last executing test programs:

463.868194ms ago: executing program 1 (id=4293):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_delneigh={0x1c, 0x1c, 0xcafe28741a3524c9, 0x70bd27, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x40, 0x0, 0xa}}, 0x1c}, 0x1, 0x0, 0x0, 0xcc840}, 0x4004000)

386.835025ms ago: executing program 1 (id=4294):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x34, 0x2, [@TCA_CGROUP_EMATCHES={0x30, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x20, 0x1, 0x0, 0x0, {{0xe37, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x40010)

279.029232ms ago: executing program 1 (id=4300):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
bind$bt_rfcomm(r0, 0x0, 0x0)

229.074404ms ago: executing program 1 (id=4302):
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000940)={'ip_vti0\x00', <r0=>0x0, 0x700, 0x7f00, 0xd65, 0x5, {{0x33, 0x4, 0x3, 0x26, 0xcc, 0xe7, 0x0, 0x9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@timestamp_addr={0x44, 0x44, 0x52, 0x1, 0x7, [{@remote, 0x3}, {@empty, 0x4}, {@remote, 0x3}, {@remote, 0x200}, {@local, 0x61}, {@rand_addr=0x64010100, 0x4}, {@broadcast, 0x6}, {@broadcast, 0xd59}]}, @timestamp_prespec={0x44, 0x4c, 0x90, 0x3, 0xa, [{@multicast2, 0x10001}, {@broadcast, 0x1000}, {@rand_addr=0x64010100, 0x80000001}, {@remote, 0x80000000}, {@multicast2, 0x14c}, {@local, 0x9}, {@rand_addr=0x64010101, 0x9}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x4}, {@loopback}]}, @noop, @lsrr={0x83, 0x1b, 0xc6, [@broadcast, @loopback, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x10}, @private=0xa010100]}, @generic={0x86, 0xb, "ab4651217b8f9ac310"}]}}}}})
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', r0, 0x0, 0x0, 0x0, 0x4}, 0x50)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', <r2=>0x0, 0x4, 0x8, 0x2, 0x5f, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, 0x20, 0x700, 0x1, 0xeb12}})
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x24008041)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x439, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x9}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0xc}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40080d5}, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x8, 0x9, 0x1, 0x24002, r1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2, 0xd}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB='21\x00\x00\x00\x00\x00\x00@\x00'], &(0x7f0000000080)='GPL\x00', 0x7fffffff, 0xcf, &(0x7f00000001c0)=""/207, 0x40f00, 0x4, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000000440)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0x7, 0x3, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000540)=[r1, r1, r1, r1, r1, r1, r1, r7, r1], &(0x7f0000000580)=[{0x5, 0x5, 0x7, 0x3}, {0x5, 0x3, 0x9, 0xb}, {0x0, 0x5, 0x8, 0x9}, {0x2, 0x4, 0x5, 0x7}], 0x10, 0x10}, 0x94)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r10, 0x0)
close(r9)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x6c, r12, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4, 0x0, @loopback}}, {0x12, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000001f00)=0x2)
r13 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r13, 0x6, 0xd, &(0x7f0000000040), 0x3)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
r15 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_DEL(r14, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x1c, r15, 0x1, 0x0, 0x0, {0x54}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2000}]}, 0x1c}}, 0x0)
close(r14)
sendmsg$inet(r13, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x20000014)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0)

228.741639ms ago: executing program 2 (id=4303):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x0, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b2000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000000000000000000000000000180000000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296)

170.149299ms ago: executing program 2 (id=4305):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000006600816657bb97c9269de9aaec8488040f0000004cb9cca7480ef402000000e305000a00000200000000", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0)

169.881228ms ago: executing program 0 (id=4306):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f00000004c0)={0x1f, 0xfffd, @none}, 0xe)

169.686631ms ago: executing program 0 (id=4307):
r0 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
r1 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108)
close(r0)

169.445801ms ago: executing program 2 (id=4308):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x32, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x13, 0x1, {{0x0, 0x0, 0x0, 0x12000000, 0x6}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0)

88.308251ms ago: executing program 0 (id=4309):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000009c0)=ANY=[@ANYBLOB="05000000ae05"], 0x48}}, 0x0)

88.073472ms ago: executing program 2 (id=4310):
r0 = socket(0x200000000000011, 0x2, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
bind$packet(r0, &(0x7f0000000080)={0x11, 0x17, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14)

87.933106ms ago: executing program 0 (id=4311):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079104e000000000063004808000000009540000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x7, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff70}, 0x48)

87.536052ms ago: executing program 1 (id=4312):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)={0x2c, r1, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4)

87.403958ms ago: executing program 2 (id=4313):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
getsockopt$netlink(r1, 0x10e, 0x9, 0x0, &(0x7f0000000040)=0x64)

8.735838ms ago: executing program 1 (id=4314):
socket$netlink(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, 0xffffffffffffffff, 0x1000)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', <r3=>0x0})
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10)
write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r4}, 0x18)
r5 = socket$netlink(0x10, 0x3, 0x400000000000004)
writev(r5, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1)

8.534675ms ago: executing program 0 (id=4315):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000002700), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r1, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4c010}, 0x8080)

8.041482ms ago: executing program 2 (id=4316):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'sit0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0xfff3}}}, 0x24}}, 0x0)

0s ago: executing program 0 (id=4317):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:19596' (ED25519) to the list of known hosts.
syzkaller login: [   48.966793][ T5773] cgroup: Unknown subsys name 'net'
[   49.096225][ T5773] cgroup: Unknown subsys name 'cpuset'
[   49.102026][ T5773] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.523043][ T5773] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   56.418627][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   56.422543][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   56.426166][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   56.444420][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   56.448582][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   56.452577][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   56.456014][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   56.459511][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   56.466714][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   56.472122][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   56.488860][ T5220] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   56.492701][ T5220] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   56.495921][ T5220] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   56.500103][ T5220] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   56.503261][ T5220] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   56.817185][ T5828] chnl_net:caif_netlink_parms(): no params data found
[   56.869505][ T5832] chnl_net:caif_netlink_parms(): no params data found
[   56.962614][ T5837] chnl_net:caif_netlink_parms(): no params data found
[   57.014410][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.017108][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.020309][ T5828] bridge_slave_0: entered allmulticast mode
[   57.024563][ T5828] bridge_slave_0: entered promiscuous mode
[   57.066574][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.069507][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.072599][ T5828] bridge_slave_1: entered allmulticast mode
[   57.076630][ T5828] bridge_slave_1: entered promiscuous mode
[   57.108788][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.112066][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.115038][ T5832] bridge_slave_0: entered allmulticast mode
[   57.118919][ T5832] bridge_slave_0: entered promiscuous mode
[   57.141613][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.144589][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.147582][ T5832] bridge_slave_1: entered allmulticast mode
[   57.152585][ T5832] bridge_slave_1: entered promiscuous mode
[   57.173533][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.194815][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.239538][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.246216][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.265655][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.268512][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.272372][ T5837] bridge_slave_0: entered allmulticast mode
[   57.276369][ T5837] bridge_slave_0: entered promiscuous mode
[   57.282108][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.284986][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.287869][ T5837] bridge_slave_1: entered allmulticast mode
[   57.292137][ T5837] bridge_slave_1: entered promiscuous mode
[   57.330153][ T5832] team0: Port device team_slave_0 added
[   57.353887][ T5828] team0: Port device team_slave_0 added
[   57.358723][ T5832] team0: Port device team_slave_1 added
[   57.394416][ T5828] team0: Port device team_slave_1 added
[   57.398912][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.434070][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.438808][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.442197][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.452740][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.488645][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.492170][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.500007][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.509483][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.512354][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.520373][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.543009][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.545834][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.556689][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.565577][ T5837] team0: Port device team_slave_0 added
[   57.589909][ T5837] team0: Port device team_slave_1 added
[   57.632629][ T5832] hsr_slave_0: entered promiscuous mode
[   57.635981][ T5832] hsr_slave_1: entered promiscuous mode
[   57.687503][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.690253][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.701211][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.708790][ T5828] hsr_slave_0: entered promiscuous mode
[   57.711641][ T5828] hsr_slave_1: entered promiscuous mode
[   57.713818][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   57.716284][ T5828] Cannot create hsr debugfs directory
[   57.726659][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.729449][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.740215][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.879481][ T5837] hsr_slave_0: entered promiscuous mode
[   57.884585][ T5837] hsr_slave_1: entered promiscuous mode
[   57.887548][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   57.890572][ T5837] Cannot create hsr debugfs directory
[   58.172543][ T5832] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   58.195411][ T5832] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   58.202608][ T5832] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   58.226176][ T5832] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   58.283825][ T5828] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   58.293523][ T5828] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   58.318530][ T5828] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   58.325559][ T5828] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   58.373755][ T5837] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   58.385348][ T5837] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   58.395576][ T5837] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   58.403120][ T5837] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   58.502173][ T5831] Bluetooth: hci0: command tx timeout
[   58.504694][ T5831] Bluetooth: hci1: command tx timeout
[   58.523074][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.563608][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   58.579401][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.592541][ T5220] Bluetooth: hci2: command tx timeout
[   58.598052][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.601103][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.634694][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.637641][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.654634][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   58.677757][ T4978] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.680807][ T4978] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.710508][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.713476][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.730577][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.765373][ T5837] 8021q: adding VLAN 0 to HW filter on device team0
[   58.784419][ T1014] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.786687][ T1014] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.792037][ T1014] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.794349][ T1014] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.866940][ T5837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   59.103888][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.149074][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.159082][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.219118][ T5832] veth0_vlan: entered promiscuous mode
[   59.245137][ T5832] veth1_vlan: entered promiscuous mode
[   59.248938][ T5837] veth0_vlan: entered promiscuous mode
[   59.275522][ T5828] veth0_vlan: entered promiscuous mode
[   59.282206][ T5837] veth1_vlan: entered promiscuous mode
[   59.292765][ T5828] veth1_vlan: entered promiscuous mode
[   59.310469][ T5832] veth0_macvtap: entered promiscuous mode
[   59.317719][ T5832] veth1_macvtap: entered promiscuous mode
[   59.339767][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.359000][ T5837] veth0_macvtap: entered promiscuous mode
[   59.369446][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.376540][ T5837] veth1_macvtap: entered promiscuous mode
[   59.383724][ T5828] veth0_macvtap: entered promiscuous mode
[   59.389694][ T5832] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.394018][ T5832] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.396671][ T5832] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.399272][ T5832] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.409608][ T5828] veth1_macvtap: entered promiscuous mode
[   59.439052][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.467123][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.482620][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.486120][ T5837] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.488723][ T5837] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.492281][ T5837] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.494909][ T5837] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.506321][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.532610][ T5828] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.535670][ T5828] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.538476][ T5828] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.546467][ T5828] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.571637][ T3972] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.574774][ T3972] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.661549][ T3972] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.666648][ T3972] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.737189][ T3972] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.740331][ T3972] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.758311][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.761260][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.779631][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   59.800378][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.809917][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.833526][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.835973][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.231307][ T5914] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10'.
[   60.309444][ T5920] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   60.375229][ T5924] ieee802154 phy0 wpan0: encryption failed: -22
[   60.593965][ T5220] Bluetooth: hci1: command tx timeout
[   60.594001][ T5831] Bluetooth: hci0: command tx timeout
[   60.641413][ T5937] netlink: 'syz.0.21': attribute type 1 has an invalid length.
[   60.661196][ T5831] Bluetooth: hci2: command tx timeout
[   61.610353][ T5938] gretap1: entered promiscuous mode
[   61.625628][ T5937] macvlan2: entered promiscuous mode
[   61.627621][ T5937] macvlan2: entered allmulticast mode
[   61.742058][ T5944] netlink: 732 bytes leftover after parsing attributes in process `syz.2.24'.
[   61.746239][ T5944] netlink: 732 bytes leftover after parsing attributes in process `syz.2.24'.
[   61.874974][ T5952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.28'.
[   62.150914][ T5976] Zero length message leads to an empty skb
[   62.235657][ T5976] nbd0: detected capacity change from 0 to 127
[   62.242804][ T5979] block nbd0: NBD_DISCONNECT
[   62.246688][ T5979] block nbd0: Disconnected due to user request.
[   62.258497][ T5979] block nbd0: shutting down sockets
[   62.292054][    C0] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   62.295037][    C0] Buffer I/O error on dev nbd0, logical block 0, async page read
[   62.297420][    C0] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   62.300235][    C0] Buffer I/O error on dev nbd0, logical block 1, async page read
[   62.302677][    C0] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   62.305395][    C0] Buffer I/O error on dev nbd0, logical block 2, async page read
[   62.307775][    C0] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   62.310484][    C0] Buffer I/O error on dev nbd0, logical block 3, async page read
[   62.322054][ T5840] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   62.329939][ T5840] Buffer I/O error on dev nbd0, logical block 0, async page read
[   62.335853][ T5984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.40'.
[   62.338571][ T5984] netlink: 4 bytes leftover after parsing attributes in process `syz.1.40'.
[   62.347249][ T5840] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   62.350175][ T5840] Buffer I/O error on dev nbd0, logical block 1, async page read
[   62.354218][ T5840] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   62.357341][ T5984] netlink: 'syz.1.40': attribute type 13 has an invalid length.
[   62.361087][ T5840] Buffer I/O error on dev nbd0, logical block 2, async page read
[   62.363489][ T5984] netlink: 'syz.1.40': attribute type 12 has an invalid length.
[   62.363874][ T5840] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   62.370136][ T5840] Buffer I/O error on dev nbd0, logical block 3, async page read
[   62.380354][ T5840] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   62.393165][ T5840] Buffer I/O error on dev nbd0, logical block 0, async page read
[   62.399427][ T5840] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   62.413262][ T5840] Buffer I/O error on dev nbd0, logical block 1, async page read
[   62.426094][ T5840] ldm_validate_partition_table(): Disk read failed.
[   62.429770][ T5840] Dev nbd0: unable to read RDB block 0
[   62.436462][ T5840]  nbd0: unable to read partition table
[   62.446267][ T5840] ldm_validate_partition_table(): Disk read failed.
[   62.462153][ T5840] Dev nbd0: unable to read RDB block 0
[   62.466020][ T5840]  nbd0: unable to read partition table
[   62.672002][ T5831] Bluetooth: hci1: command tx timeout
[   62.672019][ T5220] Bluetooth: hci0: command tx timeout
[   62.741024][ T5831] Bluetooth: hci2: command tx timeout
[   62.838202][ T6014] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received
[   62.948866][ T6020] syz.1.54 uses obsolete (PF_INET,SOCK_PACKET)
[   63.068981][ T6024] xt_time: invalid argument - start or stop time greater than 23:59:59
[   63.371343][ T6035] nbd2: detected capacity change from 0 to 63
[   63.381539][ T6036] block nbd2: NBD_DISCONNECT
[   63.383231][ T6036] block nbd2: Disconnected due to user request.
[   63.385219][ T6036] block nbd2: shutting down sockets
[   63.418867][ T5835] ldm_validate_partition_table(): Disk read failed.
[   63.432718][ T5835] Dev nbd2: unable to read RDB block 0
[   63.453760][ T5835]  nbd2: unable to read partition table
[   63.495299][ T5835] ldm_validate_partition_table(): Disk read failed.
[   63.502736][ T5835] Dev nbd2: unable to read RDB block 0
[   63.506152][ T5835]  nbd2: unable to read partition table
[   63.751527][ T6039] Bluetooth: MGMT ver 1.23
[   64.742617][ T5831] Bluetooth: hci0: command tx timeout
[   64.755191][ T5831] Bluetooth: hci1: command tx timeout
[   64.827381][ T5831] Bluetooth: hci2: command tx timeout
[   65.556698][ T6090] bridge0: entered promiscuous mode
[   65.559162][ T6090] vlan2: entered promiscuous mode
[   65.787507][ T6105] netlink: 16 bytes leftover after parsing attributes in process `syz.1.81'.
[   66.532360][ T6154] netlink: 'syz.1.103': attribute type 1 has an invalid length.
[   66.535294][ T6154] netlink: 'syz.1.103': attribute type 1 has an invalid length.
[   66.735802][ T6163] pim6reg1: entered promiscuous mode
[   66.737584][ T6163] pim6reg1: entered allmulticast mode
[   66.799268][ T6168] syz.0.110 (6168) used greatest stack depth: 20328 bytes left
[   66.910053][ T6169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   66.914279][   T47] IPVS: starting estimator thread 0...
[   66.932492][ T6176] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   67.000822][ T6178] IPVS: using max 62 ests per chain, 148800 per kthread
[   67.077818][ T6186] xt_CT: You must specify a L4 protocol and not use inversions on it
[   67.493343][ T6210] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   67.513164][ T6212] netlink: 'syz.0.129': attribute type 282 has an invalid length.
[   67.830601][ T6241] netlink: 20 bytes leftover after parsing attributes in process `syz.0.143'.
[   67.852825][ T6241] netlink: 4 bytes leftover after parsing attributes in process `syz.0.143'.
[   68.226332][ T6266] netlink: 'syz.0.155': attribute type 1 has an invalid length.
[   68.294702][ T6273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.158'.
[   68.298232][ T6273] netlink: 'syz.2.158': attribute type 30 has an invalid length.
[   68.308739][ T6273] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   68.312163][ T6273] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   68.314984][ T6273] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   68.318412][ T6273] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   68.333642][ T6273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.158'.
[   68.336562][ T6273] netlink: 'syz.2.158': attribute type 30 has an invalid length.
[   68.337291][ T6275] delete_channel: no stack
[   68.413576][ T6283] netlink: 24 bytes leftover after parsing attributes in process `syz.2.162'.
[   68.416660][ T6283] netlink: 24 bytes leftover after parsing attributes in process `syz.2.162'.
[   68.755362][ T6322] netlink: 12 bytes leftover after parsing attributes in process `syz.0.177'.
[   68.939184][ T6324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.179'.
[   70.030135][ T6388] netlink: 'syz.2.196': attribute type 11 has an invalid length.
[   70.032915][ T6388] netlink: 140 bytes leftover after parsing attributes in process `syz.2.196'.
[   70.476591][ T6425] netlink: 'syz.2.210': attribute type 2 has an invalid length.
[   70.986354][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   70.991521][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.023330][ T6460] erspan0: entered promiscuous mode
[   71.027950][ T6460] batman_adv: batadv0: Adding interface: macvlan2
[   71.037493][ T6460] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.061195][ T6460] batman_adv: batadv0: Interface activated: macvlan2
[   71.243368][ T6474] nftables ruleset with unbound set
[   71.293108][ T6477] __nla_validate_parse: 1 callbacks suppressed
[   71.293124][ T6477] netlink: 52 bytes leftover after parsing attributes in process `syz.2.234'.
[   71.338400][ T6479] netlink: 40 bytes leftover after parsing attributes in process `syz.2.235'.
[   71.512483][ T6485] 8021q: adding VLAN 0 to HW filter on device bond1
[   71.535796][ T6485] veth3: entered promiscuous mode
[   71.546303][ T6485] bond1: (slave veth3): Enslaving as an active interface with an up link
[   71.666552][ T6490] x_tables: duplicate underflow at hook 2
[   72.229593][ T6535] syz.0.260 (6535) used greatest stack depth: 19320 bytes left
[   72.545716][ T6559] netlink: 16 bytes leftover after parsing attributes in process `syz.1.272'.
[   72.697495][ T6569] netlink: 'syz.1.277': attribute type 4 has an invalid length.
[   73.093106][ T6588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.284'.
[   73.096567][ T6588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.284'.
[   73.274385][ T6599] netlink: 28 bytes leftover after parsing attributes in process `syz.2.289'.
[   73.278038][ T6599] netlink: 32 bytes leftover after parsing attributes in process `syz.2.289'.
[   73.284221][ T6599] netlink: 28 bytes leftover after parsing attributes in process `syz.2.289'.
[   73.287862][ T6599] netlink: 32 bytes leftover after parsing attributes in process `syz.2.289'.
[   73.753193][ T6617] netlink: 'syz.1.298': attribute type 14 has an invalid length.
[   73.792868][ T6617] netlink: 'syz.1.298': attribute type 14 has an invalid length.
[   74.067458][ T6634] netlink: 'syz.1.305': attribute type 4 has an invalid length.
[   74.245318][ T6646] xt_socket: unknown flags 0x8
[   74.492311][ T6655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.314'.
[   74.722210][   T33] audit: type=1800 audit(1752348010.552:2): pid=6655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.314" name="cgroup.controllers" dev="tmpfs" ino=486 res=0 errno=0
[   74.918230][ T6690] Driver unsupported XDP return value 0 on prog  (id 61) dev N/A, expect packet loss!
[   75.012346][ T6695] gtp0: entered promiscuous mode
[   75.276931][ T6719] netlink: 'syz.1.337': attribute type 1 has an invalid length.
[   75.282036][ T6719] netlink: 'syz.1.337': attribute type 2 has an invalid length.
[   75.309665][ T6723] netlink: 'syz.0.339': attribute type 1 has an invalid length.
[   75.335780][ T5838] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[   75.386251][ T6726] netlink: 'syz.1.340': attribute type 1 has an invalid length.
[   75.422120][ T6726] nbd: socks must be embedded in a SOCK_ITEM attr
[   75.424330][ T6726] block nbd0: shutting down sockets
[   75.502493][ T6736] netdevsim netdevsim2: Direct firmware load for .
[   75.502493][ T6736]  failed with error -2
[   75.506658][ T6736] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[   75.506658][ T6736] 
[   75.581633][ T6748] IPv6: addrconf: prefix option has invalid lifetime
[   75.664851][ T6756] netlink: 'syz.0.354': attribute type 12 has an invalid length.
[   76.017021][ T6775] veth0_to_team: entered promiscuous mode
[   76.018820][ T6775] veth0_to_team: entered allmulticast mode
[   76.223305][ T6793] veth0: entered promiscuous mode
[   76.229820][ T6792] veth0: left promiscuous mode
[   76.235508][ T6795] syzkaller0: entered promiscuous mode
[   76.237240][ T6795] syzkaller0: entered allmulticast mode
[   76.244877][ T6795] tipc: Started in network mode
[   76.247777][ T6795] tipc: Node identity 165663a6c0ff, cluster identity 4711
[   76.250090][ T6795] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   76.253608][ T6794] tipc: Resetting bearer <eth:syzkaller0>
[   76.272131][ T6794] tipc: Disabling bearer <eth:syzkaller0>
[   76.530868][ T6819] __nla_validate_parse: 13 callbacks suppressed
[   76.530880][ T6819] netlink: 28 bytes leftover after parsing attributes in process `syz.2.384'.
[   76.600133][ T6828] warning: `syz.2.390' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   76.654674][ T6831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.391'.
[   76.860581][ T6853] netlink: 'syz.2.401': attribute type 1 has an invalid length.
[   76.868886][ T6853] netlink: 224 bytes leftover after parsing attributes in process `syz.2.401'.
[   77.024546][ T6871] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   77.279173][ T6893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.421'.
[   77.669120][ T6924] raw_sendmsg: syz.1.436 forgot to set AF_INET. Fix it!
[   78.049356][ T6967] netlink: 'syz.2.453': attribute type 21 has an invalid length.
[   78.049501][ T6970] sctp: [Deprecated]: syz.0.452 (pid 6970) Use of int in max_burst socket option.
[   78.049501][ T6970] Use struct sctp_assoc_value instead
[   78.063704][ T6967] netlink: 'syz.2.453': attribute type 22 has an invalid length.
[   78.066152][ T6967] netlink: 'syz.2.453': attribute type 23 has an invalid length.
[   78.090924][ T6967] netlink: 'syz.2.453': attribute type 25 has an invalid length.
[   78.093981][ T6967] netlink: 96 bytes leftover after parsing attributes in process `syz.2.453'.
[   78.134050][ T6976] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   79.152517][ T7008] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   79.155170][ T7008] batman_adv: batadv0: Removing interface: batadv_slave_0
[   79.164950][ T7008] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   79.167315][ T7008] batman_adv: batadv0: Removing interface: batadv_slave_1
[   79.194274][ T7013] gretap1: entered promiscuous mode
[   79.195935][ T7013] gretap1: entered allmulticast mode
[   79.274901][ T7018] xt_CT: No such helper "syz0"
[   79.424005][ T7025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.479'.
[   79.780605][ T7051] lo speed is unknown, defaulting to 1000
[   79.785401][ T7051] lo speed is unknown, defaulting to 1000
[   79.790395][ T7051] lo speed is unknown, defaulting to 1000
[   79.795916][ T7051] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   79.806349][ T7051] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   79.831074][ T7051] lo speed is unknown, defaulting to 1000
[   79.839314][ T7051] lo speed is unknown, defaulting to 1000
[   79.842222][ T7051] lo speed is unknown, defaulting to 1000
[   79.896225][ T7056] netlink: 27 bytes leftover after parsing attributes in process `syz.2.492'.
[   80.175897][ T7068] vlan2: entered promiscuous mode
[   80.177759][ T7068] bridge0: entered promiscuous mode
[   80.179799][ T7068] vlan2: entered allmulticast mode
[   80.181891][ T7068] bridge0: entered allmulticast mode
[   80.200341][ T7070] netlink: 'syz.1.499': attribute type 10 has an invalid length.
[   80.203908][ T7070] netlink: 40 bytes leftover after parsing attributes in process `syz.1.499'.
[   80.225811][ T7070] team0: Port device geneve0 added
[   80.232180][ T7070] netlink: 16 bytes leftover after parsing attributes in process `syz.1.499'.
[   80.235527][ T7070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.499'.
[   80.246830][ T7070] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[   80.444579][ T7089] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[   80.844802][ T7128] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[   81.226712][   T10] cfg80211: failed to load regulatory.db
[   81.616123][ T7195] __nla_validate_parse: 2 callbacks suppressed
[   81.616136][ T7195] netlink: 5 bytes leftover after parsing attributes in process `syz.0.553'.
[   81.623684][ T7195] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   81.907360][ T7220] netlink: 'syz.0.565': attribute type 1 has an invalid length.
[   81.909942][ T7220] netlink: 'syz.0.565': attribute type 2 has an invalid length.
[   81.974610][ T7227] netlink: 12 bytes leftover after parsing attributes in process `syz.1.568'.
[   82.089958][ T7238] netlink: 36 bytes leftover after parsing attributes in process `syz.0.573'.
[   82.247712][ T7249] netlink: 36 bytes leftover after parsing attributes in process `syz.0.580'.
[   82.708981][ T7301] netlink: 4 bytes leftover after parsing attributes in process `syz.2.602'.
[   82.721249][ T7301] team_slave_0: entered promiscuous mode
[   82.723372][ T7301] team_slave_1: entered promiscuous mode
[   82.725937][ T7301] macsec1: entered allmulticast mode
[   82.728082][ T7301] team0: entered allmulticast mode
[   82.730395][ T7301] team_slave_0: entered allmulticast mode
[   82.738204][ T7301] team_slave_1: entered allmulticast mode
[   82.747287][ T7301] team0: left allmulticast mode
[   82.749063][ T7301] team_slave_0: left allmulticast mode
[   82.751794][ T7301] team_slave_1: left allmulticast mode
[   82.754049][ T7301] team_slave_0: left promiscuous mode
[   82.755923][ T7301] team_slave_1: left promiscuous mode
[   83.089419][ T7335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.618'.
[   83.094663][ T7337] netlink: 'syz.2.619': attribute type 21 has an invalid length.
[   83.097088][ T7337] netlink: 132 bytes leftover after parsing attributes in process `syz.2.619'.
[   83.100467][ T7337] netlink: 28 bytes leftover after parsing attributes in process `syz.2.619'.
[   83.111721][ T7337] netlink: 'syz.2.619': attribute type 7 has an invalid length.
[   83.114010][ T7337] netlink: 'syz.2.619': attribute type 8 has an invalid length.
[   83.116255][ T7337] netlink: 4 bytes leftover after parsing attributes in process `syz.2.619'.
[   83.128850][ T7337] gretap0: entered promiscuous mode
[   83.134068][ T7337] batadv_slave_1: entered promiscuous mode
[   83.143334][ T7337] gretap0: left promiscuous mode
[   83.145500][ T7337] batadv_slave_1: left promiscuous mode
[   83.370582][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.373508][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.643014][ T7401] syz.1.648 uses old SIOCAX25GETINFO
[   84.449888][ T7443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.665'.
[   85.089389][ T7502] netdevsim netdevsim0: Direct firmware load for 2Q failed with error -2
[   85.095743][ T7502] netdevsim netdevsim0: Falling back to sysfs fallback for: 2Q
[   85.736194][ T7541] netlink: 'syz.2.707': attribute type 16 has an invalid length.
[   85.739317][ T7541] netlink: 'syz.2.707': attribute type 17 has an invalid length.
[   85.765637][ T7541] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   85.772646][   T24] lo speed is unknown, defaulting to 1000
[   86.519485][ T7577] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[   86.527437][ T7577] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   86.579574][ T7582] xt_CT: No such helper "snmp_trap"
[   86.866278][ T7611] sit1: entered promiscuous mode
[   86.936910][ T7617] __nla_validate_parse: 9 callbacks suppressed
[   86.936927][ T7617] netlink: 20 bytes leftover after parsing attributes in process `syz.2.745'.
[   87.504173][ T7652] netlink: 8 bytes leftover after parsing attributes in process `syz.2.761'.
[   87.595618][ T7656] netlink: 4 bytes leftover after parsing attributes in process `syz.2.763'.
[   87.637117][ T7658] netlink: 40 bytes leftover after parsing attributes in process `syz.2.764'.
[   88.194671][ T7680] erspan0: entered promiscuous mode
[   88.197387][ T7680] batman_adv: batadv0: Adding interface: macvlan2
[   88.199275][ T7680] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.207780][ T7680] batman_adv: batadv0: Interface activated: macvlan2
[   88.278521][ T7686] netlink: 52 bytes leftover after parsing attributes in process `syz.0.777'.
[   88.372516][ T7692] 8021q: adding VLAN 0 to HW filter on device bond1
[   88.393421][ T7692] veth3: entered promiscuous mode
[   88.398129][ T7692] bond1: (slave veth3): Enslaving as an active interface with an up link
[   88.413540][ T7697] x_tables: duplicate underflow at hook 2
[   89.062603][ T7751] netlink: 8 bytes leftover after parsing attributes in process `syz.0.808'.
[   89.066277][ T7751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.808'.
[   89.205682][ T7761] netlink: 28 bytes leftover after parsing attributes in process `syz.0.812'.
[   89.209093][ T7761] netlink: 32 bytes leftover after parsing attributes in process `syz.0.812'.
[   89.220856][ T7761] netlink: 28 bytes leftover after parsing attributes in process `syz.0.812'.
[   89.603893][ T7776] netlink: 'syz.2.819': attribute type 14 has an invalid length.
[   89.643439][ T7776] netlink: 'syz.2.819': attribute type 14 has an invalid length.
[   90.244427][ T7818] netlink: 'syz.0.841': attribute type 1 has an invalid length.
[   90.247519][ T7818] netlink: 'syz.0.841': attribute type 2 has an invalid length.
[   90.409055][ T7829] netlink: 'syz.1.842': attribute type 1 has an invalid length.
[   90.489960][   T24] hid-generic 0005:16BF:5505.0002: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[   90.590081][   T33] audit: type=1800 audit(1752348026.412:3): pid=7820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.838" name="cgroup.controllers" dev="tmpfs" ino=1618 res=0 errno=0
[   90.652709][ T7847] IPv6: addrconf: prefix option has invalid lifetime
[   90.798110][ T7855] netlink: 'syz.2.851': attribute type 12 has an invalid length.
[   90.851732][ T7860] veth0_to_team: entered promiscuous mode
[   90.854103][ T7860] veth0_to_team: entered allmulticast mode
[   90.983158][ T7865] netlink: 'syz.2.858': attribute type 4 has an invalid length.
[   91.093090][ T7869] veth0: entered promiscuous mode
[   91.095847][ T7868] veth0: left promiscuous mode
[   91.260385][ T7879] syzkaller0: entered promiscuous mode
[   91.264010][ T7879] syzkaller0: entered allmulticast mode
[   91.271394][ T7879] tipc: Started in network mode
[   91.273364][ T7879] tipc: Node identity 2ef3033b9f19, cluster identity 4711
[   91.277242][ T7879] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   91.290933][ T7878] tipc: Resetting bearer <eth:syzkaller0>
[   91.314533][ T7878] tipc: Disabling bearer <eth:syzkaller0>
[   91.607732][ T7909] netdevsim netdevsim1: Direct firmware load for .
[   91.607732][ T7909]  failed with error -2
[   91.612097][ T7909] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[   91.612097][ T7909] 
[   92.758318][ T7948] __nla_validate_parse: 7 callbacks suppressed
[   92.758333][ T7948] netlink: 12 bytes leftover after parsing attributes in process `syz.2.897'.
[   93.267676][ T7976] xt_CT: No such helper "syz0"
[   93.367555][ T7981] siw: device registration error -23
[   93.414887][ T7986] netlink: 'syz.2.912': attribute type 282 has an invalid length.
[   93.418245][ T7985] netlink: 16 bytes leftover after parsing attributes in process `syz.0.913'.
[   93.599040][ T7992] syz.0.917: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   93.605400][ T7992] CPU: 0 UID: 0 PID: 7992 Comm: syz.0.917 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[   93.605412][ T7992] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   93.605419][ T7992] Call Trace:
[   93.605422][ T7992]  <TASK>
[   93.605428][ T7992]  dump_stack_lvl+0x189/0x250
[   93.605448][ T7992]  ? __pfx_dump_stack_lvl+0x10/0x10
[   93.605458][ T7992]  ? __pfx__printk+0x10/0x10
[   93.605472][ T7992]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   93.605485][ T7992]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   93.605497][ T7992]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   93.605508][ T7992]  warn_alloc+0x214/0x310
[   93.605522][ T7992]  ? stack_depot_save_flags+0x40/0x900
[   93.605537][ T7992]  ? __pfx_warn_alloc+0x10/0x10
[   93.605549][ T7992]  ? kasan_save_track+0x4f/0x80
[   93.605559][ T7992]  ? xskq_create+0x56/0x170
[   93.605573][ T7992]  ? xsk_init_queue+0xb0/0x110
[   93.605602][ T7992]  ? xsk_setsockopt+0x43f/0x710
[   93.605613][ T7992]  ? do_sock_setsockopt+0x25a/0x3e0
[   93.605625][ T7992]  ? __x64_sys_setsockopt+0x18b/0x220
[   93.605635][ T7992]  ? do_syscall_64+0xfa/0x3b0
[   93.605643][ T7992]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   93.605655][ T7992]  __vmalloc_node_range_noprof+0x125/0x12f0
[   93.605680][ T7992]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   93.605691][ T7992]  ? xskq_create+0x56/0x170
[   93.605703][ T7992]  ? __kasan_kmalloc+0x93/0xb0
[   93.605714][ T7992]  vmalloc_user_noprof+0xad/0xf0
[   93.605724][ T7992]  ? xskq_create+0xbf/0x170
[   93.605735][ T7992]  xskq_create+0xbf/0x170
[   93.605747][ T7992]  xsk_init_queue+0xb0/0x110
[   93.605759][ T7992]  xsk_setsockopt+0x43f/0x710
[   93.605771][ T7992]  ? __pfx_xsk_setsockopt+0x10/0x10
[   93.605781][ T7992]  ? __lock_acquire+0xab9/0xd20
[   93.605794][ T7992]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   93.605807][ T7992]  ? __pfx_xsk_setsockopt+0x10/0x10
[   93.605818][ T7992]  do_sock_setsockopt+0x25a/0x3e0
[   93.605829][ T7992]  ? __pfx_do_sock_setsockopt+0x10/0x10
[   93.605866][ T7992]  ? __fget_files+0x2a/0x420
[   93.605883][ T7992]  __x64_sys_setsockopt+0x18b/0x220
[   93.605896][ T7992]  do_syscall_64+0xfa/0x3b0
[   93.605904][ T7992]  ? lockdep_hardirqs_on+0x9c/0x150
[   93.605916][ T7992]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   93.605924][ T7992]  ? exc_page_fault+0x9f/0xf0
[   93.605936][ T7992]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   93.605944][ T7992] RIP: 0033:0x7f378ef8e929
[   93.605953][ T7992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   93.605960][ T7992] RSP: 002b:00007f378fdf1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   93.605969][ T7992] RAX: ffffffffffffffda RBX: 00007f378f1b5fa0 RCX: 00007f378ef8e929
[   93.605975][ T7992] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009
[   93.605979][ T7992] RBP: 00007f378f010b39 R08: 0000000000000004 R09: 0000000000000000
[   93.605984][ T7992] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[   93.605989][ T7992] R13: 0000000000000000 R14: 00007f378f1b5fa0 R15: 00007ffee24955b8
[   93.606001][ T7992]  </TASK>
[   93.606174][ T7992] Mem-Info:
[   93.704451][ T7992] active_anon:5203 inactive_anon:0 isolated_anon:0
[   93.704451][ T7992]  active_file:916 inactive_file:38218 isolated_file:0
[   93.704451][ T7992]  unevictable:1768 dirty:272 writeback:0
[   93.704451][ T7992]  slab_reclaimable:9333 slab_unreclaimable:53140
[   93.704451][ T7992]  mapped:18163 shmem:2443 pagetables:876
[   93.704451][ T7992]  sec_pagetables:0 bounce:0
[   93.704451][ T7992]  kernel_misc_reclaimable:0
[   93.704451][ T7992]  free:287622 free_pcp:18685 free_cma:0
[   93.718086][ T7992] Node 0 active_anon:11128kB inactive_anon:0kB active_file:2752kB inactive_file:144968kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:27620kB dirty:860kB writeback:0kB shmem:4964kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5116kB pagetables:1960kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   93.728383][ T7992] Node 1 active_anon:9684kB inactive_anon:0kB active_file:912kB inactive_file:7904kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:45032kB dirty:228kB writeback:0kB shmem:4808kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6340kB pagetables:1544kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   93.739309][ T7992] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   93.748771][ T7992] lowmem_reserve[]: 0 812 812 812 812
[   93.750842][ T7992] Node 0 DMA32 free:261648kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11128kB inactive_anon:0kB active_file:2752kB inactive_file:144968kB unevictable:3536kB writepending:860kB present:1556484kB managed:831872kB mlocked:0kB bounce:0kB free_pcp:33048kB local_pcp:15584kB free_cma:0kB
[   93.762308][ T7992] lowmem_reserve[]: 0 0 0 0 0
[   93.764004][ T7992] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   93.774350][ T7992] lowmem_reserve[]: 0 0 854 854 854
[   93.776282][ T7992] Node 1 Normal free:414380kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9684kB inactive_anon:0kB active_file:912kB inactive_file:7904kB unevictable:3536kB writepending:228kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:41836kB local_pcp:22232kB free_cma:0kB
[   93.786803][ T7992] lowmem_reserve[]: 0 0 0 0 0
[   93.788544][ T7992] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   93.793192][ T7992] Node 0 DMA32: 238*4kB (UME) 103*8kB (UME) 162*16kB (UM) 371*32kB (UME) 154*64kB (UME) 48*128kB (UM) 20*256kB (UME) 6*512kB (M) 6*1024kB (UM) 3*2048kB (UM) 51*4096kB (M) = 261616kB
[   93.798889][ T7992] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[   93.804730][ T7992] Node 1 Normal: 3*4kB (ME) 2*8kB (ME) 110*16kB (UE) 238*32kB (UE) 91*64kB (U) 22*128kB (U) 2*256kB (ME) 2*512kB (UE) 1*1024kB (E) 0*2048kB 96*4096kB (M) = 413820kB
[   93.811458][ T7992] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   93.820398][ T7992] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   93.824642][ T7992] 41577 total pagecache pages
[   93.826141][ T7992] 0 pages in swap cache
[   93.827421][ T7992] Free swap  = 124996kB
[   93.828683][ T7992] Total swap = 124996kB
[   93.830241][ T7992] 786301 pages RAM
[   93.832783][ T7992] 0 pages HighMem/MovableOnly
[   93.834301][ T7992] 241085 pages reserved
[   93.835574][ T7992] 0 pages cma reserved
[   94.057658][ T8009] netlink: 68 bytes leftover after parsing attributes in process `syz.1.924'.
[   94.203543][ T8024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.930'.
[   94.624664][ T8060] netlink: 12 bytes leftover after parsing attributes in process `syz.1.948'.
[   94.627968][ T8060] netlink: 16 bytes leftover after parsing attributes in process `syz.1.948'.
[   94.641067][ T8060] netlink: 12 bytes leftover after parsing attributes in process `syz.1.948'.
[   94.644797][ T8060] netlink: 16 bytes leftover after parsing attributes in process `syz.1.948'.
[   94.648222][ T8060] netlink: 5 bytes leftover after parsing attributes in process `syz.1.948'.
[   94.693918][ T5893] hid-generic 0005:0458:5505.0003: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[   94.884833][ T8089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.958'.
[   94.955453][ T8091] netlink: 'syz.2.960': attribute type 1 has an invalid length.
[   94.957866][ T8091] netlink: 'syz.2.960': attribute type 2 has an invalid length.
[   95.044311][ T8103] netlink: 'syz.1.968': attribute type 1 has an invalid length.
[   95.046768][ T8103] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   95.759746][ T8174] team_slave_0: entered promiscuous mode
[   95.761602][ T8174] team_slave_1: entered promiscuous mode
[   95.763723][ T8174] macsec0: entered allmulticast mode
[   95.765979][ T8174] team0: entered allmulticast mode
[   95.768527][ T8174] team_slave_0: entered allmulticast mode
[   95.770419][ T8174] team_slave_1: entered allmulticast mode
[   95.784273][ T8174] team0: left allmulticast mode
[   95.785741][ T8174] team_slave_0: left allmulticast mode
[   95.787380][ T8174] team_slave_1: left allmulticast mode
[   95.788994][ T8174] team_slave_0: left promiscuous mode
[   95.790600][ T8174] team_slave_1: left promiscuous mode
[   96.039861][ T8192] TCP: tcp_parse_options: Illegal window scaling value 128 > 14 received
[   96.091469][ T8198] netlink: 'syz.0.1010': attribute type 30 has an invalid length.
[   96.103780][ T8198] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   96.107207][ T8198] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   96.110564][ T8198] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   96.114374][ T8198] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   96.125663][ T8198] netlink: 'syz.0.1010': attribute type 30 has an invalid length.
[   96.925485][ T8283] netlink: 'syz.1.1049': attribute type 21 has an invalid length.
[   97.357294][   T33] audit: type=1804 audit(1752348033.172:4): pid=8329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1068" name="memory.events" dev="tmpfs" ino=2010 res=1 errno=0
[   97.372856][   T33] audit: type=1800 audit(1752348033.182:5): pid=8329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1068" name="memory.events" dev="tmpfs" ino=2010 res=0 errno=0
[   97.552532][ T8353] netlink: 'syz.0.1085': attribute type 11 has an invalid length.
[   97.821703][ T8357] __nla_validate_parse: 13 callbacks suppressed
[   97.821717][ T8357] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1081'.
[   98.026499][ T8395] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1095'.
[   98.904068][ T8419] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1103'.
[   99.876854][ T8463] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1127'.
[  100.267453][ T8493] wireguard0: entered promiscuous mode
[  100.269636][ T8493] wireguard0: entered allmulticast mode
[  100.384376][ T8497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1141'.
[  100.387575][ T8497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1141'.
[  101.113480][ T8501] netlink: 'syz.2.1144': attribute type 29 has an invalid length.
[  101.119109][ T8501] netlink: 'syz.2.1144': attribute type 29 has an invalid length.
[  101.124047][ T8501] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1144'.
[  101.209438][ T8512] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1148'.
[  101.301103][ T5220] Bluetooth: hci2: command 0x0405 tx timeout
[  101.846055][ T8540] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  101.848881][ T8540] batman_adv: batadv0: Removing interface: batadv_slave_0
[  101.853457][ T8540] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  101.856261][ T8540] batman_adv: batadv0: Removing interface: batadv_slave_1
[  101.859880][ T8540] batman_adv: batadv0: Interface deactivated: macvlan2
[  101.863394][ T8540] batman_adv: batadv0: Removing interface: macvlan2
[  102.022233][ T8548] netlink: 'syz.0.1166': attribute type 21 has an invalid length.
[  102.024744][ T8548] netlink: 'syz.0.1166': attribute type 22 has an invalid length.
[  102.028558][ T8548] netlink: 'syz.0.1166': attribute type 23 has an invalid length.
[  102.038278][ T8548] netlink: 'syz.0.1166': attribute type 25 has an invalid length.
[  102.042491][ T8548] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1166'.
[  102.057655][ T8545] netlink: 'syz.2.1165': attribute type 10 has an invalid length.
[  102.060064][ T8545] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1165'.
[  102.085336][ T8545] team0: Port device geneve0 added
[  102.097427][ T8545] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  102.338613][ T8570] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  103.070583][ T8580] __nla_validate_parse: 2 callbacks suppressed
[  103.070600][ T8580] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1178'.
[  103.506016][ T8622] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1201'.
[  103.529933][ T8624] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1203'.
[  103.858874][ T8651] xt_CT: No such helper "snmp_trap"
[  103.911706][ T8658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1215'.
[  104.526691][ T8689] netlink: 'syz.0.1232': attribute type 1 has an invalid length.
[  104.543727][ T8689] bond1: entered promiscuous mode
[  104.545722][ T8689] 8021q: adding VLAN 0 to HW filter on device bond1
[  104.564174][ T8689] 8021q: adding VLAN 0 to HW filter on device bond1
[  104.567397][ T8689] bond1: (slave vcan0): The slave device specified does not support setting the MAC address
[  104.571655][ T8689] bond1: (slave vcan0): Setting fail_over_mac to active for active-backup mode
[  104.579082][ T8689] bond1: (slave vcan0): making interface the new active one
[  104.582184][ T8689] vcan0: entered promiscuous mode
[  104.587239][ T8689] bond1: (slave vcan0): Enslaving as an active interface with an up link
[  104.934479][ T8709] netlink: 'syz.1.1239': attribute type 1 has an invalid length.
[  105.219169][ T8740] netlink: 'syz.0.1259': attribute type 1 has an invalid length.
[  105.221993][ T8740] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  105.641168][ T8757] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1263'.
[  105.658287][ T8757] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1263'.
[  105.665595][ T8757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1263'.
[  105.669047][ T8757] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1263'.
[  105.726557][ T8760] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1264'.
[  105.901166][ T8770] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1268'.
[  106.145668][ T8789] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  106.175426][ T8791] netlink: 'syz.2.1273': attribute type 4 has an invalid length.
[  106.229848][ T8795] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  106.233803][ T8795] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  106.308440][ T8797] hsr0: entered promiscuous mode
[  106.312808][ T8797] macsec1: entered allmulticast mode
[  106.314892][ T8797] hsr0: entered allmulticast mode
[  106.317063][ T8797] hsr_slave_0: entered allmulticast mode
[  106.319308][ T8797] hsr_slave_1: entered allmulticast mode
[  106.325835][ T8797] hsr0: left allmulticast mode
[  106.327896][ T8797] hsr_slave_0: left allmulticast mode
[  106.330002][ T8797] hsr_slave_1: left allmulticast mode
[  106.842439][ T8815] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  106.846658][ T8815] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.982126][ T8815] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  106.985976][ T8815] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.091122][ T8815] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  107.094528][ T8815] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.113787][ T8827] smc: net device bond0 applied user defined pnetid SYZ2
[  107.145369][ T8827] smc: removing net device bond0 with user defined pnetid SYZ2
[  107.151221][ T8827] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  107.165596][ T8827] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  107.172410][ T8827] bond0 (unregistering): Released all slaves
[  107.237848][ T8815] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  107.242466][ T8815] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.279974][ T8832] macvtap1: entered allmulticast mode
[  107.282960][ T8832] veth0_macvtap: entered allmulticast mode
[  107.329783][ T8815] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  107.332586][ T8815] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  107.343531][ T8815] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  107.346336][ T8815] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  107.368496][ T8815] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  107.372284][ T8815] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  107.383398][ T8815] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  107.386713][ T8815] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  107.620043][ T5691] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x4
[  108.022673][   T10] IPVS: starting estimator thread 0...
[  108.131347][ T8887] IPVS: using max 62 ests per chain, 148800 per kthread
[  108.920914][ T8915] __nla_validate_parse: 5 callbacks suppressed
[  108.920926][ T8915] netlink: 508 bytes leftover after parsing attributes in process `syz.1.1326'.
[  109.008482][ T8919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1328'.
[  109.314978][ T8933] lo speed is unknown, defaulting to 1000
[  109.429776][ T8946] lo speed is unknown, defaulting to 1000
[  109.498080][ T8948] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1341'.
[  109.680375][ T8940] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1338'.
[  110.098632][ T8967] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1348'.
[  110.425770][ T8996] x_tables: ip6_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING
[  110.524542][ T9008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1368'.
[  110.527314][ T9008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1368'.
[  110.623423][ T9014] wireguard0: entered promiscuous mode
[  110.625274][ T9014] wireguard0: entered allmulticast mode
[  110.750303][ T9023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1371'.
[  110.754223][ T9023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1371'.
[  111.459543][ T9059] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1392'.
[  111.463279][ T9059] tc_dump_action: action bad kind
[  111.725745][ T9085] netlink: 'syz.2.1404': attribute type 29 has an invalid length.
[  111.817872][ T9090] IPv6: addrconf: prefix option has invalid lifetime
[  112.276170][ T9117] syzkaller1: entered promiscuous mode
[  112.277926][ T9117] syzkaller1: entered allmulticast mode
[  112.455825][ T9130] netlink: 'syz.2.1425': attribute type 1 has an invalid length.
[  113.437769][ T9210] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[  113.913062][ T9268] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  113.917734][ T9268] syzkaller0: entered promiscuous mode
[  113.920001][ T9268] syzkaller0: entered allmulticast mode
[  113.931918][ T9268] tipc: Resetting bearer <eth:syzkaller0>
[  113.942075][ T9267] tipc: Resetting bearer <eth:syzkaller0>
[  113.959151][ T9267] tipc: Disabling bearer <eth:syzkaller0>
[  114.003052][ T9275] __nla_validate_parse: 6 callbacks suppressed
[  114.003067][ T9275] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1492'.
[  114.049434][ T9281] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1495'.
[  114.184661][ T9291] dvmrp0: entered allmulticast mode
[  114.260601][ T9301] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1505'.
[  114.285915][ T9303] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1506'.
[  114.289165][ T9303] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1506'.
[  114.383858][ T9317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1513'.
[  114.573234][ T9338] pim6reg1: entered promiscuous mode
[  114.575220][ T9338] pim6reg1: entered allmulticast mode
[  114.699107][ T9351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1529'.
[  114.706383][ T9351] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1529'.
[  114.902778][ T9361] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.905651][ T9361] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.023063][ T9361] veth0_to_team: left promiscuous mode
[  115.025330][ T9361] veth0_to_team: left allmulticast mode
[  115.047122][ T9361] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  115.058510][ T9361] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  115.164970][ T9361] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  115.168484][ T9361] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  115.173279][ T9361] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  115.176772][ T9361] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  115.184936][ T9361] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  115.228028][ T9361] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  115.231908][ T9361] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  115.235303][ T9361] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  115.238638][ T9361] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  115.249127][ T9361] batman_adv: batadv0: Interface deactivated: macvlan2
[  115.266875][ T9361] veth3: left promiscuous mode
[  115.272303][ T9361] gretap1: left promiscuous mode
[  115.274273][ T9361] gretap1: left allmulticast mode
[  115.280305][ T9361] vlan2: left promiscuous mode
[  115.282793][ T9361] bridge0: left promiscuous mode
[  115.284873][ T9361] vlan2: left allmulticast mode
[  115.286770][ T9361] bridge0: left allmulticast mode
[  115.332525][   T24] lo speed is unknown, defaulting to 1000
[  115.334807][   T24] syz1: Port: 1 Link DOWN
[  115.335217][ T9373] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  115.625730][ T9398] xt_TCPMSS: Only works on TCP SYN packets
[  115.697773][ T9405] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1552'.
[  115.719788][ T9409] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1556'.
[  116.084985][ T9433] pim6reg1: entered promiscuous mode
[  116.087125][ T9433] pim6reg1: entered allmulticast mode
[  116.260816][ T9446] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  116.265474][ T9446] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.268816][ T9446] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.449322][ T9463] netlink: 'syz.0.1579': attribute type 4 has an invalid length.
[  116.472510][ T9463] netlink: 'syz.0.1579': attribute type 4 has an invalid length.
[  116.501853][ T9465] macvlan3: entered allmulticast mode
[  116.503577][ T9465] veth1_vlan: entered allmulticast mode
[  116.506972][ T9465] veth1_vlan: left allmulticast mode
[  117.037132][ T9502] netlink: 'syz.2.1599': attribute type 2 has an invalid length.
[  117.047037][ T9502] `: entered promiscuous mode
[  117.499655][ T9514] netlink: 'syz.0.1605': attribute type 1 has an invalid length.
[  117.676726][ T9520] IPv6: addrconf: prefix option has invalid lifetime
[  117.759531][ T9522] lo speed is unknown, defaulting to 1000
[  119.293886][ T9568] netlink: 'syz.2.1628': attribute type 1 has an invalid length.
[  119.296228][ T9568] __nla_validate_parse: 7 callbacks suppressed
[  119.296236][ T9568] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1628'.
[  119.546493][ T9585] netlink: 'syz.2.1636': attribute type 4 has an invalid length.
[  119.658200][ T9591] lo speed is unknown, defaulting to 1000
[  120.549083][ T9611] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  120.685251][ T9621] lo speed is unknown, defaulting to 1000
[  120.688486][ T9621] lo speed is unknown, defaulting to 1000
[  120.701684][ T9621] lo speed is unknown, defaulting to 1000
[  120.709236][ T9629] sctp: [Deprecated]: syz.1.1653 (pid 9629) Use of int in max_burst socket option deprecated.
[  120.709236][ T9629] Use struct sctp_assoc_value instead
[  120.841996][ T9621] infiniband syz0: set down
[  120.843630][ T9621] infiniband syz0: added lo
[  120.859269][    T9] lo speed is unknown, defaulting to 1000
[  120.868982][ T9621] RDS/IB: syz0: added
[  120.871006][ T9621] smc: adding ib device syz0 with port count 1
[  120.873036][ T9621] smc:    ib device syz0 port 1 has pnetid 
[  120.882414][    T9] lo speed is unknown, defaulting to 1000
[  120.885171][ T9621] lo speed is unknown, defaulting to 1000
[  121.005420][ T9621] lo speed is unknown, defaulting to 1000
[  121.184306][ T9621] lo speed is unknown, defaulting to 1000
[  122.289310][ T9704] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1680'.
[  122.345089][ T9712] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1683'.
[  122.357844][ T9715] openvswitch: netlink: Flow key attribute not present in set flow.
[  123.559308][ T9783] xt_bpf: check failed: parse error
[  123.713730][ T9787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1710'.
[  123.897718][ T9811] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  124.057209][ T9827] x_tables: ip6_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING
[  124.450417][ T9867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1742'.
[  124.455026][ T9867] openvswitch: netlink: Unknown nsh attribute 0
[  124.457351][ T9867] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  125.296692][ T9928] xt_bpf: check failed: parse error
[  126.375414][ T9973] IPv6: addrconf: prefix option has invalid lifetime
[  126.596334][ T9989] lo speed is unknown, defaulting to 1000
[  126.606738][ T9989] lo speed is unknown, defaulting to 1000
[  127.012935][T10010] netlink: 'syz.2.1810': attribute type 3 has an invalid length.
[  127.015777][T10010] netlink: 666 bytes leftover after parsing attributes in process `syz.2.1810'.
[  127.019037][T10009] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1804'.
[  127.763185][T10016] IPv6: addrconf: prefix option has invalid lifetime
[  127.809183][    C1] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 16
[  127.871089][T10023] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1807'.
[  127.910605][T10023] bond1: (slave vcan0): Releasing backup interface
[  127.914399][T10023] vcan0 (unregistering): left promiscuous mode
[  127.918404][T10023] bond1: Destroying bond
[  127.985708][T10031] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  128.074919][T10023] bond1 (unregistering): Released all slaves
[  128.177059][T10044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1818'.
[  128.179744][T10044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1818'.
[  128.275035][T10058] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  128.540461][T10084] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  129.240388][T10126] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1861'.
[  129.311143][T10130] openvswitch: netlink: IP tunnel dst address not specified
[  129.384874][T10132] lo speed is unknown, defaulting to 1000
[  129.388623][T10132] lo speed is unknown, defaulting to 1000
[  129.431704][T10138] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1859'.
[  129.467731][T10141] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1868'.
[  129.714672][T10153] openvswitch: netlink: IP tunnel dst address not specified
[  129.788100][T10161] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1869'.
[  129.989052][T10156] veth0_to_team: left promiscuous mode
[  129.993567][T10156] veth0_to_team: left allmulticast mode
[  130.142684][T10156] gtp0: left promiscuous mode
[  130.146949][T10156] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  130.149514][T10156] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  130.152233][T10156] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  130.154817][T10156] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  130.165776][T10156] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  130.168648][T10156] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  130.171208][T10156] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  130.173653][T10156] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  130.185543][T10156] wireguard0: left promiscuous mode
[  130.187207][T10156] wireguard0: left allmulticast mode
[  130.764075][T10212] macvlan5: entered allmulticast mode
[  130.768236][T10212] veth1_vlan: entered allmulticast mode
[  130.775687][T10212] veth1_vlan: left allmulticast mode
[  130.960379][T10220] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1898'.
[  131.210587][T10240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1906'.
[  131.363796][T10259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1916'.
[  131.500331][T10267] netlink: 'syz.1.1919': attribute type 2 has an invalid length.
[  131.519316][T10267] `: entered promiscuous mode
[  132.114776][T10298] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  132.154186][T10301] netlink: 'syz.2.1938': attribute type 4 has an invalid length.
[  132.161792][T10301] netlink: 'syz.2.1938': attribute type 4 has an invalid length.
[  132.168388][   T47] lo speed is unknown, defaulting to 1000
[  132.170608][   T47] syz0: Port: 1 Link ACTIVE
[  132.174645][  T972] lo speed is unknown, defaulting to 1000
[  132.180557][  T972] lo speed is unknown, defaulting to 1000
[  132.183991][  T972] syz0: Port: 1 Link DOWN
[  132.186271][  T972] lo speed is unknown, defaulting to 1000
[  132.423996][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  133.084111][T10309] netlink: 'syz.1.1941': attribute type 11 has an invalid length.
[  133.177509][ T5828] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  133.192072][ T5828] CPU: 0 UID: 0 PID: 5828 Comm: syz-executor Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  133.192097][ T5828] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  133.192106][ T5828] Call Trace:
[  133.192112][ T5828]  <TASK>
[  133.192119][ T5828]  dump_stack_lvl+0x189/0x250
[  133.192144][ T5828]  ? __pfx_dump_stack_lvl+0x10/0x10
[  133.192159][ T5828]  ? __pfx__printk+0x10/0x10
[  133.192189][ T5828]  dump_header+0xd3/0x480
[  133.192208][ T5828]  oom_kill_process+0x3b6/0x950
[  133.192224][ T5828]  out_of_memory+0xf09/0x12a0
[  133.192240][ T5828]  ? __pfx_out_of_memory+0x10/0x10
[  133.192256][ T5828]  mem_cgroup_out_of_memory+0x145/0x240
[  133.192270][ T5828]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  133.192287][ T5828]  ? _raw_spin_unlock+0x28/0x50
[  133.192299][ T5828]  ? memcg1_oom_prepare+0x37f/0x450
[  133.192310][ T5828]  try_charge_memcg+0xdff/0x1290
[  133.192328][ T5828]  ? __pfx_try_charge_memcg+0x10/0x10
[  133.192347][ T5828]  charge_memcg+0x9f/0x180
[  133.192357][ T5828]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  133.192366][ T5828]  mem_cgroup_swapin_charge_folio+0x262/0x390
[  133.192378][ T5828]  __read_swap_cache_async+0x28c/0x510
[  133.192397][ T5828]  swap_cluster_readahead+0x305/0x5f0
[  133.192411][ T5828]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  133.192429][ T5828]  ? get_vma_policy+0x27c/0x3c0
[  133.192462][ T5828]  swapin_readahead+0x17d/0xb50
[  133.192475][ T5828]  ? __pfx_filemap_get_entry+0x10/0x10
[  133.192491][ T5828]  ? __pfx_swapin_readahead+0x10/0x10
[  133.192505][ T5828]  ? __filemap_get_folio+0x9a6/0xaf0
[  133.192519][ T5828]  ? swap_cache_get_folio+0xae/0x3b0
[  133.192533][ T5828]  do_swap_page+0x525/0x5ac0
[  133.192545][ T5828]  ? __lock_acquire+0xab9/0xd20
[  133.192560][ T5828]  ? do_swap_page+0x184/0x5ac0
[  133.192568][ T5828]  ? __pfx_do_swap_page+0x10/0x10
[  133.192577][ T5828]  ? __pfx_default_wake_function+0x10/0x10
[  133.192587][ T5828]  ? ___pte_offset_map+0x21f/0x2c0
[  133.192598][ T5828]  ? pte_offset_map_rw_nolock+0xea/0x160
[  133.192608][ T5828]  __handle_mm_fault+0xf3e/0x5620
[  133.192617][ T5828]  ? __lock_acquire+0xab9/0xd20
[  133.192633][ T5828]  ? __pfx___handle_mm_fault+0x10/0x10
[  133.192642][ T5828]  ? lock_vma_under_rcu+0xf8/0x710
[  133.192658][ T5828]  ? lock_vma_under_rcu+0xf8/0x710
[  133.192667][ T5828]  ? __pfx_lock_vma_under_rcu+0x10/0x10
[  133.192680][ T5828]  handle_mm_fault+0x40a/0x8e0
[  133.192693][ T5828]  do_user_addr_fault+0xa81/0x1390
[  133.192705][ T5828]  ? rcu_is_watching+0x15/0xb0
[  133.192716][ T5828]  ? trace_page_fault_user+0x84/0x1e0
[  133.192724][ T5828]  exc_page_fault+0x76/0xf0
[  133.192738][ T5828]  asm_exc_page_fault+0x26/0x30
[  133.192746][ T5828] RIP: 0033:0x7f378efc11e8
[  133.192756][ T5828] Code: 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f
[  133.192763][ T5828] RSP: 002b:00007ffee24958d0 EFLAGS: 00010293
[  133.192771][ T5828] RAX: 0000000000000000 RBX: 000000000000054f RCX: 00007f378efc11e5
[  133.192777][ T5828] RDX: 00007ffee2495910 RSI: 0000000000000000 RDI: 0000000000000000
[  133.192782][ T5828] RBP: 00007ffee249597c R08: 0000000000000000 R09: 0000000000000000
[  133.192786][ T5828] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388
[  133.192791][ T5828] R13: 00000000000927c0 R14: 000000000002073b R15: 00007ffee24959d0
[  133.192804][ T5828]  </TASK>
[  133.193674][ T5828] memory: usage 301480kB, limit 307200kB, failcnt 203
[  133.304536][ T5828] memory+swap: usage 262632kB, limit 9007199254740988kB, failcnt 0
[  133.323631][ T5828] kmem: usage 257060kB, limit 9007199254740988kB, failcnt 0
[  133.325763][ T5828] Memory cgroup stats for /syz0:
[  133.325935][ T5828] cache 0
[  133.328266][ T5828] rss 0
[  133.329099][ T5828] rss_huge 0
[  133.330075][ T5828] shmem 0
[  133.331895][ T5828] mapped_file 0
[  133.362002][ T5828] dirty 0
[  133.362973][ T5828] writeback 0
[  133.363965][ T5828] workingset_refault_anon 2
[  133.365291][ T5828] workingset_refault_file 0
[  133.366634][ T5828] swap 155648
[  133.367796][ T5828] swapcached 57344
[  133.369188][ T5828] pgpgin 56005
[  133.370487][ T5828] pgpgout 55991
[  133.390739][ T5828] pgfault 123768
[  133.392239][ T5828] pgmajfault 13
[  133.393757][ T5828] inactive_anon 16384
[  133.395276][ T5828] active_anon 40960
[  133.396720][ T5828] inactive_file 0
[  133.398099][ T5828] active_file 0
[  133.399453][ T5828] unevictable 0
[  133.414065][ T5828] hierarchical_memory_limit 314572800
[  133.416166][ T5828] hierarchical_memsw_limit 9223372036854771712
[  133.418467][ T5828] total_cache 0
[  133.419798][ T5828] total_rss 0
[  133.438315][ T5828] total_rss_huge 0
[  133.439514][ T5828] total_shmem 0
[  133.441233][ T5828] total_mapped_file 0
[  133.442613][ T5828] total_dirty 0
[  133.444316][ T5828] total_writeback 0
[  133.445544][ T5828] total_workingset_refault_anon 2
[  133.447073][ T5828] total_workingset_refault_file 0
[  133.448527][ T5828] total_swap 155648
[  133.449671][ T5828] total_swapcached 57344
[  133.451316][ T5828] total_pgpgin 56005
[  133.452523][ T5828] total_pgpgout 55991
[  133.453695][ T5828] total_pgfault 123768
[  133.455028][ T5828] total_pgmajfault 13
[  133.456543][ T5828] total_inactive_anon 16384
[  133.458233][ T5828] total_active_anon 40960
[  133.459781][ T5828] total_inactive_file 0
[  133.461897][ T5828] total_active_file 0
[  133.463450][ T5828] total_unevictable 0
[  133.464827][ T5828] anon_cost 0
[  133.465836][ T5828] file_cost 0
[  133.466860][ T5828] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1937,pid=10300,uid=0
[  133.471976][ T5828] Memory cgroup out of memory: Killed process 10302 (syz.0.1937) total-vm:103928kB, anon-rss:920kB, file-rss:22644kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[  134.126832][T10332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1948'.
[  134.168407][T10336] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  134.264157][T10349] netlink: 1300 bytes leftover after parsing attributes in process `syz.2.1956'.
[  134.296881][T10352] netlink: 'syz.1.1958': attribute type 1 has an invalid length.
[  134.314557][T10356] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1960'.
[  134.420094][T10371] C: renamed from lo
[  134.427002][T10371] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  134.579404][T10383] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1973'.
[  135.295243][T10393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1981'.
[  135.299095][T10392] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  135.445744][T10399] sctp: [Deprecated]: syz.2.1978 (pid 10399) Use of int in max_burst socket option deprecated.
[  135.445744][T10399] Use struct sctp_assoc_value instead
[  135.536748][T10404] lo speed is unknown, defaulting to 1000
[  135.540430][T10404] lo speed is unknown, defaulting to 1000
[  136.308471][T10411] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  136.408434][T10420] tipc: Started in network mode
[  136.409992][T10420] tipc: Node identity e0000001, cluster identity 4711
[  136.414744][T10420] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  136.712304][T10441] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1991'.
[  137.459249][T10502] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1997'.
[  137.815679][T10527] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  138.177936][T10550] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2020'.
[  138.182669][T10550] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2020'.
[  138.856899][T10582] netlink: 'syz.1.2036': attribute type 3 has an invalid length.
[  138.860293][T10582] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2036'.
[  139.026417][T10596] netlink: 'syz.1.2043': attribute type 17 has an invalid length.
[  139.057917][T10599] hsr0: left promiscuous mode
[  139.059748][T10599] hsr0: entered promiscuous mode
[  139.061784][T10599] hsr0: entered allmulticast mode
[  139.063376][T10599] hsr_slave_0: entered allmulticast mode
[  139.065179][T10599] hsr_slave_1: entered allmulticast mode
[  139.326783][T10636] netlink: 'syz.0.2060': attribute type 12 has an invalid length.
[  139.329165][T10636] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.2060'.
[  139.499139][T10656] netlink: 'syz.2.2069': attribute type 1 has an invalid length.
[  139.530146][T10659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2070'.
[  139.534373][T10659] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2070'.
[  139.798610][T10686] netlink: 'syz.2.2078': attribute type 17 has an invalid length.
[  139.849299][T10692] netlink: 'syz.2.2080': attribute type 3 has an invalid length.
[  139.852141][T10692] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2080'.
[  139.906821][   T33] audit: type=1800 audit(1752348075.732:6): pid=10699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2082" name="memory.events" dev="tmpfs" ino=3780 res=0 errno=0
[  139.918159][   T33] audit: type=1804 audit(1752348075.752:7): pid=10699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2082" name="/newroot/746/memory.events" dev="tmpfs" ino=3780 res=1 errno=0
[  140.008318][T10708] netlink: 'syz.2.2084': attribute type 2 has an invalid length.
[  140.229430][T10727] netlink: 'syz.2.2089': attribute type 12 has an invalid length.
[  140.235616][T10727] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.2089'.
[  140.403634][T10743] xt_cgroup: path and classid specified
[  140.590295][T10758] bridge_slave_0: invalid flags given to default FDB implementation
[  140.805027][T10775] netlink: 'syz.0.2109': attribute type 3 has an invalid length.
[  140.849015][T10777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2110'.
[  140.852198][T10777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2110'.
[  141.013749][T10792] netlink: 'syz.0.2117': attribute type 3 has an invalid length.
[  141.051996][T10792] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2117'.
[  141.134968][T10801] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2121'.
[  141.273631][T10816] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2129'.
[  141.509517][T10826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2134'.
[  141.541652][T10830] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2136'.
[  142.019431][T10852] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  142.021956][T10852] IPv6: NLM_F_CREATE should be set when creating new route
[  142.024126][T10852] IPv6: NLM_F_CREATE should be set when creating new route
[  142.026294][T10852] IPv6: NLM_F_CREATE should be set when creating new route
[  142.036154][T10852] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  142.221073][T10863] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  142.317202][T10877] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2156'.
[  142.539524][T10892] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  142.609943][T10892] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.613062][T10892] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.806786][T10892] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  142.809758][T10892] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  142.813863][T10892] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  142.816784][T10892] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  142.850028][T10892] veth0_macvtap: left allmulticast mode
[  143.188361][T10932] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  143.586895][T10953] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  143.595851][   T33] audit: type=1800 audit(1752348079.422:8): pid=10955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2194" name="blkio.bfq.time_recursive" dev="tmpfs" ino=3655 res=0 errno=0
[  143.800099][T10972] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  144.360203][T11014] 8021q: adding VLAN 0 to HW filter on device team1
[  144.519639][   T33] audit: type=1800 audit(1752348080.342:9): pid=11030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2229" name="blkio.bfq.time_recursive" dev="tmpfs" ino=3504 res=0 errno=0
[  144.554145][T11032] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  144.557180][T11032] IPv6: NLM_F_CREATE should be set when creating new route
[  144.560136][T11032] IPv6: NLM_F_CREATE should be set when creating new route
[  144.563076][T11032] IPv6: NLM_F_CREATE should be set when creating new route
[  144.568281][T11032] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  144.629131][T11038] syzkaller1: tun_chr_ioctl cmd 1074025677
[  144.631690][T11038] syzkaller1: linktype set to 6
[  144.758007][T11048] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  144.765912][T11050] validate_nla: 9 callbacks suppressed
[  144.765936][T11050] netlink: 'syz.2.2239': attribute type 64 has an invalid length.
[  145.701672][T11107] netlink: 'syz.0.2270': attribute type 64 has an invalid length.
[  145.709493][T11107] __nla_validate_parse: 7 callbacks suppressed
[  145.709507][T11107] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2270'.
[  145.937397][T11115] syzkaller1: tun_chr_ioctl cmd 1074025677
[  145.943627][T11115] syzkaller1: linktype set to 6
[  146.373233][T11126] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2269'.
[  146.400158][T11126] 8021q: adding VLAN 0 to HW filter on device team1
[  147.189535][T11143] netlink: 'syz.2.2279': attribute type 1 has an invalid length.
[  147.207659][T11143] smc: adding net device bond0 with user defined pnetid SYZ2
[  147.225928][T11143] bond0: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  147.234158][T11143] bridge_slave_0: left allmulticast mode
[  147.236095][T11143] bridge_slave_0: left promiscuous mode
[  147.239170][T11143] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.244275][T11143] bridge_slave_1: left allmulticast mode
[  147.246216][T11143] bridge_slave_1: left promiscuous mode
[  147.248581][T11143] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.258395][T11143] team0: Port device team_slave_0 removed
[  147.262828][T11143] team0: Port device team_slave_1 removed
[  147.265085][T11143] batman_adv: batadv0: Removing interface: batadv_slave_0
[  147.268280][T11143] batman_adv: batadv0: Removing interface: batadv_slave_1
[  147.272869][T11143] team0: Port device geneve0 removed
[  147.275304][T11143] batman_adv: batadv0: Removing interface: macvlan2
[  147.298382][T11143] bond1: (slave veth3): Releasing backup interface
[  147.305548][T11143] bond0: (slave ip6gretap1): Releasing backup interface
[  147.366927][T11157] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2287'.
[  147.369954][T11157] netlink: 'syz.0.2287': attribute type 6 has an invalid length.
[  147.372974][T11157] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2287'.
[  147.379845][T11157] netlink: 'syz.0.2287': attribute type 4 has an invalid length.
[  148.553516][T11247] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2329'.
[  148.556859][T11247] netlink: 'syz.0.2329': attribute type 1 has an invalid length.
[  149.040823][T11277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2344'.
[  149.044765][T11277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2344'.
[  149.048455][T11277] netlink: 'syz.0.2344': attribute type 14 has an invalid length.
[  149.052765][T11277] netlink: 'syz.0.2344': attribute type 13 has an invalid length.
[  149.298495][T11295] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2353'.
[  149.459107][T11306] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2357'.
[  149.549662][T11312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2361'.
[  149.598573][T11317] netlink: 'syz.2.2364': attribute type 14 has an invalid length.
[  149.601838][T11317] netlink: 'syz.2.2364': attribute type 13 has an invalid length.
[  149.685055][T11321] lo speed is unknown, defaulting to 1000
[  149.688943][T11321] lo speed is unknown, defaulting to 1000
[  150.334668][T11359] netlink: 'syz.1.2383': attribute type 7 has an invalid length.
[  150.342218][T11359] netlink: 'syz.1.2383': attribute type 3 has an invalid length.
[  150.826057][T11412] __nla_validate_parse: 4 callbacks suppressed
[  150.826076][T11412] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2408'.
[  151.173210][T11441] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2421'.
[  151.298770][T11453] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2427'.
[  151.344106][T11451] lo speed is unknown, defaulting to 1000
[  151.347676][T11451] lo speed is unknown, defaulting to 1000
[  151.795334][T11483] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2442'.
[  151.811164][T11485] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2441'.
[  151.921486][T11493] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2445'.
[  152.399981][T11524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2459'.
[  152.413777][T11524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2459'.
[  152.726901][T11557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2475'.
[  152.730478][T11557] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2475'.
[  153.321377][T11605] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  153.957963][T11625] netlink: 'syz.1.2510': attribute type 1 has an invalid length.
[  154.050141][T11625] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  154.060403][T11625] 8021q: adding VLAN 0 to HW filter on device bond2
[  154.064349][ T5859] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  154.084331][T11625] veth5: entered promiscuous mode
[  154.087877][T11625] bond2: (slave veth5): Enslaving as a backup interface with a down link
[  154.106473][T11625] bridge_slave_0: left allmulticast mode
[  154.108754][T11625] bridge_slave_0: left promiscuous mode
[  154.112122][T11625] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.118554][T11625] bridge_slave_1: left allmulticast mode
[  154.122052][T11625] bridge_slave_1: left promiscuous mode
[  154.124404][T11625] bridge0: port 2(bridge_slave_1) entered disabled state
[  154.130396][T11625] bond0: (slave bond_slave_0): Releasing backup interface
[  154.135289][T11625] bond0: (slave bond_slave_1): Releasing backup interface
[  154.144637][T11625] team0: Port device team_slave_0 removed
[  154.157442][T11625] team0: Port device team_slave_1 removed
[  154.175942][T11625] team0: Port device geneve0 removed
[  154.181739][ T5859] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  154.185882][T11625] bond1: (slave veth3): Releasing backup interface
[  154.191760][T11625] bond2: (slave ip6gretap1): Removing an active aggregator
[  154.197056][T11625] bond2: (slave ip6gretap1): Releasing backup interface
[  154.199558][T11625] bond2: (slave ip6gretap1): the permanent HWaddr of slave - 9e:86:d9:ab:53:e9 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  154.215979][T11625] bond2: (slave veth5): Releasing backup interface
[  154.428216][T11663] netlink: 'syz.2.2523': attribute type 6 has an invalid length.
[  154.437558][T11663] netlink: 'syz.2.2523': attribute type 7 has an invalid length.
[  154.440479][T11663] netlink: 'syz.2.2523': attribute type 8 has an invalid length.
[  154.807240][T11702] netlink: del zone limit has 4 unknown bytes
[  154.947267][T11711] macsec1: entered allmulticast mode
[  154.949393][T11711] macsec0: entered allmulticast mode
[  157.024077][T11768] netlink: 'syz.1.2572': attribute type 2 has an invalid length.
[  157.035095][T11768] : entered promiscuous mode
[  157.284678][T11785] __nla_validate_parse: 5 callbacks suppressed
[  157.284689][T11785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2579'.
[  158.260500][T11806] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[  158.278163][T11806] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[  158.283694][T11806] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[  158.286950][T11806] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[  158.292164][T11806] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0
[  158.294960][T11806] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0
[  158.297546][T11806] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0
[  158.302588][T11806] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0
[  158.317756][T11806] geneve2: entered promiscuous mode
[  158.319779][T11806] geneve2: entered allmulticast mode
[  158.394959][T11817] netlink: 'syz.0.2594': attribute type 22 has an invalid length.
[  158.506483][T11825] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2598'.
[  158.565823][T11836] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2602'.
[  158.623177][T11839] nftables ruleset with unbound chain
[  158.845824][T11862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2616'.
[  158.854293][T11862] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2616'.
[  158.993582][T11871] netlink: 666 bytes leftover after parsing attributes in process `syz.1.2621'.
[  159.047126][T11879] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  159.128118][T11887] netlink: 'syz.2.2628': attribute type 1 has an invalid length.
[  159.132537][T11887] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.2628'.
[  159.617520][T11925] openvswitch: netlink: Tunnel attr 7 has unexpected len 16 expected 0
[  159.744214][T11931] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2647'.
[  160.111166][T11950] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2656'.
[  160.140170][T11950] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2656'.
[  160.249262][T11964] netlink: zone id is out of range
[  160.265280][T11964] netlink: del zone limit has 4 unknown bytes
[  160.643975][T11998] netlink: 'syz.1.2677': attribute type 1 has an invalid length.
[  160.948558][T12024] xt_policy: output policy not valid in PREROUTING and INPUT
[  161.649195][T12082] netlink: 'syz.0.2717': attribute type 10 has an invalid length.
[  161.964954][T12108] bridge0: entered promiscuous mode
[  161.969404][T12108] bridge0: left promiscuous mode
[  162.018785][T12113] bridge0: entered promiscuous mode
[  162.074994][T12118] netlink: 'syz.1.2734': attribute type 1 has an invalid length.
[  162.078786][T12113] bridge0: left promiscuous mode
[  162.267628][T12128] lo speed is unknown, defaulting to 1000
[  162.270292][T12128] lo speed is unknown, defaulting to 1000
[  162.981030][T12154] xt_bpf: check failed: parse error
[  163.084446][T12160] netlink: 'syz.0.2751': attribute type 1 has an invalid length.
[  163.087100][T12160] netlink: 'syz.0.2751': attribute type 1 has an invalid length.
[  163.140995][ T5831] Bluetooth: hci2: command 0x0405 tx timeout
[  163.613715][T12193] __nla_validate_parse: 14 callbacks suppressed
[  163.613733][T12193] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2766'.
[  163.743777][T12201] netlink: 'syz.1.2769': attribute type 10 has an invalid length.
[  163.758330][T12201] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.2769'.
[  164.267673][T12231] ip6gre1: entered allmulticast mode
[  164.378089][T12237] lo speed is unknown, defaulting to 1000
[  164.381946][T12237] lo speed is unknown, defaulting to 1000
[  164.597503][T12248] netlink: 'syz.1.2792': attribute type 5 has an invalid length.
[  164.715891][T12240] netlink: 'syz.0.2787': attribute type 4 has an invalid length.
[  164.964233][T12266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2799'.
[  165.046701][T12270] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2800'.
[  165.332785][T12292] netlink: 'syz.0.2807': attribute type 1 has an invalid length.
[  165.348842][T12292] bond1: entered promiscuous mode
[  165.353375][T12292] 8021q: adding VLAN 0 to HW filter on device bond1
[  165.368491][T12292] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2807'.
[  165.382546][T12292] batadv0: entered promiscuous mode
[  165.384205][T12292] batadv0: entered allmulticast mode
[  165.398530][T12292] 8021q: adding VLAN 0 to HW filter on device batadv0
[  165.405132][T12292] bond1: (slave batadv0): making interface the new active one
[  165.408134][T12292] bond1: (slave batadv0): Enslaving as an active interface with an up link
[  165.569926][T12292] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2807'.
[  165.706875][T12317] xt_TCPMSS: Only works on TCP SYN packets
[  165.796823][T12329] x_tables: duplicate underflow at hook 1
[  165.813990][T12332] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2825'.
[  166.042725][T12355] netlink: 'syz.1.2836': attribute type 1 has an invalid length.
[  166.045659][T12355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2836'.
[  166.053145][T12355] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2836'.
[  166.095797][T12364] netlink: 'syz.2.2839': attribute type 1 has an invalid length.
[  166.298147][   T47] hid-generic 0005:16BF:5505.0004: unknown main item tag 0x0
[  166.301265][   T47] hid-generic 0005:16BF:5505.0004: unknown main item tag 0x0
[  166.310398][   T47] hid-generic 0005:16BF:5505.0004: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  167.107820][T12427] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2863'.
[  167.934217][T12461] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  168.074730][T12471] openvswitch: netlink: Missing key (keys=44, expected=200000)
[  168.205572][T12476] netlink: 'syz.1.2885': attribute type 22 has an invalid length.
[  169.176800][T12500] __nla_validate_parse: 1 callbacks suppressed
[  169.176821][T12500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2898'.
[  169.357531][T12516] netlink: 'syz.0.2905': attribute type 29 has an invalid length.
[  169.384847][T12516] netlink: 'syz.0.2905': attribute type 29 has an invalid length.
[  169.390924][T12516] netlink: 500 bytes leftover after parsing attributes in process `syz.0.2905'.
[  169.491471][T12525] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  169.613561][T12534] pim6reg1: entered promiscuous mode
[  169.615669][T12534] pim6reg1: entered allmulticast mode
[  169.942681][T12567] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  170.212319][T12591] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2942'.
[  170.222505][T12591] macvtap2: entered promiscuous mode
[  170.224328][T12591] team0: entered promiscuous mode
[  170.226083][T12591] macvtap2: entered allmulticast mode
[  170.228414][T12591] team0: entered allmulticast mode
[  170.231397][T12591] 8021q: adding VLAN 0 to HW filter on device macvtap2
[  170.237713][T12591] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2942'.
[  170.242816][T12591] team0: left allmulticast mode
[  170.244489][T12591] team0: left promiscuous mode
[  170.406359][T12604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2948'.
[  170.410172][T12604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2948'.
[  170.477442][T12608] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  170.731776][T12630] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  171.105753][T12657] netlink: 'syz.0.2973': attribute type 83 has an invalid length.
[  171.415651][T12683] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2983'.
[  171.424618][T12683] sch_tbf: burst 0 is lower than device lo mtu (11337746) !
[  171.573060][T12697] netlink: 'syz.1.2991': attribute type 4 has an invalid length.
[  171.638236][T12701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2993'.
[  171.645378][T12701] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2993'.
[  171.741514][T12708] netlink: 'syz.2.2995': attribute type 1 has an invalid length.
[  171.890334][T12716] lo speed is unknown, defaulting to 1000
[  171.894534][T12716] lo speed is unknown, defaulting to 1000
[  172.452175][T12743] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3009'.
[  172.455118][T12743] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[  172.731799][T12768] xt_hashlimit: size too large, truncated to 1048576
[  172.817024][T12776] syzkaller1: entered promiscuous mode
[  172.818963][T12776] syzkaller1: entered allmulticast mode
[  173.088730][T12790] tc_dump_action: action bad kind
[  173.664409][T12838] netlink: zone id is out of range
[  173.666274][T12838] netlink: zone id is out of range
[  173.668155][T12838] netlink: zone id is out of range
[  173.686879][T12838] netlink: zone id is out of range
[  173.688618][T12838] netlink: zone id is out of range
[  173.690275][T12838] netlink: zone id is out of range
[  173.692261][T12838] netlink: zone id is out of range
[  173.693821][T12838] netlink: zone id is out of range
[  173.695440][T12838] netlink: zone id is out of range
[  173.696993][T12838] netlink: zone id is out of range
[  174.253562][T12875] syzkaller0: entered promiscuous mode
[  174.255466][T12875] syzkaller0: entered allmulticast mode
[  175.841863][T12893] __nla_validate_parse: 1 callbacks suppressed
[  175.841885][T12893] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3079'.
[  175.930163][T12899] netlink: 'syz.1.3083': attribute type 10 has an invalid length.
[  176.071102][T12915] netlink: 136784 bytes leftover after parsing attributes in process `syz.1.3091'.
[  176.215550][T12929] macsec1: entered promiscuous mode
[  176.223916][T12929] bridge0: port 1(macsec1) entered blocking state
[  176.225997][T12929] bridge0: port 1(macsec1) entered disabled state
[  176.228199][T12929] macsec1: entered allmulticast mode
[  176.229787][T12929] bridge0: entered allmulticast mode
[  176.233840][T12929] macsec1: left allmulticast mode
[  176.235405][T12929] bridge0: left allmulticast mode
[  176.418393][T12952] xt_TCPMSS: Only works on TCP SYN packets
[  176.543768][T12970] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3117'.
[  176.585758][T12972] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3119'.
[  176.588565][T12972] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3119'.
[  176.592254][T12975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3120'.
[  176.595014][T12975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3120'.
[  176.626425][T12978] dummy0: entered promiscuous mode
[  176.633361][T12977] dummy0: left promiscuous mode
[  176.767859][T12994] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3130'.
[  176.834745][T13002] bond0: entered promiscuous mode
[  176.837279][T13002] macvlan1: entered promiscuous mode
[  176.839631][T13002] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  176.870787][T13002] hsr1: Slave B (macvlan1) is not up; please bring it up to get a fully working HSR network
[  176.874055][T13002] hsr1: entered promiscuous mode
[  177.178873][T13031] x_tables: ip_tables: udp match: only valid for protocol 17
[  177.285503][T13042] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3153'.
[  177.316894][T13042] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3153'.
[  177.899812][T13090] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  177.931496][T13090] syzkaller0: entered promiscuous mode
[  177.933278][T13090] syzkaller0: entered allmulticast mode
[  177.935435][T13090] tipc: Resetting bearer <eth:syzkaller0>
[  177.944330][T13089] tipc: Resetting bearer <eth:syzkaller0>
[  178.952154][   T47] tipc: Node number set to 3601425318
[  179.223022][T13089] tipc: Disabling bearer <eth:syzkaller0>
[  179.535303][T13135] _Z`Ԁ@: entered promiscuous mode
[  179.847366][T13155] net_ratelimit: 4072 callbacks suppressed
[  179.847400][T13155] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  180.018973][T13173] netlink: 'syz.1.3212': attribute type 7 has an invalid length.
[  180.022402][T13173] netlink: 'syz.1.3212': attribute type 8 has an invalid length.
[  180.032852][T13173] gretap0: entered promiscuous mode
[  180.035911][T13173] batadv_slave_1: entered promiscuous mode
[  180.040163][T13173] hsr2: Slave A (gretap0) is not up; please bring it up to get a fully working HSR network
[  180.044680][T13173] hsr2: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network
[  180.580849][ T5831] Bluetooth: hci1: command 0x0406 tx timeout
[  180.949711][T13221] bridge2: entered allmulticast mode
[  181.448586][T13262] __nla_validate_parse: 4 callbacks suppressed
[  181.448606][T13262] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3249'.
[  182.246004][T13295] netlink: 'syz.1.3268': attribute type 10 has an invalid length.
[  182.253349][T13295] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode
[  182.256777][T13295] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  182.262153][T13293] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  183.256048][T13330] netlink: 'syz.0.3284': attribute type 39 has an invalid length.
[  183.484150][T13356] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3294'.
[  183.696776][T13375] netlink: 'syz.0.3303': attribute type 2 has an invalid length.
[  183.699063][T13376] xt_hashlimit: size too large, truncated to 1048576
[  183.705698][T13375] : entered promiscuous mode
[  184.105885][T13403] lo speed is unknown, defaulting to 1000
[  184.108673][T13403] lo speed is unknown, defaulting to 1000
[  184.367110][T13360] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  184.819884][T13459] lo speed is unknown, defaulting to 1000
[  184.840522][T13459] lo speed is unknown, defaulting to 1000
[  185.658880][T13512] ip6t_srh: unknown srh invflags 4449
[  185.814475][T13524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3349'.
[  185.883569][T13534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3350'.
[  185.887992][T13532] Bluetooth: MGMT ver 1.23
[  185.960953][T13539] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3355'.
[  185.988763][T13542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3356'.
[  186.003075][T13542] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3356'.
[  186.006027][T13542] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3356'.
[  186.264300][T13566] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3368'.
[  186.338236][T13571] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  186.648744][   T33] audit: type=1800 audit(1752348122.472:10): pid=13585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3374" name="cgroup.controllers" dev="tmpfs" ino=5314 res=0 errno=0
[  186.680355][   T47] hid-generic 0005:16C0:5505.0005: unknown main item tag 0x0
[  186.683189][   T47] hid-generic 0005:16C0:5505.0005: unknown main item tag 0x0
[  186.687913][   T47] hid-generic 0005:16C0:5505.0005: unknown main item tag 0x0
[  186.695757][   T47] hid-generic 0005:16C0:5505.0005: unknown main item tag 0x0
[  186.699021][   T47] hid-generic 0005:16C0:5505.0005: unknown main item tag 0x0
[  186.702571][   T47] hid-generic 0005:16C0:5505.0005: unknown main item tag 0x3
[  186.707559][   T47] hid-generic 0005:16C0:5505.0005: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa
[  186.879684][T13599] ieee802154 phy0 wpan0: encryption failed: -126
[  187.142312][T13621] tipc: Enabled bearer <udp:syz2>, priority 10
[  187.506044][T13662] netlink: 'syz.1.3410': attribute type 6 has an invalid length.
[  187.508553][T13662] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3410'.
[  188.855777][T13715] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3436'.
[  188.999260][T13731] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3443'.
[  189.203795][T13759] netlink: 'syz.0.3457': attribute type 21 has an invalid length.
[  189.206703][T13759] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3457'.
[  189.210491][T13759] netlink: 'syz.0.3457': attribute type 4 has an invalid length.
[  189.215300][T13759] netlink: 'syz.0.3457': attribute type 3 has an invalid length.
[  189.217742][T13759] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3457'.
[  189.455446][T13783] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  189.460907][T13782] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3466'.
[  189.464497][T13782] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3466'.
[  189.517278][ T5220] Bluetooth: hci2: link tx timeout
[  189.519994][ T5220] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  189.523846][ T5220] Bluetooth: hci2: link tx timeout
[  189.525708][ T5220] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  189.552046][T13788] netlink: 'syz.0.3468': attribute type 10 has an invalid length.
[  189.555456][T13788] bridge_slave_1: left allmulticast mode
[  189.557691][T13788] bridge_slave_1: left promiscuous mode
[  189.560109][T13788] bridge0: port 2(bridge_slave_1) entered disabled state
[  189.568880][ T5220] Bluetooth: hci2: link tx timeout
[  189.570581][ T5220] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  189.572220][T13788] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  189.573037][ T5220] Bluetooth: hci2: link tx timeout
[  189.578555][ T5220] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  190.818465][T13839] netlink: 'syz.0.3489': attribute type 2 has an invalid length.
[  190.822819][T13839] netlink: 'syz.0.3489': attribute type 2 has an invalid length.
[  190.998583][T13853] pim6reg1: entered promiscuous mode
[  191.000315][T13853] pim6reg1: entered allmulticast mode
[  191.507279][T13898] netlink: 'syz.0.3517': attribute type 10 has an invalid length.
[  191.512225][T13898] netlink: 'syz.0.3517': attribute type 10 has an invalid length.
[  191.530485][T13901] netlink: 'syz.1.3519': attribute type 1 has an invalid length.
[  191.543340][ T5220] Bluetooth: hci2: command 0x0405 tx timeout
[  191.673943][T13911] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3524'.
[  191.676819][T13911] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3524'.
[  191.679867][T13911] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3524'.
[  192.048699][T13951] lo speed is unknown, defaulting to 1000
[  192.051639][T13951] lo speed is unknown, defaulting to 1000
[  192.094170][T13956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  192.149267][T13956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  192.211802][T13951] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  193.094772][T13989] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  193.507792][T14012] validate_nla: 1 callbacks suppressed
[  193.507805][T14012] netlink: 'syz.0.3568': attribute type 7 has an invalid length.
[  193.700746][ T5220] Bluetooth: hci2: command 0x0405 tx timeout
[  193.864790][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  194.111659][T14059] __nla_validate_parse: 4 callbacks suppressed
[  194.111674][T14059] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3586'.
[  194.232970][T14069] block nbd0: Unsupported socket: shutdown callout must be supported.
[  194.426836][T14088] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3597'.
[  194.625357][T14107] bridge_slave_0: left allmulticast mode
[  194.629864][T14107] bridge_slave_0: left promiscuous mode
[  194.637941][T14107] bridge0: port 1(bridge_slave_0) entered disabled state
[  194.658037][T14107] bond0: (slave bridge_slave_1): Releasing backup interface
[  194.682274][T14107] bond0: (slave bond_slave_0): Releasing backup interface
[  194.710155][T14107] bond0: (slave bond_slave_1): Releasing backup interface
[  194.747396][T14107] team0: Port device team_slave_0 removed
[  194.763387][T14107] team0: Port device team_slave_1 removed
[  194.767006][T14107] bond1: (slave batadv0): Releasing active interface
[  194.908971][T14132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3612'.
[  194.914545][T14132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3612'.
[  195.515275][T14192] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3641'.
[  195.867192][T14230] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3658'.
[  195.960024][T14236] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  195.980895][T14242] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3664'.
[  195.984436][T14242] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3664'.
[  196.068325][T14254] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  196.167176][T14266] netlink: 596 bytes leftover after parsing attributes in process `syz.2.3676'.
[  196.373441][T14290] lo speed is unknown, defaulting to 1000
[  196.376958][T14290] lo speed is unknown, defaulting to 1000
[  196.476510][T14301] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3693'.
[  196.479475][T14301] nbd: couldn't find a device at index 65546
[  196.688814][T14295] lo speed is unknown, defaulting to 1000
[  196.697171][T14307] netlink: 'syz.2.3688': attribute type 12 has an invalid length.
[  198.075342][T14390] netlink: 'syz.1.3735': attribute type 9 has an invalid length.
[  198.078485][T14390] netlink: 'syz.1.3735': attribute type 6 has an invalid length.
[  198.112039][T14394] netlink: 'syz.2.3737': attribute type 1 has an invalid length.
[  198.594062][T14443] TCP: TCP_TX_DELAY enabled
[  198.635258][T14447] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8
[  199.387225][T14513] ieee802154 phy0 wpan0: encryption failed: -126
[  199.389897][T14513] ieee802154 phy0 wpan0: encryption failed: -126
[  199.600540][T14535] __nla_validate_parse: 7 callbacks suppressed
[  199.600556][T14535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3806'.
[  200.056873][T14557] netlink: 'syz.0.3815': attribute type 16 has an invalid length.
[  200.060062][T14557] netlink: 'syz.0.3815': attribute type 17 has an invalid length.
[  200.308835][T14567] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3820'.
[  200.717563][T14584] netlink: 184 bytes leftover after parsing attributes in process `syz.1.3828'.
[  201.074311][T14607] IPVS: Unknown mcast interface: vcan0
[  201.466709][T14624] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3847'.
[  201.584609][T14636] nbd: must specify at least one socket
[  201.803808][T14660] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3864'.
[  201.873074][T14666] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3866'.
[  202.133632][T14701] netlink: 'syz.0.3883': attribute type 3 has an invalid length.
[  202.136098][T14701] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3883'.
[  202.289792][T14712] macsec0: entered allmulticast mode
[  202.291843][T14712] hsr0: entered allmulticast mode
[  202.293504][T14712] hsr_slave_0: entered allmulticast mode
[  202.295329][T14712] hsr_slave_1: entered allmulticast mode
[  202.300053][T14712] hsr0: left allmulticast mode
[  202.303790][T14712] hsr_slave_0: left allmulticast mode
[  202.306740][T14712] hsr_slave_1: left allmulticast mode
[  202.472686][T14727] syzkaller1: entered promiscuous mode
[  202.474958][T14727] syzkaller1: entered allmulticast mode
[  203.033659][T14752] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3906'.
[  203.296610][T14776] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3918'.
[  203.301473][T14776] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3918'.
[  203.737946][T14818] netlink: 'syz.0.3939': attribute type 27 has an invalid length.
[  203.752847][T14820] ip6gretap0: entered promiscuous mode
[  203.759447][T14820] ip6gretap0: left promiscuous mode
[  204.991872][T14862] IPVS: length: 209 != 24
[  205.175900][   T33] audit: type=1800 audit(1752348141.002:11): pid=14858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3957" name="cgroup.controllers" dev="tmpfs" ino=6712 res=0 errno=0
[  205.228384][T14876] tap0: tun_chr_ioctl cmd 1074025676
[  205.230147][T14876] tap0: owner set to 0
[  205.296323][T14878] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3966'.
[  205.370244][T14886] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  205.374834][T14886] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  205.377722][T14886] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  205.380510][T14886] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  205.383755][T14886] geneve2: entered promiscuous mode
[  205.445397][T14892] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3970'.
[  205.492710][T14895] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3974'.
[  205.496084][T14895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3974'.
[  205.782073][T14911] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3980'.
[  206.167637][T14941] xt_CT: No such helper "syz0"
[  206.304274][T14957] netlink: 'syz.2.4002': attribute type 5 has an invalid length.
[  206.363354][T14963] lo speed is unknown, defaulting to 1000
[  206.369695][T14965] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4003'.
[  206.374469][T14965] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4003'.
[  206.377434][T14965] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4003'.
[  206.380443][T14965] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4003'.
[  206.413075][T14970] netlink: 'syz.2.4007': attribute type 4 has an invalid length.
[  206.416862][   T47] lo speed is unknown, defaulting to 1000
[  206.418617][   T47] syz0: Port: 1 Link ACTIVE
[  206.420185][   T47] lo speed is unknown, defaulting to 1000
[  206.451245][T14972] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4008'.
[  207.391501][T14989] bond0 (unregistering): left promiscuous mode
[  207.394160][T14989] mac80211_hwsim hwsim6 wlan1: left promiscuous mode
[  207.421511][T14989] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  207.543589][T14989] bond0 (unregistering): Released all slaves
[  208.597219][T15079] xt_bpf: check failed: parse error
[  208.982249][T15108] lo speed is unknown, defaulting to 1000
[  209.164507][T15115] netlink: 'syz.2.4074': attribute type 10 has an invalid length.
[  209.707652][T15155] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  209.742613][T15158] unsupported nlmsg_type 40
[  210.341127][T15205] sctp: [Deprecated]: syz.0.4106 (pid 15205) Use of struct sctp_assoc_value in delayed_ack socket option.
[  210.341127][T15205] Use struct sctp_sack_info instead
[  210.354769][T15205] sctp: [Deprecated]: syz.0.4106 (pid 15205) Use of struct sctp_assoc_value in delayed_ack socket option.
[  210.354769][T15205] Use struct sctp_sack_info instead
[  210.637871][T15216] __nla_validate_parse: 6 callbacks suppressed
[  210.637891][T15216] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4111'.
[  210.685788][T15218] netlink: 'syz.0.4112': attribute type 21 has an invalid length.
[  210.848357][T15226] netlink: 'syz.0.4116': attribute type 1 has an invalid length.
[  210.855541][T15226] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4116'.
[  210.859573][T15226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4116'.
[  210.900896][ T5220] Bluetooth: hci2: command 0x0405 tx timeout
[  211.163255][T15252] netlink: 'syz.0.4130': attribute type 11 has an invalid length.
[  211.172808][T15255] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4129'.
[  211.276471][T15262] xt_CT: You must specify a L4 protocol and not use inversions on it
[  211.525624][T15285] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4145'.
[  211.528529][T15285] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4145'.
[  211.536325][T15285] netlink: 136784 bytes leftover after parsing attributes in process `syz.2.4145'.
[  211.539576][T15285] netlink: zone id is out of range
[  211.545357][T15285] netlink: zone id is out of range
[  211.550792][T15285] netlink: zone id is out of range
[  211.552377][T15285] netlink: zone id is out of range
[  211.553884][T15285] netlink: zone id is out of range
[  211.555526][T15285] netlink: zone id is out of range
[  211.557027][T15285] netlink: zone id is out of range
[  211.558542][T15285] netlink: zone id is out of range
[  211.560095][T15285] netlink: zone id is out of range
[  211.668073][T15297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4150'.
[  211.746148][T15304] erspan0: left promiscuous mode
[  211.776951][T15304] 8021q: adding VLAN 0 to HW filter on device team0
[  211.904271][T15315] netlink: 100 bytes leftover after parsing attributes in process `syz.2.4158'.
[  211.907972][T15315] netlink: 100 bytes leftover after parsing attributes in process `syz.2.4158'.
[  212.087818][   T47] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  212.230375][T15339] netlink: 'syz.1.4170': attribute type 6 has an invalid length.
[  212.311003][ T5860] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  212.743370][   T47] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  212.798361][T15384] syzkaller0: create flow: hash 197044404 index 1
[  212.836477][T15388] netlink: 'syz.2.4193': attribute type 3 has an invalid length.
[  212.848638][T15383] syzkaller0: delete flow: hash 197044404 index 1
[  214.136128][ T5859] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  214.139722][ T5859] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  214.180942][ T5838] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  214.413118][T15418] Cannot find add_set index 3 as target
[  214.472851][T15422] netlink: 'syz.0.4207': attribute type 13 has an invalid length.
[  214.475351][T15422] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6)
[  214.994776][T15482] net_ratelimit: 4060 callbacks suppressed
[  214.994787][T15482] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  214.998060][T15483] netlink: 'syz.1.4236': attribute type 2 has an invalid length.
[  215.222013][T15496] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  215.447769][T15505] lo speed is unknown, defaulting to 1000
[  215.472085][T15507] netlink: 'syz.0.4245': attribute type 13 has an invalid length.
[  215.474538][T15507] netlink: 'syz.0.4245': attribute type 17 has an invalid length.
[  215.507811][T15507] erspan0: left promiscuous mode
[  215.558373][T15507] 8021q: adding VLAN 0 to HW filter on device bond0
[  215.564237][T15507] 8021q: adding VLAN 0 to HW filter on device team0
[  215.574888][T15507] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  215.855613][T15524] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[  216.273737][T15551] __nla_validate_parse: 8 callbacks suppressed
[  216.273754][T15551] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4266'.
[  216.429669][T15566] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4273'.
[  216.487743][T15572] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4276'.
[  216.980873][T15619] 8021q: adding VLAN 0 to HW filter on device batadv1
[  216.984646][T15619] team0: Failed to send port change of device batadv1 via netlink (err -105)
[  216.988459][T15619] team0: Failed to send options change via netlink (err -105)
[  216.995309][T15619] team0: Port device batadv1 added
[  217.026679][T15625] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4301'.
[  217.127172][T15639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4308'.
[  217.130100][T15639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4308'.
[  217.146885][T15629] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4302'.
[  217.149755][T15629] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  217.284145][T15653] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4314'.
[  217.287396][T15657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4316'.
[  217.309079][T15659] 
[  217.310128][T15659] =============================
[  217.312591][T15659] WARNING: suspicious RCU usage
[  217.314151][T15659] 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 Not tainted
[  217.318260][T15659] -----------------------------
[  217.319723][T15659] net/core/netclassid_cgroup.c:24 suspicious rcu_dereference_check() usage!
[  217.323174][T15659] 
[  217.323174][T15659] other info that might help us debug this:
[  217.323174][T15659] 
[  217.326259][T15659] 
[  217.326259][T15659] rcu_scheduler_active = 2, debug_locks = 1
[  217.328670][T15659] 1 lock held by syz.0.4317/15659:
[  217.330251][T15659]  #0: ffffffff8e13f340 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x38/0x80
[  217.333700][T15659] 
[  217.333700][T15659] stack backtrace:
[  217.335522][T15659] CPU: 1 UID: 0 PID: 15659 Comm: syz.0.4317 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  217.335533][T15659] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  217.335539][T15659] Call Trace:
[  217.335544][T15659]  <TASK>
[  217.335548][T15659]  dump_stack_lvl+0x189/0x250
[  217.335565][T15659]  ? __pfx_dump_stack_lvl+0x10/0x10
[  217.335575][T15659]  ? __pfx__printk+0x10/0x10
[  217.335588][T15659]  ? print_lock_name+0xde/0x100
[  217.335608][T15659]  lockdep_rcu_suspicious+0x140/0x1d0
[  217.335622][T15659]  task_cls_state+0x1a5/0x1d0
[  217.335638][T15659]  bpf_get_cgroup_classid_curr+0x18/0x60
[  217.335647][T15659]  bpf_prog_841aec7193f618b3+0x1b/0x21
[  217.335656][T15659]  bpf_prog_run_pin_on_cpu+0xbf/0x150
[  217.335668][T15659]  bpf_prog_test_run_syscall+0x312/0x4b0
[  217.335679][T15659]  ? __pfx_bpf_prog_test_run_syscall+0x10/0x10
[  217.335689][T15659]  ? __fget_files+0x2a/0x420
[  217.335701][T15659]  ? __pfx_bpf_prog_test_run_syscall+0x10/0x10
[  217.335711][T15659]  bpf_prog_test_run+0x2c7/0x340
[  217.335722][T15659]  __sys_bpf+0x4a4/0x860
[  217.335730][T15659]  ? __pfx___sys_bpf+0x10/0x10
[  217.335742][T15659]  ? exc_page_fault+0x76/0xf0
[  217.335757][T15659]  ? rcu_is_watching+0x15/0xb0
[  217.335770][T15659]  __x64_sys_bpf+0x7c/0x90
[  217.335781][T15659]  do_syscall_64+0xfa/0x3b0
[  217.335790][T15659]  ? lockdep_hardirqs_on+0x9c/0x150
[  217.335801][T15659]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  217.335809][T15659]  ? exc_page_fault+0x9f/0xf0
[  217.335821][T15659]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  217.335829][T15659] RIP: 0033:0x7f378ef8e929
[  217.335838][T15659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  217.335846][T15659] RSP: 002b:00007f378fdf1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  217.335855][T15659] RAX: ffffffffffffffda RBX: 00007f378f1b5fa0 RCX: 00007f378ef8e929
[  217.335862][T15659] RDX: 0000000000000039 RSI: 0000200000000500 RDI: 000000000000000a
[  217.335867][T15659] RBP: 00007f378f010b39 R08: 0000000000000000 R09: 0000000000000000
[  217.335872][T15659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  217.335877][T15659] R13: 0000000000000000 R14: 00007f378f1b5fa0 R15: 00007ffee24955b8
[  217.335890][T15659]  </TASK>
[  218.511103][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  227.140969][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!

VM DIAGNOSIS:
19:22:33  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000000b RBX=1ffff92000c8cfac RCX=0000000000000005 RDX=ffffffff81a0ced8
RSI=00000000000003ff RDI=0000000000000000 RBP=ffffc90006467eb8 RSP=ffffc90006467d40
R8 =ffff88802649d640 R9 =000000000000000b R10=000000000000000a R11=0000000000000000
R12=dffffc0000000000 R13=00000000000003ff R14=dffffc0000000001 R15=0000000000000000
RIP=ffffffff81a0d13e RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fab8167f380 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c27f9b5 CR3=000000010847e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000000ff XMM01=0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a
XMM02=000000000000ffff 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00000000ffff0000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffc900079a0000 RBX=1ffff11020dea25a RCX=ffff88812e1b9cc0 RDX=0000000000010100
RSI=ffff888106f50000 RDI=0000000000000017 RBP=0000000000000080 RSP=ffffc900001e0b20
R8 =ffffffff8fa1f3f7 R9 =1ffffffff1f43e7e R10=dffffc0000000000 R11=ffffffff868f6e50
R12=dffffc0000000000 R13=ffff888106f512d0 R14=ffff888106f50000 R15=dffffc0000000000
RIP=ffffffff868f6e98 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f378fdf16c0 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c364a95 CR3=000000012d80e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f378f185478 00007f378f185450 XMM03=00007f378f185488 00007f378f185480
XMM04=00007f378fced100 00007f378f185440 XMM05=00007f378f185458 00007f378f1854a0
XMM06=00007f378f185498 00007f378f185490 XMM07=00007f378f185488 00007f378f185480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f378f011c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
