last executing test programs:

758.781456ms ago: executing program 0 (id=2505):
socket$inet6(0xa, 0x80001, 0x3)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x2404c8c0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r1=>0x0, 0xcd, &(0x7f0000000380)=[{}], 0x8, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xa6, 0x8, 0x8, &(0x7f0000000440)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x31, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="b400000000000000791093000000000062000000000000009500000000000000f42f9c31907ae9d028cc75e61c7db26519a29dc2b33043b3ce1030f95253523819600952532ad7c4604f25e5c2543ac6bce5e6f98728be9c7bb2cc7a54207d268d3dedde707e17cdf77b17dbf58a6d959826b7a4d74e7fec21e721fa0a815d02"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x4e, 0x0, 0xffffffffffffffff, 0x3000000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x39, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0xa, 0x200008, 0x5, 0x1ffff}, 0x10}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x400d0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001380)=@newchain={0x24, 0x64, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x10, 0x1}, {0xe, 0x9}, {0x5, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x44851}, 0x20040054)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_int(r7, 0x29, 0x19, &(0x7f0000000140)=0x3, 0x4)
sendmmsg$inet6(r7, &(0x7f0000001540)=[{{&(0x7f0000000340)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="e8020000000000002900000004000000005a"], 0x2e8}}], 0x1, 0x80)
recvfrom$inet6(r7, 0x0, 0x0, 0x12020, 0x0, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c00028008000140000000020800024000000013000003000000000020000180070001006374000014000280080002400000000d08000440000000"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x4)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000010000108000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="b40200000000000008001b"], 0x28}}, 0x0)

680.621498ms ago: executing program 1 (id=2506):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x3, 0xc, &(0x7f0000000e00)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011000000180100002020692500000000002020207b1af8ff00000000bfa110000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90)
sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002100)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x10, 0x6}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r8}]}}]}, 0x38}}, 0x0)

389.189883ms ago: executing program 2 (id=2508):
socket$netlink(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$inet6(0xa, 0x800000000000002, 0x0)
socket$kcm(0x2, 0x3, 0x2)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x80000001, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000d"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10)
socket$inet6(0xa, 0x800000000000002, 0x0)
socket(0x28, 0x1, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
socket$inet6_icmp(0xa, 0x2, 0x3a)
socket$nl_route(0x10, 0x3, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
socket$rds(0x15, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r1, @ANYBLOB="ff07b9a9aa"], 0x20)

305.819456ms ago: executing program 2 (id=2509):
r0 = socket$xdp(0x2c, 0x3, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', <r2=>0x0})
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x1000, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', <r5=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4)
bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10)
bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x60)

305.35547ms ago: executing program 0 (id=2510):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "db57cda808852139", "252432e72844858a068b92a5a810f4dc", "11802ff5", "5aee41448c84afb7"}, 0x28)

287.867569ms ago: executing program 1 (id=2511):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x24, 0x1e, 0x1, 0x0, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x0, 0x2}, [@NDA_VLAN={0x6}]}, 0x24}}, 0x0)

230.987548ms ago: executing program 0 (id=2512):
r0 = socket(0x15, 0x5, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
getsockopt(r0, 0x200000000114, 0x2710, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002)

230.682295ms ago: executing program 0 (id=2513):
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000200)={0xe0, 0x10, 0x509, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0xa9, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce28715f2d28290a9423debbb86f9dba4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100e434db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d681"}, @nested={0x14, 0x0, 0x0, 0x1, [@typed={0xd, 0x0, 0x0, 0x0, @binary="c4ec601a5f39d90830"}]}]}, 0xe0}], 0x1}, 0x40040)

171.197534ms ago: executing program 2 (id=2514):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x2}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0xffffffff}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x57)
sendmsg$tipc(r1, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4)

170.940114ms ago: executing program 1 (id=2515):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x710, 0x20, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x0, 0x5, 0x2f, 0x0, @empty, @private}}}})

167.039707ms ago: executing program 0 (id=2516):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x24, 0x0, 0x0)

109.094264ms ago: executing program 1 (id=2517):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0)

108.534621ms ago: executing program 2 (id=2518):
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x21, 0x10, 0x0, 0x0, 0x336c}, 0x48)

108.324472ms ago: executing program 0 (id=2519):
r0 = socket$tipc(0x1e, 0x4, 0x0)
connect$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10)
sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000004c0)="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", 0x14d}, {&(0x7f0000000280)="5b4ea80f20d7212327afde5e7a457cde2dff9073f71979", 0x17}, {&(0x7f00000002c0)="851d8a90d516f218f839a7c48edfe734b2490c90a2fbf5be3383f1c9f5be8e55148723ac0258ef4f8af1f5e0b0a86885f018523d60072c7d9c1568700b3abe208fbd5dad2daf18b5150a530d816bf4cc6e43da4f2793611b38009e8c0970268cf5836926fd1223f4f8bec6a4a68b2aaff7af151a661793a04cd9b936da8f53eae22356781c580df817f3168269eaeeae014fa9b1878bd89e2acb4853ffd7b9a06d7f5ff090c605f5d343e6d93c80d747365d21acea325c44fbb87f6271a2d9333e9b9dd1d36dfea61641d34fd54cd2970ac14acdadd04357bdd44bc926d0adef887b2e25c2f435ce79bac1d1f473c3a49a12aa5c5cfa4bfa4fd2470308ed259e62c218aee67006a3ca187c9aa13a806d99b2275341fd6022940537b1cb1fd2389f417ea92c6e77a09a9d09a98c4e2f0912d36b47588ff991aa98c3c650055bacb669aaf68dd4f8a7b43569c9af62e7cee6ba05278fe8642feafa5c436cb13fa45b3cdf750f8956c493acf7c561b12259331a363c74fb5f2947652ced415b0986b673680e8ad7bad823ff84c30681cbe45114510d9aa6f423f212bcdf1c244178ae31474d9f176707e9c481057f72d489372f7daeba51e3ea86895c8eed109566ad19f3957d0df21a671fce2d674c207d8643c85a018834f4e8e3992e6991d815", 0x1e0}, {&(0x7f0000001440)="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", 0x1000}, {&(0x7f0000000080)="253c10cd0a56ebbb9e8b465670109c340c95f1d27d36cbeb7fa948545e9b18da346b70b5dc78a12ad1a30e4f7038336f1af1d61b0409988f1755e9b3ba9919b2a4952ceda920f5f0e22dd247d4a74f2d1c854bc64f09f979aa3e9f5c25ff8ec189e5d809483583f648cd8870691200e428d5dcae697fa5a1e48df472ebb098aeb32e4049eba9f92be1ef1b6609f2b91c449dca240f", 0x95}, {&(0x7f00000024c0)="2ba671ae8107530b978dd82841597ed8f4275ed9e6b9f7b73ee6324ddf688ad9d88125b82afd2e28aef7183086ce0dd4ee880fc56a2ca8b52ef8f5b5f3e475f49b0bcd201fe612703d680fdd1151dd32535b04d4697d472c7750d6c4c197162e9f872253b611b1ca20e79dcf40d1faf58a453f8db9a03fdd351b54ad4e77fa0fda7990bb281079ae7ba3994aef7380e1d6342305e2d12c57379fd12e784f48e4e832171df4576c8724e3bfd70ebc92fc11914cd4", 0xb4}, {&(0x7f00000025c0)="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", 0xa9b}], 0x7}}], 0x4000000000001f4, 0x81)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x200000c3)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)

108.145694ms ago: executing program 1 (id=2520):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet(r0, &(0x7f0000000d00)=[{{&(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000080)='e', 0x1}], 0x1}}, {{&(0x7f0000000880)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000a80)=[{&(0x7f00000008c0)='K', 0x1}], 0x1}}], 0x2, 0x4000)
shutdown(r0, 0x1)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000340)={0x0, 0x5}, 0x8)

61.235714ms ago: executing program 2 (id=2521):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0200000001"], 0x10)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="02"], 0x10)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[], 0x10)

261.015µs ago: executing program 2 (id=2522):
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00', 0xffffff00}, 0x1c)

0s ago: executing program 1 (id=2523):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x95}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:48820' (ED25519) to the list of known hosts.
syzkaller login: [   47.834532][ T5743] cgroup: Unknown subsys name 'net'
[   47.956768][ T5743] cgroup: Unknown subsys name 'cpuset'
[   47.961011][ T5743] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.474790][ T5743] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   62.106298][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   62.121276][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   62.123374][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   62.124408][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   62.127532][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   62.130049][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   62.132611][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   62.134614][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   62.138378][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   62.140065][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   62.142900][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   62.145944][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   62.150182][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   62.153943][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   62.191719][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   62.437842][ T5848] chnl_net:caif_netlink_parms(): no params data found
[   62.619382][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.623648][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.626688][ T5848] bridge_slave_0: entered allmulticast mode
[   62.629626][ T5848] bridge_slave_0: entered promiscuous mode
[   62.635902][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.638599][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.641212][ T5848] bridge_slave_1: entered allmulticast mode
[   62.644981][ T5848] bridge_slave_1: entered promiscuous mode
[   62.651906][ T5841] chnl_net:caif_netlink_parms(): no params data found
[   62.672616][ T5842] chnl_net:caif_netlink_parms(): no params data found
[   62.699846][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.718809][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.777029][ T5848] team0: Port device team_slave_0 added
[   62.781397][ T5848] team0: Port device team_slave_1 added
[   62.858144][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.860985][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.875862][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.888381][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.890779][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.893396][ T5841] bridge_slave_0: entered allmulticast mode
[   62.897133][ T5841] bridge_slave_0: entered promiscuous mode
[   62.900056][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.902936][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.905269][ T5842] bridge_slave_0: entered allmulticast mode
[   62.907975][ T5842] bridge_slave_0: entered promiscuous mode
[   62.910850][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.914494][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.924827][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.935029][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.938018][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.940982][ T5841] bridge_slave_1: entered allmulticast mode
[   62.945534][ T5841] bridge_slave_1: entered promiscuous mode
[   62.960064][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.962431][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.964664][ T5842] bridge_slave_1: entered allmulticast mode
[   62.967471][ T5842] bridge_slave_1: entered promiscuous mode
[   62.995592][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.003613][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.016843][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.021761][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.066307][ T5848] hsr_slave_0: entered promiscuous mode
[   63.068593][ T5848] hsr_slave_1: entered promiscuous mode
[   63.081846][ T5841] team0: Port device team_slave_0 added
[   63.086439][ T5842] team0: Port device team_slave_0 added
[   63.089270][ T5841] team0: Port device team_slave_1 added
[   63.106005][ T5842] team0: Port device team_slave_1 added
[   63.129410][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.131989][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.142958][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.180100][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.182595][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.190370][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.200868][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.204946][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.215527][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.227510][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.230270][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.240896][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.305566][ T5841] hsr_slave_0: entered promiscuous mode
[   63.308230][ T5841] hsr_slave_1: entered promiscuous mode
[   63.310530][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   63.314104][ T5841] Cannot create hsr debugfs directory
[   63.350796][ T5842] hsr_slave_0: entered promiscuous mode
[   63.353188][ T5842] hsr_slave_1: entered promiscuous mode
[   63.355254][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   63.357749][ T5842] Cannot create hsr debugfs directory
[   63.470169][ T5848] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   63.485252][ T5848] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   63.497204][ T5848] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   63.517499][ T5848] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   63.588558][ T5841] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   63.599628][ T5841] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   63.614852][ T5841] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   63.620507][ T5841] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   63.690802][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.695526][ T5842] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   63.700117][ T5842] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   63.714058][ T5842] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   63.720576][ T5842] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   63.734724][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   63.748507][ T3552] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.751110][ T3552] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.769793][ T3552] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.772178][ T3552] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.828800][ T5848] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   63.878882][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.917821][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.943458][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[   63.948805][ T5842] 8021q: adding VLAN 0 to HW filter on device team0
[   63.960552][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.963021][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.967838][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.970116][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.987456][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.989802][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.994113][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.996682][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.009022][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.099917][ T5848] veth0_vlan: entered promiscuous mode
[   64.117547][ T5848] veth1_vlan: entered promiscuous mode
[   64.169918][ T5848] veth0_macvtap: entered promiscuous mode
[   64.184787][ T5848] veth1_macvtap: entered promiscuous mode
[   64.206928][ T5850] Bluetooth: hci2: command tx timeout
[   64.209632][ T5203] Bluetooth: hci0: command tx timeout
[   64.215707][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.234713][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.240487][ T5848] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.251909][ T5848] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.255347][ T5848] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.258340][ T5848] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.283163][ T5203] Bluetooth: hci1: command tx timeout
[   64.297522][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.312318][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.411894][ T5842] veth0_vlan: entered promiscuous mode
[   64.415299][ T5841] veth0_vlan: entered promiscuous mode
[   64.422404][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.425597][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.428813][ T5841] veth1_vlan: entered promiscuous mode
[   64.440261][ T5842] veth1_vlan: entered promiscuous mode
[   64.489226][ T3552] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.496473][ T3552] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.497246][ T5841] veth0_macvtap: entered promiscuous mode
[   64.509120][ T5841] veth1_macvtap: entered promiscuous mode
[   64.511913][ T5842] veth0_macvtap: entered promiscuous mode
[   64.537597][ T5842] veth1_macvtap: entered promiscuous mode
[   64.555167][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.558443][ T5848] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   64.574359][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.587752][ T5841] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.591285][ T5841] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.621975][ T5841] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.627825][ T5841] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.639158][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.660624][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.687626][ T5842] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.690792][ T5842] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.703927][ T5842] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.707511][ T5842] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.800226][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.805299][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.841920][ T3552] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.850974][ T3552] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.863791][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.866348][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.900976][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.905817][ T5914] netlink: 68 bytes leftover after parsing attributes in process `syz.2.22'.
[   64.909659][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.048403][ T5922] xt_CT: No such helper "snmp_trap"
[   65.266969][ T5945] Driver unsupported XDP return value 0 on prog  (id 4) dev N/A, expect packet loss!
[   65.270776][ T5943] netlink: 4 bytes leftover after parsing attributes in process `syz.0.34'.
[   65.279574][ T5943] netlink: 4 bytes leftover after parsing attributes in process `syz.0.34'.
[   65.359982][ T5952] netlink: 26 bytes leftover after parsing attributes in process `syz.2.39'.
[   65.434808][ T5957] netlink: 40 bytes leftover after parsing attributes in process `syz.2.41'.
[   65.696895][ T5973] netlink: 'syz.2.49': attribute type 1 has an invalid length.
[   65.737554][ T5975] netlink: 24 bytes leftover after parsing attributes in process `syz.1.50'.
[   65.751245][ T5977] netlink: 28 bytes leftover after parsing attributes in process `syz.2.51'.
[   65.757875][ T5977] netlink: 'syz.2.51': attribute type 3 has an invalid length.
[   65.761257][ T5977] netlink: 28 bytes leftover after parsing attributes in process `syz.2.51'.
[   66.283827][ T5203] Bluetooth: hci0: command tx timeout
[   66.286446][ T5203] Bluetooth: hci2: command tx timeout
[   66.347188][    C1] IPv4: Oversized IP packet from 172.20.20.24
[   66.362449][ T5203] Bluetooth: hci1: command tx timeout
[   66.482248][ T6023] Zero length message leads to an empty skb
[   66.547145][ T6034] netlink: 'syz.2.78': attribute type 4 has an invalid length.
[   66.784324][ T6060] netlink: 'syz.0.91': attribute type 2 has an invalid length.
[   66.786910][ T6060] netlink: 1 bytes leftover after parsing attributes in process `syz.0.91'.
[   66.831905][ T6068] netlink: 44 bytes leftover after parsing attributes in process `syz.2.97'.
[   66.969067][ T6084] syz.0.104 uses obsolete (PF_INET,SOCK_PACKET)
[   66.990390][ T6086] nbd: couldn't find device at index 536870912
[   67.198780][ T6107] ip6tnl1: entered promiscuous mode
[   67.200534][ T6107] ip6tnl1: entered allmulticast mode
[   67.206173][ T6107] team0: Device ip6tnl1 is of different type
[   67.490115][ T6126] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   67.819878][ T6139] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.824294][ T6139] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.047693][ T6139] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   68.061739][ T6139] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   68.204766][ T6139] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.208126][ T6139] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.211224][ T6139] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.215441][ T6139] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.363786][ T5850] Bluetooth: hci0: command tx timeout
[   68.366647][ T5203] Bluetooth: hci2: command tx timeout
[   68.442681][ T5203] Bluetooth: hci1: command tx timeout
[   68.453667][ T6167] netlink: 'syz.1.136': attribute type 2 has an invalid length.
[   68.632651][ T6179] netlink: 'syz.1.142': attribute type 1 has an invalid length.
[   68.686762][ T6179] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[   68.690108][ T6179] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[   68.695093][ T6179] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[   68.698455][ T6179] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[   68.706808][ T6179] bond1: (slave geneve2): making interface the new active one
[   68.710172][ T6179] bond1: (slave geneve2): Enslaving as an active interface with an up link
[   68.724449][ T6179] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[   68.733619][ T6179] 8021q: adding VLAN 0 to HW filter on device bond1
[   68.811216][ T6190] bridge_slave_0: left allmulticast mode
[   68.816676][ T6190] bridge_slave_0: left promiscuous mode
[   68.819341][ T6190] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.830981][ T6190] bridge_slave_1: left allmulticast mode
[   68.836985][ T6190] bridge_slave_1: left promiscuous mode
[   68.839545][ T6190] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.848408][ T6190] bond0: (slave bond_slave_0): Releasing backup interface
[   68.858734][ T6190] bond0: (slave bond_slave_1): Releasing backup interface
[   68.871241][ T6190] team0: Port device team_slave_0 removed
[   68.877857][ T6190] team0: Port device team_slave_1 removed
[   68.880437][ T6190] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   68.884861][ T6190] batman_adv: batadv0: Removing interface: batadv_slave_0
[   68.888519][ T6190] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   68.891369][ T6190] batman_adv: batadv0: Removing interface: batadv_slave_1
[   68.907108][ T6190] bond1: (slave geneve2): Releasing active interface
[   68.910838][ T6190] bond1: (slave geneve2): the permanent HWaddr of slave - 56:16:64:b0:a5:b2 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[   68.921735][ T6190] bond1: (slave ip6gretap1): making interface the new active one
[   68.935986][ T6190] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[   68.939581][ T6190] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[   68.945072][ T6190] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[   68.949078][ T6190] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[   68.961328][ T6190] bond1: (slave ip6gretap1): Releasing active interface
[   69.065532][ T6205] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   69.728133][ T6260] netlink: 'syz.2.174': attribute type 13 has an invalid length.
[   69.731404][ T6260] netlink: 'syz.2.174': attribute type 17 has an invalid length.
[   69.832779][ T6260] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   69.940431][ T6260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   70.028517][ T6249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   70.091077][ T6249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   70.291131][ T6285] warning: `syz.1.187' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   70.443591][ T5203] Bluetooth: hci2: command tx timeout
[   70.446602][ T5850] Bluetooth: hci0: command tx timeout
[   70.523390][ T5850] Bluetooth: hci1: command tx timeout
[   70.618853][ T6260] syz.2.174 (6260) used greatest stack depth: 19168 bytes left
[   70.679238][ T6307] __nla_validate_parse: 2 callbacks suppressed
[   70.679249][ T6307] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.198'.
[   70.704877][ T6307] netlink: zone id is out of range
[   70.707095][ T6307] netlink: get zone limit has 8 unknown bytes
[   70.879028][ T6320] netlink: 'syz.0.205': attribute type 10 has an invalid length.
[   70.894398][ T6320] veth0_vlan: left promiscuous mode
[   70.899007][ T6320] veth0_vlan: entered promiscuous mode
[   70.920688][ T6320] team0: Device veth0_vlan failed to register rx_handler
[   71.016426][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.019603][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.447519][ T6353] netlink: 'syz.0.221': attribute type 1 has an invalid length.
[   71.457520][ T6353] netlink: 44 bytes leftover after parsing attributes in process `syz.0.221'.
[   71.461455][ T6353] netlink: 'syz.0.221': attribute type 1 has an invalid length.
[   72.695510][ T6430] netlink: 52 bytes leftover after parsing attributes in process `syz.1.256'.
[   72.759316][ T6432] ieee802154 phy0 wpan0: encryption failed: -90
[   72.839344][ T6430] bond0 (unregistering): Released all slaves
[   72.869103][ T6444] netlink: 44 bytes leftover after parsing attributes in process `syz.0.261'.
[   72.874012][ T6444] netlink: 43 bytes leftover after parsing attributes in process `syz.0.261'.
[   72.878754][ T6444] netlink: 'syz.0.261': attribute type 6 has an invalid length.
[   72.883482][ T6444] netlink: 'syz.0.261': attribute type 5 has an invalid length.
[   72.886688][ T6444] netlink: 43 bytes leftover after parsing attributes in process `syz.0.261'.
[   73.087333][ T6463] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   73.808341][ T6478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.275'.
[   73.811386][ T6478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.275'.
[   73.814380][ T6478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.275'.
[   73.927256][ T6486] syzkaller0: entered promiscuous mode
[   73.929385][ T6486] syzkaller0: entered allmulticast mode
[   74.117822][ T6497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.284'.
[   74.137028][ T6498] Bluetooth: MGMT ver 1.23
[   74.909301][ T6508] lo speed is unknown, defaulting to 1000
[   74.911898][ T6508] lo speed is unknown, defaulting to 1000
[   74.917207][ T6508] lo speed is unknown, defaulting to 1000
[   74.939008][ T6508] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   74.960374][ T6508] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   75.020805][ T6508] lo speed is unknown, defaulting to 1000
[   75.039599][ T6508] lo speed is unknown, defaulting to 1000
[   75.046561][ T6508] lo speed is unknown, defaulting to 1000
[   75.081107][ T6520] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   76.130521][ T6579] vlan2: entered promiscuous mode
[   76.134157][ T6579] bridge0: entered promiscuous mode
[   76.147050][ T6579] vlan2: entered allmulticast mode
[   76.152461][ T6579] bridge0: entered allmulticast mode
[   76.193629][ T6585] __nla_validate_parse: 2 callbacks suppressed
[   76.193644][ T6585] netlink: 4 bytes leftover after parsing attributes in process `syz.0.326'.
[   76.702228][ T6629] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[   76.984277][ T6655] netlink: 'syz.1.359': attribute type 6 has an invalid length.
[   77.106783][ T6659] syzkaller1: entered promiscuous mode
[   77.109112][ T6659] syzkaller1: entered allmulticast mode
[   77.231170][ T6671] netlink: 56 bytes leftover after parsing attributes in process `syz.1.366'.
[   77.742357][ T6710] netlink: 24 bytes leftover after parsing attributes in process `syz.0.382'.
[   78.029211][ T6729] netlink: 'syz.0.391': attribute type 4 has an invalid length.
[   78.784736][ T6779] netlink: 56 bytes leftover after parsing attributes in process `syz.1.405'.
[   78.816706][ T6781] netlink: 'syz.0.406': attribute type 1 has an invalid length.
[   78.842397][ T5203] Bluetooth: hci0: command 0x0c1a tx timeout
[   78.844906][ T5850] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   78.926930][ T6791] netlink: 4 bytes leftover after parsing attributes in process `syz.0.411'.
[   78.950190][ T6793] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   79.068521][ T6807] netlink: 52 bytes leftover after parsing attributes in process `syz.1.414'.
[   79.078266][ T6807] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   79.085892][ T6153] lo speed is unknown, defaulting to 1000
[   79.087878][ T6153] syz1: Port: 1 Link DOWN
[   79.624007][ T6855] ip6gretap2: entered promiscuous mode
[   80.177817][ T6904] netlink: 'syz.2.457': attribute type 1 has an invalid length.
[   80.182473][ T6904] netlink: 'syz.2.457': attribute type 2 has an invalid length.
[   80.206182][ T6904] netlink: 'syz.2.457': attribute type 1 has an invalid length.
[   80.209678][ T6904] netlink: 'syz.2.457': attribute type 2 has an invalid length.
[   80.399649][ T6918] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[   80.415656][ T6920] netlink: 'syz.2.465': attribute type 2 has an invalid length.
[   80.424650][ T6920] netlink: 'syz.2.465': attribute type 1 has an invalid length.
[   80.470295][ T6923] netlink: 12 bytes leftover after parsing attributes in process `syz.1.467'.
[   80.542889][ T6932] netlink: 'syz.0.471': attribute type 1 has an invalid length.
[   80.545450][ T6932] netlink: 224 bytes leftover after parsing attributes in process `syz.0.471'.
[   80.621510][ T6937] xt_CT: No such helper "snmp"
[   80.813779][ T6958] netlink: 4 bytes leftover after parsing attributes in process `syz.1.484'.
[   81.255318][ T6983] xt_hashlimit: size too large, truncated to 1048576
[   81.264855][   T24] cfg80211: failed to load regulatory.db
[   81.379404][ T6981] netlink: 14 bytes leftover after parsing attributes in process `syz.2.494'.
[   81.797617][ T6981] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   81.808232][ T6981] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   81.815108][ T6981] bond0 (unregistering): Released all slaves
[   81.917370][ T6993] lo speed is unknown, defaulting to 1000
[   82.044384][ T6999] netlink: 24 bytes leftover after parsing attributes in process `syz.0.500'.
[   82.056407][ T6999] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[   82.059644][ T6999] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[   82.064060][ T6999] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[   82.067358][ T6999] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[   82.121804][ T7004] xt_CT: You must specify a L4 protocol and not use inversions on it
[   82.262867][ T7012] syzkaller0: entered promiscuous mode
[   82.269451][ T7012] syzkaller0: entered allmulticast mode
[   83.151032][ T7018] syzkaller0: entered promiscuous mode
[   83.153267][ T7018] syzkaller0: entered allmulticast mode
[   83.963914][ T7030] tipc: Started in network mode
[   83.972280][ T7030] tipc: Node identity 4, cluster identity 4711
[   83.974482][ T7030] tipc: Node number set to 4
[   84.054015][ T7037] netlink: 52 bytes leftover after parsing attributes in process `syz.0.515'.
[   84.107499][ T7045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.519'.
[   84.110978][ T7045] netlink: 12 bytes leftover after parsing attributes in process `syz.1.519'.
[   84.136018][ T7047] No such timeout policy "syz0"
[   84.537486][ T7088] netlink: 'syz.1.539': attribute type 11 has an invalid length.
[   84.584427][ T7090] lo speed is unknown, defaulting to 1000
[   84.618654][ T7097] netlink: 16 bytes leftover after parsing attributes in process `syz.2.540'.
[   84.632119][ T7097] netlink: 20 bytes leftover after parsing attributes in process `syz.2.540'.
[   84.644002][ T7097] geneve2: entered allmulticast mode
[   84.724119][  T791] IPVS: starting estimator thread 0...
[   84.842391][ T7106] IPVS: using max 79 ests per chain, 189600 per kthread
[   84.898369][ T7114] lo speed is unknown, defaulting to 1000
[   85.042216][ T7119] nbd0: detected capacity change from 0 to 127
[   85.046516][   T56] block nbd0: Receive control failed (result -32)
[   85.055547][ T6802] block nbd0: Dead connection, failed to find a fallback
[   85.058595][ T6802] block nbd0: shutting down sockets
[   85.060959][ T6802] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   85.074617][ T6802] Buffer I/O error on dev nbd0, logical block 0, async page read
[   85.095536][ T6802] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   85.105267][ T6802] Buffer I/O error on dev nbd0, logical block 1, async page read
[   85.108560][ T6802] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   85.114227][ T6802] Buffer I/O error on dev nbd0, logical block 2, async page read
[   85.117641][ T6802] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   85.121933][ T6802] Buffer I/O error on dev nbd0, logical block 3, async page read
[   85.125735][ T6802] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   85.129827][ T6802] Buffer I/O error on dev nbd0, logical block 0, async page read
[   85.135586][ T6802] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   85.139546][ T6802] Buffer I/O error on dev nbd0, logical block 1, async page read
[   85.147366][ T6802] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   85.151725][ T6802] Buffer I/O error on dev nbd0, logical block 2, async page read
[   85.160150][ T6802] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   85.165200][ T6802] Buffer I/O error on dev nbd0, logical block 3, async page read
[   85.168682][ T6802] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   85.182137][ T6802] Buffer I/O error on dev nbd0, logical block 0, async page read
[   85.185605][ T6802] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   85.189374][ T6802] Buffer I/O error on dev nbd0, logical block 1, async page read
[   85.198486][ T6802] ldm_validate_partition_table(): Disk read failed.
[   85.203588][ T6802] Dev nbd0: unable to read RDB block 0
[   85.207717][ T6802]  nbd0: unable to read partition table
[   85.226224][ T6802] ldm_validate_partition_table(): Disk read failed.
[   85.231577][ T6802] Dev nbd0: unable to read RDB block 0
[   85.238825][ T6802]  nbd0: unable to read partition table
[   85.566653][ T7135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.558'.
[   85.835272][   T24] IPVS: starting estimator thread 0...
[   85.926933][ T7155] netlink: 'syz.2.568': attribute type 2 has an invalid length.
[   85.942205][ T7158] IPVS: using max 79 ests per chain, 189600 per kthread
[   86.110129][ T7147] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   86.114544][ T7147] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   86.118314][ T7147] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   86.121962][ T7147] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   86.188720][ T7153] bridge_slave_0: left allmulticast mode
[   86.190791][ T7153] bridge_slave_0: left promiscuous mode
[   86.193938][ T7153] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.200855][ T7153] bridge_slave_1: left allmulticast mode
[   86.205261][ T7153] bridge_slave_1: left promiscuous mode
[   86.208511][ T7153] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.216543][ T7153] bond0: (slave bond_slave_0): Releasing backup interface
[   86.221443][ T7153] bond0: (slave bond_slave_1): Releasing backup interface
[   86.234552][ T7153] team0: Port device team_slave_0 removed
[   86.238239][ T7153] team0: Port device team_slave_1 removed
[   86.240451][ T7153] batman_adv: batadv0: Removing interface: batadv_slave_0
[   86.245052][ T7153] batman_adv: batadv0: Removing interface: batadv_slave_1
[   86.362998][ T5910] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[   86.370376][ T7167] netlink: 28 bytes leftover after parsing attributes in process `syz.2.571'.
[   86.619072][ T7179] netlink: 12 bytes leftover after parsing attributes in process `syz.1.576'.
[   86.995343][ T7197] netlink: 'syz.1.584': attribute type 10 has an invalid length.
[   86.998702][ T7197] netlink: 40 bytes leftover after parsing attributes in process `syz.1.584'.
[   87.008160][ T7197] veth0_vlan: left promiscuous mode
[   87.010486][ T7197] veth0_vlan: entered promiscuous mode
[   87.013338][ T7197] veth0_vlan: entered allmulticast mode
[   87.019114][ T7197] bridge0: port 1(veth0_vlan) entered blocking state
[   87.024474][ T7197] bridge0: port 1(veth0_vlan) entered disabled state
[   87.029991][ T7197] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[   87.296191][ T7214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.592'.
[   87.447816][ T7220] netlink: 8 bytes leftover after parsing attributes in process `syz.0.595'.
[   88.083284][ T7247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.607'.
[   88.123941][ T7252] xt_connbytes: Forcing CT accounting to be enabled
[   88.126893][ T7252] Cannot find set identified by id 0 to match
[   88.196713][ T7259] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   88.428841][ T7271] macvlan0: entered promiscuous mode
[   88.438003][ T7271] netlink: 'syz.2.618': attribute type 1 has an invalid length.
[   88.441234][ T7271] netlink: 'syz.2.618': attribute type 2 has an invalid length.
[   88.605827][ T7279] tipc: Started in network mode
[   88.607524][ T7279] tipc: Node identity 3eba460fd0f6, cluster identity 4711
[   88.610003][ T7279] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   88.641546][ T7279] syzkaller0: entered promiscuous mode
[   88.643836][ T7279] syzkaller0: entered allmulticast mode
[   88.646525][ T7279] tipc: Resetting bearer <eth:syzkaller0>
[   88.665890][ T7278] tipc: Resetting bearer <eth:syzkaller0>
[   88.873855][ T7243] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[   89.600831][ T7278] tipc: Disabling bearer <eth:syzkaller0>
[   89.931290][ T7324] netlink: 'syz.2.642': attribute type 83 has an invalid length.
[   90.085323][ T7332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.646'.
[   90.093784][ T7332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.646'.
[   90.122625][ T5850] Bluetooth: hci0: command 0x0c1a tx timeout
[   90.140356][ T7337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.649'.
[   90.334845][ T7355] lo speed is unknown, defaulting to 1000
[   90.494955][ T7373] xt_TCPMSS: Only works on TCP SYN packets
[   90.843312][ T2244] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[   91.266266][ T7414] netlink: 4 bytes leftover after parsing attributes in process `syz.1.683'.
[   91.394389][ T7422] netlink: 'syz.0.687': attribute type 39 has an invalid length.
[   91.605125][ T7442] trusted_key: syz.1.698 sent an empty control message without MSG_MORE.
[   91.737497][ T7458] netlink: 180 bytes leftover after parsing attributes in process `syz.0.705'.
[   91.837031][ T7468] netlink: 'syz.0.710': attribute type 46 has an invalid length.
[   92.044087][ T7480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.713'.
[   92.054073][ T7480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.713'.
[   92.071308][ T7480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.713'.
[   92.090644][ T7482] lo speed is unknown, defaulting to 1000
[   92.107761][ T7473] netlink: 'syz.1.712': attribute type 1 has an invalid length.
[   92.111049][ T7473] netlink: 784 bytes leftover after parsing attributes in process `syz.1.712'.
[   92.124639][ T1090] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[   93.424146][ T7519] sctp: [Deprecated]: syz.1.728 (pid 7519) Use of struct sctp_assoc_value in delayed_ack socket option.
[   93.424146][ T7519] Use struct sctp_sack_info instead
[   93.713176][ T7521] netlink: 'syz.0.729': attribute type 1 has an invalid length.
[   93.748310][ T7523] netlink: 4 bytes leftover after parsing attributes in process `syz.0.730'.
[   93.973396][ T7533] netlink: 28 bytes leftover after parsing attributes in process `syz.2.735'.
[   93.979079][ T7533] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.983267][ T7533] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.045047][ T2244] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[   94.118623][ T7543] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[   94.197149][ T7545] lo speed is unknown, defaulting to 1000
[   94.237617][ T7549] netlink: 4 bytes leftover after parsing attributes in process `syz.0.741'.
[   94.290087][ T7545] netlink: 'syz.0.741': attribute type 21 has an invalid length.
[   94.300110][ T7545] netlink: 132 bytes leftover after parsing attributes in process `syz.0.741'.
[   94.315450][ T7545] netlink: 'syz.0.741': attribute type 13 has an invalid length.
[   94.318928][ T7545] netlink: 'syz.0.741': attribute type 17 has an invalid length.
[   94.378169][ T7557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.744'.
[   94.473635][ T7562] netlink: 'syz.1.743': attribute type 16 has an invalid length.
[   94.476140][ T7562] netlink: 'syz.1.743': attribute type 17 has an invalid length.
[   94.506088][ T7562] 8021q: adding VLAN 0 to HW filter on device team0
[   94.516877][ T7562] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   94.522379][  T791] lo speed is unknown, defaulting to 1000
[   94.527443][  T791] syz1: Port: 1 Link ACTIVE
[   94.559263][ T7560] lo speed is unknown, defaulting to 1000
[   95.343817][ T7585] nbd: socks must be embedded in a SOCK_ITEM attr
[   95.346179][ T7585] block nbd1: shutting down sockets
[   95.507940][ T7608] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   95.526560][ T7610] bridge_slave_1: default FDB implementation only supports local addresses
[   95.577251][ T7613] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[   95.927958][ T7649] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[   95.936332][ T7649] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[   96.602376][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   96.615243][ T7697] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[   96.661946][ T7697] netlink: 'syz.1.800': attribute type 10 has an invalid length.
[   96.671300][ T7697] mac80211_hwsim hwsim6 wlan1: left allmulticast mode
[   96.686365][ T7697] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   96.690200][ T7697] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[   96.713803][ T7702] gtp0: entered promiscuous mode
[   96.715983][ T7702] gtp0: entered allmulticast mode
[   97.333812][ T7738] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0
[   97.347280][ T7738] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0
[   97.350895][ T7738] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0
[   97.353108][ T7739] xt_CT: No such helper "pptp"
[   97.367267][ T7741] __nla_validate_parse: 5 callbacks suppressed
[   97.367280][ T7741] netlink: 4 bytes leftover after parsing attributes in process `syz.0.820'.
[   97.376356][ T7738] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0
[   97.380158][ T7738] geneve3: entered promiscuous mode
[   97.463825][ T7743] netlink: 268 bytes leftover after parsing attributes in process `syz.2.821'.
[   97.476234][ T7743] unsupported nla_type 65024
[   97.886264][ T1089] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[   97.940120][ T7792] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   97.944041][ T7792] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   97.947832][ T7792] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   97.950990][ T7792] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   97.963578][ T7794] veth1_to_batadv: mtu greater than device maximum
[   98.301399][ T7824] delete_channel: no stack
[   98.590999][ T7849] syzkaller0: entered promiscuous mode
[   98.594046][ T7849] syzkaller0: entered allmulticast mode
[   98.876977][ T7869] netlink: 'syz.2.879': attribute type 1 has an invalid length.
[   98.879921][ T7869] netlink: 120 bytes leftover after parsing attributes in process `syz.2.879'.
[   99.927059][ T7910] netlink: 'syz.0.895': attribute type 62 has an invalid length.
[  100.018995][ T7921] netlink: 'syz.2.898': attribute type 3 has an invalid length.
[  100.389640][ T7951] netlink: 8 bytes leftover after parsing attributes in process `syz.0.906'.
[  100.501632][ T7962] sctp: [Deprecated]: syz.0.910 (pid 7962) Use of int in max_burst socket option.
[  100.501632][ T7962] Use struct sctp_assoc_value instead
[  100.837279][ T7984] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  101.013045][ T7997] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2
[  101.016333][ T7997] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0
[  102.210487][ T8024] lo speed is unknown, defaulting to 1000
[  102.698778][ T8049] netlink: 'syz.2.944': attribute type 1 has an invalid length.
[  102.744937][ T8049] bond0: entered promiscuous mode
[  102.748295][ T8049] 8021q: adding VLAN 0 to HW filter on device bond0
[  102.767513][ T8055] 8021q: adding VLAN 0 to HW filter on device bond0
[  102.770475][ T8055] bond0: (slave vcan1): The slave device specified does not support setting the MAC address
[  102.775981][ T8055] bond0: (slave vcan1): Setting fail_over_mac to active for active-backup mode
[  102.783455][ T8055] bond0: (slave vcan1): making interface the new active one
[  102.786763][ T8055] vcan1: entered promiscuous mode
[  102.791727][ T8055] bond0: (slave vcan1): Enslaving as an active interface with an up link
[  102.795578][ T8057] netlink: 'syz.0.948': attribute type 23 has an invalid length.
[  103.782863][ T8123] block nbd1: server does not support multiple connections per device.
[  103.787406][ T8123] block nbd1: shutting down sockets
[  104.489255][ T8179] sctp: [Deprecated]: syz.2.993 (pid 8179) Use of struct sctp_assoc_value in delayed_ack socket option.
[  104.489255][ T8179] Use struct sctp_sack_info instead
[  104.698311][ T8194] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  104.763538][ T8196] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  105.184238][ T8203] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  106.101540][ T8248] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1026'.
[  106.202668][ T8256] netlink: 4436 bytes leftover after parsing attributes in process `syz.1.1030'.
[  106.205761][ T8256] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[  106.284274][ T8259] lo speed is unknown, defaulting to 1000
[  106.346842][ T8267] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1035'.
[  106.385145][ T8273] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1035'.
[  106.398089][ T8268] lo speed is unknown, defaulting to 1000
[  106.441647][ T8277] pim6reg1: entered promiscuous mode
[  106.445383][ T8277] pim6reg1: entered allmulticast mode
[  106.580535][ T8283] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  106.752896][ T8292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1043'.
[  106.889790][ T8304] bridge: RTM_NEWNEIGH with invalid state 0x31
[  107.037124][ T8317] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  107.040729][ T8317] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  107.116572][ T8317] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  107.123018][ T8317] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  107.190900][ T8317] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  107.206974][ T8317] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  107.266890][ T8317] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  107.270817][ T8317] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  107.354166][ T8339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1067'.
[  107.357080][ T8339] netlink: 'syz.1.1067': attribute type 1 has an invalid length.
[  107.388557][ T8317] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  107.394714][ T8317] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  107.421161][ T8317] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  107.426945][ T8317] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  107.446364][ T8317] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  107.449068][ T8317] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  107.457611][ T8317] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  107.460967][ T8317] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  107.495057][ T8347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1070'.
[  107.640614][ T8359] netlink: 'syz.1.1076': attribute type 13 has an invalid length.
[  107.860618][ T8359] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  107.864884][ T8359] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  107.867776][ T8359] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  107.870892][ T8359] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  107.884338][ T5910] lo speed is unknown, defaulting to 1000
[  107.886276][ T5910] syz1: Port: 1 Link DOWN
[  107.900515][ T8373] lo speed is unknown, defaulting to 1000
[  108.015001][ T8383] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  108.183907][ T8398] netlink: 'syz.2.1094': attribute type 1 has an invalid length.
[  108.191373][ T8398] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1094'.
[  108.517551][ T8427] netlink: 'syz.2.1107': attribute type 8 has an invalid length.
[  108.520217][ T8427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1107'.
[  108.618762][ T8431] lo speed is unknown, defaulting to 1000
[  108.635102][ T8435] netlink: 'syz.2.1111': attribute type 33 has an invalid length.
[  108.637949][ T8435] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1111'.
[  108.670455][ T8436] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  108.753675][ T8431] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  108.823557][ T8431] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  109.430385][ T8476] netlink: 'syz.0.1129': attribute type 11 has an invalid length.
[  109.658742][ T5850] Bluetooth: hci2: link tx timeout
[  109.661782][ T5850] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  109.671939][ T8494] netlink: zone id is out of range
[  109.676812][ T8494] netlink: zone id is out of range
[  109.679160][ T8494] netlink: zone id is out of range
[  109.740952][ T8494] netlink: zone id is out of range
[  109.775264][ T8494] netlink: zone id is out of range
[  109.787255][ T8494] netlink: zone id is out of range
[  109.797230][ T8494] netlink: zone id is out of range
[  109.805000][ T8494] netlink: zone id is out of range
[  109.817000][ T8494] netlink: zone id is out of range
[  109.997880][ T8502] netlink: 'syz.2.1140': attribute type 3 has an invalid length.
[  110.098534][ T8510] sock: sock_timestamping_bind_phc: sock not bind to device
[  111.722225][ T5850] Bluetooth: hci2: command 0x0406 tx timeout
[  111.741276][ T8561] __nla_validate_parse: 6 callbacks suppressed
[  111.741293][ T8561] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1166'.
[  111.975132][ T8570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1170'.
[  112.061001][ T8575] netlink: 428 bytes leftover after parsing attributes in process `syz.1.1172'.
[  112.068526][ T8575] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1172'.
[  112.085039][ T8577] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1173'.
[  112.374683][ T8605] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1183'.
[  112.378473][ T8605] net_ratelimit: 7 callbacks suppressed
[  112.378486][ T8605] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  112.986116][ T8621] bridge3: entered promiscuous mode
[  112.987938][ T8621] bridge3: entered allmulticast mode
[  113.346986][ T8641] netlink: 'syz.1.1198': attribute type 1 has an invalid length.
[  113.396936][ T8644] tipc: Cannot configure node identity twice
[  113.782267][ T8667] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1211'.
[  113.785877][ T8667] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1211'.
[  114.024530][ T8683] Bluetooth: MGMT ver 1.23
[  115.381524][ T8721] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  115.393137][ T8721] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1233'.
[  115.718768][ T8740] !: renamed from dummy0 (while UP)
[  115.875570][ T8748] lo speed is unknown, defaulting to 1000
[  116.178235][ T8766] xt_CT: You must specify a L4 protocol and not use inversions on it
[  116.260849][ T8774] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1242'.
[  117.249470][ T8858] netlink: 'syz.2.1264': attribute type 3 has an invalid length.
[  117.256082][ T8858] __nla_validate_parse: 1 callbacks suppressed
[  117.256097][ T8858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1264'.
[  117.258479][ T8860] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  117.423288][ T8874] xt_hashlimit: overflow, try lower: 18446744073709551615/7
[  117.495230][ T8881] netlink: 'syz.2.1274': attribute type 3 has an invalid length.
[  117.498627][ T8881] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1274'.
[  117.548235][ T8883] netlink: 'syz.2.1275': attribute type 1 has an invalid length.
[  117.617527][ T8883] 8021q: adding VLAN 0 to HW filter on device bond1
[  117.635993][ T8885] 8021q: adding VLAN 0 to HW filter on device bond1
[  117.640274][ T8885] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  117.650972][ T8885] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  117.693413][   T33] audit: type=1800 audit(1751967659.212:2): pid=8865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1267" name="cgroup.controllers" dev="tmpfs" ino=1883 res=0 errno=0
[  117.705177][ T8883] veth3: entered promiscuous mode
[  117.711751][ T8883] bond1: (slave veth3): Enslaving as an active interface with a down link
[  118.352294][ T8914] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1289'.
[  118.357958][ T8914] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1289'.
[  118.365246][ T8914] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1289'.
[  118.365710][ T8912] netlink: 'syz.2.1288': attribute type 13 has an invalid length.
[  118.424417][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  118.550025][ T8925] openvswitch: netlink: IP tunnel TTL not specified.
[  118.646916][ T8933] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1298'.
[  118.656849][ T8933] netlink: 'syz.2.1298': attribute type 4 has an invalid length.
[  118.767306][ T8931] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1297'.
[  118.777600][ T8931] tipc: Started in network mode
[  118.781675][ T8931] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  118.791951][ T8931] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  118.813718][ T8939] netlink: 216 bytes leftover after parsing attributes in process `syz.2.1301'.
[  118.817506][ T8939] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1301'.
[  118.821142][ T8939] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1301'.
[  119.305936][ T8979] batadv_slave_1: entered promiscuous mode
[  119.341116][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  119.941419][ T9011] IPv6: NLM_F_CREATE should be specified when creating new route
[  120.297054][ T9027] netlink: 'syz.2.1342': attribute type 5 has an invalid length.
[  120.304187][ T9027] ip6erspan0: entered promiscuous mode
[  120.419880][ T9039] netlink: 'syz.1.1347': attribute type 11 has an invalid length.
[  120.481589][ T9041] veth0: entered promiscuous mode
[  120.910877][ T9040] veth0: left promiscuous mode
[  121.616404][ T9144] netlink: zone id is out of range
[  121.618934][ T9144] netlink: zone id is out of range
[  121.660457][ T9144] netlink: set zone limit has 4 unknown bytes
[  121.689518][ T9148] veth0: entered promiscuous mode
[  121.693127][ T9147] veth0: left promiscuous mode
[  122.120013][ T9172] lo speed is unknown, defaulting to 1000
[  122.366691][ T9183] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  123.278868][ T9247] __nla_validate_parse: 12 callbacks suppressed
[  123.278884][ T9247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1433'.
[  123.448475][ T9267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1446'.
[  123.463031][ T9267] vlan3: entered promiscuous mode
[  123.464934][ T9267] vlan2: entered promiscuous mode
[  123.466609][ T9267] gretap0: entered promiscuous mode
[  123.565813][ T9277] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  123.633373][ T9285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1454'.
[  123.657172][ T9285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1454'.
[  123.707485][ T9293] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1458'.
[  123.711342][ T9293] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1458'.
[  123.718028][ T9293] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1458'.
[  123.778951][ T9301] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1462'.
[  123.787445][ T9301] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1462'.
[  123.917281][ T9311] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1467'.
[  124.122867][ T5850] Bluetooth: hci2: command 0x0406 tx timeout
[  124.913687][ T9317] netlink: 'syz.0.1470': attribute type 2 has an invalid length.
[  124.916974][ T9320] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  124.999037][ T9325] pimreg: entered allmulticast mode
[  125.004657][ T9325] pimreg: left allmulticast mode
[  125.155139][ T9336] macsec0: entered promiscuous mode
[  125.159445][ T9336] veth1_macvtap: left promiscuous mode
[  125.173559][ T9336] macsec0 (unregistering): left promiscuous mode
[  125.304373][ T9342] netlink: 'syz.2.1481': attribute type 11 has an invalid length.
[  125.487341][ T9352] lo speed is unknown, defaulting to 1000
[  125.597589][ T9352] netlink: 'syz.2.1486': attribute type 4 has an invalid length.
[  126.177114][ T9385] netlink: 'syz.0.1489': attribute type 39 has an invalid length.
[  126.494676][ T9403] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  126.527288][ T9405] netlink: 'syz.1.1498': attribute type 1 has an invalid length.
[  126.674803][ T9416] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan0, syncid = 1, id = 0
[  126.684841][ T9415] IPVS: stopping backup sync thread 9416 ...
[  126.827423][ T9424] syz.1.1507 (9424) used obsolete PPPIOCDETACH ioctl
[  127.041283][ T9436] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  127.056368][ T9436] syzkaller0: entered promiscuous mode
[  127.061162][ T9436] syzkaller0: entered allmulticast mode
[  127.071059][ T9436] tipc: Resetting bearer <eth:syzkaller0>
[  127.076934][ T9435] tipc: Resetting bearer <eth:syzkaller0>
[  127.088441][ T9435] tipc: Disabling bearer <eth:syzkaller0>
[  127.485473][ T9484] tun0: tun_chr_ioctl cmd 1074025677
[  127.488004][ T9484] tun0: linktype set to 778
[  128.738168][ T9539] syzkaller1: entered promiscuous mode
[  128.749230][ T9539] syzkaller1: entered allmulticast mode
[  129.529099][ T9585] lo speed is unknown, defaulting to 1000
[  129.809225][ T9602] __nla_validate_parse: 12 callbacks suppressed
[  129.809242][ T9602] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1589'.
[  129.841085][ T9602] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1589'.
[  129.849495][ T9602] Bluetooth: MGMT ver 1.23
[  130.108302][ T9621] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1599'.
[  130.119836][ T9621] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1599'.
[  130.143512][ T9621] netlink: 'syz.2.1599': attribute type 1 has an invalid length.
[  130.146797][ T9621] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1599'.
[  130.357060][ T9637] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1607'.
[  130.360877][ T9637] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1607'.
[  130.441273][ T9646] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  130.444528][ T9641] lo speed is unknown, defaulting to 1000
[  130.445008][ T9646] syzkaller0: entered promiscuous mode
[  130.449060][ T9646] syzkaller0: entered allmulticast mode
[  130.482579][ T9646] tipc: Resetting bearer <eth:syzkaller0>
[  130.491809][ T9644] tipc: Resetting bearer <eth:syzkaller0>
[  130.507798][ T9644] tipc: Disabling bearer <eth:syzkaller0>
[  130.830233][ T9674] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  130.889695][ T9676] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1625'.
[  131.166104][ T9706] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1639'.
[  131.232300][ T9712] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1640'.
[  132.062272][ T9763] tipc: Invalid UDP bearer configuration
[  132.062312][ T9763] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  132.324982][ T9784] netlink: 'syz.1.1674': attribute type 10 has an invalid length.
[  132.328608][ T9784] bridge0: port 1(netdevsim0) entered blocking state
[  132.331779][ T9784] bridge0: port 1(netdevsim0) entered disabled state
[  132.337005][ T9784] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  132.341256][ T9784] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  132.446259][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  132.645058][ T9806] netlink: 'syz.1.1684': attribute type 1 has an invalid length.
[  132.648362][ T9806] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  132.675662][ T9807] macsec1: entered promiscuous mode
[  132.677437][ T9807] macsec1: entered allmulticast mode
[  132.687396][ T9809] netlink: 'syz.1.1685': attribute type 4 has an invalid length.
[  132.689979][ T9809] netlink: 'syz.1.1685': attribute type 2 has an invalid length.
[  133.065246][ T9819] netdevsim netdevsim1 netdevsim0 (unregistering): left allmulticast mode
[  133.074825][ T9819] bridge0: port 1(netdevsim0) entered disabled state
[  133.725904][ T5850] Bluetooth: hci2: command 0x0406 tx timeout
[  134.362440][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  134.433380][ T9905] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  134.997440][ T9933] __nla_validate_parse: 3 callbacks suppressed
[  134.997458][ T9933] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1736'.
[  135.215893][ T9940] No such timeout policy "syz1"
[  135.267298][ T9942] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-tlb(5)
[  135.758480][ T9965] netlink: 'syz.2.1752': attribute type 1 has an invalid length.
[  135.769254][ T9965] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1752'.
[  135.779581][ T9965] netlink: 'syz.2.1752': attribute type 1 has an invalid length.
[  135.814514][ T5203] Bluetooth: hci2: command 0x0406 tx timeout
[  136.127891][ T9978] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1758'.
[  136.326228][ T9990] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1764'.
[  136.460950][ T9996] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  136.742504][T10007] lo speed is unknown, defaulting to 1000
[  137.587601][T10032] netlink: 'syz.2.1777': attribute type 1 has an invalid length.
[  137.590533][T10032] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1777'.
[  137.926432][T10045] netlink: 'syz.0.1781': attribute type 1 has an invalid length.
[  138.149908][ T9935] syz.1.1737: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  138.166603][ T9935] CPU: 1 UID: 0 PID: 9935 Comm: syz.1.1737 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  138.166624][ T9935] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  138.166633][ T9935] Call Trace:
[  138.166639][ T9935]  <TASK>
[  138.166644][ T9935]  dump_stack_lvl+0x189/0x250
[  138.166674][ T9935]  ? __pfx_dump_stack_lvl+0x10/0x10
[  138.166691][ T9935]  ? __pfx__printk+0x10/0x10
[  138.166706][ T9935]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  138.166720][ T9935]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  138.166733][ T9935]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  138.166748][ T9935]  warn_alloc+0x214/0x310
[  138.166767][ T9935]  ? __pfx_warn_alloc+0x10/0x10
[  138.166788][ T9935]  ? __get_vm_area_node+0x28f/0x300
[  138.166801][ T9935]  ? hash_netnet4_resize+0x244/0x1c20
[  138.166818][ T9935]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  138.166831][ T9935]  ? __x64_sys_sendmsg+0x19b/0x260
[  138.166869][ T9935]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  138.166886][ T9935]  ? rcu_is_watching+0x15/0xb0
[  138.166906][ T9935]  ? hash_netnet4_resize+0x244/0x1c20
[  138.166917][ T9935]  ? hash_netnet4_resize+0x244/0x1c20
[  138.166928][ T9935]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  138.166942][ T9935]  ? hash_netnet4_resize+0x244/0x1c20
[  138.166960][ T9935]  hash_netnet4_resize+0x244/0x1c20
[  138.166976][ T9935]  ? __pfx_hash_netnet4_add+0x10/0x10
[  138.166990][ T9935]  ? __pfx_hash_netnet4_uadt+0x10/0x10
[  138.167007][ T9935]  ? lockdep_hardirqs_on+0x9c/0x150
[  138.167040][ T9935]  call_ad+0x44e/0xb00
[  138.167059][ T9935]  ? __pfx_call_ad+0x10/0x10
[  138.167111][ T9935]  ? __nla_parse+0x40/0x60
[  138.167134][ T9935]  ip_set_ad+0x791/0x930
[  138.167152][ T9935]  ? __pfx_ip_set_ad+0x10/0x10
[  138.167161][ T9935]  ? __mutex_lock+0x330/0xe80
[  138.167209][ T9935]  nfnetlink_rcv_msg+0xb4d/0x1130
[  138.167229][ T9935]  ? nfnetlink_rcv_msg+0x20d/0x1130
[  138.167259][ T9935]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  138.167297][ T9935]  ? __lock_acquire+0xab9/0xd20
[  138.167326][ T9935]  netlink_rcv_skb+0x208/0x470
[  138.167341][ T9935]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  138.167358][ T9935]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  138.167379][ T9935]  ? bpf_lsm_capable+0x9/0x20
[  138.167391][ T9935]  ? security_capable+0x7e/0x2e0
[  138.167419][ T9935]  nfnetlink_rcv+0x26a/0x2520
[  138.167439][ T9935]  ? unwind_get_return_address+0x4d/0x90
[  138.167457][ T9935]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  138.167472][ T9935]  ? arch_stack_walk+0xfc/0x150
[  138.167493][ T9935]  ? stack_trace_save+0x9c/0xe0
[  138.167508][ T9935]  ? stack_depot_save_flags+0x40/0x900
[  138.167527][ T9935]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  138.167545][ T9935]  ? kasan_save_track+0x4f/0x80
[  138.167562][ T9935]  ? kasan_save_track+0x3e/0x80
[  138.167584][ T9935]  ? __lock_acquire+0xab9/0xd20
[  138.167618][ T9935]  ? __lock_acquire+0xab9/0xd20
[  138.167641][ T9935]  ? netlink_deliver_tap+0x2e/0x1b0
[  138.167659][ T9935]  ? netlink_deliver_tap+0x2e/0x1b0
[  138.167672][ T9935]  ? netlink_deliver_tap+0x2e/0x1b0
[  138.167690][ T9935]  netlink_unicast+0x75b/0x8d0
[  138.167710][ T9935]  netlink_sendmsg+0x805/0xb30
[  138.167730][ T9935]  ? __pfx_netlink_sendmsg+0x10/0x10
[  138.167748][ T9935]  ? aa_sock_msg_perm+0x94/0x160
[  138.167764][ T9935]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  138.167777][ T9935]  ? __pfx_netlink_sendmsg+0x10/0x10
[  138.167790][ T9935]  __sock_sendmsg+0x21c/0x270
[  138.167810][ T9935]  ____sys_sendmsg+0x505/0x830
[  138.167828][ T9935]  ? __pfx_____sys_sendmsg+0x10/0x10
[  138.167849][ T9935]  ? import_iovec+0x74/0xa0
[  138.167864][ T9935]  ___sys_sendmsg+0x21f/0x2a0
[  138.167879][ T9935]  ? __pfx____sys_sendmsg+0x10/0x10
[  138.167920][ T9935]  ? __fget_files+0x2a/0x420
[  138.167933][ T9935]  ? __fget_files+0x3a0/0x420
[  138.167954][ T9935]  __x64_sys_sendmsg+0x19b/0x260
[  138.167971][ T9935]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  138.167993][ T9935]  ? rcu_is_watching+0x15/0xb0
[  138.168015][ T9935]  ? do_syscall_64+0xbe/0x3b0
[  138.168029][ T9935]  do_syscall_64+0xfa/0x3b0
[  138.168039][ T9935]  ? lockdep_hardirqs_on+0x9c/0x150
[  138.168056][ T9935]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.168100][ T9935]  ? exc_page_fault+0x9f/0xf0
[  138.168118][ T9935]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.168130][ T9935] RIP: 0033:0x7fc13858e929
[  138.168143][ T9935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  138.168153][ T9935] RSP: 002b:00007fc139331038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  138.168168][ T9935] RAX: ffffffffffffffda RBX: 00007fc1387b5fa0 RCX: 00007fc13858e929
[  138.168177][ T9935] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000007
[  138.168184][ T9935] RBP: 00007fc138610b39 R08: 0000000000000000 R09: 0000000000000000
[  138.168192][ T9935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  138.168199][ T9935] R13: 0000000000000000 R14: 00007fc1387b5fa0 R15: 00007ffd3b277838
[  138.168220][ T9935]  </TASK>
[  138.168225][ T9935] Mem-Info:
[  138.300234][T10067] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1792'.
[  138.301673][ T9935] active_anon:4926 inactive_anon:0 isolated_anon:0
[  138.301673][ T9935]  active_file:1081 inactive_file:38242 isolated_file:0
[  138.301673][ T9935]  unevictable:1768 dirty:341 writeback:0
[  138.301673][ T9935]  slab_reclaimable:9434 slab_unreclaimable:96805
[  138.301673][ T9935]  mapped:18236 shmem:2470 pagetables:1061
[  138.301673][ T9935]  sec_pagetables:0 bounce:0
[  138.301673][ T9935]  kernel_misc_reclaimable:0
[  138.301673][ T9935]  free:256119 free_pcp:16572 free_cma:0
[  138.433279][ T9935] Node 0 active_anon:11056kB inactive_anon:0kB active_file:1960kB inactive_file:91272kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:40696kB dirty:424kB writeback:0kB shmem:5020kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7296kB pagetables:2428kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  138.446715][ T9935] Node 1 active_anon:8664kB inactive_anon:0kB active_file:2364kB inactive_file:61696kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:32252kB dirty:948kB writeback:0kB shmem:4860kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4396kB pagetables:1796kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  138.460751][ T9935] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  138.472917][ T9935] lowmem_reserve[]: 0 815 815 815 815
[  138.475262][ T9935] Node 0 DMA32 free:262732kB boost:0kB min:33716kB low:42144kB high:50572kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11044kB inactive_anon:0kB active_file:1960kB inactive_file:91272kB unevictable:3536kB writepending:424kB present:1556484kB managed:834740kB mlocked:0kB bounce:0kB free_pcp:39604kB local_pcp:17544kB free_cma:0kB
[  138.491016][ T9935] lowmem_reserve[]: 0 0 0 0 0
[  138.493355][ T9935] Node 1 DMA32 free:458616kB boost:0kB min:19168kB low:23960kB high:28752kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  138.505404][ T9935] lowmem_reserve[]: 0 0 854 854 854
[  138.507618][ T9935] Node 1 Normal free:287768kB boost:0kB min:36576kB low:45720kB high:54864kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8664kB inactive_anon:0kB active_file:2364kB inactive_file:61696kB unevictable:3536kB writepending:948kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:27040kB local_pcp:11428kB free_cma:0kB
[  138.520708][ T9935] lowmem_reserve[]: 0 0 0 0 0
[  138.523030][ T9935] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  138.528230][ T9935] Node 0 DMA32: 3*4kB (ME) 20*8kB (UE) 120*16kB (UE) 321*32kB (UM) 126*64kB (UM) 51*128kB (UE) 23*256kB (U) 7*512kB (UM) 11*1024kB (UM) 7*2048kB (UM) 49*4096kB (UM) = 262732kB
[  138.540443][ T9935] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  138.547041][ T9935] Node 1 Normal: 1130*4kB (U) 438*8kB (UME) 200*16kB (U) 258*32kB (UME) 56*64kB (UME) 4*128kB (UM) 2*256kB (M) 29*512kB (UM) 21*1024kB (UME) 5*2048kB (UM) 53*4096kB (UM) = 287768kB
[  138.554509][ T9935] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  138.558321][ T9935] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  138.563999][ T9935] 41779 total pagecache pages
[  138.565983][ T9935] 0 pages in swap cache
[  138.567685][ T9935] Free swap  = 124996kB
[  138.569402][ T9935] Total swap = 124996kB
[  138.571152][ T9935] 786301 pages RAM
[  138.572959][ T9935] 0 pages HighMem/MovableOnly
[  138.574896][ T9935] 240368 pages reserved
[  138.576615][ T9935] 0 pages cma reserved
[  138.612617][T10061] Cannot find del_set index 286 as target
[  138.657525][T10076] bridge_slave_0: left allmulticast mode
[  138.659512][T10076] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.674249][T10076] bridge_slave_1: left allmulticast mode
[  138.676253][T10076] bridge_slave_1: left promiscuous mode
[  138.678296][T10076] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.688663][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  138.710143][T10076] team0: Port device team_slave_0 removed
[  138.736747][T10076] team0: Port device team_slave_1 removed
[  138.739859][T10076] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  138.752830][T10076] batman_adv: batadv0: Removing interface: batadv_slave_0
[  138.783946][T10076] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  138.788307][T10076] batman_adv: batadv0: Removing interface: batadv_slave_1
[  138.822189][T10076] bond0: (slave vcan1): Releasing backup interface
[  138.826693][T10076] vcan1: left promiscuous mode
[  138.869074][T10076] bond1: (slave veth3): Releasing active interface
[  139.072942][T10108] syzkaller1: entered promiscuous mode
[  139.075429][T10108] syzkaller1: entered allmulticast mode
[  139.252689][ T2244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  139.261591][T10115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1811'.
[  139.388868][T10122] netlink: 'syz.1.1813': attribute type 10 has an invalid length.
[  139.401861][T10122] team0: Port device dummy0 added
[  140.400631][T10166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1834'.
[  140.406536][T10166] team0: entered promiscuous mode
[  140.408830][T10166] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  140.411978][T10166] team0: left promiscuous mode
[  140.864428][T10189] netlink: 'syz.1.1844': attribute type 12 has an invalid length.
[  140.867169][T10189] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.1844'.
[  140.909704][T10192] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1845'.
[  140.914080][T10192] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1845'.
[  141.447448][T10223] macsec2: entered promiscuous mode
[  141.449367][T10223] macsec2: entered allmulticast mode
[  141.451139][T10223] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode
[  141.664365][T10239] xt_CT: No such helper "snmp_trap"
[  141.721624][T10246] xt_TPROXY: Can be used only with -p tcp or -p udp
[  141.836289][T10256] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1875'.
[  142.311413][T10293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1890'.
[  142.316819][T10293] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1890'.
[  142.320751][T10293] netlink: 'syz.1.1890': attribute type 14 has an invalid length.
[  142.324170][T10293] netlink: 'syz.1.1890': attribute type 11 has an invalid length.
[  142.368399][T10298] openvswitch: netlink: IP tunnel dst address not specified
[  143.908541][T10414] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1944'.
[  143.918138][T10414] vlan2: entered allmulticast mode
[  143.920296][T10414] gretap0: entered allmulticast mode
[  143.959382][T10421] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1946'.
[  143.997559][T10423] netlink: 'syz.1.1947': attribute type 3 has an invalid length.
[  144.000950][T10423] netlink: 666 bytes leftover after parsing attributes in process `syz.1.1947'.
[  144.005967][T10425] syz_tun: entered allmulticast mode
[  144.174858][T10437] lo speed is unknown, defaulting to 1000
[  144.358086][T10450] netlink: 'syz.2.1959': attribute type 1 has an invalid length.
[  144.816086][T10484] netlink: 'syz.2.1974': attribute type 7 has an invalid length.
[  144.819301][T10484] netlink: 'syz.2.1974': attribute type 8 has an invalid length.
[  145.619168][T10568] __nla_validate_parse: 5 callbacks suppressed
[  145.619184][T10568] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2015'.
[  145.633692][T10568] macsec3: entered promiscuous mode
[  145.636734][T10568] macsec3: entered allmulticast mode
[  145.639675][T10568] gretap0: entered allmulticast mode
[  145.757905][T10584] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2024'.
[  145.981592][T10609] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  146.079094][T10621] xt_socket: unknown flags 0x8
[  146.837849][T10677] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2063'.
[  146.841742][T10677] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2063'.
[  146.868375][T10677] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check.
[  147.056386][T10689] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  147.469069][T10713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2080'.
[  147.475316][T10713] openvswitch: netlink: Missing key (keys=40, expected=100)
[  147.508845][T10715] netlink: 'syz.0.2083': attribute type 1 has an invalid length.
[  148.165406][T10767] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2107'.
[  148.326340][T10784] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2115'.
[  148.900136][T10826] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2135'.
[  149.204994][T10842] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2143'.
[  149.264534][T10852] netlink: 'syz.0.2148': attribute type 11 has an invalid length.
[  149.267068][T10852] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2148'.
[  150.084835][T10924] netlink: 'syz.0.2181': attribute type 1 has an invalid length.
[  150.287052][   T33] audit: type=1804 audit(1751967691.802:3): pid=10940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2189" name="/newroot/761/cgroup.controllers" dev="tmpfs" ino=3861 res=1 errno=0
[  150.297309][   T33] audit: type=1800 audit(1751967691.802:4): pid=10940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2189" name="cgroup.controllers" dev="tmpfs" ino=3861 res=0 errno=0
[  150.315261][   T33] audit: type=1800 audit(1751967691.812:5): pid=10940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2189" name="cgroup.controllers" dev="tmpfs" ino=3861 res=0 errno=0
[  150.554960][T10955] xt_policy: neither incoming nor outgoing policy selected
[  150.739182][T10972] __nla_validate_parse: 9 callbacks suppressed
[  150.739195][T10972] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2203'.
[  150.754124][T10972] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2203'.
[  150.781514][T10974] syzkaller1: entered promiscuous mode
[  150.784448][T10974] syzkaller1: entered allmulticast mode
[  150.828241][T10978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2208'.
[  150.889024][T10986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2212'.
[  150.894868][T10986] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2212'.
[  150.995082][T10997] lo speed is unknown, defaulting to 1000
[  151.050008][T10997] macsec4: entered promiscuous mode
[  151.053528][T10997] veth0: entered promiscuous mode
[  151.268144][T11029] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2229'.
[  151.616555][T11052] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2237'.
[  151.838942][T11062] lo speed is unknown, defaulting to 1000
[  152.366414][T11104] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2242'.
[  152.638331][T11129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2250'.
[  152.641597][T11129] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2250'.
[  153.630372][T11179] xt_hashlimit: size too large, truncated to 1048576
[  153.633650][T11179] xt_hashlimit: max too large, truncated to 1048576
[  153.948950][T11217] netlink: zone id is out of range
[  153.967205][T11218] ip6tnl1: entered promiscuous mode
[  154.026821][T11228] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  154.030016][T11228] IPv6: NLM_F_CREATE should be set when creating new route
[  154.218191][T11249] netlink: 'syz.0.2304': attribute type 2 has an invalid length.
[  154.878479][T11296] dvmrp1: entered allmulticast mode
[  154.885491][T11296] dvmrp1: left allmulticast mode
[  155.128802][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  155.134003][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  155.812817][T11371] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  155.918560][T11379] __nla_validate_parse: 8 callbacks suppressed
[  155.918572][T11379] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2362'.
[  156.018993][T11379] bond0 (unregistering): Released all slaves
[  156.115297][T11385] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2363'.
[  156.640084][T11432] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  156.715600][T11444] netlink: 'syz.1.2387': attribute type 4 has an invalid length.
[  156.776507][T11450] netlink: 'syz.1.2389': attribute type 21 has an invalid length.
[  156.779063][T11450] netlink: 'syz.1.2389': attribute type 22 has an invalid length.
[  156.801673][T11450] netlink: 'syz.1.2389': attribute type 23 has an invalid length.
[  156.822466][T11450] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2389'.
[  157.200129][T11500] IPVS: length: 163 != 8
[  157.235720][T11504] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2411'.
[  157.305450][T11512] netlink: 'syz.2.2414': attribute type 23 has an invalid length.
[  157.424105][T11527] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2420'.
[  157.726829][T11558] netlink: 'syz.1.2435': attribute type 15 has an invalid length.
[  157.729923][T11558] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2435'.
[  158.035308][T11582] netlink: 'syz.1.2445': attribute type 12 has an invalid length.
[  158.038552][T11582] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.2445'.
[  158.374231][T11602] netlink: 788 bytes leftover after parsing attributes in process `syz.2.2455'.
[  158.437279][T11608] netlink: 'syz.1.2458': attribute type 1 has an invalid length.
[  158.440665][T11608] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2458'.
[  158.445209][T11608] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2458'.
[  158.636487][T11628] ip_vti0: Master is either lo or non-ether device
[  159.779515][T11709] lo: entered allmulticast mode
[  159.781288][T11709] tunl0: entered allmulticast mode
[  159.783242][T11709] gre0: entered allmulticast mode
[  159.786094][T11709] erspan0: entered allmulticast mode
[  159.787863][T11709] ip_vti0: entered allmulticast mode
[  159.789685][T11709] ip6_vti0: entered allmulticast mode
[  159.791533][T11709] sit0: entered allmulticast mode
[  159.795005][T11709] ip6tnl0: entered allmulticast mode
[  159.796953][T11709] ip6gre0: entered allmulticast mode
[  159.798746][T11709] ip6gretap0: entered allmulticast mode
[  159.800618][T11709] bridge0: entered allmulticast mode
[  159.803702][T11709] vcan0: entered allmulticast mode
[  159.806013][T11709] team0: entered allmulticast mode
[  159.807959][T11709] dummy0: entered allmulticast mode
[  159.809704][T11709] nlmon0: entered allmulticast mode
[  159.811446][T11709] caif0: entered allmulticast mode
[  159.813357][T11709] veth0: entered allmulticast mode
[  159.815124][T11709] veth1: entered allmulticast mode
[  159.816843][T11709] wg1: entered allmulticast mode
[  159.818682][T11709] wg2: entered allmulticast mode
[  159.820439][T11709] veth0_to_bridge: entered allmulticast mode
[  159.822656][T11709] bridge_slave_0: entered allmulticast mode
[  159.824687][T11709] veth1_to_bridge: entered allmulticast mode
[  159.826639][T11709] bridge_slave_1: entered allmulticast mode
[  159.828609][T11709] veth0_to_bond: entered allmulticast mode
[  159.830687][T11709] bond_slave_0: entered allmulticast mode
[  159.832823][T11709] veth1_to_bond: entered allmulticast mode
[  159.834896][T11709] bond_slave_1: entered allmulticast mode
[  159.837411][T11709] veth0_to_team: entered allmulticast mode
[  159.839634][T11709] team_slave_0: entered allmulticast mode
[  159.841816][T11709] veth1_to_team: entered allmulticast mode
[  159.844164][T11709] team_slave_1: entered allmulticast mode
[  159.846388][T11709] veth0_to_batadv: entered allmulticast mode
[  159.848868][T11709] batadv_slave_0: entered allmulticast mode
[  159.850949][T11709] veth1_to_batadv: entered allmulticast mode
[  159.853638][T11709] batadv_slave_1: entered allmulticast mode
[  159.856112][T11709] xfrm0: entered allmulticast mode
[  159.857895][T11709] veth0_to_hsr: entered allmulticast mode
[  159.859921][T11709] hsr_slave_0: entered allmulticast mode
[  159.861917][T11709] veth1_to_hsr: entered allmulticast mode
[  159.864278][T11709] hsr_slave_1: entered allmulticast mode
[  159.866315][T11709] hsr0: entered allmulticast mode
[  159.868143][T11709] veth1_virt_wifi: entered allmulticast mode
[  159.870271][T11709] veth0_virt_wifi: entered allmulticast mode
[  159.872738][T11709] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  159.876132][T11709] veth1_vlan: entered allmulticast mode
[  159.878365][T11709] veth0_vlan: entered allmulticast mode
[  159.880322][T11709] vlan0: entered allmulticast mode
[  159.882627][T11709] vlan1: entered allmulticast mode
[  159.884476][T11709] macvlan1: entered allmulticast mode
[  159.886478][T11709] ipvlan0: entered allmulticast mode
[  159.888374][T11709] ipvlan1: entered allmulticast mode
[  159.890280][T11709] veth1_macvtap: entered allmulticast mode
[  159.892872][T11709] veth0_macvtap: entered allmulticast mode
[  159.895015][T11709] macsec0: entered allmulticast mode
[  159.897502][T11709] geneve0: entered allmulticast mode
[  159.899458][T11709] geneve1: entered allmulticast mode
[  159.901411][T11709] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  159.904244][T11709] veth2: entered allmulticast mode
[  159.906014][T11709] veth3: entered allmulticast mode
[  159.907906][T11709] macvlan2: entered allmulticast mode
[  159.910473][T11709] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 20000 - 0
[  159.913914][T11709] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 20000 - 0
[  159.916731][T11709] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 20000 - 0
[  159.919553][T11709] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 20000 - 0
[  159.925286][T11709] geneve2: entered allmulticast mode
[  159.929124][T11709] gre1: entered allmulticast mode
[  159.931768][T11709] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  159.935155][T11709] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  159.937922][T11709] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  159.940669][T11709] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  159.948129][T11709] geneve3: left promiscuous mode
[  159.950188][T11709] geneve3: entered allmulticast mode
[  159.953561][T11709] syztnl1: entered allmulticast mode
[  159.955528][T11709] netdevsim netdevsim0 eth0: entered allmulticast mode
[  159.958112][T11709] netdevsim netdevsim0 eth1: entered allmulticast mode
[  159.960639][T11709] netdevsim netdevsim0 eth2: entered allmulticast mode
[  159.963823][T11709] netdevsim netdevsim0 eth3: entered allmulticast mode
[  159.966201][T11709] mac80211_hwsim hwsim9 wlan2: entered allmulticast mode
[  159.970217][T11709] vlan2: entered allmulticast mode
[  159.973754][T11709] vlan3: left promiscuous mode
[  159.975550][T11709] vlan2: left promiscuous mode
[  159.977357][T11709] vlan3: entered allmulticast mode
[  159.988386][T11709] bridge1: entered allmulticast mode
[  160.002417][T11709] macsec1: left promiscuous mode
[  160.008015][T11709] gre2: entered allmulticast mode
[  160.010480][T11709] bridge2: entered allmulticast mode
[  160.014571][T11709] mac80211_hwsim hwsim5 wlan0: left promiscuous mode
[  160.017504][T11709] macsec2: left promiscuous mode
[  160.020595][T11709] gtp0: entered allmulticast mode
[  160.023561][T11709] gretap0: left promiscuous mode
[  160.026158][T11709] macsec3: left promiscuous mode
[  160.029053][T11709] veth4: entered allmulticast mode
[  160.030878][T11709] veth5: entered allmulticast mode
[  160.033441][T11709] veth0: left promiscuous mode
[  160.035413][T11709] macsec4: left promiscuous mode
[  160.037543][T11709] macsec4: entered allmulticast mode
[  160.048137][T11709] ip6tnl1: entered allmulticast mode
[  160.050296][T11709] gretap1: entered allmulticast mode
[  160.052698][T11709] syzkaller0: entered allmulticast mode
[  160.562826][ T9907] ==================================================================
[  160.566288][ T9907] BUG: KASAN: slab-use-after-free in __mutex_lock+0x738/0xe80
[  160.569360][ T9907] Read of size 8 at addr ffff88801efb40a0 by task khidpd_04580058/9907
[  160.573502][ T9907] 
[  160.574517][ T9907] CPU: 0 UID: 0 PID: 9907 Comm: khidpd_04580058 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  160.574533][ T9907] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  160.574540][ T9907] Call Trace:
[  160.574547][ T9907]  <TASK>
[  160.574553][ T9907]  dump_stack_lvl+0x189/0x250
[  160.574576][ T9907]  ? __virt_addr_valid+0x1c8/0x5c0
[  160.574589][ T9907]  ? rcu_is_watching+0x15/0xb0
[  160.574606][ T9907]  ? __kasan_check_byte+0x12/0x40
[  160.574619][ T9907]  ? __pfx_dump_stack_lvl+0x10/0x10
[  160.574635][ T9907]  ? rcu_is_watching+0x15/0xb0
[  160.574652][ T9907]  ? lock_release+0x4b/0x3e0
[  160.574669][ T9907]  ? __virt_addr_valid+0x1c8/0x5c0
[  160.574680][ T9907]  ? __virt_addr_valid+0x4a5/0x5c0
[  160.574692][ T9907]  print_report+0xd2/0x2b0
[  160.574708][ T9907]  ? __mutex_lock+0x738/0xe80
[  160.574725][ T9907]  kasan_report+0x118/0x150
[  160.574738][ T9907]  ? __mutex_lock+0x738/0xe80
[  160.574788][ T9907]  __mutex_lock+0x738/0xe80
[  160.574806][ T9907]  ? __mutex_lock+0x51b/0xe80
[  160.574824][ T9907]  ? l2cap_unregister_user+0x6a/0x1b0
[  160.574843][ T9907]  ? __pfx___mutex_lock+0x10/0x10
[  160.574859][ T9907]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  160.574880][ T9907]  l2cap_unregister_user+0x6a/0x1b0
[  160.574898][ T9907]  hidp_session_thread+0x3c9/0x410
[  160.574918][ T9907]  ? __pfx_hidp_session_thread+0x10/0x10
[  160.574933][ T9907]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  160.574948][ T9907]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  160.574967][ T9907]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  160.574983][ T9907]  ? __kthread_parkme+0x7b/0x200
[  160.574995][ T9907]  ? __kthread_parkme+0x1a1/0x200
[  160.575007][ T9907]  kthread+0x711/0x8a0
[  160.575020][ T9907]  ? __pfx_hidp_session_thread+0x10/0x10
[  160.575036][ T9907]  ? __pfx_kthread+0x10/0x10
[  160.575049][ T9907]  ? _raw_spin_unlock_irq+0x23/0x50
[  160.575063][ T9907]  ? lockdep_hardirqs_on+0x9c/0x150
[  160.575079][ T9907]  ? __pfx_kthread+0x10/0x10
[  160.575091][ T9907]  ret_from_fork+0x3fc/0x770
[  160.575109][ T9907]  ? __pfx_ret_from_fork+0x10/0x10
[  160.575125][ T9907]  ? __switch_to_asm+0x39/0x70
[  160.575136][ T9907]  ? __switch_to_asm+0x33/0x70
[  160.575147][ T9907]  ? __pfx_kthread+0x10/0x10
[  160.575158][ T9907]  ret_from_fork_asm+0x1a/0x30
[  160.575175][ T9907]  </TASK>
[  160.575179][ T9907] 
[  160.666005][ T9907] Allocated by task 5848:
[  160.667805][ T9907]  kasan_save_track+0x3e/0x80
[  160.669851][ T9907]  __kasan_kmalloc+0x93/0xb0
[  160.671854][ T9907]  __kmalloc_noprof+0x27a/0x4f0
[  160.673966][ T9907]  hci_alloc_dev_priv+0x28/0x2040
[  160.675904][ T9907]  vhci_create_device+0x120/0x6e0
[  160.677542][ T9907]  vhci_write+0x3ce/0x4a0
[  160.679227][ T9907]  vfs_write+0x54b/0xa90
[  160.680942][ T9907]  ksys_write+0x145/0x250
[  160.682666][ T9907]  do_syscall_64+0xfa/0x3b0
[  160.684180][ T9907]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  160.686319][ T9907] 
[  160.687350][ T9907] Freed by task 5848:
[  160.689031][ T9907]  kasan_save_track+0x3e/0x80
[  160.690943][ T9907]  kasan_save_free_info+0x46/0x50
[  160.693040][ T9907]  __kasan_slab_free+0x62/0x70
[  160.694915][ T9907]  kfree+0x18e/0x440
[  160.696606][ T9907]  bt_host_release+0x82/0x90
[  160.698332][ T9907]  device_release+0x9c/0x1c0
[  160.699869][ T9907]  kobject_put+0x22b/0x480
[  160.701507][ T9907]  vhci_release+0x88/0xd0
[  160.703095][ T9907]  __fput+0x44c/0xa70
[  160.704484][ T9907]  task_work_run+0x1d4/0x260
[  160.706101][ T9907]  do_exit+0x6b5/0x22e0
[  160.707449][ T9907]  do_group_exit+0x21c/0x2d0
[  160.708909][ T9907]  __x64_sys_exit_group+0x3f/0x40
[  160.710532][ T9907]  x64_sys_call+0x21ba/0x21c0
[  160.712455][ T9907]  do_syscall_64+0xfa/0x3b0
[  160.714283][ T9907]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  160.716825][ T9907] 
[  160.717853][ T9907] Last potentially related work creation:
[  160.720232][ T9907]  kasan_save_stack+0x3e/0x60
[  160.722254][ T9907]  kasan_record_aux_stack+0xbd/0xd0
[  160.724069][ T9907]  insert_work+0x3d/0x330
[  160.725607][ T9907]  __queue_work+0xcfc/0xfe0
[  160.727194][ T9907]  queue_work_on+0x181/0x270
[  160.728722][ T9907]  l2cap_chan_send+0x1110/0x2790
[  160.730388][ T9907]  l2cap_sock_sendmsg+0x32e/0x4a0
[  160.732396][ T9907]  __sock_sendmsg+0x21c/0x270
[  160.734092][ T9907]  kernel_sendmsg+0x175/0x250
[  160.735904][ T9907]  bnep_session+0x24e4/0x2b40
[  160.737530][ T9907]  kthread+0x711/0x8a0
[  160.738852][ T9907]  ret_from_fork+0x3fc/0x770
[  160.740382][ T9907]  ret_from_fork_asm+0x1a/0x30
[  160.742000][ T9907] 
[  160.742826][ T9907] Second to last potentially related work creation:
[  160.745035][ T9907]  kasan_save_stack+0x3e/0x60
[  160.746621][ T9907]  kasan_record_aux_stack+0xbd/0xd0
[  160.748753][ T9907]  insert_work+0x3d/0x330
[  160.750659][ T9907]  __queue_work+0xcfc/0xfe0
[  160.752630][ T9907]  queue_work_on+0x181/0x270
[  160.754593][ T9907]  l2cap_chan_send+0x1110/0x2790
[  160.756788][ T9907]  l2cap_sock_sendmsg+0x32e/0x4a0
[  160.759006][ T9907]  __sock_sendmsg+0x21c/0x270
[  160.761074][ T9907]  kernel_sendmsg+0x175/0x250
[  160.763095][ T9907]  bnep_session+0x24e4/0x2b40
[  160.764947][ T9907]  kthread+0x711/0x8a0
[  160.766254][ T9907]  ret_from_fork+0x3fc/0x770
[  160.767785][ T9907]  ret_from_fork_asm+0x1a/0x30
[  160.769347][ T9907] 
[  160.770158][ T9907] The buggy address belongs to the object at ffff88801efb4000
[  160.770158][ T9907]  which belongs to the cache kmalloc-8k of size 8192
[  160.774985][ T9907] The buggy address is located 160 bytes inside of
[  160.774985][ T9907]  freed 8192-byte region [ffff88801efb4000, ffff88801efb6000)
[  160.779470][ T9907] 
[  160.780287][ T9907] The buggy address belongs to the physical page:
[  160.782721][ T9907] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1efb0
[  160.785571][ T9907] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  160.788353][ T9907] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  160.790841][ T9907] page_type: f5(slab)
[  160.792296][ T9907] raw: 00fff00000000040 ffff88801a442280 ffffea00007bbc00 dead000000000002
[  160.795109][ T9907] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  160.797933][ T9907] head: 00fff00000000040 ffff88801a442280 ffffea00007bbc00 dead000000000002
[  160.800994][ T9907] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  160.804592][ T9907] head: 00fff00000000003 ffffea00007bec01 00000000ffffffff 00000000ffffffff
[  160.808157][ T9907] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  160.811491][ T9907] page dumped because: kasan: bad access detected
[  160.813580][ T9907] page_owner tracks the page as allocated
[  160.815437][ T9907] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5562, tgid 5562 (dhcpcd), ts 35233399239, free_ts 35001768550
[  160.822942][ T9907]  post_alloc_hook+0x240/0x2a0
[  160.824497][ T9907]  get_page_from_freelist+0x21e4/0x22c0
[  160.826357][ T9907]  __alloc_frozen_pages_noprof+0x181/0x370
[  160.828320][ T9907]  alloc_pages_mpol+0x232/0x4a0
[  160.829888][ T9907]  allocate_slab+0x8a/0x3b0
[  160.831424][ T9907]  ___slab_alloc+0xbfc/0x1480
[  160.833065][ T9907]  __kmalloc_cache_noprof+0x296/0x3d0
[  160.834855][ T9907]  tomoyo_init_log+0x111f/0x1f70
[  160.836550][ T9907]  tomoyo_supervisor+0x340/0x1480
[  160.838259][ T9907]  tomoyo_env_perm+0x149/0x1e0
[  160.839907][ T9907]  tomoyo_find_next_domain+0x15cf/0x1aa0
[  160.841968][ T9907]  tomoyo_bprm_check_security+0x11c/0x180
[  160.843888][ T9907]  security_bprm_check+0x89/0x270
[  160.845619][ T9907]  bprm_execve+0x8ee/0x1450
[  160.847180][ T9907]  do_execveat_common+0x510/0x6a0
[  160.848948][ T9907]  __x64_sys_execve+0x94/0xb0
[  160.850533][ T9907] page last free pid 5558 tgid 5558 stack trace:
[  160.853163][ T9907]  __free_frozen_pages+0xc71/0xe70
[  160.854906][ T9907]  __put_partials+0x161/0x1c0
[  160.856526][ T9907]  put_cpu_partial+0x17c/0x250
[  160.858170][ T9907]  __slab_free+0x2f7/0x400
[  160.859701][ T9907]  qlist_free_all+0x97/0x140
[  160.861364][ T9907]  kasan_quarantine_reduce+0x148/0x160
[  160.863167][ T9907]  __kasan_slab_alloc+0x22/0x80
[  160.864857][ T9907]  kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  160.866778][ T9907]  __alloc_skb+0x112/0x2d0
[  160.868332][ T9907]  netlink_sendmsg+0x5c6/0xb30
[  160.869982][ T9907]  __sock_sendmsg+0x21c/0x270
[  160.871570][ T9907]  ____sys_sendmsg+0x505/0x830
[  160.873334][ T9907]  ___sys_sendmsg+0x21f/0x2a0
[  160.875054][ T9907]  __x64_sys_sendmsg+0x19b/0x260
[  160.876721][ T9907]  do_syscall_64+0xfa/0x3b0
[  160.878366][ T9907]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  160.880368][ T9907] 
[  160.881193][ T9907] Memory state around the buggy address:
[  160.883041][ T9907]  ffff88801efb3f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  160.886040][ T9907]  ffff88801efb4000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  160.889287][ T9907] >ffff88801efb4080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  160.892544][ T9907]                                ^
[  160.894487][ T9907]  ffff88801efb4100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  160.897586][ T9907]  ffff88801efb4180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  160.900338][ T9907] ==================================================================
[  160.903570][ T9907] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  160.905903][ T9907] CPU: 0 UID: 0 PID: 9907 Comm: khidpd_04580058 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  160.909977][ T9907] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  160.913148][ T9907] Call Trace:
[  160.914267][ T9907]  <TASK>
[  160.915307][ T9907]  dump_stack_lvl+0x99/0x250
[  160.916835][ T9907]  ? __asan_memcpy+0x40/0x70
[  160.918283][ T9907]  ? __pfx_dump_stack_lvl+0x10/0x10
[  160.919990][ T9907]  ? __pfx__printk+0x10/0x10
[  160.921470][ T9907]  panic+0x2db/0x790
[  160.922739][ T9907]  ? __pfx_panic+0x10/0x10
[  160.924185][ T9907]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  160.926083][ T9907]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  160.928039][ T9907]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  160.930308][ T9907]  ? print_memory_metadata+0x314/0x400
[  160.932253][ T9907]  ? __mutex_lock+0x738/0xe80
[  160.933813][ T9907]  check_panic_on_warn+0x89/0xb0
[  160.935438][ T9907]  ? __mutex_lock+0x738/0xe80
[  160.937000][ T9907]  end_report+0x78/0x160
[  160.938399][ T9907]  kasan_report+0x129/0x150
[  160.939896][ T9907]  ? __mutex_lock+0x738/0xe80
[  160.941610][ T9907]  __mutex_lock+0x738/0xe80
[  160.943437][ T9907]  ? __mutex_lock+0x51b/0xe80
[  160.945427][ T9907]  ? l2cap_unregister_user+0x6a/0x1b0
[  160.947660][ T9907]  ? __pfx___mutex_lock+0x10/0x10
[  160.949791][ T9907]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  160.951976][ T9907]  l2cap_unregister_user+0x6a/0x1b0
[  160.953680][ T9907]  hidp_session_thread+0x3c9/0x410
[  160.955341][ T9907]  ? __pfx_hidp_session_thread+0x10/0x10
[  160.957248][ T9907]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  160.959210][ T9907]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  160.961384][ T9907]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  160.963450][ T9907]  ? __kthread_parkme+0x7b/0x200
[  160.965179][ T9907]  ? __kthread_parkme+0x1a1/0x200
[  160.966849][ T9907]  kthread+0x711/0x8a0
[  160.968192][ T9907]  ? __pfx_hidp_session_thread+0x10/0x10
[  160.970172][ T9907]  ? __pfx_kthread+0x10/0x10
[  160.972032][ T9907]  ? _raw_spin_unlock_irq+0x23/0x50
[  160.973932][ T9907]  ? lockdep_hardirqs_on+0x9c/0x150
[  160.975619][ T9907]  ? __pfx_kthread+0x10/0x10
[  160.977141][ T9907]  ret_from_fork+0x3fc/0x770
[  160.978746][ T9907]  ? __pfx_ret_from_fork+0x10/0x10
[  160.980486][ T9907]  ? __switch_to_asm+0x39/0x70
[  160.982219][ T9907]  ? __switch_to_asm+0x33/0x70
[  160.983849][ T9907]  ? __pfx_kthread+0x10/0x10
[  160.985396][ T9907]  ret_from_fork_asm+0x1a/0x30
[  160.987031][ T9907]  </TASK>
[  160.988872][ T9907] Kernel Offset: disabled
[  160.990370][ T9907] Rebooting in 86400 seconds..

VM DIAGNOSIS:
09:41:42  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000064 RBX=0000000000000064 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90002daf370
R8 =ffff888108550237 R9 =1ffff110210aa046 R10=dffffc0000000000 R11=ffffffff85474610
R12=dffffc0000000000 R13=ffffffff99ac48eb R14=ffffffff99dc9760 R15=0000000000000000
RIP=ffffffff8547468c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8650000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f45e2bf3870 CR3=0000000106f5e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=326963682f68746f 6f7465756c622f6c XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000068 746f6f7465756c62 XMM03=0000000000000000 ffffff0000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000021 0000000000326963
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffffff000000 XMM09=706e692f3030323a 326963682f326963
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffff11026cc4721 RBX=ffff888136623900 RCX=0000000000000020 RDX=0000000000010000
RSI=ffff888136623900 RDI=0000000000044f96 RBP=0000000000000000 RSP=ffffc900080a7d98
R8 =0000000000000000 R9 =ffffffff81aeb04e R10=0000000000000003 R11=ffffffff817004a0
R12=0000000010007068 R13=dffffc0000000000 R14=0000000000044f96 R15=0000000000000020
RIP=ffffffff8b6987c6 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f0f101a5380 ffffffff 00c00000
GS =0000 ffff8881a3c50000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005566cdca1000 CR3=0000000036036000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffff00 000000ff00000000
XMM02=ffff000000000000 ffff000000000000 XMM03=ffff00000000ff00 ffffffffffffffff
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
