873][ T8167]  vmalloc_user_noprof+0xad/0xf0
[  123.867884][ T8167]  ? xskq_create+0xbf/0x170
[  123.867898][ T8167]  xskq_create+0xbf/0x170
[  123.867911][ T8167]  xsk_init_queue+0xb0/0x110
[  123.867924][ T8167]  xsk_setsockopt+0x43f/0x710
[  123.867977][ T8167]  ? __pfx_xsk_setsockopt+0x10/0x10
[  123.867996][ T8167]  ? __lock_acquire+0xab9/0xd20
[  123.868025][ T8167]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  123.868051][ T8167]  ? __pfx_xsk_setsockopt+0x10/0x10
[  123.868075][ T8167]  do_sock_setsockopt+0x25a/0x3e0
[  123.868100][ T8167]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  123.868123][ T8167]  ? __fget_files+0x2a/0x420
[  123.868151][ T8167]  __x64_sys_setsockopt+0x18b/0x220
[  123.868175][ T8167]  do_syscall_64+0xfa/0x3b0
[  123.868189][ T8167]  ? lockdep_hardirqs_on+0x9c/0x150
[  123.868217][ T8167]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.868234][ T8167]  ? exc_page_fault+0x9f/0xf0
[  123.868258][ T8167]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.868272][ T8167] RIP: 0033:0x7f904a58e929
[  123.868288][ T8167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  123.868303][ T8167] RSP: 002b:00007f90483f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  123.868321][ T8167] RAX: ffffffffffffffda RBX: 00007f904a7b6080 RCX: 00007f904a58e929
[  123.868332][ T8167] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007
[  123.868342][ T8167] RBP: 00007f904a610b39 R08: 0000000000000004 R09: 0000000000000000
[  123.868350][ T8167] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  123.868359][ T8167] R13: 0000000000000000 R14: 00007f904a7b6080 R15: 00007ffdd05ff958
[  123.868383][ T8167]  </TASK>
[  123.869060][ T8167] Mem-Info:
[  123.989491][ T7969] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  123.993220][ T7969] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  123.997296][ T7969] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  124.005544][ T8167] active_anon:5533 inactive_anon:0 isolated_anon:0
[  124.005544][ T8167]  active_file:975 inactive_file:38233 isolated_file:0
[  124.005544][ T8167]  unevictable:1768 dirty:233 writeback:0
[  124.005544][ T8167]  slab_reclaimable:9278 slab_unreclaimable:52800
[  124.005544][ T8167]  mapped:18247 shmem:2459 pagetables:978
[  124.005544][ T8167]  sec_pagetables:0 bounce:0
[  124.005544][ T8167]  kernel_misc_reclaimable:0
[  124.005544][ T8167]  free:299991 free_pcp:18284 free_cma:0
[  124.034146][ T8167] Node 0 active_anon:11548kB inactive_anon:0kB active_file:3116kB inactive_file:16808kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:26636kB dirty:624kB writeback:0kB shmem:5000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:8012kB pagetables:2224kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  124.052056][ T8167] Node 1 active_anon:10584kB inactive_anon:0kB active_file:784kB inactive_file:136124kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:46352kB dirty:308kB writeback:0kB shmem:4836kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:3432kB pagetables:1620kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  124.088491][ T8167] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  124.102116][ T8167] lowmem_reserve[]: 0 812 812 812 812
[  124.108587][ T8167] Node 0 DMA32 free:418104kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11616kB inactive_anon:0kB active_file:3116kB inactive_file:16808kB unevictable:3536kB writepending:624kB present:1556484kB managed:831872kB mlocked:0kB bounce:0kB free_pcp:30756kB local_pcp:20052kB free_cma:0kB
[  124.161032][ T8174] netlink: 12 bytes leftover after parsing attributes in process `syz.2.922'.
[  124.171758][ T8167] lowmem_reserve[]: 0 0 0 0 0
[  124.177087][ T8174] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  124.180790][ T8174] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  124.184777][ T8174] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  124.188519][ T8174] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  124.192483][ T8167] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  124.206800][ T8167] lowmem_reserve[]: 0 0 854 854 854
[  124.208770][ T8167] Node 1 Normal free:307084kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10516kB inactive_anon:0kB active_file:784kB inactive_file:136124kB unevictable:3536kB writepending:308kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:42432kB local_pcp:21612kB free_cma:0kB
[  124.220096][ T8174] netlink: 12 bytes leftover after parsing attributes in process `syz.2.922'.
[  124.223476][ T8167] lowmem_reserve[]:
[  124.234165][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  124.236903][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.240965][ T8167]  0 0 0 0 0
[  124.242148][ T8167] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  124.248058][ T8167] Node 0 DMA32: 1518*4kB (UM) 604*8kB (UME) 376*16kB (UME) 102*32kB (UME) 165*64kB (UME) 71*128kB (UM) 35*256kB (UM) 20*512kB (UME) 12*1024kB (UM) 7*2048kB (UME) 81*4096kB (UM) = 417432kB
[  124.283857][ T8167] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  124.289316][ T8167] Node 1 Normal: 335*4kB (UM) 210*8kB (UME) 270*16kB (UME) 357*32kB (UME) 87*64kB (UME) 66*128kB (UM) 17*256kB (UM) 12*512kB (UME) 9*1024kB (UME) 4*2048kB (UME) 60*4096kB (UM) = 306444kB
[  124.298780][  T161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  124.302856][  T161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.319863][ T8167] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  124.323339][ T8167] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  124.331002][ T8167] 41633 total pagecache pages
[  124.332655][ T8167] 0 pages in swap cache
[  124.334658][ T8167] Free swap  = 124996kB
[  124.338727][ T8167] Total swap = 124996kB
[  124.341350][ T8167] 786301 pages RAM
[  124.342682][ T8167] 0 pages HighMem/MovableOnly
[  124.364089][ T8167] 241085 pages reserved
[  124.365770][ T8167] 0 pages cma reserved
[  124.657119][ T8164] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  124.717103][ T8192] trusted_key: syz.0.931 sent an empty control message without MSG_MORE.
[  124.731823][ T8192] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  124.737391][ T8192] netlink: 12 bytes leftover after parsing attributes in process `syz.0.931'.
[  124.756411][ T8192] bridge1: entered promiscuous mode
[  124.758136][ T8192] bridge1: entered allmulticast mode
[  124.765502][ T8192] team0: Port device bridge1 added
[  125.061317][ T8212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.941'.
[  125.149457][ T8220] netlink: 8 bytes leftover after parsing attributes in process `syz.0.945'.
[  125.260441][ T8225] Driver unsupported XDP return value 0 on prog  (id 136) dev N/A, expect packet loss!
[  125.679898][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.420013][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  126.425879][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  126.430973][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  126.436202][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  126.439449][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  126.507803][ T8284] netlink: 36 bytes leftover after parsing attributes in process `syz.2.974'.
[  126.601581][ T8293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.977'.
[  126.720897][ T8276] chnl_net:caif_netlink_parms(): no params data found
[  126.906587][ T8276] bridge0: port 1(bridge_slave_0) entered blocking state
[  126.910528][ T8276] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.923087][ T8276] bridge_slave_0: entered allmulticast mode
[  126.927974][ T8276] bridge_slave_0: entered promiscuous mode
[  126.936117][ T8276] bridge0: port 2(bridge_slave_1) entered blocking state
[  126.945282][ T8276] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.948483][ T8276] bridge_slave_1: entered allmulticast mode
[  126.965638][ T8276] bridge_slave_1: entered promiscuous mode
[  127.025760][ T8276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  127.045725][ T8276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  127.048491][ T5835] cgroup: fork rejected by pids controller in /syz0
[  127.193476][ T8276] team0: Port device team_slave_0 added
[  127.211979][ T8276] team0: Port device team_slave_1 added
[  127.252755][ T8276] batman_adv: batadv0: Adding interface: batadv_slave_0
[  127.255872][ T8276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  127.267224][ T8276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  127.275620][ T8276] batman_adv: batadv0: Adding interface: batadv_slave_1
[  127.278556][ T8276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  127.299889][ T8276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  127.405809][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.423027][ T8276] hsr_slave_0: entered promiscuous mode
[  127.426561][ T8276] hsr_slave_1: entered promiscuous mode
[  127.429567][ T8276] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  127.432530][ T8276] Cannot create hsr debugfs directory
[  127.494051][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.579579][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.770319][   T12] bridge_slave_1: left allmulticast mode
[  127.772235][   T12] bridge_slave_1: left promiscuous mode
[  127.784141][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.789588][   T12] bridge_slave_0: left allmulticast mode
[  127.791464][   T12] bridge_slave_0: left promiscuous mode
[  127.793312][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.807971][ T8337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.995'.
[  127.811620][ T8337] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  127.815370][ T8337] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  127.834456][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  127.840664][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  127.847263][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  127.852971][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  127.858266][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  128.231164][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  128.238758][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  128.244268][   T12] bond0 (unregistering): Released all slaves
[  128.497608][ T5838] Bluetooth: hci2: command tx timeout
[  128.611996][   T12] hsr_slave_0: left promiscuous mode
[  128.628207][   T12] hsr_slave_1: left promiscuous mode
[  128.631118][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  128.643009][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  128.647360][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  128.650290][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  128.663351][   T12] veth1_macvtap: left promiscuous mode
[  128.666107][   T12] veth0_macvtap: left promiscuous mode
[  128.667942][   T12] veth1_vlan: left promiscuous mode
[  128.669852][   T12] veth0_vlan: left promiscuous mode
[  129.177939][   T12] team0 (unregistering): Port device team_slave_1 removed
[  129.222442][   T12] team0 (unregistering): Port device team_slave_0 removed
[  129.933195][ T5838] Bluetooth: hci1: command tx timeout
[  129.937502][ T8338] chnl_net:caif_netlink_parms(): no params data found
[  130.086264][ T8379] netlink: 'syz.2.1006': attribute type 1 has an invalid length.
[  130.102184][ T8379] bond2: entered promiscuous mode
[  130.104408][ T8379] 8021q: adding VLAN 0 to HW filter on device bond2
[  130.169529][ T8379] bond2: (slave bridge2): making interface the new active one
[  130.172517][ T8379] bridge2: entered promiscuous mode
[  130.176221][ T8379] bond2: (slave bridge2): Enslaving as an active interface with an up link
[  130.247616][ T8338] bridge0: port 1(bridge_slave_0) entered blocking state
[  130.255795][ T8338] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.258195][ T8338] bridge_slave_0: entered allmulticast mode
[  130.263218][ T8338] bridge_slave_0: entered promiscuous mode
[  130.274331][ T8338] bridge0: port 2(bridge_slave_1) entered blocking state
[  130.278371][ T8338] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.281292][ T8338] bridge_slave_1: entered allmulticast mode
[  130.290034][ T8338] bridge_slave_1: entered promiscuous mode
[  130.294612][ T8276] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  130.358328][ T8276] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  130.369134][ T8276] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  130.393620][ T8338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  130.396834][ T8276] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  130.428305][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.440137][ T8338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  130.537715][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.552296][ T8338] team0: Port device team_slave_0 added
[  130.556059][ T8405] netlink: 'syz.2.1013': attribute type 15 has an invalid length.
[  130.562346][ T8338] team0: Port device team_slave_1 added
[  130.564998][ T5838] Bluetooth: hci2: command tx timeout
[  130.649641][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.667749][ T8338] batman_adv: batadv0: Adding interface: batadv_slave_0
[  130.670515][ T8338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  130.681875][ T8338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  130.689330][ T8338] batman_adv: batadv0: Adding interface: batadv_slave_1
[  130.691839][ T8338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  130.691935][ T8407] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1014'.
[  130.701844][ T8338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  130.745503][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode
[  130.748361][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode
[  130.752056][   T12] bridge0: port 3(netdevsim0) entered disabled state
[  130.758738][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.815464][ T8338] hsr_slave_0: entered promiscuous mode
[  130.818672][ T8338] hsr_slave_1: entered promiscuous mode
[  130.821861][ T8338] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  130.834054][ T8338] Cannot create hsr debugfs directory
[  130.961396][ T8276] 8021q: adding VLAN 0 to HW filter on device bond0
[  131.017593][   T12] bridge_slave_1: left allmulticast mode
[  131.019612][   T12] bridge_slave_1: left promiscuous mode
[  131.021703][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.030685][   T12] bridge_slave_0: left allmulticast mode
[  131.032947][   T12] bridge_slave_0: left promiscuous mode
[  131.038391][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.237422][   T12] bond0 (unregistering): (slave gretap1): Releasing active interface
[  131.399694][   T12] team0: Port device bridge1 removed
[  131.437513][   T12] smc: removing net device bond0 with user defined pnetid SYZ2
[  131.440754][   T12] bond0 (unregistering): Released all slaves
[  131.526155][ T8276] 8021q: adding VLAN 0 to HW filter on device team0
[  131.554076][   T12] tipc: Left network mode
[  131.687777][   T65] bridge0: port 1(bridge_slave_0) entered blocking state
[  131.690849][   T65] bridge0: port 1(bridge_slave_0) entered forwarding state
[  131.702573][   T65] bridge0: port 2(bridge_slave_1) entered blocking state
[  131.705554][   T65] bridge0: port 2(bridge_slave_1) entered forwarding state
[  131.941976][   T12] hsr_slave_0: left promiscuous mode
[  131.954993][   T12] hsr_slave_1: left promiscuous mode
[  131.959149][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  131.962183][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  131.970505][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  131.973560][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  132.003159][   T12] veth1_macvtap: left promiscuous mode
[  132.008600][ T5838] Bluetooth: hci1: command tx timeout
[  132.025590][   T12] veth0_macvtap: left promiscuous mode
[  132.028035][   T12] veth1_vlan: left promiscuous mode
[  132.030208][   T12] veth0_vlan: left promiscuous mode
[  132.568327][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.570915][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  132.644018][ T5838] Bluetooth: hci2: command tx timeout
[  132.770865][   T12] team0 (unregistering): Port device team_slave_1 removed
[  132.810489][   T12] team0 (unregistering): Port device team_slave_0 removed
[  133.337931][ T8276] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  133.510736][ T8338] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  133.547346][ T8338] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  133.563465][ T8338] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  133.592538][ T8338] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  133.688868][ T8276] 8021q: adding VLAN 0 to HW filter on device batadv0
[  133.711861][   T12] IPVS: stop unused estimator thread 0...
[  133.802737][ T8457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1028'.
[  133.807733][ T8457] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  133.811641][ T8457] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  133.821705][ T8276] veth0_vlan: entered promiscuous mode
[  133.845210][ T8276] veth1_vlan: entered promiscuous mode
[  133.885114][ T8338] 8021q: adding VLAN 0 to HW filter on device bond0
[  133.906512][ T8338] 8021q: adding VLAN 0 to HW filter on device team0
[  133.920886][ T8276] veth0_macvtap: entered promiscuous mode
[  133.930903][  T550] bridge0: port 1(bridge_slave_0) entered blocking state
[  133.934118][  T550] bridge0: port 1(bridge_slave_0) entered forwarding state
[  133.955987][ T8276] veth1_macvtap: entered promiscuous mode
[  133.967163][  T550] bridge0: port 2(bridge_slave_1) entered blocking state
[  133.969957][  T550] bridge0: port 2(bridge_slave_1) entered forwarding state
[  134.010002][ T8276] batman_adv: batadv0: Interface activated: batadv_slave_0
[  134.041993][ T8276] batman_adv: batadv0: Interface activated: batadv_slave_1
[  134.058949][ T8276] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  134.062670][ T8276] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  134.067610][ T8276] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  134.070994][ T8276] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  134.084335][ T5838] Bluetooth: hci1: command tx timeout
[  134.181810][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  134.190534][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  134.228711][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  134.231989][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  134.271252][ T8474] netlink: 'syz.2.1035': attribute type 29 has an invalid length.
[  134.277582][ T8474] netlink: 'syz.2.1035': attribute type 29 has an invalid length.
[  134.280720][ T8474] netlink: 488 bytes leftover after parsing attributes in process `syz.2.1035'.
[  134.409066][ T8338] 8021q: adding VLAN 0 to HW filter on device batadv0
[  134.468347][ T8338] veth0_vlan: entered promiscuous mode
[  134.481969][ T8338] veth1_vlan: entered promiscuous mode
[  134.527834][ T8338] veth0_macvtap: entered promiscuous mode
[  134.534467][ T8338] veth1_macvtap: entered promiscuous mode
[  134.556390][ T8338] batman_adv: batadv0: Interface activated: batadv_slave_0
[  134.577968][ T8338] batman_adv: batadv0: Interface activated: batadv_slave_1
[  134.590514][ T8338] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  134.596806][ T8338] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  134.600585][ T8338] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  134.606834][ T8338] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  134.707270][ T8482] syzkaller1: entered promiscuous mode
[  134.709657][ T8482] syzkaller1: entered allmulticast mode
[  134.740386][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  134.743090][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  134.766937][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  134.769544][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  134.907803][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.325614][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.715504][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.818698][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  135.824286][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  135.828621][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  135.852462][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  135.856104][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  136.113087][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.174332][ T5833] Bluetooth: hci1: command tx timeout
[  136.187506][ T8500] chnl_net:caif_netlink_parms(): no params data found
[  136.362419][ T8500] bridge0: port 1(bridge_slave_0) entered blocking state
[  136.373200][ T8500] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.380260][ T8500] bridge_slave_0: entered allmulticast mode
[  136.388946][ T8500] bridge_slave_0: entered promiscuous mode
[  136.414923][ T8500] bridge0: port 2(bridge_slave_1) entered blocking state
[  136.422980][ T8500] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.427213][ T8500] bridge_slave_1: entered allmulticast mode
[  136.434687][ T8500] bridge_slave_1: entered promiscuous mode
[  136.452220][ T8531] tipc: Started in network mode
[  136.456434][ T8531] tipc: Node identity ceb00d28d0aa, cluster identity 4711
[  136.458925][ T8531] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  136.472899][   T12] bridge_slave_1: left allmulticast mode
[  136.477297][   T12] bridge_slave_1: left promiscuous mode
[  136.480000][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.487889][   T12] bridge_slave_0: left allmulticast mode
[  136.490448][   T12] bridge_slave_0: left promiscuous mode
[  136.493112][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.899542][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  136.915377][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  136.925699][   T12] bond0 (unregistering): Released all slaves
[  136.934769][ T8531] syzkaller0: entered promiscuous mode
[  136.940882][ T8531] syzkaller0: entered allmulticast mode
[  136.954956][ T8500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  136.961425][ T8500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  137.137287][ T8534] tipc: Resetting bearer <eth:syzkaller0>
[  137.156262][ T8530] tipc: Resetting bearer <eth:syzkaller0>
[  137.168089][ T8530] tipc: Disabling bearer <eth:syzkaller0>
[  137.317724][ T8500] team0: Port device team_slave_0 added
[  137.322982][ T8500] team0: Port device team_slave_1 added
[  137.423021][ T8500] batman_adv: batadv0: Adding interface: batadv_slave_0
[  137.431306][ T8500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  137.445234][ T8500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  137.495011][ T8500] batman_adv: batadv0: Adding interface: batadv_slave_1
[  137.498119][ T8500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  137.526725][ T8500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  137.558995][   T12] hsr_slave_0: left promiscuous mode
[  137.561933][   T12] hsr_slave_1: left promiscuous mode
[  137.566713][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  137.567411][ T8553] netlink: 332 bytes leftover after parsing attributes in process `syz.0.1061'.
[  137.569305][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  137.576985][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  137.577233][ T8553] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1061'.
[  137.579590][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  137.587555][ T8553] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1061'.
[  137.599374][   T12] veth1_macvtap: left promiscuous mode
[  137.601943][   T12] veth0_macvtap: left promiscuous mode
[  137.608772][   T12] veth1_vlan: left promiscuous mode
[  137.612182][   T12] veth0_vlan: left promiscuous mode
[  137.793565][ T8561] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1065'.
[  137.837036][ T8563] sctp: [Deprecated]: syz.0.1066 (pid 8563) Use of struct sctp_assoc_value in delayed_ack socket option.
[  137.837036][ T8563] Use struct sctp_sack_info instead
[  137.938956][ T5833] Bluetooth: hci2: command tx timeout
[  138.111253][   T12] team0 (unregistering): Port device team_slave_1 removed
[  138.152389][   T12] team0 (unregistering): Port device team_slave_0 removed
[  138.842544][ T8500] hsr_slave_0: entered promiscuous mode
[  138.855730][ T8500] hsr_slave_1: entered promiscuous mode
[  138.859315][ T8500] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  138.863164][ T8500] Cannot create hsr debugfs directory
[  139.020557][ T8584] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1073'.
[  139.195854][ T8589] netlink: 'syz.0.1074': attribute type 1 has an invalid length.
[  139.199498][ T8589] netlink: 'syz.0.1074': attribute type 10 has an invalid length.
[  139.208377][ T8589] netlink: 'syz.0.1074': attribute type 4 has an invalid length.
[  139.211552][ T8589] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1074'.
[  139.406820][ T8597] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1076'.
[  139.549768][ T8500] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  139.562502][ T8500] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  139.589521][ T8500] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  139.605184][ T8500] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  139.670655][ T8613] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  139.739611][ T8500] 8021q: adding VLAN 0 to HW filter on device bond0
[  139.761502][ T8500] 8021q: adding VLAN 0 to HW filter on device team0
[  139.779368][  T550] bridge0: port 1(bridge_slave_0) entered blocking state
[  139.781854][  T550] bridge0: port 1(bridge_slave_0) entered forwarding state
[  139.788437][  T550] bridge0: port 2(bridge_slave_1) entered blocking state
[  139.790794][  T550] bridge0: port 2(bridge_slave_1) entered forwarding state
[  140.005000][ T5833] Bluetooth: hci2: command tx timeout
[  140.122275][ T8500] 8021q: adding VLAN 0 to HW filter on device batadv0
[  140.195371][ T8500] veth0_vlan: entered promiscuous mode
[  140.201575][ T8500] veth1_vlan: entered promiscuous mode
[  140.260389][ T8500] veth0_macvtap: entered promiscuous mode
[  140.282597][ T8500] veth1_macvtap: entered promiscuous mode
[  140.323202][ T2304] IPVS: starting estimator thread 0...
[  140.331007][ T8500] batman_adv: batadv0: Interface activated: batadv_slave_0
[  140.347012][ T8647] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  140.359014][ T8500] batman_adv: batadv0: Interface activated: batadv_slave_1
[  140.370669][ T8500] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  140.372088][  T550] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  140.377798][ T8500] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  140.381215][ T8500] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  140.388684][ T8500] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  140.395389][  T550] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  140.414047][ T8648] IPVS: using max 62 ests per chain, 148800 per kthread
[  140.431610][ T8647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  140.548800][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  140.551292][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  140.585797][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  140.588542][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  141.412995][ T8684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1099'.
[  141.772500][ T8700] netlink: 'syz.0.1106': attribute type 12 has an invalid length.
[  141.776609][ T8700] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.1106'.
[  141.939682][ T8706] bond1: entered promiscuous mode
[  141.941611][ T8706] bond1: entered allmulticast mode
[  142.020899][ T8711] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.1111'.
[  142.319826][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.092564][ T8729] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1118'.
[  143.185529][ T8734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1120'.
[  143.331969][ T8745] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1125'.
[  143.340662][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  143.348094][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  143.352426][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  143.353971][ T8745] x_tables: duplicate entry at hook 1
[  143.359822][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  143.369377][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  143.640731][ T8743] chnl_net:caif_netlink_parms(): no params data found
[  143.793135][ T8743] bridge0: port 1(bridge_slave_0) entered blocking state
[  143.804327][ T8743] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.807450][ T8743] bridge_slave_0: entered allmulticast mode
[  143.811343][ T8743] bridge_slave_0: entered promiscuous mode
[  143.825513][ T8743] bridge0: port 2(bridge_slave_1) entered blocking state
[  143.828511][ T8743] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.831490][ T8743] bridge_slave_1: entered allmulticast mode
[  143.838096][ T8743] bridge_slave_1: entered promiscuous mode
[  143.895091][ T8743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  143.899864][ T8743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  143.938806][ T8743] team0: Port device team_slave_0 added
[  143.943000][ T8743] team0: Port device team_slave_1 added
[  143.971856][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.026239][ T8743] batman_adv: batadv0: Adding interface: batadv_slave_0
[  144.029053][ T8743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  144.039324][ T8743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  144.098851][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.118768][ T8743] batman_adv: batadv0: Adding interface: batadv_slave_1
[  144.121138][ T8743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  144.139755][ T8743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  144.169768][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.279619][ T8743] hsr_slave_0: entered promiscuous mode
[  144.282872][ T8743] hsr_slave_1: entered promiscuous mode
[  144.295051][ T8743] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  144.298176][ T8743] Cannot create hsr debugfs directory
[  144.521499][ T8807] netlink: 'syz.2.1149': attribute type 1 has an invalid length.
[  144.556077][ T8807] bond3: entered promiscuous mode
[  144.558587][ T8807] 8021q: adding VLAN 0 to HW filter on device bond3
[  144.563252][   T12] bridge_slave_1: left allmulticast mode
[  144.572901][   T12] bridge_slave_1: left promiscuous mode
[  144.575699][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.582147][   T12] bridge_slave_0: left allmulticast mode
[  144.584875][   T12] bridge_slave_0: left promiscuous mode
[  144.587259][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.718352][ T8815] netlink: 'syz.0.1152': attribute type 21 has an invalid length.
[  144.980972][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  144.986376][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  144.990936][   T12] bond0 (unregistering): Released all slaves
[  145.037857][ T8807] 8021q: adding VLAN 0 to HW filter on device bond3
[  145.040570][ T8807] bond3: (slave vcan1): The slave device specified does not support setting the MAC address
[  145.047447][ T8807] bond3: (slave vcan1): Setting fail_over_mac to active for active-backup mode
[  145.054974][ T8807] bond3: (slave vcan1): making interface the new active one
[  145.057310][ T8807] vcan1: entered promiscuous mode
[  145.059803][ T8807] bond3: (slave vcan1): Enslaving as an active interface with an up link
[  145.062496][ T8815] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1152'.
[  145.444464][ T5838] Bluetooth: hci2: command tx timeout
[  145.556857][ T8840] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1161'.
[  145.640989][   T12] hsr_slave_0: left promiscuous mode
[  145.648385][   T12] hsr_slave_1: left promiscuous mode
[  145.655960][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  145.664985][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  145.670815][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  145.673461][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  145.700932][   T12] veth1_macvtap: left promiscuous mode
[  145.702799][   T12] veth0_macvtap: left promiscuous mode
[  145.719144][   T12] veth1_vlan: left promiscuous mode
[  145.721111][   T12] veth0_vlan: left promiscuous mode
[  146.271504][   T12] team0 (unregistering): Port device team_slave_1 removed
[  146.316007][   T12] team0 (unregistering): Port device team_slave_0 removed
[  147.062794][ T8743] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  147.082823][ T8743] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  147.131945][ T8743] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  147.147287][ T8743] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  147.251147][ T8743] 8021q: adding VLAN 0 to HW filter on device bond0
[  147.269233][ T8743] 8021q: adding VLAN 0 to HW filter on device team0
[  147.292123][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[  147.294964][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[  147.308935][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[  147.311670][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[  147.367020][ T8743] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  147.438220][ T8894] macsec1: entered promiscuous mode
[  147.440145][ T8894] macsec1: entered allmulticast mode
[  147.523967][ T5838] Bluetooth: hci2: command tx timeout
[  147.545302][ T8743] 8021q: adding VLAN 0 to HW filter on device batadv0
[  147.579481][ T8743] veth0_vlan: entered promiscuous mode
[  147.585989][ T8743] veth1_vlan: entered promiscuous mode
[  147.607714][ T8743] veth0_macvtap: entered promiscuous mode
[  147.620671][ T8743] veth1_macvtap: entered promiscuous mode
[  147.642519][ T8743] batman_adv: batadv0: Interface activated: batadv_slave_0
[  147.659219][ T8743] batman_adv: batadv0: Interface activated: batadv_slave_1
[  147.675951][ T8743] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  147.685834][ T8743] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  147.688481][ T8743] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  147.691505][ T8743] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  147.815809][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  147.818308][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  147.863911][  T973] IPVS: starting estimator thread 0...
[  147.878617][  T161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  147.881103][  T161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  147.967993][ T8916] IPVS: using max 62 ests per chain, 148800 per kthread
[  148.010236][ T8921] xt_CT: You must specify a L4 protocol and not use inversions on it
[  148.922548][ T8955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1206'.
[  148.930636][ T8955] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1206'.
[  148.934488][ T8955] netlink: 'syz.2.1206': attribute type 5 has an invalid length.
[  149.398375][ T8991] netlink: 'syz.0.1220': attribute type 1 has an invalid length.
[  149.401518][ T8991] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1220'.
[  149.408109][ T8991] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1220'.
[  149.417666][ T8992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1217'.
[  149.421230][ T8992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1217'.
[  149.511396][ T5661] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.416554][ T9000] x_tables: duplicate underflow at hook 1
[  150.598911][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  150.603957][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  150.605878][ T9010] ip6t_REJECT: ECHOREPLY is not supported
[  150.615180][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  150.620232][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  150.624011][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  150.788817][ T9019] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1229'.
[  150.851819][ T9007] chnl_net:caif_netlink_parms(): no params data found
[  150.979271][ T9034] ieee802154 phy0 wpan0: encryption failed: -90
[  150.984593][ T9007] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.987297][ T9007] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.989654][ T9007] bridge_slave_0: entered allmulticast mode
[  150.992807][ T9007] bridge_slave_0: entered promiscuous mode
[  151.004591][ T9007] bridge0: port 2(bridge_slave_1) entered blocking state
[  151.006863][ T9007] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.009215][ T9007] bridge_slave_1: entered allmulticast mode
[  151.013258][ T9007] bridge_slave_1: entered promiscuous mode
[  151.021504][ T9036] netlink: set zone limit has 8 unknown bytes
[  151.057311][ T9007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  151.064871][ T9007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  151.138661][ T5661] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.161225][ T9007] team0: Port device team_slave_0 added
[  151.168745][ T9007] team0: Port device team_slave_1 added
[  151.201799][ T9007] batman_adv: batadv0: Adding interface: batadv_slave_0
[  151.204299][ T9007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  151.215435][ T9007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  151.244698][ T5661] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.252628][ T9007] batman_adv: batadv0: Adding interface: batadv_slave_1
[  151.256833][ T9007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  151.274934][ T9007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  151.348679][ T5661] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.399013][ T9007] hsr_slave_0: entered promiscuous mode
[  151.402155][ T9007] hsr_slave_1: entered promiscuous mode
[  151.419107][ T9007] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  151.422890][ T9007] Cannot create hsr debugfs directory
[  151.582361][ T9048] syzkaller0: entered promiscuous mode
[  151.585072][ T9048] syzkaller0: entered allmulticast mode
[  151.651743][ T5661] bridge_slave_1: left allmulticast mode
[  151.653555][ T5661] bridge_slave_1: left promiscuous mode
[  151.659417][ T5661] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.685145][ T5661] bridge_slave_0: left allmulticast mode
[  151.689301][ T5661] bridge_slave_0: left promiscuous mode
[  151.691324][ T5661] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.848649][ T9059] netlink: 'syz.2.1244': attribute type 1 has an invalid length.
[  151.852168][ T9059] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1244'.
[  152.188373][ T5661] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  152.196095][ T5661] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  152.206713][ T5661] bond0 (unregistering): Released all slaves
[  152.229415][ T9061] gretap0: entered promiscuous mode
[  152.231762][ T9061] macsec2: entered promiscuous mode
[  152.240735][ T9061] gretap0: left promiscuous mode
[  152.532603][ T5661] hsr_slave_0: left promiscuous mode
[  152.536070][ T5661] hsr_slave_1: left promiscuous mode
[  152.541349][ T5661] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  152.553485][ T5661] batman_adv: batadv0: Removing interface: batadv_slave_0
[  152.560453][ T5661] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  152.563281][ T5661] batman_adv: batadv0: Removing interface: batadv_slave_1
[  152.607480][ T5661] veth1_macvtap: left promiscuous mode
[  152.609722][ T5661] veth0_macvtap: left promiscuous mode
[  152.612028][ T5661] veth1_vlan: left promiscuous mode
[  152.623365][ T5661] veth0_vlan: left promiscuous mode
[  152.643927][ T5833] Bluetooth: hci2: command tx timeout
[  153.423546][ T9101] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  153.545543][ T5661] team0 (unregistering): Port device team_slave_1 removed
[  153.608384][ T5661] team0 (unregistering): Port device team_slave_0 removed
[  153.861910][ T9128] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1271'.
[  154.735620][ T5833] Bluetooth: hci2: command tx timeout
[  154.912825][ T9007] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  154.949436][ T9007] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  154.967738][ T9007] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  155.061853][ T9007] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  155.319989][ T9007] 8021q: adding VLAN 0 to HW filter on device bond0
[  155.376557][ T9007] 8021q: adding VLAN 0 to HW filter on device team0
[  155.396876][  T161] bridge0: port 1(bridge_slave_0) entered blocking state
[  155.399316][  T161] bridge0: port 1(bridge_slave_0) entered forwarding state
[  155.407401][  T161] bridge0: port 2(bridge_slave_1) entered blocking state
[  155.409650][  T161] bridge0: port 2(bridge_slave_1) entered forwarding state
[  155.646178][ T9007] 8021q: adding VLAN 0 to HW filter on device batadv0
[  155.689645][ T9197] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1289'.
[  155.711743][ T9007] veth0_vlan: entered promiscuous mode
[  155.722344][ T9007] veth1_vlan: entered promiscuous mode
[  155.769620][ T9007] veth0_macvtap: entered promiscuous mode
[  155.778334][ T9007] veth1_macvtap: entered promiscuous mode
[  155.790969][ T9007] batman_adv: batadv0: Interface activated: batadv_slave_0
[  155.807959][ T9007] batman_adv: batadv0: Interface activated: batadv_slave_1
[  155.821476][ T9007] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  155.824560][ T9007] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  155.827754][ T9007] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  155.831159][ T9007] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  155.956147][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  155.959218][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  155.994810][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  155.998260][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  157.827638][ T5661] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.763572][ T9277] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1329'.
[  158.880051][ T9285] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  158.977173][ T9289] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1334'.
[  159.000221][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  159.005984][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  159.010069][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  159.016126][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  159.020100][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  159.080817][ T9294] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  159.296047][ T9290] chnl_net:caif_netlink_parms(): no params data found
[  159.363031][ T9312] 
[  159.364264][ T9312] =============================
[  159.366219][ T9312] WARNING: suspicious RCU usage
[  159.368260][ T9312] 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 Not tainted
[  159.371711][ T9312] -----------------------------
[  159.374134][ T9312] net/core/netclassid_cgroup.c:24 suspicious rcu_dereference_check() usage!
[  159.377093][ T9312] 
[  159.377093][ T9312] other info that might help us debug this:
[  159.377093][ T9312] 
[  159.380454][ T9312] 
[  159.380454][ T9312] rcu_scheduler_active = 2, debug_locks = 1
[  159.383143][ T9312] 1 lock held by syz.0.1342/9312:
[  159.385198][ T9312]  #0: ffffffff8e13f340 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x38/0x80
[  159.389117][ T9312] 
[  159.389117][ T9312] stack backtrace:
[  159.391528][ T9312] CPU: 0 UID: 0 PID: 9312 Comm: syz.0.1342 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  159.391544][ T9312] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  159.391551][ T9312] Call Trace:
[  159.391558][ T9312]  <TASK>
[  159.391563][ T9312]  dump_stack_lvl+0x189/0x250
[  159.391584][ T9312]  ? __pfx_dump_stack_lvl+0x10/0x10
[  159.391596][ T9312]  ? __pfx__printk+0x10/0x10
[  159.391612][ T9312]  ? print_lock_name+0xde/0x100
[  159.391627][ T9312]  lockdep_rcu_suspicious+0x140/0x1d0
[  159.391641][ T9312]  task_cls_state+0x1a5/0x1d0
[  159.391664][ T9312]  bpf_get_cgroup_classid_curr+0x18/0x60
[  159.391676][ T9312]  bpf_prog_841aec7193f618b3+0x1b/0x21
[  159.391686][ T9312]  bpf_prog_run_pin_on_cpu+0x6a/0x150
[  159.391702][ T9312]  bpf_prog_test_run_syscall+0x312/0x4b0
[  159.391716][ T9312]  ? __pfx_bpf_prog_test_run_syscall+0x10/0x10
[  159.391728][ T9312]  ? __fget_files+0x2a/0x420
[  159.391750][ T9312]  ? __pfx_bpf_prog_test_run_syscall+0x10/0x10
[  159.391761][ T9312]  bpf_prog_test_run+0x2c7/0x340
[  159.391773][ T9312]  __sys_bpf+0x4a4/0x860
[  159.391781][ T9312]  ? __pfx___sys_bpf+0x10/0x10
[  159.391794][ T9312]  ? exc_page_fault+0x76/0xf0
[  159.391832][ T9312]  ? rcu_is_watching+0x15/0xb0
[  159.391848][ T9312]  __x64_sys_bpf+0x7c/0x90
[  159.391862][ T9312]  do_syscall_64+0xfa/0x3b0
[  159.391873][ T9312]  ? lockdep_hardirqs_on+0x9c/0x150
[  159.391886][ T9312]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  159.391894][ T9312]  ? exc_page_fault+0x9f/0xf0
[  159.391907][ T9312]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  159.391918][ T9312] RIP: 0033:0x7fdeb978e929
[  159.391929][ T9312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  159.391938][ T9312] RSP: 002b:00007fdeba5f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  159.391950][ T9312] RAX: ffffffffffffffda RBX: 00007fdeb99b5fa0 RCX: 00007fdeb978e929
[  159.391957][ T9312] RDX: 0000000000000039 RSI: 0000200000000500 RDI: 000000000000000a
[  159.391963][ T9312] RBP: 00007fdeb9810b39 R08: 0000000000000000 R09: 0000000000000000
[  159.391970][ T9312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  159.391976][ T9312] R13: 0000000000000000 R14: 00007fdeb99b5fa0 R15: 00007ffea50bcd68
[  159.391991][ T9312]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  159.687858][ T5661] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.869743][ T5661] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.999725][ T5661] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.119539][ T5661] bridge_slave_1: left allmulticast mode
[  160.121324][ T5661] bridge_slave_1: left promiscuous mode
[  160.123318][ T5661] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.129863][ T5661] bridge_slave_0: left allmulticast mode
[  160.131702][ T5661] bridge_slave_0: left promiscuous mode
[  160.134037][ T5661] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.526071][ T5661] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  160.531269][ T5661] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  160.536141][ T5661] bond0 (unregistering): Released all slaves
[  160.814832][ T5661] hsr_slave_0: left promiscuous mode
[  160.819285][ T5661] hsr_slave_1: left promiscuous mode
[  160.821945][ T5661] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  160.827144][ T5661] batman_adv: batadv0: Removing interface: batadv_slave_0
[  160.831101][ T5661] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  160.836915][ T5661] batman_adv: batadv0: Removing interface: batadv_slave_1
[  160.855643][ T5661] veth1_macvtap: left promiscuous mode
[  160.857984][ T5661] veth0_macvtap: left promiscuous mode
[  160.860307][ T5661] veth1_vlan: left promiscuous mode
[  160.862458][ T5661] veth0_vlan: left promiscuous mode
[  161.369587][ T5661] team0 (unregistering): Port device team_slave_1 removed
[  161.414939][ T5661] team0 (unregistering): Port device team_slave_0 removed
[  162.138331][ T5661] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  162.236737][ T5661] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  162.307840][ T5661] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  162.364616][ T5661] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  162.529939][ T5661] bridge_slave_1: left allmulticast mode
[  162.532153][ T5661] bridge_slave_1: left promiscuous mode
[  162.535230][ T5661] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.540169][ T5661] bridge_slave_0: left allmulticast mode
[  162.542374][ T5661] bridge_slave_0: left promiscuous mode
[  162.547516][ T5661] bridge0: port 1(bridge_slave_0) entered disabled state
[  162.637639][ T5661] bond0 (unregistering): Released all slaves
[  163.009546][ T5661] bond2 (unregistering): (slave bridge2): Releasing backup interface
[  163.012714][ T5661] bridge2 (unregistering): left promiscuous mode
[  163.185518][ T5661] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  163.190021][ T5661] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  163.193223][ T5661] bond0 (unregistering): Released all slaves
[  163.209890][ T5661] bond1 (unregistering): Released all slaves
[  163.297242][ T5661] bond2 (unregistering): Released all slaves
[  163.415086][ T5661] bond3 (unregistering): (slave vcan1): Releasing backup interface
[  163.417672][ T5661] vcan1: left promiscuous mode
[  163.420714][ T5661] bond3 (unregistering): Released all slaves
[  163.436533][    T9] infiniband syz1: ib_query_port failed (-19)
[  163.521494][ T5661] : left promiscuous mode
[  163.575235][ T5661] tipc: Left network mode
[  163.777881][ T5661] hsr_slave_0: left promiscuous mode
[  163.780876][ T5661] hsr_slave_1: left promiscuous mode
[  163.783651][ T5661] batman_adv: batadv0: Removing interface: batadv_slave_0
[  163.788862][ T5661] batman_adv: batadv0: Removing interface: batadv_slave_1
[  163.923499][ T5661] pimreg (unregistering): left allmulticast mode
[  164.304230][ T5661] team0 (unregistering): Port device team_slave_1 removed
[  164.351321][ T5661] team0 (unregistering): Port device team_slave_0 removed
[  165.275543][ T5661] IPVS: stop unused estimator thread 0...

VM DIAGNOSIS:
14:42:48  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000fc2 RDI=0000000000000fc3 RBP=00000000000003f8 RSP=ffffc900036e7550
R8 =ffff8880202b0237 R9 =1ffff11004056046 R10=dffffc0000000000 R11=ffffffff85478780
R12=dffffc0000000000 R13=ffffffff99af98cd R14=ffffffff99dfe6e0 R15=0000000000000000
RIP=ffffffff854787fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fdeba5f96c0 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2c91fffc CR3=00000000346a6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fdeb9985478 00007fdeb9985450 XMM03=00007fdeb9985488 00007fdeb9985480
XMM04=00007fdeba4ed100 00007fdeb9985440 XMM05=00007fdeb9985458 00007fdeb99854a0
XMM06=00007fdeb9985498 00007fdeb9985490 XMM07=00007fdeb9985488 00007fdeb9985480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fdeb9811c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=ffff888100032b10 RCX=1ffff92000651da0 RDX=0000000000000000
RSI=ffffffff8db865a0 RDI=ffff888100032b10 RBP=ffffc9000328ed88 RSP=ffffc9000328ece0
R8 =0000000000000000 R9 =ffffffff8b65a5c9 R10=dffffc0000000000 R11=ffffed1020006572
R12=ffff888104bb3500 R13=ffff888122544708 R14=ffff888100032b14 R15=dffffc0000000000
RIP=ffffffff819ee2ed RFL=00000a03 [-O----C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555595173500 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fe1f765ef40 CR3=000000002a248000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000ff000000ff00 0000000000000000 XMM05=0000000000000000 00007f509d611b1f
XMM06=0000000000000000 00007f509d611b19 XMM07=0000000000000000 00007f509d611b2d
XMM08=0000000000000000 00007f509d611bb3 XMM09=0000000000000000 00007f509d611c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
