last executing test programs:

10.5109631s ago: executing program 0 (id=2181):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0xa04, 0x0, 0x0, {0x1, 0x0, 0x3}}], {0x14}}, 0xa4}}, 0x0)

10.510452702s ago: executing program 0 (id=2184):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x40000)
sendmsg$nl_route(r1, 0x0, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4)

10.460428027s ago: executing program 0 (id=2186):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x3d, &(0x7f0000000000)='cgroup\x00\x8d\f\xf3\xcd\xc6X$\x01n-Hg\x144-.\xe2\x053\xe2\xf4\xbf[\xe9\xdddU\x91\x9d,\t\x8d\xc3@\x86,\x7f\xe2Z\xe8L\x80\xdbe~c\xbc\x9b\xcf\x9b\x1cH\x95\xf3'}, 0x30)
close(0xffffffffffffffff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2}, 0x10)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r2, 0xffffffffffffffff, 0x2, 0x0, 0x4000}, 0x10)

10.460034297s ago: executing program 0 (id=2188):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, 0x0, 0x7, 0x5, 0x0, 0x0, {0x6, 0x0, 0x4}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008050}, 0x20000050)

10.410906164s ago: executing program 0 (id=2190):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'veth1_vlan\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x20, 0x2, 0x7, 0x4}})

4.39659051s ago: executing program 0 (id=2190):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'veth1_vlan\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x20, 0x2, 0x7, 0x4}})

459.394826ms ago: executing program 1 (id=2341):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x10, 0x1416, 0xe50814127a83d959}, 0x10}}, 0x0)

459.156128ms ago: executing program 1 (id=2342):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmsg$OSF_MSG_REMOVE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={0x268, 0x1, 0x5, 0x3, 0x0, 0x0, {0x3, 0x0, 0x7}, [{{0x254, 0x1, {{0x0, 0x4}, 0x0, 0x6, 0xfffe, 0x8, 0x27, 'syz0\x00', "342efc98edda6c80931ab42c143b974299d37374550c11721d0f196b8fee6af6", "c2753cb2fda57536cf1f266108c2f4a09fb99853abcab03bd6a4e9d795f179ea", [{0x9, 0x8000, {0x1, 0x2f14}}, {0x9, 0x4, {0x1, 0x6}}, {0x1, 0x1, {0x2}}, {0x268, 0x234, {0x0, 0x401}}, {0x7, 0x7, {0x2, 0x7}}, {0x8, 0x324d, {0x2, 0x100}}, {0x101, 0xf, {0x1, 0x4}}, {0x8, 0x1d0, {0x3}}, {0xd, 0x7ff, {0x3, 0x3}}, {0x7, 0x2, {0x0, 0xce2}}, {0x10}, {0xffff, 0x7fff, {0x2, 0x6}}, {0x4, 0x1, {0x0, 0x4}}, {0x2, 0x1, {0x3, 0x4}}, {0x3, 0x4, {0x0, 0xb5}}, {0x5, 0x7aa1, {0x2, 0x7f}}, {0x3, 0x6, {0x3, 0x1000}}, {0x8000, 0x9, {0x1, 0x6}}, {0x401, 0x5, {0x0, 0x8}}, {0xb4b2, 0x9, {0x0, 0x1}}, {0x9, 0x4, {0x1, 0xf}}, {0x1ff, 0x9, {0x0, 0x6}}, {0x4, 0x1, {0x1, 0x5}}, {0x6, 0xf6, {0x2}}, {0x9, 0x7b, {0x0, 0x3}}, {0x9, 0x1, {0x1, 0x20000000}}, {0x6, 0x4, {0x1, 0x3}}, {0x4, 0x2, {0x3, 0x6}}, {0x401, 0x2, {0x3, 0x3}}, {0x2, 0xfdb5, {0x3, 0x7}}, {0x3, 0x8, {0x1, 0x4}}, {0xfff3, 0x3, {0x3, 0x6}}, {0x6, 0xfffd, {0x2, 0x9}}, {0xa, 0x1}, {0xfffa, 0x6, {0x3, 0x6}}, {0x1, 0x800, {0x1, 0x3}}, {0x9, 0x86b, {0x0, 0x2}}, {0x0, 0x91, {0x2, 0x5db3}}, {0x7, 0x7, {0x0, 0x6}}, {0x9, 0x200, {0x1, 0x8d27}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x20000000}, 0x804)
recvmmsg(r1, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/59, 0x3b}, {&(0x7f0000000380)=""/135, 0x87}], 0x2}, 0x2}], 0x1, 0x40000060, 0x0)

398.802859ms ago: executing program 2 (id=2344):
r0 = socket(0x10, 0x80003, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002140)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x7, 0x2, 0xb, 0x9}, {0x5, 0x1, 0x1000, 0x9, 0x0, 0xc}, 0x3, 0x4, 0xe6d}}, @TCA_TBF_RATE64={0xc, 0x4, 0x5b0d649c4533b841}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x400c004}, 0x0)

398.411031ms ago: executing program 1 (id=2345):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0)
sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0xd121dae3649e435f, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x800)

340.262485ms ago: executing program 2 (id=2346):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3a}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0x40f, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r2 = socket(0xa, 0x3, 0x3a)
r3 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0xfd, [0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2]}})
socket$inet6(0xa, 0x2, 0x3a)
socket$inet_udp(0x2, 0x2, 0x0)
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0)
socket$kcm(0x2, 0xa, 0x2)
socket$packet(0x11, 0x2, 0x300)
ioctl$FS_IOC_GETFSUUID(r4, 0x80111500, &(0x7f0000000100))
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
pipe(&(0x7f0000001180)={<r6=>0xffffffffffffffff})
bind$alg(r6, &(0x7f0000001380)={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-224-arm\x00'}, 0x58)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x2, 0x3c, 0x3c, 0x4, [@enum={0x0, 0x6, 0x0, 0x6, 0x4, [{0xf, 0xf}, {0x6, 0xfffffff9}, {0x4, 0x3}, {0x4, 0x9}, {0xa, 0x8}, {0xf, 0x4}]}]}, {0x0, [0x5f, 0x30]}}, &(0x7f00000000c0)=""/190, 0x58, 0xbe, 0x1}, 0x28)

279.72698ms ago: executing program 1 (id=2347):
r0 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2}, 0x40010)

225.493932ms ago: executing program 1 (id=2348):
r0 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
bind$tipc(r0, 0x0, 0x0)
sendmsg$tipc(r0, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x2, 0x3, 0x4}}, 0x10, 0x0}, 0x0)

217.962072ms ago: executing program 2 (id=2349):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x49, &(0x7f0000000180)=0x9, 0x4)

138.911169ms ago: executing program 1 (id=2350):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
r0 = socket(0x8, 0x0, 0x8000)
accept4$netrom(r0, 0x0, 0x0, 0x0)

138.58747ms ago: executing program 2 (id=2351):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r0, 0x0, 0xb9b}, 0x18)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r1, 0x0, 0xb9b}, 0x18)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)

159.843µs ago: executing program 2 (id=2352):
bpf$MAP_CREATE(0x0, &(0x7f00000019c0)=@bloom_filter={0x21, 0x0, 0x7}, 0xa6)

0s ago: executing program 2 (id=2353):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r1, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc2dd99ed1c3c609a49cc151870a", 0xc6}, {&(0x7f00000002c0)="9c811ff500139d7d28a5f0de630ec6041ed353d314e58721edf306c382ac611fe34479cb9e2585745ff3c61da74b06eb64f69a4e90d706178176dc533f123b66d04d51fb740c1efdf8db3b99ed18fb67c1f75ef7d55b3bb185f5f38665ea5e0918", 0x61}, {&(0x7f0000000380)="3f82090ccda4f8ce1b08afd200c6075794cdd2e0021e32a0f6267447162a2085457cf687e74d142e85e9c4ac6eefcdaa493bcb54152b1339a38d3898707b77a9333cfb7bdc7c523ab4aa869c6db252e8e93bc14cfccfdedf9bbaed10dbc3c315aaedb987b398dd67a155fc3644e2fda199e2cfaa69af7df7", 0x78}], 0x3}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000001800)="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", 0x2da}], 0x1}}], 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:7528' (ED25519) to the list of known hosts.
syzkaller login: [   48.536080][ T5756] cgroup: Unknown subsys name 'net'
[   48.667464][ T5756] cgroup: Unknown subsys name 'cpuset'
[   48.672959][ T5756] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.245959][ T5756] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   56.707715][ T5835] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   57.002557][ T5848] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   59.641038][ T5857] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   59.656979][ T5860] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   59.659126][ T5866] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   59.659389][ T5857] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   59.664479][ T5866] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   59.664908][ T5866] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   59.669949][ T5857] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   59.670051][ T5860] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   59.670917][ T5866] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   59.676143][ T5866] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   59.679881][ T5860] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   59.683120][ T5861] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   59.687299][ T5866] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   59.691935][ T5861] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   59.695924][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   59.949567][ T5862] chnl_net:caif_netlink_parms(): no params data found
[   60.009962][ T5855] chnl_net:caif_netlink_parms(): no params data found
[   60.085615][ T5856] chnl_net:caif_netlink_parms(): no params data found
[   60.137890][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.141298][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.145660][ T5862] bridge_slave_0: entered allmulticast mode
[   60.149404][ T5862] bridge_slave_0: entered promiscuous mode
[   60.174341][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.177286][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.180194][ T5862] bridge_slave_1: entered allmulticast mode
[   60.184493][ T5862] bridge_slave_1: entered promiscuous mode
[   60.188333][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.191254][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.195092][ T5855] bridge_slave_0: entered allmulticast mode
[   60.199158][ T5855] bridge_slave_0: entered promiscuous mode
[   60.219499][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.222930][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.226073][ T5855] bridge_slave_1: entered allmulticast mode
[   60.229047][ T5855] bridge_slave_1: entered promiscuous mode
[   60.268834][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.281683][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.287841][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.306175][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.309170][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.311488][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.315550][ T5856] bridge_slave_0: entered allmulticast mode
[   60.318723][ T5856] bridge_slave_0: entered promiscuous mode
[   60.351855][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.356016][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.358901][ T5856] bridge_slave_1: entered allmulticast mode
[   60.362711][ T5856] bridge_slave_1: entered promiscuous mode
[   60.376966][ T5855] team0: Port device team_slave_0 added
[   60.380301][ T5855] team0: Port device team_slave_1 added
[   60.391614][ T5862] team0: Port device team_slave_0 added
[   60.408604][ T5862] team0: Port device team_slave_1 added
[   60.437440][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.440000][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.448291][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.454362][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.457682][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.460264][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.469131][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.488304][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.492852][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.496359][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.506948][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.531062][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.534904][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.545239][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.568476][ T5856] team0: Port device team_slave_0 added
[   60.573996][ T5856] team0: Port device team_slave_1 added
[   60.638739][ T5855] hsr_slave_0: entered promiscuous mode
[   60.641137][ T5855] hsr_slave_1: entered promiscuous mode
[   60.658131][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.660913][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.672428][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.681504][ T5862] hsr_slave_0: entered promiscuous mode
[   60.684906][ T5862] hsr_slave_1: entered promiscuous mode
[   60.687658][ T5862] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   60.690918][ T5862] Cannot create hsr debugfs directory
[   60.706303][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.709139][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.720178][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.781281][ T5856] hsr_slave_0: entered promiscuous mode
[   60.783975][ T5856] hsr_slave_1: entered promiscuous mode
[   60.786197][ T5856] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   60.789171][ T5856] Cannot create hsr debugfs directory
[   61.062527][ T5862] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   61.074044][ T5862] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   61.085935][ T5862] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   61.098998][ T5862] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   61.139425][ T5855] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   61.147977][ T5855] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   61.158240][ T5855] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   61.165611][ T5855] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   61.252249][ T5856] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   61.259927][ T5856] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   61.275345][ T5856] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   61.282067][ T5856] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   61.340744][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.368640][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.375920][ T5855] 8021q: adding VLAN 0 to HW filter on device team0
[   61.396738][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.400103][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.417011][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.419672][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.431405][ T5862] 8021q: adding VLAN 0 to HW filter on device team0
[   61.442881][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.445298][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.457583][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.460676][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.521880][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.558503][ T5856] 8021q: adding VLAN 0 to HW filter on device team0
[   61.581950][ T1237] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.584846][ T1237] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.605673][ T1237] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.608667][ T1237] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.697590][   T55] Bluetooth: hci2: command tx timeout
[   61.738481][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0
[   61.775221][   T55] Bluetooth: hci1: command tx timeout
[   61.776045][ T5219] Bluetooth: hci0: command tx timeout
[   61.806674][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0
[   61.816826][ T5855] veth0_vlan: entered promiscuous mode
[   61.839925][ T5855] veth1_vlan: entered promiscuous mode
[   61.861796][ T5862] veth0_vlan: entered promiscuous mode
[   61.870890][ T5862] veth1_vlan: entered promiscuous mode
[   61.878286][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0
[   61.898835][ T5855] veth0_macvtap: entered promiscuous mode
[   61.915941][ T5855] veth1_macvtap: entered promiscuous mode
[   61.941428][ T5862] veth0_macvtap: entered promiscuous mode
[   61.950471][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0
[   61.962253][ T5862] veth1_macvtap: entered promiscuous mode
[   61.970425][ T5856] veth0_vlan: entered promiscuous mode
[   61.975723][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.989349][ T5855] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.992954][ T5855] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.996836][ T5855] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.000300][ T5855] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.011450][ T5856] veth1_vlan: entered promiscuous mode
[   62.021039][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.037230][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.052268][ T5862] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.057871][ T5862] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.061388][ T5862] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.066539][ T5862] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.108910][ T5856] veth0_macvtap: entered promiscuous mode
[   62.127861][ T5856] veth1_macvtap: entered promiscuous mode
[   62.167514][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.195177][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.201376][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.222549][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.234935][ T5856] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.238341][ T5856] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.241188][ T5856] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.244780][ T5856] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.274142][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.276908][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.303473][ T1237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.306606][ T1237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.358627][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.373451][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.409235][ T1237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.412503][ T1237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.482939][ T3623] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.487393][ T3623] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.802295][ T5946] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[   63.018485][ T5964] netlink: 492 bytes leftover after parsing attributes in process `syz.2.31'.
[   63.124787][ T5973] netlink: 52 bytes leftover after parsing attributes in process `syz.2.34'.
[   63.128591][ T5973] netlink: 48 bytes leftover after parsing attributes in process `syz.2.34'.
[   63.225295][ T5977] netlink: 164 bytes leftover after parsing attributes in process `syz.0.35'.
[   63.229729][ T5980] syz.2.37 uses obsolete (PF_INET,SOCK_PACKET)
[   63.438276][ T5991] netlink: 24 bytes leftover after parsing attributes in process `syz.0.43'.
[   63.776522][ T5219] Bluetooth: hci2: command tx timeout
[   63.854104][ T5219] Bluetooth: hci1: command tx timeout
[   63.864563][ T5219] Bluetooth: hci0: command tx timeout
[   63.878196][ T6024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.58'.
[   64.481304][ T6046] Bluetooth: MGMT ver 1.23
[   64.748719][ T6064] netlink: 14 bytes leftover after parsing attributes in process `syz.1.77'.
[   64.839262][ T6064] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   64.848536][ T6064] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   64.856174][ T6064] bond0 (unregistering): Released all slaves
[   65.192787][ T6081] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.264785][ T6081] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.335473][ T6081] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.393213][ T6081] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.439229][ T6091] trusted_key: syz.1.88 sent an empty control message without MSG_MORE.
[   65.488648][ T6093] netlink: 'syz.1.89': attribute type 1 has an invalid length.
[   65.492184][ T6093] netlink: 228 bytes leftover after parsing attributes in process `syz.1.89'.
[   65.496500][ T6093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.89'.
[   65.503231][ T6081] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.527174][ T6081] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.561640][ T6081] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.576389][ T6081] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.743280][ T6110] x_tables: unsorted underflow at hook 3
[   65.864867][ T5219] Bluetooth: hci2: command tx timeout
[   65.934223][ T5219] Bluetooth: hci0: command tx timeout
[   65.934244][   T55] Bluetooth: hci1: command tx timeout
[   65.994152][ T6123] netlink: 'syz.0.98': attribute type 39 has an invalid length.
[   66.216809][ T6129] netlink: 32 bytes leftover after parsing attributes in process `syz.1.101'.
[   66.704706][ T6157] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   67.589197][ T6209] x_tables: ip_tables: osf match: only valid for protocol 6
[   67.709653][ T6217] syzkaller1: entered promiscuous mode
[   67.712218][ T6217] syzkaller1: entered allmulticast mode
[   67.843250][ T6226] openvswitch: netlink: IPv4 tun info is not correct
[   67.944261][   T55] Bluetooth: hci2: command tx timeout
[   68.013775][   T55] Bluetooth: hci1: command tx timeout
[   68.013838][ T5219] Bluetooth: hci0: command tx timeout
[   68.318814][ T6245] __nla_validate_parse: 2 callbacks suppressed
[   68.318824][ T6245] netlink: 20 bytes leftover after parsing attributes in process `syz.2.147'.
[   68.417103][ T6247] pim6reg1: entered promiscuous mode
[   68.419317][ T6247] pim6reg1: entered allmulticast mode
[   69.402396][ T6314] netlink: 'syz.1.173': attribute type 2 has an invalid length.
[   69.451301][ T6316] netlink: 'syz.1.174': attribute type 12 has an invalid length.
[   69.670509][ T6304] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   69.729051][ T6328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.180'.
[   70.013468][ T5219] Bluetooth: hci2: command tx timeout
[   70.060566][ T6346] warning: `syz.0.187' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   70.439295][ T6353] netlink: 68 bytes leftover after parsing attributes in process `syz.2.189'.
[   70.782232][ T6356] netlink: 168 bytes leftover after parsing attributes in process `syz.2.191'.
[   71.141299][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.145259][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.229908][ T6376] netlink: 24 bytes leftover after parsing attributes in process `syz.0.200'.
[   71.439115][ T6391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.203'.
[   71.540403][ T6397] netlink: 'syz.1.204': attribute type 11 has an invalid length.
[   71.545180][ T6397] netlink: 224 bytes leftover after parsing attributes in process `syz.1.204'.
[   71.545678][ T6396] netlink: 84 bytes leftover after parsing attributes in process `syz.0.205'.
[   71.556679][ T6396] netlink: 84 bytes leftover after parsing attributes in process `syz.0.205'.
[   71.812880][ T6411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.209'.
[   72.387269][ T6442] Illegal XDP return value 657562816 on prog  (id 30) dev N/A, expect packet loss!
[   72.436241][ T6444] IPv6: NLM_F_REPLACE set, but no existing node found!
[   73.437108][ T6494] macvlan2: entered allmulticast mode
[   73.439482][ T6494] veth1_vlan: entered allmulticast mode
[   73.447170][ T6494] veth1_vlan: left allmulticast mode
[   73.887715][ T6519] netlink: 'syz.2.252': attribute type 30 has an invalid length.
[   73.891215][ T6519] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[   73.899163][ T6519] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[   73.998325][ T6524] tc_dump_action: action bad kind
[   74.854199][ T6557] __nla_validate_parse: 2 callbacks suppressed
[   74.854208][ T6557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.267'.
[   74.975507][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   75.211607][ T6580] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.214997][ T6580] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.391111][ T6580] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   75.416564][ T6580] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   75.581999][ T6580] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.592132][ T6580] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.595990][ T6580] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.599718][ T6580] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.742978][ T6590] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.746297][ T6590] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.816524][ T6596] netlink: 32 bytes leftover after parsing attributes in process `syz.1.284'.
[   75.850165][ T6590] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   75.862955][ T6590] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   75.869162][ T6597] netlink: 32 bytes leftover after parsing attributes in process `syz.1.284'.
[   75.977936][ T6590] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.985070][ T6590] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.988234][ T6590] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.991071][ T6590] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   76.050582][ T6597] Zero length message leads to an empty skb
[   76.116852][ T6599] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   76.291117][ T1269] IPVS: starting estimator thread 0...
[   76.295434][ T6607] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[   76.296248][ T6611] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   76.300277][   T47] IPVS: starting estimator thread 0...
[   76.383531][ T6617] IPVS: using max 79 ests per chain, 189600 per kthread
[   76.395878][ T6616] IPVS: using max 78 ests per chain, 187200 per kthread
[   76.411088][ T6625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.296'.
[   76.420536][ T6625] erspan0: entered promiscuous mode
[   76.422797][ T6625] macvtap1: entered promiscuous mode
[   76.435312][ T6625] macvtap1: entered allmulticast mode
[   76.437634][ T6625] erspan0: entered allmulticast mode
[   76.454866][ T6625] erspan0: left allmulticast mode
[   76.457513][ T6625] erspan0: left promiscuous mode
[   76.765851][ T6651] netlink: 'syz.0.309': attribute type 21 has an invalid length.
[   76.769154][ T6651] netlink: 128 bytes leftover after parsing attributes in process `syz.0.309'.
[   76.797154][ T6651] netlink: 'syz.0.309': attribute type 4 has an invalid length.
[   76.800390][ T6651] netlink: 'syz.0.309': attribute type 5 has an invalid length.
[   76.804094][ T6651] netlink: 3 bytes leftover after parsing attributes in process `syz.0.309'.
[   77.007494][ T6670] netlink: 36 bytes leftover after parsing attributes in process `syz.1.318'.
[   77.241568][ T6687] sctp: [Deprecated]: syz.1.325 (pid 6687) Use of int in maxseg socket option.
[   77.241568][ T6687] Use struct sctp_assoc_value instead
[   77.525803][ T6705] netlink: 9280 bytes leftover after parsing attributes in process `syz.2.333'.
[   77.606268][ T6712] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   77.678126][ T6717] xt_CT: You must specify a L4 protocol and not use inversions on it
[   77.952854][ T6741] syzkaller0: entered promiscuous mode
[   77.956089][ T6741] syzkaller0: entered allmulticast mode
[   79.125680][ T6778] netlink: 16 bytes leftover after parsing attributes in process `syz.2.362'.
[   80.005002][ T6799] tipc: Started in network mode
[   80.011482][ T6799] tipc: Node identity 1a665f723fb8, cluster identity 4711
[   80.018270][ T6799] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   80.026089][ T6799] syzkaller0: entered promiscuous mode
[   80.029234][ T6799] syzkaller0: entered allmulticast mode
[   80.051216][ T6799] tipc: Resetting bearer <eth:syzkaller0>
[   80.060233][ T6798] tipc: Resetting bearer <eth:syzkaller0>
[   80.082267][ T6798] tipc: Disabling bearer <eth:syzkaller0>
[   80.213080][ T6816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.377'.
[   80.306953][ T6826] netlink: 40 bytes leftover after parsing attributes in process `syz.0.381'.
[   80.479792][ T6844] Cannot find del_set index 0 as target
[   81.375139][   T24] cfg80211: failed to load regulatory.db
[   81.544425][ T6912] netlink: 'syz.2.406': attribute type 1 has an invalid length.
[   81.614714][ T6916] ip6t_REJECT: TCP_RESET illegal for non-tcp
[   83.060300][ T6957] xt_nfacct: accounting object `syz1' does not exists
[   84.234995][ T7043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.466'.
[   84.389675][ T7054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.472'.
[   84.465421][ T7059] netlink: 4 bytes leftover after parsing attributes in process `syz.1.473'.
[   84.528933][ T7064] netlink: 16 bytes leftover after parsing attributes in process `syz.0.478'.
[   84.565329][ T7068] netlink: 32 bytes leftover after parsing attributes in process `syz.1.477'.
[   84.570289][ T7068] netlink: 4 bytes leftover after parsing attributes in process `syz.1.477'.
[   84.793541][ T7088] netlink: 'syz.2.489': attribute type 21 has an invalid length.
[   84.836807][ T7091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.490'.
[   84.840184][ T7091] netlink: 12 bytes leftover after parsing attributes in process `syz.0.490'.
[   84.849393][ T7091] netlink: 'syz.0.490': attribute type 11 has an invalid length.
[   85.152239][ T7113] syz.2.497 (7113) used greatest stack depth: 20168 bytes left
[   85.281567][ T7131] __nla_validate_parse: 2 callbacks suppressed
[   85.281577][ T7131] netlink: 24 bytes leftover after parsing attributes in process `syz.0.506'.
[   85.299263][ T7131] netlink: 24 bytes leftover after parsing attributes in process `syz.0.506'.
[   85.310185][ T7131] veth0_to_team: entered promiscuous mode
[   85.312305][ T7131] veth0_to_team: entered allmulticast mode
[   85.321411][ T7131] netlink: 40 bytes leftover after parsing attributes in process `syz.0.506'.
[   85.481967][ T7150] netlink: 76 bytes leftover after parsing attributes in process `syz.2.515'.
[   85.594657][ T7161] vlan1: entered allmulticast mode
[   85.596529][ T7161] veth0_vlan: entered allmulticast mode
[   86.049798][ T7187] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   86.133201][ T7189] TCP: TCP_TX_DELAY enabled
[   86.411224][ T7197] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[   86.458973][ T7200] netlink: 'syz.2.537': attribute type 23 has an invalid length.
[   86.930655][ T7229] netlink: 4 bytes leftover after parsing attributes in process `syz.0.550'.
[   87.072159][ T7237] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   87.352488][ T7258] netlink: 'syz.1.565': attribute type 1 has an invalid length.
[   87.364446][ T7258] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.565'.
[   87.483882][ T7269] netlink: 4 bytes leftover after parsing attributes in process `syz.2.566'.
[   87.493024][ T7271] netlink: 788 bytes leftover after parsing attributes in process `syz.1.570'.
[   88.422984][ T7322] netlink: 12 bytes leftover after parsing attributes in process `syz.0.594'.
[   88.563390][ T7331] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.567053][ T7331] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.696779][ T7342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.603'.
[   88.733282][ T7331] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   88.745316][ T7331] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   88.820015][ T7331] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   88.824455][ T7331] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   88.827917][ T7331] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   88.831382][ T7331] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   89.065544][ T7353] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   89.420086][ T7373] xt_CT: No such helper "snmp"
[   89.554954][ T7387] x_tables: unsorted underflow at hook 2
[   89.583906][ T7391] x_tables: duplicate underflow at hook 4
[   89.590089][ T7391] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   89.594579][ T7391] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   89.598393][ T7391] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   89.601463][ T7391] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   89.948703][ T7417] batadv_slave_1: entered promiscuous mode
[   89.951224][ T7417] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.050638][ T7425] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   90.074194][ T7425] syzkaller0: MTU too low for tipc bearer
[   90.076551][ T7425] tipc: Disabling bearer <eth:syzkaller0>
[   90.409831][ T7439] __nla_validate_parse: 7 callbacks suppressed
[   90.409841][ T7439] netlink: 47 bytes leftover after parsing attributes in process `syz.2.646'.
[   90.670918][ T7453] netlink: 64 bytes leftover after parsing attributes in process `syz.2.652'.
[   90.678006][ T7453] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.686742][ T7453] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.690939][ T7453] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.694904][ T7453] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.701457][ T7453] netlink: 64 bytes leftover after parsing attributes in process `syz.2.652'.
[   90.927990][ T7481] vlan2: entered promiscuous mode
[   90.930061][ T7481] bond0: entered promiscuous mode
[   90.931749][ T7481] vlan2: entered allmulticast mode
[   90.934031][ T7481] bond0: entered allmulticast mode
[   90.982147][ T7487] sctp: [Deprecated]: syz.2.669 (pid 7487) Use of int in maxseg socket option.
[   90.982147][ T7487] Use struct sctp_assoc_value instead
[   91.073414][ T7497] netlink: 'syz.1.674': attribute type 3 has an invalid length.
[   91.133943][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[   91.682411][ T7562] netlink: 'syz.1.706': attribute type 3 has an invalid length.
[   91.917935][ T7588] netlink: 16 bytes leftover after parsing attributes in process `syz.1.719'.
[   91.995610][ T7594] netlink: 'syz.2.721': attribute type 11 has an invalid length.
[   92.317765][ T7635] openvswitch: netlink: VXLAN extension 274 out of range max 1
[   92.589035][ T7661] tap0: tun_chr_ioctl cmd 1074025677
[   92.591505][ T7661] tap0: linktype set to 769
[   93.052056][ T7691] IPVS: Scheduler module ip_vs_ not found
[   93.308619][ T7711] netlink: 44 bytes leftover after parsing attributes in process `syz.1.773'.
[   93.392627][ T7718] netlink: 20 bytes leftover after parsing attributes in process `syz.0.777'.
[   93.405830][ T7718] netlink: 32 bytes leftover after parsing attributes in process `syz.0.777'.
[   93.560877][ T7732] netlink: 28 bytes leftover after parsing attributes in process `syz.2.784'.
[   93.715512][ T7745] netlink: 4 bytes leftover after parsing attributes in process `syz.2.790'.
[   93.866445][ T7762] macsec1: entered allmulticast mode
[   93.868344][ T7762] hsr0: entered allmulticast mode
[   93.870051][ T7762] hsr_slave_0: entered allmulticast mode
[   93.871768][ T7762] hsr_slave_1: entered allmulticast mode
[   93.884715][ T7762] hsr0: left allmulticast mode
[   93.886312][ T7762] hsr_slave_0: left allmulticast mode
[   93.888080][ T7762] hsr_slave_1: left allmulticast mode
[   94.031729][ T7773] vxcan2: entered promiscuous mode
[   94.360838][ T7803] IPVS: length: 163 != 8
[   94.407979][ T7806] netlink: 28 bytes leftover after parsing attributes in process `syz.1.816'.
[   94.411191][ T7807] netlink: 'syz.2.817': attribute type 10 has an invalid length.
[   94.957497][ T7851] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   95.060369][ T7857] syzkaller0: entered promiscuous mode
[   95.062418][ T7857] syzkaller0: entered allmulticast mode
[   95.071114][ T7857] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   95.076292][ T7856] tipc: Resetting bearer <eth:syzkaller0>
[   95.090998][ T7856] tipc: Disabling bearer <eth:syzkaller0>
[   95.295839][ T7875] netlink: 'syz.0.849': attribute type 1 has an invalid length.
[   95.595893][ T7900] sctp: [Deprecated]: syz.2.861 (pid 7900) Use of struct sctp_assoc_value in delayed_ack socket option.
[   95.595893][ T7900] Use struct sctp_sack_info instead
[   95.615133][ T7902] bridge_slave_0: left allmulticast mode
[   95.617273][ T7902] bridge_slave_0: left promiscuous mode
[   95.619364][ T7902] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.638213][ T7902] bridge_slave_1: left allmulticast mode
[   95.640520][ T7902] bridge_slave_1: left promiscuous mode
[   95.643062][ T7902] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.660677][ T7906] __nla_validate_parse: 2 callbacks suppressed
[   95.660692][ T7906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.864'.
[   95.668000][ T7902] bond0: (slave bond_slave_0): Releasing backup interface
[   95.673203][ T7893] netlink: 'syz.0.858': attribute type 10 has an invalid length.
[   95.676831][ T7902] bond0: (slave bond_slave_1): Releasing backup interface
[   95.678674][ T7908] netlink: 4 bytes leftover after parsing attributes in process `syz.2.863'.
[   95.687678][ T7902] team0: Port device team_slave_0 removed
[   95.691690][ T7902] team0: Port device team_slave_1 removed
[   95.695079][ T7902] batman_adv: batadv0: Removing interface: batadv_slave_0
[   95.698154][ T7902] batman_adv: batadv0: Removing interface: batadv_slave_1
[   95.710457][ T7893] bond0: (slave wlan1): Opening slave failed
[   95.720521][ T7906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.864'.
[   95.749529][ T7910] netlink: 56 bytes leftover after parsing attributes in process `syz.2.865'.
[   96.105768][ T7944] tipc: Started in network mode
[   96.107429][ T7944] tipc: Node identity ac14142a, cluster identity 4711
[   96.110410][ T7944] tipc: Enabled bearer <udp:syz0>, priority 10
[   96.514830][ T7978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.897'.
[   97.062941][ T7988] netlink: 100 bytes leftover after parsing attributes in process `syz.0.901'.
[   97.129896][ T7992] netlink: 12 bytes leftover after parsing attributes in process `syz.0.903'.
[   97.139203][ T7992] netlink: 'syz.0.903': attribute type 1 has an invalid length.
[   97.143154][ T7992] netlink: 'syz.0.903': attribute type 2 has an invalid length.
[   97.149583][ T7992] netlink: 80 bytes leftover after parsing attributes in process `syz.0.903'.
[   97.224409][ T5514] tipc: Node number set to 2886997034
[   97.588065][ T8022] netlink: 12 bytes leftover after parsing attributes in process `syz.0.915'.
[   97.591621][ T8022] nbd: socks must be embedded in a SOCK_ITEM attr
[   97.976420][ T8053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.931'.
[   99.727366][ T8125] xt_TCPMSS: Only works on TCP SYN packets
[   99.987786][ T8141] netlink: 'syz.2.973': attribute type 3 has an invalid length.
[   99.990622][ T8141] netlink: 'syz.2.973': attribute type 3 has an invalid length.
[  101.241217][ T8232] __nla_validate_parse: 8 callbacks suppressed
[  101.241238][ T8232] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1017'.
[  101.495063][ T8261] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1028'.
[  101.647771][ T8277] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1036'.
[  101.741925][ T8283] veth3: entered promiscuous mode
[  101.744183][ T8285] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  101.799944][ T8291] netlink: 'syz.1.1043': attribute type 1 has an invalid length.
[  101.804271][ T8291] netlink: 'syz.1.1043': attribute type 2 has an invalid length.
[  101.846765][ T8294] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  102.177099][ T8321] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  102.260818][ T8325] ieee802154 phy0 wpan0: encryption failed: -22
[  102.352022][ T5514] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0
[  102.354762][ T5514] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0
[  102.357272][ T5514] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0
[  102.360123][ T5514] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0
[  102.363158][ T5514] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0
[  102.369944][ T5514] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0
[  102.372634][ T5514] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x3
[  102.382227][ T5514] hid-generic 0005:16C0:5505.0001: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa
[  103.797101][ T8392] tipc: Started in network mode
[  103.799434][ T8392] tipc: Node identity 7f000001, cluster identity 4711
[  103.802343][ T8392] tipc: Enabled bearer <udp:syz2>, priority 10
[  103.942059][ T8398] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  104.051088][ T8404] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  104.056604][ T8404] syzkaller0: entered promiscuous mode
[  104.058576][ T8404] syzkaller0: entered allmulticast mode
[  104.083685][ T8404] tipc: Resetting bearer <eth:syzkaller0>
[  104.087742][ T8403] tipc: Resetting bearer <eth:syzkaller0>
[  104.112278][ T8403] tipc: Disabling bearer <eth:syzkaller0>
[  104.568893][ T8413] netlink: 'syz.1.1094': attribute type 153 has an invalid length.
[  104.634732][ T8415] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1095'.
[  104.864566][ T8425] "syz.1.1100" (8425) uses obsolete ecb(arc4) skcipher
[  104.909071][ T8366] Set syz1 is full, maxelem 65536 reached
[  105.073459][    T9] tipc: Node number set to 2130706433
[  105.321432][ T8467] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1117'.
[  105.436631][ T8473] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  105.447892][ T8473] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  105.451771][ T8473] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  105.455909][ T8473] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  105.459635][ T8473] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  105.477867][ T8473] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1120'.
[  105.481554][ T8473] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1120'.
[  105.485548][ T8473] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1120'.
[  105.493386][ T8473] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1120'.
[  105.728351][ T8479] netlink: 'syz.1.1123': attribute type 15 has an invalid length.
[  106.218993][   T55] Bluetooth: hci2: link tx timeout
[  106.221871][   T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  106.229746][ T8500] syzkaller0: entered promiscuous mode
[  106.231519][ T8500] syzkaller0: entered allmulticast mode
[  107.349803][ T8534] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan0, syncid = 1, id = 0
[  107.354785][ T8533] IPVS: stopping backup sync thread 8534 ...
[  107.430371][ T8542] netlink: 332 bytes leftover after parsing attributes in process `syz.2.1150'.
[  107.436815][ T8542] netlink: 'syz.2.1150': attribute type 2 has an invalid length.
[  107.439971][ T8542] netlink: 'syz.2.1150': attribute type 5 has an invalid length.
[  107.499329][ T8545] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1152'.
[  107.717412][ T8565] netlink: 'syz.0.1160': attribute type 30 has an invalid length.
[  107.791348][ T8572] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1162'.
[  107.866847][ T8582] netlink: 'syz.2.1167': attribute type 9 has an invalid length.
[  107.930161][ T8590] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1172'.
[  107.955807][ T8594] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1174'.
[  107.959078][ T8594] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1174'.
[  107.973426][ T8594] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1174'.
[  108.148972][ T8615] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1183'.
[  108.255304][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  108.287676][ T8627] wireguard0: entered promiscuous mode
[  108.289956][ T8627] wireguard0: entered allmulticast mode
[  108.525637][ T8648] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.564057][ T8648] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.618837][ T8648] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.681370][ T8648] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.801974][ T8648] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  108.817373][ T8648] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  108.835560][ T8648] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  108.854296][ T8648] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  109.286309][ T8696] netlink: 'syz.1.1213': attribute type 1 has an invalid length.
[  109.296878][ T8696] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1213'.
[  109.770011][ T8714] x_tables: duplicate underflow at hook 2
[  110.117800][ T8726] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  110.385084][ T8742] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1237'.
[  110.744109][ T8779] bridge1: the hash_elasticity option has been deprecated and is always 16
[  110.747825][ T8779] bridge1: entered allmulticast mode
[  112.818123][ T8869] __nla_validate_parse: 4 callbacks suppressed
[  112.818133][ T8869] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1291'.
[  112.825954][ T8866] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1291'.
[  112.844615][ T8868] gtp0: entered promiscuous mode
[  112.846940][ T8868] gtp0: entered allmulticast mode
[  113.470320][ T8907] netdevsim netdevsim1: Firmware load for '..' refused, path contains '..' component
[  113.552666][ T8911] xt_CT: No such helper "syz0"
[  113.618968][ T8916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1313'.
[  114.006747][ T8945] ipvlan2: entered promiscuous mode
[  114.009513][ T8945] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  114.012913][ T8945] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  114.145844][ T8956] sctp: [Deprecated]: syz.0.1332 (pid 8956) Use of int in maxseg socket option.
[  114.145844][ T8956] Use struct sctp_assoc_value instead
[  114.194917][ T5514] IPVS: starting estimator thread 0...
[  114.231165][ T8963] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.283567][ T8961] IPVS: using max 38 ests per chain, 91200 per kthread
[  114.288512][ T8963] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.340238][ T8963] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.388862][ T8963] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.454721][ T8963] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  114.463130][ T8963] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  114.471569][ T8963] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  114.480521][ T8963] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  114.627980][ T8972] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  114.800787][ T8984] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1345'.
[  114.805001][ T8984] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1345'.
[  114.836941][ T8989] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.1347'.
[  115.566064][ T9047] sctp: [Deprecated]: syz.2.1376 (pid 9047) Use of int in max_burst socket option.
[  115.566064][ T9047] Use struct sctp_assoc_value instead
[  115.638195][ T9056] netlink: 'syz.0.1380': attribute type 33 has an invalid length.
[  115.641343][ T9056] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1380'.
[  115.781051][ T9068] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  115.867346][ T9074] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  115.870897][ T9074] syzkaller0: entered promiscuous mode
[  115.874281][ T9074] syzkaller0: entered allmulticast mode
[  115.897080][ T9074] sch_fq: defrate 257 ignored.
[  115.901379][ T9074] tipc: Resetting bearer <eth:syzkaller0>
[  115.907512][ T9073] tipc: Resetting bearer <eth:syzkaller0>
[  115.936359][ T9073] tipc: Disabling bearer <eth:syzkaller0>
[  116.034062][ T9082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1393'.
[  116.052532][ T9082] macvtap2: entered promiscuous mode
[  116.055026][ T9082] dummy0: entered promiscuous mode
[  116.058410][ T9082] macvtap2: entered allmulticast mode
[  116.060777][ T9082] dummy0: entered allmulticast mode
[  116.071396][ T9082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1393'.
[  116.079318][ T9082] dummy0: left allmulticast mode
[  116.081566][ T9082] dummy0: left promiscuous mode
[  116.217386][ T9100] netlink: 'syz.1.1402': attribute type 1 has an invalid length.
[  116.221006][ T9100] netlink: 'syz.1.1402': attribute type 1 has an invalid length.
[  117.129098][ T9161] netlink: 'syz.0.1430': attribute type 10 has an invalid length.
[  117.131952][ T9161] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1430'.
[  117.137179][ T9161] dummy0: entered promiscuous mode
[  117.142379][ T9161] bridge0: port 1(dummy0) entered blocking state
[  117.145523][ T9161] bridge0: port 1(dummy0) entered disabled state
[  117.148287][ T9161] dummy0: entered allmulticast mode
[  117.677026][ T9208] netlink: 'syz.0.1448': attribute type 12 has an invalid length.
[  117.889227][ T9225] netlink: 'syz.2.1455': attribute type 39 has an invalid length.
[  117.944387][    T9] hid-generic 0005:0000:0005.0002: item fetching failed at offset 0/3
[  117.952649][    T9] hid-generic 0005:0000:0005.0002: probe with driver hid-generic failed with error -22
[  118.016352][ T9231] __nla_validate_parse: 2 callbacks suppressed
[  118.016370][ T9231] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1457'.
[  118.108092][ T9235] pimreg: entered allmulticast mode
[  118.207507][ T9239] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1461'.
[  118.989624][ T9273] netlink: 134820 bytes leftover after parsing attributes in process `syz.1.1477'.
[  119.052888][ T9279] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1480'.
[  120.291598][ T9340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1506'.
[  120.295269][ T9340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1506'.
[  120.298654][ T9340] netlink: 'syz.0.1506': attribute type 5 has an invalid length.
[  120.302118][ T9340] netlink: 'syz.0.1506': attribute type 6 has an invalid length.
[  120.342984][ T9342] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1507'.
[  120.353413][ T9342] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1507'.
[  120.463592][ T9346] netlink: 'syz.0.1509': attribute type 2 has an invalid length.
[  120.769387][ T9367] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1518'.
[  120.870179][ T9369] syzkaller0: entered promiscuous mode
[  120.872479][ T9369] syzkaller0: entered allmulticast mode
[  121.978775][ T9393] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  122.023869][ T9395] sctp: [Deprecated]: syz.0.1530 (pid 9395) Use of int in max_burst socket option.
[  122.023869][ T9395] Use struct sctp_assoc_value instead
[  122.168767][ T9415] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1540'.
[  122.318474][ T9436] netlink: 'syz.2.1548': attribute type 7 has an invalid length.
[  122.498008][ T9447] hsr_slave_0: left promiscuous mode
[  122.500329][ T9447] hsr_slave_1: left promiscuous mode
[  122.863188][ T9467] 8021q: adding VLAN 0 to HW filter on device bond2
[  122.869945][ T9467] bond0: (slave bond2): Enslaving as an active interface with an up link
[  123.465747][ T9506] __nla_validate_parse: 3 callbacks suppressed
[  123.465762][ T9506] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1580'.
[  123.622661][ T9512] netlink: 'syz.0.1583': attribute type 15 has an invalid length.
[  123.637478][ T9512] netlink: 'syz.0.1583': attribute type 7 has an invalid length.
[  123.645495][ T9512] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1583'.
[  123.757150][ T9518] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1586'.
[  124.139583][ T9538] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  124.142273][ T9538] syzkaller0: entered promiscuous mode
[  124.145107][ T9538] syzkaller0: entered allmulticast mode
[  124.149306][ T9538] tipc: Resetting bearer <eth:syzkaller0>
[  124.151732][ T9537] tipc: Resetting bearer <eth:syzkaller0>
[  124.169787][ T9537] tipc: Disabling bearer <eth:syzkaller0>
[  124.232430][ T9539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1593'.
[  124.345908][ T9553] bridge5: entered promiscuous mode
[  124.456059][   T33] audit: type=1800 audit(1752331968.055:2): pid=9532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1593" name="cgroup.controllers" dev="tmpfs" ino=2646 res=0 errno=0
[  124.942617][ T9580] netlink: 'syz.1.1615': attribute type 1 has an invalid length.
[  125.305486][ T9595] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1622'.
[  125.310708][ T9594] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1622'.
[  125.317950][ T9594] IPVS: set_ctl: invalid protocol: 8345 172.30.1.2:20003
[  125.322770][ T9594] Cannot find add_set index 3 as target
[  125.331716][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  125.336455][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  125.347053][ T9594] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  125.416349][ T9597] xt_hashlimit: max too large, truncated to 1048576
[  125.418693][ T9597] xt_hashlimit: overflow, rate too high: 0
[  125.564441][ T9610] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1627'.
[  125.568624][ T9605] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1627'.
[  125.907790][ T9636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1642'.
[  125.911651][ T9636] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1642'.
[  125.920163][ T9636] netlink: 'syz.2.1642': attribute type 1 has an invalid length.
[  125.987827][ T9636] nbd: socks must be embedded in a SOCK_ITEM attr
[  125.990259][ T9636] block nbd0: shutting down sockets
[  126.142820][ T9662] netlink: 'syz.2.1654': attribute type 4 has an invalid length.
[  126.149730][ T9662] : renamed from bond0
[  126.195599][ T9666] bridge0: port 3(syz_tun) entered blocking state
[  126.199256][ T9666] bridge0: port 3(syz_tun) entered disabled state
[  126.202296][ T9666] syz_tun: entered allmulticast mode
[  126.215364][ T9666] syz_tun: entered promiscuous mode
[  126.560838][ T9708] macvtap1: entered promiscuous mode
[  126.562638][ T9708] erspan0: entered promiscuous mode
[  126.566087][ T9708] macvtap1: entered allmulticast mode
[  126.568385][ T9708] erspan0: entered allmulticast mode
[  126.772126][ T9723] xfrm1: entered promiscuous mode
[  126.774534][ T9723] xfrm1: entered allmulticast mode
[  126.822747][ T9723] xt_hashlimit: size too large, truncated to 1048576
[  127.837605][ T9794] ieee802154 phy1 wpan1: encryption failed: -22
[  128.074296][ T9818] netlink: 'syz.1.1726': attribute type 4 has an invalid length.
[  128.177566][ T9829] netlink: 'syz.0.1731': attribute type 1 has an invalid length.
[  128.185617][ T9827] wg2: entered promiscuous mode
[  128.920814][ T9894] __nla_validate_parse: 7 callbacks suppressed
[  128.920823][ T9894] netlink: 134788 bytes leftover after parsing attributes in process `syz.0.1760'.
[  129.195964][ T9929] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1777'.
[  129.199037][ T9929] netlink: 'syz.2.1777': attribute type 1 has an invalid length.
[  129.306078][ T9940] netlink: 'syz.2.1781': attribute type 1 has an invalid length.
[  129.309163][ T9940] netlink: 'syz.2.1781': attribute type 4 has an invalid length.
[  129.312657][ T9940] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1781'.
[  130.184647][T10026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1822'.
[  130.188685][T10028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1823'.
[  130.192487][T10028] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1823'.
[  130.196500][T10026] netlink: 'syz.1.1822': attribute type 2 has an invalid length.
[  130.577354][T10059] netlink: 'syz.1.1836': attribute type 1 has an invalid length.
[  130.955190][T10073] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1842'.
[  131.346209][T10042] syz.2.1830: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x404dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_RETRY_MAYFAIL), nodemask=(null),cpuset=/,mems_allowed=0-1
[  131.354973][T10042] CPU: 0 UID: 0 PID: 10042 Comm: syz.2.1830 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  131.354990][T10042] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  131.354997][T10042] Call Trace:
[  131.355002][T10042]  <TASK>
[  131.355007][T10042]  dump_stack_lvl+0x189/0x250
[  131.355030][T10042]  ? __pfx_dump_stack_lvl+0x10/0x10
[  131.355045][T10042]  ? __pfx__printk+0x10/0x10
[  131.355061][T10042]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  131.355077][T10042]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  131.355094][T10042]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  131.355112][T10042]  warn_alloc+0x214/0x310
[  131.355132][T10042]  ? __pfx_warn_alloc+0x10/0x10
[  131.355149][T10042]  ? __get_vm_area_node+0x28f/0x300
[  131.355165][T10042]  ? veth_dev_init+0x363/0x570
[  131.355187][T10042]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  131.355225][T10042]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  131.355240][T10042]  ? __kasan_kmalloc_large+0x1c/0xa0
[  131.355258][T10042]  ? rcu_is_watching+0x15/0xb0
[  131.355274][T10042]  ? veth_dev_init+0x363/0x570
[  131.355290][T10042]  ? veth_dev_init+0x363/0x570
[  131.355306][T10042]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  131.355321][T10042]  ? veth_dev_init+0x363/0x570
[  131.355344][T10042]  veth_dev_init+0x363/0x570
[  131.355394][T10042]  register_netdevice+0x6bf/0x1ae0
[  131.355423][T10042]  ? snprintf+0xda/0x120
[  131.355441][T10042]  ? __pfx_register_netdevice+0x10/0x10
[  131.355458][T10042]  ? __pfx_snprintf+0x10/0x10
[  131.355475][T10042]  ? __asan_memset+0x22/0x50
[  131.355487][T10042]  ? dev_addr_mod+0x2ce/0x3d0
[  131.355508][T10042]  veth_newlink+0x5cc/0xa50
[  131.355527][T10042]  ? __pfx_veth_newlink+0x10/0x10
[  131.355542][T10042]  ? __pfx_css_rstat_updated+0x10/0x10
[  131.355594][T10042]  ? validate_linkmsg+0x765/0x950
[  131.355619][T10042]  ? __pfx_veth_newlink+0x10/0x10
[  131.355634][T10042]  rtnl_newlink_create+0x310/0xb00
[  131.355652][T10042]  ? __pfx_aa_get_newest_label+0x10/0x10
[  131.355670][T10042]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  131.355682][T10042]  ? rtnl_newlink+0x8db/0x1c70
[  131.355695][T10042]  ? __pfx___mutex_lock+0x10/0x10
[  131.355713][T10042]  ? ns_capable+0x8a/0xf0
[  131.355729][T10042]  rtnl_newlink+0x16d6/0x1c70
[  131.355751][T10042]  ? __pfx_rtnl_newlink+0x10/0x10
[  131.355761][T10042]  ? sched_balance_rq+0x4e4a/0x57a0
[  131.355779][T10042]  ? __lock_acquire+0xab9/0xd20
[  131.355844][T10042]  ? __lock_acquire+0xab9/0xd20
[  131.355872][T10042]  ? __pfx_rtnl_newlink+0x10/0x10
[  131.355883][T10042]  rtnetlink_rcv_msg+0x7cf/0xb70
[  131.355898][T10042]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  131.355910][T10042]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  131.355932][T10042]  netlink_rcv_skb+0x208/0x470
[  131.355946][T10042]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  131.355959][T10042]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  131.355980][T10042]  ? netlink_deliver_tap+0x2e/0x1b0
[  131.355993][T10042]  ? netlink_deliver_tap+0x2e/0x1b0
[  131.356010][T10042]  netlink_unicast+0x75c/0x8e0
[  131.356027][T10042]  netlink_sendmsg+0x805/0xb30
[  131.356047][T10042]  ? __pfx_netlink_sendmsg+0x10/0x10
[  131.356063][T10042]  ? aa_sock_msg_perm+0x94/0x160
[  131.356081][T10042]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  131.356097][T10042]  ? __pfx_netlink_sendmsg+0x10/0x10
[  131.356111][T10042]  __sock_sendmsg+0x21c/0x270
[  131.356125][T10042]  ____sys_sendmsg+0x505/0x830
[  131.356143][T10042]  ? __pfx_____sys_sendmsg+0x10/0x10
[  131.356162][T10042]  ? import_iovec+0x74/0xa0
[  131.356180][T10042]  ___sys_sendmsg+0x21f/0x2a0
[  131.356197][T10042]  ? __pfx____sys_sendmsg+0x10/0x10
[  131.356239][T10042]  ? __fget_files+0x2a/0x420
[  131.356256][T10042]  ? __fget_files+0x3a0/0x420
[  131.356280][T10042]  __x64_sys_sendmsg+0x19b/0x260
[  131.356298][T10042]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  131.356322][T10042]  ? rcu_is_watching+0x15/0xb0
[  131.356341][T10042]  ? do_syscall_64+0xbe/0x3b0
[  131.356358][T10042]  do_syscall_64+0xfa/0x3b0
[  131.356400][T10042]  ? lockdep_hardirqs_on+0x9c/0x150
[  131.356420][T10042]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  131.356432][T10042]  ? exc_page_fault+0x9f/0xf0
[  131.356452][T10042]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  131.356463][T10042] RIP: 0033:0x7fad1b58e929
[  131.356476][T10042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  131.356487][T10042] RSP: 002b:00007fad1c34b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  131.356501][T10042] RAX: ffffffffffffffda RBX: 00007fad1b7b5fa0 RCX: 00007fad1b58e929
[  131.356510][T10042] RDX: 0000000000000002 RSI: 00002000000000c0 RDI: 0000000000000003
[  131.356517][T10042] RBP: 00007fad1b610b39 R08: 0000000000000000 R09: 0000000000000000
[  131.356525][T10042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  131.356532][T10042] R13: 0000000000000000 R14: 00007fad1b7b5fa0 R15: 00007ffc44146f48
[  131.356553][T10042]  </TASK>
[  131.356558][T10042] Mem-Info:
[  131.531131][T10042] active_anon:5252 inactive_anon:0 isolated_anon:0
[  131.531131][T10042]  active_file:1067 inactive_file:38241 isolated_file:0
[  131.531131][T10042]  unevictable:1768 dirty:341 writeback:0
[  131.531131][T10042]  slab_reclaimable:9560 slab_unreclaimable:59617
[  131.531131][T10042]  mapped:19141 shmem:2456 pagetables:919
[  131.531131][T10042]  sec_pagetables:0 bounce:0
[  131.531131][T10042]  kernel_misc_reclaimable:0
[  131.531131][T10042]  free:288748 free_pcp:17557 free_cma:0
[  131.545527][T10042] Node 0 active_anon:13824kB inactive_anon:0kB active_file:2692kB inactive_file:26768kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:26508kB dirty:968kB writeback:0kB shmem:4740kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5308kB pagetables:1684kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  131.556658][T10042] Node 1 active_anon:7184kB inactive_anon:0kB active_file:1576kB inactive_file:126196kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:50056kB dirty:396kB writeback:0kB shmem:5084kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6272kB pagetables:1992kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  131.568298][T10042] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  131.577752][T10042] lowmem_reserve[]: 0 812 812 812 812
[  131.579475][T10042] Node 0 DMA32 free:420472kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13824kB inactive_anon:0kB active_file:2692kB inactive_file:26768kB unevictable:3536kB writepending:968kB present:1556484kB managed:831872kB mlocked:0kB bounce:0kB free_pcp:23300kB local_pcp:5380kB free_cma:0kB
[  131.590795][T10042] lowmem_reserve[]: 0 0 0 0 0
[  131.592539][T10042] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  131.602324][T10042] lowmem_reserve[]: 0 0 854 854 854
[  131.604532][T10042] Node 1 Normal free:260668kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:7184kB inactive_anon:0kB active_file:1576kB inactive_file:126196kB unevictable:3536kB writepending:396kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:46852kB local_pcp:20080kB free_cma:0kB
[  131.618006][T10042] lowmem_reserve[]: 0 0 0 0 0
[  131.620044][T10042] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  131.625356][T10042] Node 0 DMA32: 88*4kB (UME) 240*8kB (UME) 231*16kB (UME) 353*32kB (UME) 104*64kB (UM) 36*128kB (UM) 37*256kB (UM) 19*512kB (UM) 4*1024kB (UM) 4*2048kB (M) 88*4096kB (UM) = 420464kB
[  131.632439][T10042] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  131.639488][T10042] Node 1 Normal: 893*4kB (UME) 637*8kB (UME) 339*16kB (UME) 326*32kB (UME) 154*64kB (UME) 50*128kB (UM) 33*256kB (UM) 5*512kB (UME) 2*1024kB (UM) 3*2048kB (UM) 49*4096kB (M) = 260684kB
[  131.647077][T10042] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  131.650129][T10042] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  131.653638][T10042] 41767 total pagecache pages
[  131.655624][T10042] 0 pages in swap cache
[  131.657432][T10042] Free swap  = 124996kB
[  131.659085][T10042] Total swap = 124996kB
[  131.660818][T10042] 786301 pages RAM
[  131.662573][T10042] 0 pages HighMem/MovableOnly
[  131.664688][T10042] 241085 pages reserved
[  131.666400][T10042] 0 pages cma reserved
[  132.578148][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  132.761699][T10059] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  132.771232][T10073] dummy0: left allmulticast mode
[  132.776770][T10073] bridge0: port 1(dummy0) entered disabled state
[  132.786229][T10073] bond0: (slave bond2): Releasing backup interface
[  132.843981][T10080] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1843'.
[  132.846874][T10080] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1843'.
[  132.857394][T10080] erspan0: entered promiscuous mode
[  132.861452][T10080] erspan0: left promiscuous mode
[  132.998560][T10091] tc_dump_action: action bad kind
[  133.015540][T10093] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1848'.
[  133.417207][T10133] netlink: 'syz.2.1867': attribute type 30 has an invalid length.
[  133.609755][T10157] netlink: 'syz.2.1880': attribute type 1 has an invalid length.
[  133.613077][T10157] netlink: 'syz.2.1880': attribute type 1 has an invalid length.
[  133.935463][T10188] __nla_validate_parse: 6 callbacks suppressed
[  133.935478][T10188] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1893'.
[  134.002637][T10192] netlink: 'syz.0.1895': attribute type 3 has an invalid length.
[  134.007751][T10192] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1895'.
[  134.042450][T10195] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  134.045579][T10195] IPv6: NLM_F_CREATE should be set when creating new route
[  134.048662][T10195] IPv6: NLM_F_CREATE should be set when creating new route
[  134.051901][T10195] IPv6: NLM_F_CREATE should be set when creating new route
[  134.056880][T10195] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  134.120591][T10201] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  134.498508][T10157] Bluetooth: hci1: Opcode 0x0401 failed: -4
[  134.565974][T10230] syz.0.1913 (10230) used obsolete PPPIOCDETACH ioctl
[  134.859595][T10246] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  134.949540][T10256] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan0, syncid = 1, id = 0
[  134.953226][T10254] IPVS: stopping backup sync thread 10256 ...
[  135.026920][T10258] vlan3: entered allmulticast mode
[  135.030855][T10258] bridge_slave_0: entered allmulticast mode
[  135.176682][T10262] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1925'.
[  135.235971][T10277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1930'.
[  135.239461][T10275] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1929'.
[  135.327913][T10285] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  135.356250][T10287] netlink: 'syz.1.1935': attribute type 2 has an invalid length.
[  135.410051][T10292] netlink: 'syz.1.1937': attribute type 9 has an invalid length.
[  135.412672][T10292] netlink: 'syz.1.1937': attribute type 7 has an invalid length.
[  135.417091][T10292] netlink: 'syz.1.1937': attribute type 8 has an invalid length.
[  135.458962][T10295] netem: incorrect ge model size
[  135.461002][T10295] netem: change failed
[  135.693520][ T5219] Bluetooth: hci1: command 0x0401 tx timeout
[  135.848780][T10323] No such timeout policy "syz0"
[  135.877249][T10326] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1952'.
[  136.074720][T10342] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.1960'.
[  136.176375][T10350] C: renamed from team_slave_0
[  136.367395][T10350] netlink: 'syz.1.1963': attribute type 3 has an invalid length.
[  136.381557][T10350] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1963'.
[  136.386751][T10350] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  136.647439][T10355] syzkaller0: entered promiscuous mode
[  136.649818][T10355] syzkaller0: entered allmulticast mode
[  136.784613][T10366] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1965'.
[  138.532141][T10383] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  138.632056][T10390] netlink: 'syz.1.1977': attribute type 2 has an invalid length.
[  138.636128][T10390] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1977'.
[  139.136912][T10427] __nla_validate_parse: 2 callbacks suppressed
[  139.136927][T10427] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1995'.
[  139.141042][T10429] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1994'.
[  139.229911][T10438] mac80211_hwsim hwsim4 ": renamed from wlan0
[  139.318595][T10450] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2005'.
[  139.663463][T10473] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2015'.
[  140.044386][T10492] lo: entered allmulticast mode
[  140.049048][T10491] lo: left allmulticast mode
[  140.220747][T10508] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2032'.
[  140.447820][T10533] netlink: 'syz.1.2044': attribute type 4 has an invalid length.
[  140.456733][T10534] Cannot find del_set index 1 as target
[  140.543065][T10544] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2051'.
[  140.605575][T10550] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2053'.
[  140.920987][T10594] openvswitch: netlink: Key type 16383 is out of range max 32
[  140.973193][T10601] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2076'.
[  140.978274][T10601] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  141.010966][T10605] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  141.046806][T10609] netlink: 'syz.0.2080': attribute type 6 has an invalid length.
[  141.083563][T10603] block nbd0: server does not support multiple connections per device.
[  141.094522][T10603] block nbd0: shutting down sockets
[  141.190670][T10622] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2086'.
[  141.386177][T10652] syzkaller1: entered promiscuous mode
[  141.388029][T10652] syzkaller1: entered allmulticast mode
[  141.865502][T10698] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2122'.
[  142.978350][T10810] netlink: 'syz.0.2173': attribute type 1 has an invalid length.
[  142.980963][T10810] netlink: 'syz.0.2173': attribute type 1 has an invalid length.
[  143.399065][T10848] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  143.405005][T10849] netlink: 'syz.2.2194': attribute type 5 has an invalid length.
[  143.617494][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  143.621727][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  143.625638][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  143.629136][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  143.633183][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  143.907609][   T12] erspan0 (unregistering): left allmulticast mode
[  143.910068][   T12] erspan0 (unregistering): left promiscuous mode
[  143.940644][T10870] IPVS: set_ctl: invalid protocol: 8345 172.30.1.3:20003
[  143.944704][T10870] Cannot find add_set index 3 as target
[  144.006649][T10873] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  144.145073][   T12] bond0 (unregistering): Released all slaves
[  144.157732][   T12] bond1 (unregistering): Released all slaves
[  144.217809][   T12] bond2 (unregistering): Released all slaves
[  144.227228][T10869] __nla_validate_parse: 5 callbacks suppressed
[  144.227237][T10869] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2201'.
[  144.233615][T10868] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2201'.
[  144.296695][T10878] dvmrp1: entered allmulticast mode
[  144.366007][T10878] dvmrp1: left allmulticast mode
[  144.383181][   T12] tipc: Disabling bearer <udp:syz0>
[  144.389787][   T12] tipc: Left network mode
[  144.468365][T10857] chnl_net:caif_netlink_parms(): no params data found
[  144.558885][T10857] bridge0: port 1(bridge_slave_0) entered blocking state
[  144.567969][T10857] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.570344][T10857] bridge_slave_0: entered allmulticast mode
[  144.573193][T10857] bridge_slave_0: entered promiscuous mode
[  144.594352][T10857] bridge0: port 2(bridge_slave_1) entered blocking state
[  144.596837][T10857] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.599649][T10857] bridge_slave_1: entered allmulticast mode
[  144.609608][T10857] bridge_slave_1: entered promiscuous mode
[  144.666580][T10902] netlink: 'syz.1.2205': attribute type 13 has an invalid length.
[  144.673631][T10902] netlink: 'syz.1.2205': attribute type 17 has an invalid length.
[  144.684575][T10857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  144.688930][T10902] gretap0: refused to change device tx_queue_len
[  144.693072][T10902] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  144.716075][T10857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  144.891110][   T12] hsr_slave_0: left promiscuous mode
[  144.897587][   T12] hsr_slave_1: left promiscuous mode
[  145.580139][T10857] team0: Port device team_slave_0 added
[  145.588845][T10923] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2211'.
[  145.604878][T10857] team0: Port device team_slave_1 added
[  145.654597][T10925] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2212'.
[  145.660414][T10857] batman_adv: batadv0: Adding interface: batadv_slave_0
[  145.665159][T10857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  145.677516][T10857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  145.682441][T10857] batman_adv: batadv0: Adding interface: batadv_slave_1
[  145.688417][T10857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  145.699584][ T5219] Bluetooth: hci1: command tx timeout
[  145.707250][T10857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  145.752110][T10930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2214'.
[  145.780910][T10857] hsr_slave_0: entered promiscuous mode
[  145.785042][T10857] hsr_slave_1: entered promiscuous mode
[  145.832738][T10933] netlink: 'syz.1.2215': attribute type 1 has an invalid length.
[  145.845952][T10933] netlink: 236 bytes leftover after parsing attributes in process `syz.1.2215'.
[  145.964279][   T12] IPVS: stop unused estimator thread 0...
[  146.057324][T10947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2220'.
[  146.288496][T10955] bridge_slave_0: left allmulticast mode
[  146.292422][T10955] bridge_slave_0: left promiscuous mode
[  146.300652][T10955] bridge0: port 1(bridge_slave_0) entered disabled state
[  146.308213][T10955] bridge_slave_1: left allmulticast mode
[  146.310654][T10955] bridge_slave_1: left promiscuous mode
[  146.313219][T10955] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.323197][T10955] : (slave bond_slave_0): Releasing backup interface
[  146.330730][T10955] : (slave bond_slave_1): Releasing backup interface
[  146.340331][T10955] team0: Port device team_slave_0 removed
[  146.345564][T10955] team0: Port device team_slave_1 removed
[  146.348332][T10955] batman_adv: batadv0: Removing interface: batadv_slave_0
[  146.352184][T10955] batman_adv: batadv0: Removing interface: batadv_slave_1
[  146.456484][T10962] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2225'.
[  146.584926][T10857] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  146.594983][T10857] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  146.599220][T10857] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  146.605789][T10857] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  146.661088][T10857] 8021q: adding VLAN 0 to HW filter on device bond0
[  146.677280][T10857] 8021q: adding VLAN 0 to HW filter on device team0
[  146.689647][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state
[  146.692332][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state
[  146.698263][T10979] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  146.701325][T10979] syzkaller0: entered promiscuous mode
[  146.704141][T10979] syzkaller0: entered allmulticast mode
[  146.710989][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.713484][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state
[  146.734001][T10979] tipc: Resetting bearer <eth:syzkaller0>
[  146.745722][T10978] tipc: Resetting bearer <eth:syzkaller0>
[  146.774652][T10978] tipc: Disabling bearer <eth:syzkaller0>
[  146.981133][T10857] 8021q: adding VLAN 0 to HW filter on device batadv0
[  147.017412][T10857] veth0_vlan: entered promiscuous mode
[  147.023546][T10857] veth1_vlan: entered promiscuous mode
[  147.055206][T10857] veth0_macvtap: entered promiscuous mode
[  147.061629][T10857] veth1_macvtap: entered promiscuous mode
[  147.077722][T10857] batman_adv: batadv0: Interface activated: batadv_slave_0
[  147.088011][T10857] batman_adv: batadv0: Interface activated: batadv_slave_1
[  147.095843][T10857] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  147.098925][T10857] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  147.101967][T10857] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  147.106861][T10857] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  147.175235][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  147.181088][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  147.205641][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  147.208393][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  147.339268][T10997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2233'.
[  147.818360][T11020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2243'.
[  149.296173][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.538665][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  149.542976][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  149.548727][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  149.551729][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  149.555083][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  149.581182][T11091] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  149.586306][T11091] syzkaller0: entered promiscuous mode
[  149.588245][T11091] syzkaller0: entered allmulticast mode
[  149.605575][T11091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2274'.
[  149.610446][T11091] tipc: Resetting bearer <eth:syzkaller0>
[  149.618655][T11090] tipc: Resetting bearer <eth:syzkaller0>
[  149.626612][T11090] tipc: Disabling bearer <eth:syzkaller0>
[  149.687485][T11087] chnl_net:caif_netlink_parms(): no params data found
[  149.744154][T11087] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.747451][T11087] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.751662][T11087] bridge_slave_0: entered allmulticast mode
[  149.757173][T11087] bridge_slave_0: entered promiscuous mode
[  149.762407][T11087] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.765247][T11087] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.767685][T11087] bridge_slave_1: entered allmulticast mode
[  149.770635][T11087] bridge_slave_1: entered promiscuous mode
[  149.799202][T11087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  149.805977][T11087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  149.838303][T11087] team0: Port device team_slave_0 added
[  149.845750][T11087] team0: Port device team_slave_1 added
[  149.867177][T11087] batman_adv: batadv0: Adding interface: batadv_slave_0
[  149.870019][T11087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  149.881315][T11087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  149.896018][T11087] batman_adv: batadv0: Adding interface: batadv_slave_1
[  149.899173][T11087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  149.909978][T11087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  149.938812][T11110] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2280'.
[  149.950672][T11087] hsr_slave_0: entered promiscuous mode
[  149.953023][T11087] hsr_slave_1: entered promiscuous mode
[  149.955510][T11087] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  149.958416][T11087] Cannot create hsr debugfs directory
[  150.110651][T11116] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2283'.
[  150.117045][T11116] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[  150.120173][T11116] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[  150.123097][T11116] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[  150.126511][T11116] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[  150.399194][T11137] netlink: 'syz.1.2293': attribute type 22 has an invalid length.
[  150.511053][T11143] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2296'.
[  150.699118][T11161] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2303'.
[  150.702428][T11161] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2303'.
[  150.707512][T11161] netlink: 'syz.1.2303': attribute type 5 has an invalid length.
[  150.712395][T11161] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2303'.
[  150.895425][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.954179][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.032360][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.132196][   T12] bridge_slave_1: left allmulticast mode
[  151.136899][   T12] bridge_slave_1: left promiscuous mode
[  151.140326][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.146858][   T12] bridge_slave_0: left allmulticast mode
[  151.149227][   T12] bridge_slave_0: left promiscuous mode
[  151.151623][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.323016][ T5514] hid-generic 0005:0458:5505.0003: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  151.476191][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  151.483777][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  151.489127][   T12] bond0 (unregistering): Released all slaves
[  151.626158][   T55] Bluetooth: hci1: command tx timeout
[  151.803641][   T12] hsr_slave_0: left promiscuous mode
[  151.806540][   T12] hsr_slave_1: left promiscuous mode
[  151.809366][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  151.812537][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  151.826463][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  151.829521][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  151.844470][   T12] veth1_macvtap: left promiscuous mode
[  151.846975][   T12] veth0_macvtap: left promiscuous mode
[  151.850040][   T12] veth1_vlan: left promiscuous mode
[  151.852338][   T12] veth0_vlan: left promiscuous mode
[  152.281542][   T12] team0 (unregistering): Port device team_slave_1 removed
[  152.315950][   T12] team0 (unregistering): Port device team_slave_0 removed
[  152.757555][T11087] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  152.776918][T11087] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  152.814558][T11087] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  152.837064][T11087] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  152.995464][T11087] 8021q: adding VLAN 0 to HW filter on device bond0
[  153.027367][T11087] 8021q: adding VLAN 0 to HW filter on device team0
[  153.067284][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.070321][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[  153.075985][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.078992][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[  153.225022][T11262] sch_tbf: peakrate 12 is lower than or equals to rate 6561010854487373889 !
[  153.279390][T11087] 8021q: adding VLAN 0 to HW filter on device batadv0
[  153.329060][T11087] veth0_vlan: entered promiscuous mode
[  153.341299][T11087] veth1_vlan: entered promiscuous mode
[  153.383953][T11087] veth0_macvtap: entered promiscuous mode
[  153.390141][T11087] veth1_macvtap: entered promiscuous mode
[  153.412975][T11087] batman_adv: batadv0: Interface activated: batadv_slave_0
[  153.426531][T11087] batman_adv: batadv0: Interface activated: batadv_slave_1
[  153.432161][T11087] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  153.436759][T11087] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  153.440286][T11087] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  153.444698][T11087] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  153.521662][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  153.525144][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  153.553003][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  153.556844][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  153.638114][T11087] 
[  153.638955][T11087] ======================================================
[  153.641144][T11087] WARNING: possible circular locking dependency detected
[  153.643536][T11087] 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 Not tainted
[  153.647173][T11087] ------------------------------------------------------
[  153.649779][T11087] syz-executor/11087 is trying to acquire lock:
[  153.651858][T11087] ffff888126aa5840 ((work_completion)(&(&conn->info_timer)->work)){+.+.}-{0:0}, at: __flush_work+0xd2/0xbc0
[  153.655422][T11087] 
[  153.655422][T11087] but task is already holding lock:
[  153.657699][T11087] ffff888126aa5b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680
[  153.660440][T11087] 
[  153.660440][T11087] which lock already depends on the new lock.
[  153.660440][T11087] 
[  153.663925][T11087] 
[  153.663925][T11087] the existing dependency chain (in reverse order) is:
[  153.667326][T11087] 
[  153.667326][T11087] -> #1 (&conn->lock#2){+.+.}-{4:4}:
[  153.670237][T11087]        lock_acquire+0x120/0x360
[  153.672353][T11087]        __mutex_lock+0x182/0xe80
[  153.674411][T11087]        l2cap_info_timeout+0x60/0xa0
[  153.676592][T11087]        process_scheduled_works+0xae1/0x17b0
[  153.679052][T11087]        worker_thread+0x8a0/0xda0
[  153.680878][T11087]        kthread+0x711/0x8a0
[  153.682480][T11087]        ret_from_fork+0x3fc/0x770
[  153.684578][T11087]        ret_from_fork_asm+0x1a/0x30
[  153.686742][T11087] 
[  153.686742][T11087] -> #0 ((work_completion)(&(&conn->info_timer)->work)){+.+.}-{0:0}:
[  153.690835][T11087]        validate_chain+0xb9b/0x2140
[  153.692629][T11087]        __lock_acquire+0xab9/0xd20
[  153.694448][T11087]        lock_acquire+0x120/0x360
[  153.696356][T11087]        __flush_work+0x6b8/0xbc0
[  153.698144][T11087]        __cancel_work_sync+0xbe/0x110
[  153.699909][T11087]        l2cap_conn_del+0x4f0/0x680
[  153.701541][T11087]        hci_conn_hash_flush+0x10d/0x230
[  153.703322][T11087]        hci_dev_close_sync+0xaef/0x1330
[  153.705193][T11087]        hci_unregister_dev+0x21a/0x510
[  153.707142][T11087]        vhci_release+0x80/0xd0
[  153.708708][T11087]        __fput+0x44c/0xa70
[  153.710191][T11087]        task_work_run+0x1d4/0x260
[  153.711823][T11087]        do_exit+0x6b5/0x22e0
[  153.713321][T11087]        do_group_exit+0x21c/0x2d0
[  153.714910][T11087]        __x64_sys_exit_group+0x3f/0x40
[  153.716707][T11087]        x64_sys_call+0x21ba/0x21c0
[  153.718427][T11087]        do_syscall_64+0xfa/0x3b0
[  153.720034][T11087]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.722133][T11087] 
[  153.722133][T11087] other info that might help us debug this:
[  153.722133][T11087] 
[  153.725496][T11087]  Possible unsafe locking scenario:
[  153.725496][T11087] 
[  153.727875][T11087]        CPU0                    CPU1
[  153.729624][T11087]        ----                    ----
[  153.731316][T11087]   lock(&conn->lock#2);
[  153.732653][T11087]                                lock((work_completion)(&(&conn->info_timer)->work));
[  153.735620][T11087]                                lock(&conn->lock#2);
[  153.737767][T11087]   lock((work_completion)(&(&conn->info_timer)->work));
[  153.739957][T11087] 
[  153.739957][T11087]  *** DEADLOCK ***
[  153.739957][T11087] 
[  153.742483][T11087] 5 locks held by syz-executor/11087:
[  153.744132][T11087]  #0: ffff8880331acdc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510
[  153.747209][T11087]  #1: ffff8880331ac0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330
[  153.750528][T11087]  #2: ffffffff8f685a88 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230
[  153.754007][T11087]  #3: ffff888126aa5b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680
[  153.757215][T11087]  #4: ffffffff8e13f160 (rcu_read_lock){....}-{1:3}, at: __flush_work+0xd2/0xbc0
[  153.760216][T11087] 
[  153.760216][T11087] stack backtrace:
[  153.762191][T11087] CPU: 0 UID: 0 PID: 11087 Comm: syz-executor Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  153.762201][T11087] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  153.762206][T11087] Call Trace:
[  153.762210][T11087]  <TASK>
[  153.762214][T11087]  dump_stack_lvl+0x189/0x250
[  153.762225][T11087]  ? __pfx_dump_stack_lvl+0x10/0x10
[  153.762233][T11087]  ? __pfx__printk+0x10/0x10
[  153.762264][T11087]  ? print_lock_name+0xde/0x100
[  153.762279][T11087]  print_circular_bug+0x2ee/0x310
[  153.762293][T11087]  check_noncircular+0x134/0x160
[  153.762307][T11087]  validate_chain+0xb9b/0x2140
[  153.762320][T11087]  ? do_raw_spin_lock+0x121/0x290
[  153.762333][T11087]  ? look_up_lock_class+0x74/0x170
[  153.762344][T11087]  ? register_lock_class+0x51/0x320
[  153.762352][T11087]  __lock_acquire+0xab9/0xd20
[  153.762359][T11087]  ? __flush_work+0xd2/0xbc0
[  153.762368][T11087]  lock_acquire+0x120/0x360
[  153.762374][T11087]  ? __flush_work+0xd2/0xbc0
[  153.762383][T11087]  ? _raw_spin_unlock_irq+0x23/0x50
[  153.762393][T11087]  ? __flush_work+0xd2/0xbc0
[  153.762401][T11087]  __flush_work+0x6b8/0xbc0
[  153.762409][T11087]  ? __flush_work+0xd2/0xbc0
[  153.762417][T11087]  ? __flush_work+0xd2/0xbc0
[  153.762426][T11087]  ? __pfx___flush_work+0x10/0x10
[  153.762434][T11087]  ? __pfx_wq_barrier_func+0x10/0x10
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  153.762444][T11087]  ? __pfx___cancel_work+0x10/0x10
[  153.762452][T11087]  ? hci_conn_drop+0x14d/0x280
[  153.762463][T11087]  __cancel_work_sync+0xbe/0x110
[  153.762473][T11087]  l2cap_conn_del+0x4f0/0x680
[  153.762482][T11087]  ? __pfx_l2cap_disconn_cfm+0x10/0x10
[  153.762490][T11087]  hci_conn_hash_flush+0x10d/0x230
[  153.762500][T11087]  hci_dev_close_sync+0xaef/0x1330
[  153.762510][T11087]  ? __pfx_hci_dev_close_sync+0x10/0x10
[  153.762518][T11087]  ? up_write+0x1c4/0x420
[  153.762527][T11087]  hci_unregister_dev+0x21a/0x510
[  153.762534][T11087]  vhci_release+0x80/0xd0
[  153.762542][T11087]  ? __pfx_vhci_release+0x10/0x10
[  153.762548][T11087]  __fput+0x44c/0xa70
[  153.762560][T11087]  task_work_run+0x1d4/0x260
[  153.762570][T11087]  ? __pfx_task_work_run+0x10/0x10
[  153.762580][T11087]  ? kmem_cache_free+0x18f/0x400
[  153.762590][T11087]  do_exit+0x6b5/0x22e0
[  153.762600][T11087]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  153.762609][T11087]  ? __pfx_do_exit+0x10/0x10
[  153.762620][T11087]  ? _raw_spin_unlock_irq+0x23/0x50
[  153.762629][T11087]  ? lockdep_hardirqs_on+0x9c/0x150
[  153.762639][T11087]  do_group_exit+0x21c/0x2d0
[  153.762649][T11087]  __x64_sys_exit_group+0x3f/0x40
[  153.762659][T11087]  x64_sys_call+0x21ba/0x21c0
[  153.762673][T11087]  do_syscall_64+0xfa/0x3b0
[  153.762680][T11087]  ? lockdep_hardirqs_on+0x9c/0x150
[  153.762689][T11087]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.762696][T11087]  ? exc_page_fault+0x9f/0xf0
[  153.762706][T11087]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.762713][T11087] RIP: 0033:0x7f6d3578e929
[  153.762720][T11087] Code: Unable to access opcode bytes at 0x7f6d3578e8ff.
[  153.762723][T11087] RSP: 002b:00007fffa83d18b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  153.762731][T11087] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6d3578e929
[  153.762736][T11087] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043
[  153.762740][T11087] RBP: 00007f6d357ee8f0 R08: 00007fffa83cf657 R09: 0000000000000003
[  153.762745][T11087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  153.762749][T11087] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007fffa83d1a70
[  153.762755][T11087]  </TASK>
[  153.773409][   T55] Bluetooth: hci1: command tx timeout
[  154.023864][ T5855] syz_tun (unregistering): left allmulticast mode
[  154.026399][ T5855] syz_tun (unregistering): left promiscuous mode
[  154.028908][ T5855] bridge0: port 3(syz_tun) entered disabled state
[  154.191989][T10929] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  154.249842][T10929] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  154.311675][T10929] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  154.370170][T10929] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  154.451990][T10929] bridge_slave_1: left allmulticast mode
[  154.454670][T10929] bridge_slave_1: left promiscuous mode
[  154.457055][T10929] bridge0: port 2(bridge_slave_1) entered disabled state
[  154.460325][T10929] bridge_slave_0: left allmulticast mode
[  154.462141][T10929] bridge_slave_0: left promiscuous mode
[  154.464503][T10929] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.739275][T10929] bond0 (unregistering): Released all slaves
[  154.787625][T10929] tipc: Disabling bearer <udp:syz2>
[  154.789938][T10929] tipc: Left network mode
[  154.981572][T10929] batman_adv: batadv0: Removing interface: batadv_slave_0
[  154.985084][T10929] batman_adv: batadv0: Removing interface: batadv_slave_1
[  155.175918][T10929] team0 (unregistering): Port device team_slave_1 removed
[  155.199752][T10929] team0 (unregistering): Port device C removed

VM DIAGNOSIS:
14:53:17  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000037 RBX=0000000000000037 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90007e96e30
R8 =ffff888108e90237 R9 =1ffff110211d2046 R10=dffffc0000000000 R11=ffffffff85478780
R12=dffffc0000000000 R13=ffffffff99af98b5 R14=ffffffff99dfe6e0 R15=0000000000000000
RIP=ffffffff854787fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055557c067500 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005574fcfb4078 CR3=000000002693e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00ff000000000000 ff00000000000000 XMM05=0000000000000035 00302d0034303a00
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ff0000ff000000ff XMM09=333030302e353035 353a383534303a35
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81b4c210 RBX=ffff88813663b1c0 RCX=ffff888108d08000 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc9000332f6c0 RSP=ffffc9000332f560
R8 =ffffffff8fa1f3f7 R9 =1ffffffff1f43e7e R10=dffffc0000000000 R11=fffffbfff1f43e7f
R12=1ffff11009608385 R13=dffffc0000000000 R14=0000000000000000 R15=ffff88804b041c28
RIP=ffffffff81b4c1f9 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055557ffd5500 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fad1c2e56c0 CR3=0000000106ff6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fa668211c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
